ibrahimcesar/velociplot

Security audit of input handling

Open

#21 建立於 2025年11月29日

在 GitHub 查看
 (1 留言) (0 反應) (0 負責人)Rust (0 fork)auto 404
help wantedpriority: medium

倉庫指標

Star
 (3 star)
PR 合併指標
 (PR 指標待抓取)

描述

Description

Perform a security audit focusing on input validation and file handling.

Areas to Review

  • CSV parsing (injection attacks)
  • JSON parsing (DoS via nested objects)
  • File path handling (traversal attacks)
  • Memory allocation limits
  • Integer overflow checks

Tasks

  • Review all input parsing code
  • Add input size limits
  • Add path validation
  • Run cargo-audit
  • Consider fuzz testing

Acceptance Criteria

  • No known vulnerabilities
  • Input limits documented
  • cargo-audit clean

貢獻者指南