press
press copied to clipboard
Identify monkey patches in app and flag them
- If apps contain monkey patches we shouldn't support that site under product warranty.
- If apps contain unsafe overrides like overriding complete classes or methods, we shouldn't support it.
- You made your bed now lie in it :shrug:
I'd written a "usable" wrapper around semgrep to write rules
https://github.com/ankush/app_scanner
https://github.com/ankush/app_scanner/blob/2148611670c7401a146913d76cb1b83d25a0e9c4/app_scanner/rules/correctness.yml#L36