> For the complete documentation index, see [llms.txt](https://breakpoint-journal.gitbook.io/breakpoint/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://breakpoint-journal.gitbook.io/breakpoint/misc/path-traversal-in-open-source.md).

# Path Traversal in Open Source

* path-sanitizer npm package
* Looking for sanitize-filenameSAST tool to check
* jazzer.js/core for fuzzing npm packages (61million combinations)
* Path Traversal Protection
  * restricting characters supplied for filename
  * path validation (using is-path-inside or is-path-inside-secure)
  * input sanitization ([sanitize-filename](https://www.npmjs.com/package/sanitize-filename))
* Discovering projects
  * Github Dorking 
    * stars>1000, pushed>2024-06-01, language