optimism
optimism copied to clipboard
ctb: Add security council config to sepolia.json
[!WARNING] This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite. Learn more
This stack of pull requests is managed by Graphite. Learn more about stacking.
Join @maurelian and the rest of your teammates on
Graphite
Semgrep found 4 golang_fmt_errorf_no_params findings:
- op-plasma/cmd/daserver/flags.go
- op-chain-ops/state/encoding.go
No fmt.Errorf invocations without fmt arguments allowed
Semgrep found 1 import-text-template finding:
When working with web applications that involve rendering user-generated content, it's important to properly escape any HTML content to prevent Cross-Site Scripting (XSS) attacks. In Go, the text/template package does not automatically escape HTML content, which can leave your application vulnerable to these types of attacks. To mitigate this risk, it's recommended to use the html/template package instead, which provides built-in functionality for HTML escaping. By using html/template to render your HTML content, you can help to ensure that your web application is more secure and less susceptible to XSS vulnerabilities.