robojerk/codeql-action

Fix backslashes being accepted by sanitizeArtifactName

Browse source
This commit is contained in:
Michael B. Gale 2025-06-04 12:27:55 +01:00
parent 7fd62151d9
commit 1eab40885f
No known key found for this signature in database
GPG key ID: FF5E2765BD00628F
6 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/debug-artifacts.js generated
View file

@ -56,7 +56,7 @@ const logging_1 = require("./logging");
const tools_features_1 = require("./tools-features");
const util_1 = require("./util");
function sanitizeArtifactName(name) {
return name.replace(/[^a-zA-Z0-9_\\-]+/g, "");
return name.replace(/[^a-zA-Z0-9_-]+/g, "");
}
/**
* Upload Actions SARIF artifacts for debugging when CODEQL_ACTION_DEBUG_COMBINED_SARIF