rspec/rules/S5042/ask-yourself.adoc

10 lines
356 B
Plaintext
Raw Permalink Normal View History

2020-06-30 12:50:28 +02:00
== Ask Yourself Whether
Archives to expand are untrusted and:
* There is no validation of the number of entries in the archive.
* There is no validation of the total size of the uncompressed data.
* There is no validation of the ratio between the compressed and uncompressed archive entry.
2020-06-30 12:50:28 +02:00
There is a risk if you answered yes to any of those questions.