SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 05:40:11 +01:00
Code Issues Releases Activity Actions

Dont use string comparison to rank labels. (#393)

Browse source
This commit is contained in:
Sascha L. Teichmann 2023-07-06 12:34:52 +02:00 • committed by GitHub
parent 4d68662913
commit b423eed4e9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
cmd/csaf_checker/roliecheck.go
View file

@ -107,7 +107,7 @@ func (rlc *rolieLabelChecker) checkProtection(
// the data again with the open client.
// If this does not result in status forbidden the
// server may be wrongly configured.
case label >= csaf.TLPLabelAmber:
case tlpLevel(label) >= tlpLevel(csaf.TLPLabelAmber):
p.badAmberRedPermissions.use()
// It is an error if we downloaded the advisory with
// an unauthorized client.