ibrahimcesar/velociplot

Security audit of input handling

Open

#21 创建于 2025年11月29日

在 GitHub 查看
 (1 评论) (0 反应) (0 负责人)Rust (0 fork)auto 404
help wantedpriority: medium

仓库指标

Star
 (3 star)
PR 合并指标
 (PR 指标待抓取)

描述

Description

Perform a security audit focusing on input validation and file handling.

Areas to Review

  • CSV parsing (injection attacks)
  • JSON parsing (DoS via nested objects)
  • File path handling (traversal attacks)
  • Memory allocation limits
  • Integer overflow checks

Tasks

  • Review all input parsing code
  • Add input size limits
  • Add path validation
  • Run cargo-audit
  • Consider fuzz testing

Acceptance Criteria

  • No known vulnerabilities
  • Input limits documented
  • cargo-audit clean

贡献者指南