LGTM.com - false positive for Zip slip
未關閉
false-positive
Java
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
**Description of the false positive**
The method `allocateFile()` contains the Zip slip prefix checking code here:
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java#L462
It is called by the paths that LGTM complains about.
**URL to the alert on the project page on LGTM.com**
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java?sort=name&dir=ASC&mode=heatmap#x2031d93da0df556a:1
貢獻指南
評估
這個 Issue 還沒有評估資料。