secDevLabs icon indicating copy to clipboard operation
secDevLabs copied to clipboard

comer até morrer

Open InesCardinot opened this issue 3 years ago • 3 comments

This solution refers to which of the apps?

A7 - Identity and Authentication Failures

What did you do to mitigate the vulnerability?

Using JWT for security autenticate

Did you test your changes? What commands did you run?

Yes, i did!

InesCardinot avatar Jun 07 '22 19:06 InesCardinot

This pull request introduces 8 alerts and fixes 2 when merging b3ce592d19178c378a4ce0d2617a1401ac3eac55 into 46a89c9f83781ddc61daf6dd46d6811f509e155b - view on LGTM.com

new alerts:

  • 3 for Except block handles 'BaseException'
  • 3 for Unused import
  • 2 for Unused local variable

fixed alerts:

  • 1 for Use of a broken or weak cryptographic hashing algorithm on sensitive data
  • 1 for Clear-text storage of sensitive information

lgtm-com[bot] avatar Jun 07 '22 19:06 lgtm-com[bot]

This pull request introduces 8 alerts and fixes 2 when merging c84039ef5402154fe6d637128cdec17678fa0a29 into 46a89c9f83781ddc61daf6dd46d6811f509e155b - view on LGTM.com

new alerts:

  • 3 for Except block handles 'BaseException'
  • 3 for Unused import
  • 2 for Unused local variable

fixed alerts:

  • 1 for Use of a broken or weak cryptographic hashing algorithm on sensitive data
  • 1 for Clear-text storage of sensitive information

lgtm-com[bot] avatar Jun 08 '22 18:06 lgtm-com[bot]

@InesCardinot you have solved one bug but introduced a new one more critical, I had decoded the jwt token and found a PASSWORD 😱 🙀 image Can you fix this?

fguisso avatar Nov 09 '22 15:11 fguisso