libjitsi
libjitsi copied to clipboard
numerous issues identified by lgtm.com/
https://lgtm.com/search?q=jitsi identifies numerous errors in libjitsi and other projects under http://github.com/jitsi. While a number are minor (e.g., no-op variable assignments), others are more concerning, including potential XSS and array index out of bound reads.
Despite the potential disclosure of an XSS, I'm filing this as a normal issue because:
- any issues listed are already in the public: anyone can query lgtm.com
- jitsi does not have a security policy requesting a different way to submit security issues (https://github.com/jitsi/libjitsi/security)