RHINENG-12951: fix for CWE-23

RedHatInsights · Sep 26, 2024 · b4463fa · b4463fa
1 parent 8430122
commit b4463fa
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/database_admin/migrate.go b/database_admin/migrate.go
@@ -5,6 +5,7 @@ import (
 	"database/sql"
 	"fmt"
 	"os"
+	"path/filepath"
 	"strconv"
 	"strings"
 
@@ -73,7 +74,7 @@ func MigrateUp(conn database.Driver, sourceURL string) {
 func latestSchemaMigrationFileVersion(sourceURL string) (int, error) {
 	latestVer := 0
 	dir := sourceURL[len("file://"):]
-	files, err := os.ReadDir(dir)
+	files, err := os.ReadDir(filepath.Clean(dir))
 	if err != nil {
 		return 0, errors.Wrap(err, fmt.Sprintf("Error reading migration files %s in %s", files, dir))
 	}