23 lines
554 B
Plaintext
23 lines
554 B
Plaintext
|
include::../description.adoc[]
|
||
|
|
|
||
|
|
include::../ask-yourself.adoc[]
|
||
|
|
|
||
|
|
include::../recommended.adoc[]
|
||
|
|
|
||
|
|
== Sensitive Code Example
|
||
|
|
|
||
|
|
----
|
||
|
|
const fs = require('fs'); // review how the 'fs' module is used
|
||
|
|
// All 'fs' operations accepting a path as a parameter are security-sensitive and should be reviewed
|
||
|
|
// Examples:
|
||
|
|
var res = fs.readdirSync(path); // Sensitive
|
||
|
|
var fd = fs.openSync(path, 'r'); // Sensitive
|
||
|
|
var ws = fs.createWriteStream(path); // Sensitive
|
||
|
|
----
|
||
|
|
|
||
|
|
== Exceptions
|
||
|
|
|
||
|
|
No issue will be raised if the path is fully hard-coded.
|
||
|
|
|
||
|
|
include::../see.adoc[]
|