Security/fix code sec vulnerabilities #24

amusarra · 2024-02-09T18:08:48Z

PR per nuova release 2.2.1 che contiene le seguenti fix.

CWE-23: Relative Path Traversal
CWE-643: Improper Neutralization of Data within XPath Expressions ('XPath Injection')
CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
SC2086: Double quote to prevent globbing and word splitting
SC2129: Consider using { cmd1; cmd2; } >> file instead of individual redirects

…idual redirects

amusarra added 8 commits February 9, 2024 15:42

Fixed CWE-611: Improper Restriction of XML External Entity Reference

88cf3ff

Fixed CWE-23: Relative Path Traversal

385bd1d

Fixed SC2086: Double quote to prevent globbing and word splitting

88a1f54

Fixed SC2129: Consider using { cmd1; cmd2; } >> file instead of indiv…

d91e16d

…idual redirects

Update version python from 2 to 3

9d144a7

Update the Copyright year

e0f61ca

Revisione di alcune sezioni di documentazione

8350906

Aggiornamento changelog versione 2.2.1

8327d57

amusarra merged commit 8f7cccf into master Feb 9, 2024

amusarra deleted the security/fix-code-sec-vulnerabilities branch February 9, 2024 18:26

Provide feedback