Skip to content

Re-write some parts to prevent code injection #10

@emarinier

Description

@emarinier

Currently, using echo to write possibly user-supplied filenames and sample ID fields might introduce a vulnerability to code injection. We should consider moving generate_summary to be after the IRIDA JSON output is produced and have it launch a Python process that reads the final JSON file, handles the data, and then writes the summary.txt.gz file.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions