Java: CWE-073 File path injection with the JFinal framework - #7712

Merged

atorralba merged 11 commits into

github:mainfrom

luchua-bc:java/file-path-injection

Feb 16, 2022

Commits on Jan 23, 2022

File path injection with the JFinal framework
luchua-bc
committed
27043a0

Commits on Feb 8, 2022

Correct the data model and update qldoc
luchua-bc
committed
ff4826d

Commits on Feb 9, 2022

Use data model for request/session attribute operations
luchua-bc
committed
4609227
Fixed an issue related to normalized path
luchua-bc
committed
ce03aeb

Commits on Feb 11, 2022

Simplify the query
luchua-bc
committed
12c53ba
Update normalized path node
luchua-bc
committed
e3d0e9f
Match attribute name to reduce FP
luchua-bc
committed
78630f2

Commits on Feb 14, 2022

Commits on Feb 15, 2022

Remove the same callable constraint
luchua-bc
committed
fd533f2
Move shared code to the lib folder and update qldoc
luchua-bc
committed
40bf093