search

openstax / accounts

OpenStax centralized authentication and accounts service
https://accounts.openstax.org
Other
15 stars 7 forks source link

Fix code scanning alert no. 21: Use of `Kernel.open` or `IO.read` or similar sinks with a non-constant value #1264

Closed mwvolo closed 3 weeks ago

mwvolo commented 3 weeks ago

Fixes https://github.com/openstax/accounts/security/code-scanning/21

To fix the problem, we need to replace the usage of IO.read with File.read. This change ensures that the code adheres to best practices and avoids potential security vulnerabilities associated with IO.read. The change is straightforward and does not alter the existing functionality.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.