T09 · Insecure Skill Coding Practices
Warning
- Location
parsers/pdf_parser.py:80- Finding
Unbounded Processing of Untrusted Financial Documents
- Content
View full analysis
bool: if not os.path.exists(file_path): return False if not os.path.isfile(file_path): return False return True ``` `parsers/excel_parser.py:82`: ```python wb = openpyxl.load_workbook(file_path, data_only=True) ``` `parsers/pdf_parser.py:80-100`: ```python with pdfplumber.open(file_path) as pdf: if self.page_range: start_page, end_page = self.page_range pages = pdf.pages[start_page:end_page] else: pages = pdf.pages all_tables = [] for i, page in enumerate(pages): if self.extract_tables: tables = page.extract_tables() for table in tables: if table: all_tables.append(table) if all_tables: self._process_tables(all_tables, result.data, result) ``` `parsers/pdf_parser.py:113-133`: ```python with open(file_path, 'rb') as file: reader = PyPDF2.PdfReader(file) if self.page_range: start_page, end_page = self.page_range pages = reader.pages[start_page:end_page] else: pages = reader.pages text_content = [] for page in pages: text = page.extract_text() if text: text_content.append(text) full_text = '\n'.join(text_content) result.data.raw_data['text_content'] = full_text self._extract_from_text(full_text, result.data, result) ``` `parsers/word_parser.py:51`: ```python doc = Document(file_path) ``` ### Technical Analysis The common file validation routine only confirms that the supplied path exists a ...[truncated 2037 chars]- Remediation
View remediation