search

paragonie / random_compat

PHP 5.x support for random_bytes() and random_int()
https://paragonie.com/projects
MIT License
8.16k stars 145 forks source link

Fortify scan Path Manipulation #161

Closed Rohit272 closed 3 years ago

Rohit272 commented 5 years ago

Hi, We are using paragonie/random_compat with laravel, on running the Fortify scan tool, i get the following error at: paragonie/random_compat/other/build_phar.php, line 35

file_get_contents method is creating path manipulation error. Is there any workaround or fix that can be applied here. Could this be taken care in the future versions .

Thanks.

PatrickRose commented 5 years ago

I don't think you need to worry about that file, it's only used if you're building a phar file which you shouldn't be doing as a consumer.

paragonie-security commented 3 years ago

@PatrickRose is 100% correct. We're an open source company and that means publishing the tools we use to bundle software with said software.