search

vmware-tanzu / secrets-manager

VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/
https://vsecm.com/
BSD 2-Clause "Simplified" License
153 stars 25 forks source link

Consider using `SafeText`, `SafeOpen`, `SafeArchive` and other related libraries wherever it makes sens #768

Open v0lkan opened 5 months ago

v0lkan commented 5 months ago

ref: https://github.com/google/safetext

SafeText for YAML and shell command templating

SafeOpen for opening files in a base directory

SafeArchive for processing archive files

These libraries have been meticulously crafted to address common secure coding challenges, protecting against the following weaknesses from the CWE Top 25:

5 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

6 CWE-20: (special cases of) Improper Input Validation

8 CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

v0lkan commented 5 months ago

There is also https://github.com/google/safebrowsing, https://github.com/google/safehtml, and https://github.com/google/go-safeweb