Hello !!
I am working on VB snapin, this snapin uses a keystrore file, we have manually copied the keystore file on the breeze node, we have a snap-in service attribute which specifies the location of keystore file. Snapin uses this service attribute to load the keystore file. This is working fine.
Last week we had a code scan, during code scan the security team identfied an vunralblity "Path Traversal" which is related to the path of the keystore file.
The security team has suggested us not to use any path (relative/absolute ) to load the keystore.
so what is the recommanded way to load the keystore file in snapin. Should we use the breeze classpath to load the keystore file, any other options?

Thanks !!

any suggestion, thoughts?

Please send me a direct email on this. Thanks.