Skip to content

Commit 1fe57aa

Browse files
committed
Add compliant and noncompliant examples of java/unrestricted-file-upload@v1.0
1 parent 66d7cab commit 1fe57aa

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

src/java/detectors/unrestricted_file_upload/UnrestrictedFileUpload.java

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,11 +12,14 @@
1212
import java.util.HashMap;
1313
import org.springframework.util.StringUtils;
1414
import javax.servlet.ServletException;
15+
import javax.servlet.http.Part;
16+
import java.nio.file.Files;
17+
import java.nio.file.StandardCopyOption;
1518

1619
public class UnrestrictedFileUpload {
1720

1821
// {fact rule=unrestricted-file-upload@v1.0 defects=1}
19-
public void unrestrictedFileUploadNoncompliant(HttpServletRequest request) {
22+
public void unrestrictedFileUploadNoncompliant(HttpServletRequest request, HttpServletResponse response) {
2023
Part filePart = request.getPart("fileToUpload");
2124
InputStream fileInputStream = filePart.getInputStream();
2225
// Noncompliant: the uploaded file can have any extension.

0 commit comments

Comments
 (0)