Adding code with some deep sinks#1
Conversation
|
SonarQube Quality Gate
See analysis details on SonarQube Fix issues before they fail your Quality Gate with |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| String[] filenames = StringUtils.commaDelimitedListToStringArray(input); | ||
| for (String filename : filenames) { | ||
| var file = new File(directory, filename); | ||
| FileSystemUtils.deleteRecursively(file); |
Check failure
Code scanning / SonarCloudsquad-2
I/O function calls should not be vulnerable to path injection attacks
|
|
||
| String directory = "./target/directory"; | ||
| var file = new File(directory, filename); | ||
| FileUtil.getFileUtil().delete(filename); |
Check failure
Code scanning / SonarCloudsquad-2
I/O function calls should not be vulnerable to path injection attacks
|
|
||
| String directory = "./target/directory"; | ||
| var file = new File(directory, filename); | ||
| DataUtil.load(file, "utf-8", "uri://"); |
Check failure
Code scanning / SonarCloudsquad-2
I/O function calls should not be vulnerable to path injection attacks
| String[] filenames = StringUtils.commaDelimitedListToStringArray(input); | ||
| for (String filename : filenames) { | ||
| var file = new File(directory, filename); | ||
| FileSystemUtils.deleteRecursively(file); |
Check warning
Code scanning / SonarCloudsquad-2
Accessing files should not lead to filesystem oracle attacks
|
1 participant
Thank you for submitting a pull request to the WebGoat!