rspec/rules/S4797/javascript/rule.adoc

include::../description.adoc[]

include::../ask-yourself.adoc[]

include::../recommended.adoc[]

== Sensitive Code Example

----
const fs = require('fs'); // review how the 'fs' module is used 
// All 'fs' operations accepting a path as a parameter are security-sensitive and should be reviewed
// Examples: 
var res = fs.readdirSync(path); // Sensitive
var fd = fs.openSync(path, 'r'); // Sensitive 
var ws = fs.createWriteStream(path); // Sensitive 
----

== Exceptions

No issue will be raised if the path is fully hard-coded.

include::../see.adoc[]

ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

include::../message.adoc[]

'''
== Comments And Links
(visible only on this page)

=== on 6 Dec 2018, 08:11:25 Alexandre Gigleux wrote:
https://nodejs.org/api/fs.html

include::../comments-and-links.adoc[]

endif::env-github,rspecator-view[]