Skip to content

Commit

Permalink
Update pkg/gobash/version.go
Browse files Browse the repository at this point in the history
  • Loading branch information
bassosimone authored Mar 20, 2024
1 parent f45007b commit 3239de9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pkg/gobash/version.go
Original file line number Diff line number Diff line change
Expand Up @@ -260,7 +260,7 @@ func unpackZip(targetDir, archiveFile string) error {
// The validRelPath function rejects empty paths, paths containing backslash, paths
// starting with / and paths containing ../. Additionally, according to
// src/archive/zip/reader.go, the zip specification only allows files containing
// forward slashes and considers files containing backslashes to be inscure.
// forward slashes and considers files containing backslashes to be insecure.
//
// Therefore, by using validRelPath here, we should be able to fix the security alert.
if !validRelPath(f.Name) {
Expand Down

0 comments on commit 3239de9

Please sign in to comment.