Improve workflow package #802
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| var gzipInputStream = new GZIPInputStream(bufferedInputStream); | ||
| var tarInputStream = new TarArchiveInputStream(gzipInputStream)) { | ||
| TarArchiveEntry entry; | ||
| while ((entry = (TarArchiveEntry) tarInputStream.getNextEntry()) != null) { | ||
| var path = targetPath.resolve(entry.getName()); | ||
| var path = target.resolve(entry.getName()); |
Check failure
Code scanning / CodeQL
Arbitrary file access during archive extraction ("Zip Slip") High
| var bzip2InputStream = new BZip2CompressorInputStream(bufferedInputStream); | ||
| var tarInputStream = new TarArchiveInputStream(bzip2InputStream)) { | ||
| TarArchiveEntry entry; | ||
| while ((entry = (TarArchiveEntry) tarInputStream.getNextEntry()) != null) { | ||
| var path = targetPath.resolve(entry.getName()); | ||
| var path = target.resolve(entry.getName()); |
Check failure
Code scanning / CodeQL
Arbitrary file access during archive extraction ("Zip Slip") High
| var entries = zipFile.entries(); | ||
| while (entries.hasMoreElements()) { | ||
| var entry = entries.nextElement(); | ||
| var path = targetPath.resolve(entry.getName()); | ||
| var path = target.resolve(entry.getName()); |
Check failure
Code scanning / CodeQL
Arbitrary file access during archive extraction ("Zip Slip") High
baremaps-core/src/main/java/org/apache/baremaps/workflow/tasks/DecompressFile.java
Fixed
Show fixed
Hide fixed
bchapuis
force-pushed
the
workflow
branch
2 times, most recently
from
df4fa4a to
e819844
Compare
baremaps-core/src/main/java/org/apache/baremaps/workflow/WorkflowContext.java
Fixed
Show fixed
Hide fixed
bchapuis
force-pushed
the
main
branch
2 times, most recently
from
7e6528a to
0dd52e9
Compare
| } | ||
| } | ||
|
|
||
| public DataMap<Long, List<Long>> getReferenceMap(Path path) throws IOException { |
Check notice
Code scanning / CodeQL
Useless parameter Note
|
No description provided.