rspec/rules/S2598/rationale.adoc
Loris S a0abb99f76
Modify S2596(javascript): Convert to LayC (#2901)
This PR also removes the java folder because it is not implemented and
has no implementation plan. This PR was made spontaneously during
Daniel's onboarding.

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-08-18 09:31:06 +00:00

9 lines
361 B
Plaintext

If the file upload feature is implemented without proper folder restriction, it
will result in an implicit trust violation within the server, as trusted files
will be implicitly stored alongside third-party files that should be considered
untrusted.
This can allow an attacker to disrupt the security of an internal server
process or the running application.