-
Notifications
You must be signed in to change notification settings - Fork 495
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[H10zCpAQ] Fix CWE-73: Added check to prevent reading from outside metrics directory #3245
Conversation
58a3efd
to
c623e34
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I will ask our security team to have a look as well, but I think it looks ok apart from the printline
|
||
@Test | ||
public void shouldNotGetFileOutsideMetricsDir() { | ||
System.out.println("MetricsTest.shouldNotGetFileOutsideMetricsDir1"); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we really want to keep this System.out.println()?
* [qZZ3O2uX] Updates jackson-databind to fix CVE-2020-36518, CVE-2022-42004, CVE-2022-42003 (#3409) * [H10zCpAQ] Fix CWE-73: Added check to prevent reading from outside metrics directory (#3245)
Added check to prevent reading from outside metrics directory