SEC003
Dangerous file operations
Object Pascal — Delphi & Free Pascal
Warning
Security
Risky file APIs can bypass safe path handling and validation
risky file APIs can bypass safe path handling and validation.
Why this severity
risky file APIs can bypass safe path handling and validation.
Known false positives
trusted offline maintenance scripts.
Remediation example
if IsPathUnderRoot(TargetPath, AllowedRoot) then TFile.Delete(TargetPath);