SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 11:55:40 +01:00
Code Issues Releases Activity Actions

Merge pull request #365 from csaf-poc/filename-id

Browse source 
Check that filename matches /document/tracking/id
This commit is contained in:
JanHoefelmeyer 2023-05-16 08:50:48 +02:00 • committed by GitHub
commit 4461bd6892
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
7 changed files with 52 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
cmd/csaf_downloader/downloader.go
View file

@ -439,6 +439,11 @@ nextAdvisory:
continue
}
if err := util.IDMatchesFilename(d.eval, doc, filename); err != nil {
log.Printf("Ignoring %s: %s.\n", file.URL(), err)
continue
}
// Validate against remote validator
if d.validator != nil {
rvr, err := d.validator.Validate(doc)