rspec/rules/S4797/javascript/rule.adoc

include::../description.adoc[]

include::../ask-yourself.adoc[]

include::../recommended.adoc[]

== Sensitive Code Example

----
const fs = require('fs'); // review how the 'fs' module is used 
// All 'fs' operations accepting a path as a parameter are security-sensitive and should be reviewed
// Examples: 
var res = fs.readdirSync(path); // Sensitive
var fd = fs.openSync(path, 'r'); // Sensitive 
var ws = fs.createWriteStream(path); // Sensitive 
----

== Exceptions

No issue will be raised if the path is fully hard-coded.

include::../see.adoc[]

ifdef::env-github,rspecator-view[]
'''
== Comments And Links
(visible only on this page)

include::comments-and-links.adoc[]
endif::env-github,rspecator-view[]