class

Flaw::PathTraversal

Inherits Flaw::Rule < Reference < Object

Constants

PATTERNS = [/\bFile\.(open|read|read_lines|write|exists\?|delete)\s*\([^)]*\#\{[^}]+\}[^)]*\)/, /\bFile\.(open|read|read_lines|write|exists\?|delete)\s*\(\s*(params\[|ARGV\[|request\.|env\[)/]
USER_SRC = /(params\[|ARGV\[|request\.|env\[|query_params)/

Instance methods

check(source : String, path : String) : Array(Finding)
Source
default_severity
Source
description
Source
title
Source