semgrep-rules icon indicating copy to clipboard operation
semgrep-rules copied to clipboard

Fix false positive in bug report

Open 0xDC0DE opened this issue 2 years ago • 3 comments

Fix for bug reported here: https://github.com/returntocorp/semgrep-rules/issues/2407

0xDC0DE avatar Sep 22 '22 09:09 0xDC0DE


=== Findings by rule with count of repos with findings ===
RULE ID                                                      FINDINGS        REPOS        
jquery-insecure-selector                                     481             10           
azure-keyvault-recovery-enabled                              157             3            
azure-automation-encrypted                                   157             3            
missing-aws-lb-deletion-protection                           157             3            
unsafe-dynamic-method                                        149             8            
package-dependencies-check                                   146             6            
no-scriptlets                                                139             3            
unquoted-variable-expansion-in-command                       92              10           
prohibit-jquery-html                                         56              10           
use-jstl-escaping                                            56              3            
use-escapexml                                                56              3            

r2c-argo[bot] avatar Sep 22 '22 09:09 r2c-argo[bot]


=== Findings by rule with count of repos with findings ===
RULE ID                                                      FINDINGS        REPOS        
jquery-insecure-selector                                     481             10           
azure-keyvault-recovery-enabled                              157             3            
azure-automation-encrypted                                   157             3            
missing-aws-lb-deletion-protection                           157             3            
unsafe-dynamic-method                                        149             8            
package-dependencies-check                                   146             6            
no-scriptlets                                                139             3            
unquoted-variable-expansion-in-command                       92              10           
prohibit-jquery-html                                         56              10           
use-jstl-escaping                                            56              3            
use-escapexml                                                56              3            

r2c-argo[bot] avatar Sep 22 '22 09:09 r2c-argo[bot]


=== Findings by rule with count of repos with findings ===
RULE ID                                                      FINDINGS        REPOS        
jquery-insecure-selector                                     481             10           
azure-keyvault-recovery-enabled                              157             3            
azure-automation-encrypted                                   157             3            
missing-aws-lb-deletion-protection                           157             3            
unsafe-dynamic-method                                        149             8            
package-dependencies-check                                   146             6            
no-scriptlets                                                139             3            
unquoted-variable-expansion-in-command                       92              10           
prohibit-jquery-html                                         56              10           
use-jstl-escaping                                            56              3            
use-escapexml                                                56              3            

r2c-argo[bot] avatar Sep 22 '22 09:09 r2c-argo[bot]

@pieterdc1 is it already it the latest version ? or I have to wait a futur release ? thanks

aleboulanger avatar Sep 29 '22 07:09 aleboulanger