search

metamug / mason

REST APIs with JSP tags, SQL and much more.
https://metamug.github.io/mason
Other
26 stars 10 forks source link

Avoid false positive vulnerability for file upload location #125

Open d3ep4k opened 4 years ago

d3ep4k commented 4 years ago

https://github.com/SonarSource/sonar-dotnet/issues/1865

Change the variable name to uploadFileLocation from uploadFilePath in UploaderService.java

String uploadFilePath = System.getProperty("catalina.base") + File.separator + UPLOAD_DIR + request.getContextPath();
d3ep4k commented 4 years ago

This issue is still reported by sonarqube. https://sonarcloud.io/component_measures?id=metamug_mason&metric=security_rating&selected=metamug_mason%3Asrc%2Fmain%2Fjava%2Fcom%2Fmetamug%2Fmason%2Fservice%2FUploaderService.java&view=list