Add filepath.EvalSymlinks to clean functions in rule G304

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>
securego · May 13, 2024 · 417a44c · 417a44c
1 parent d34f8b7
commit 417a44c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/rules/readfile.go b/rules/readfile.go
@@ -143,6 +143,7 @@ func NewReadFile(id string, _ gosec.Config) (gosec.Rule, []ast.Node) {
 	rule.pathJoin.Add("path", "Join")
 	rule.clean.Add("path/filepath", "Clean")
 	rule.clean.Add("path/filepath", "Rel")
+	rule.clean.Add("path/filepath", "EvalSymlinks")
 	rule.Add("io/ioutil", "ReadFile")
 	rule.Add("os", "ReadFile")
 	rule.Add("os", "Open")