30 lines
689 B
Plaintext
30 lines
689 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
const fs = require('fs'); // review how the 'fs' module is used
|
|
// All 'fs' operations accepting a path as a parameter are security-sensitive and should be reviewed
|
|
// Examples:
|
|
var res = fs.readdirSync(path); // Sensitive
|
|
var fd = fs.openSync(path, 'r'); // Sensitive
|
|
var ws = fs.createWriteStream(path); // Sensitive
|
|
----
|
|
|
|
== Exceptions
|
|
|
|
No issue will be raised if the path is fully hard-coded.
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::rspecator-view[]
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::comments-and-links.adoc[]
|
|
endif::rspecator-view[]
|