Skip to content
This repository was archived by the owner on Jun 5, 2025. It is now read-only.

Commit 65247cb

Browse files
authored
Merge pull request #97 from Venafi/SonarCloud-Security-Hotspots
Updating the expected max num of files in the VaaS keystore zip file
2 parents a9d44c0 + cff0ea3 commit 65247cb

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/main/java/com/venafi/vcert/sdk/connectors/cloud/CloudConnectorUtils.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -408,7 +408,7 @@ public static PEMCollection getPEMCollectionFromKeyStoreAsStream(InputStream key
408408

409409
try (ZipInputStream zis = new ZipInputStream(keyStoreAsInputStream)) {
410410
//The next constants are in order to be on safe about of the zip bomb attacks
411-
final int MAX_ENTRIES = 6;//The expected number of files in the zip returned by the call to
411+
final int MAX_ENTRIES = 10;//The expected number of files in the zip returned by the call to
412412
//the API "POST /outagedetection/v1/certificates/{id}/keystore"
413413
final int MAX_UNZIPED_FILES_SIZE = 1000000; //1 MB
414414

0 commit comments

Comments
 (0)