suyiiyii/yq
1
0
Fork 0
mirror of https://github.com/mikefarah/yq.git synced 2024-12-19 20:19:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Revert usage of filepath.Clean (azure compatability issues)

Browse Source
This commit is contained in:
Mike Farah 2021-07-08 10:26:35 +10:00
parent 38ce8618e1
commit bae319ab7f
3 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/yqlib/file_utils.go
View File

@ -25,7 +25,10 @@ func safelyRenameFile(from string, to string) {
// thanks https://stackoverflow.com/questions/21060945/simple-way-to-copy-a-file-in-golang
func copyFileContents(src, dst string) (err error) {
in, err := os.Open(src) // nolint gosec
// ignore CWE-22 gosec issue - that's more targetted for http based apps that run in a public directory,
// and ensuring that it's not possible to give a path to a file outside thar directory.
in, err := os.Open(src) // #nosec
if err != nil {
return err
}

4
pkg/yqlib/utils.go
View File

@ -13,7 +13,9 @@ func readStream(filename string) (io.Reader, error) {
if filename == "-" {
return bufio.NewReader(os.Stdin), nil
} else {
return os.Open(filename) // nolint gosec
// ignore CWE-22 gosec issue - that's more targetted for http based apps that run in a public directory,
// and ensuring that it's not possible to give a path to a file outside thar directory.
return os.Open(filename) // #nosec
}
}

4
test/utils.go
View File

@ -81,7 +81,9 @@ func WriteTempYamlFile(content string) string {
}
func ReadTempYamlFile(name string) string {
content, _ := ioutil.ReadFile(name)
// ignore CWE-22 gosec issue - that's more targetted for http based apps that run in a public directory,
// and ensuring that it's not possible to give a path to a file outside thar directory.
content, _ := ioutil.ReadFile(name) // #nosec
return string(content)
}