Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gin Security Issue #160

Closed
nabbar opened this issue May 16, 2023 · 0 comments · Fixed by #161
Closed

Gin Security Issue #160

nabbar opened this issue May 16, 2023 · 0 comments · Fixed by #161
Assignees
Labels
dependencies Pull requests that update a dependency file security Security issues & fix

Comments

@nabbar
Copy link
Owner

nabbar commented May 16, 2023

Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function

References:

@nabbar nabbar added dependencies Pull requests that update a dependency file security Security issues & fix labels May 16, 2023
@nabbar nabbar self-assigned this May 16, 2023
@nabbar nabbar mentioned this issue Jun 2, 2023
@nabbar nabbar linked a pull request Jun 2, 2023 that will close this issue
nabbar added a commit that referenced this issue Jun 2, 2023
Rework Aws/MPU

Package AWS:
- rework MultipartUpload process & helper
- update test to use lib size
- update object multipart to use new helper
    
Package IO Utils :
- add truncate & sync to FileProgress
- fix error on open file mode for FileProgress
    
Package Console :
- fix interface used for color buffer
    
Package Cobra :
- add function to print message on write config to use custom message instead of internal message. If the function is not set, the default message will be print.
    
Other:
- fix golangci-lint config to remove crazy linter (use only golang group compliance linter)
- bump dependencies
- fix issue #160
nabbar added a commit that referenced this issue Aug 16, 2023
Rework Aws/MPU

Package AWS:
- rework MultipartUpload process & helper
- update test to use lib size
- update object multipart to use new helper
    
Package IO Utils :
- add truncate & sync to FileProgress
- fix error on open file mode for FileProgress
    
Package Console :
- fix interface used for color buffer
    
Package Cobra :
- add function to print message on write config to use custom message instead of internal message. If the function is not set, the default message will be print.
    
Other:
- fix golangci-lint config to remove crazy linter (use only golang group compliance linter)
- bump dependencies
- fix issue #160
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file security Security issues & fix
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant