'External Control of File Name or Path' security flaw

Asked Jun 05 '12 at 10:46

Active Jan 29 '13 at 09:42

Viewed 1,639 times

I have a c# console application where in I need to write some data from database to a flat file. There output file path and the file name are configurable. I did like below:

using (TextWriter tw = new StreamWriter(strWorkingOutputFile, false))

which is giving following error:

`'External Control of File Name or Path' security flaw.`

Basically, wherever we are giving a configurable path it's throwing that flaw. Any idea on how to resolve this?

Thanks so much in advance.

edited Jun 05 '12 at 10:55

Darshana

2,462
6
28
54

asked Jun 05 '12 at 10:46

user1147759

Check the following SO Link http://stackoverflow.com/questions/2595992/image-uploading-security-issues – Rajesh Subramanian Jun 05 '12 at 10:54
Who is "it"? What tool are you using to check your code? – CodeCaster Jun 05 '12 at 11:13
"It"'s a code security scan tool called 'Vera Code'. – user1147759 Jun 05 '12 at 12:09

'External Control of File Name or Path' security flaw

0 Answers0