Skip to content

Restyle [Snyk] Security upgrade debian from stretch-20210408-slim to stretch-slim - #251

Open
restyled-io[bot] wants to merge 1 commit into
snyk-fix-d1f5dd06449bb4986d5d6757581b39adfrom
restyled/snyk-fix-d1f5dd06449bb4986d5d6757581b39ad
Open

Restyle [Snyk] Security upgrade debian from stretch-20210408-slim to stretch-slim#251
restyled-io[bot] wants to merge 1 commit into
snyk-fix-d1f5dd06449bb4986d5d6757581b39adfrom
restyled/snyk-fix-d1f5dd06449bb4986d5d6757581b39ad

Conversation

@restyled-io

Copy link
Copy Markdown

Automated style fixes for #250, created by Restyled.

The following restylers made fixes:

To incorporate these changes, merge this Pull Request into the original. We
recommend using the Squash or Rebase strategies.

NOTE: As work continues on the original Pull Request, this process will
re-run and update (force-push) this Pull Request with updated style fixes as
necessary. If the style is fixed manually at any point (i.e. this process finds
no fixes to make), this Pull Request will be closed automatically.

Sorry if this was unexpected. To disable it, see our documentation.

@guardrails

Copy link
Copy Markdown

⚠️ We detected 921 security issues in this pull request:

Mode: paranoid | Total findings: 921 | Considered vulnerability: 921

Insecure File Management (206)
DocsDetails
💡Title: Use of non-literal fs filename, Severity: High
const{ data }=frontmatter(fs.readFileSync(homepage,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(dir))return
💡Title: Use of non-literal fs filename, Severity: High
const{ data }=frontmatter(fs.readFileSync(toc,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
constbuffer=fs.readFileSync(absFilePath)
💡Title: Use of non-literal fs filename, Severity: High
filename=>[filename,fs.readFileSync(filename,'utf8')]
💡Title: Use of non-literal require, Severity: High
constmiddleware=require(path.resolve(__dirname,'../middleware',relativePath))
💡Title: Use of non-literal fs filename, Severity: High
constcontent=fs.readFileSync(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(path.join(dist,'react'))){
💡Title: Use of non-literal fs filename, Severity: High
fs.mkdirSync(path.join(dist,'react'),{recursive: true})
💡Title: Use of non-literal fs filename, Severity: High
constcontent=transform(fs.readFileSync(file.path,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(path.join(dist,file.path),content)
💡Title: Use of non-literal fs filename, Severity: High
module.exports=util.promisify(fs.readFile)
💡Title: Use of non-literal fs filename, Severity: High
fs.readdirSync(schemasPath)
💡Title: Use of non-literal require, Severity: High
constvalue=require(path.join(schemasPath,filename))
💡Title: Use of non-literal fs filename, Severity: High
returnawaitfs.readdir(path.join(__dirname,'indexes'))
💡Title: Use of non-literal fs filename, Severity: High
.then(content=>fs.writeFile(
💡Title: Use of non-literal fs filename, Severity: High
.then(content=>fs.writeFile(
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(cacheFile,JSON.stringify(index,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(
💡Title: Use of non-literal fs filename, Severity: High
constversions=fs.readdirSync(staticDir)
💡Title: Use of non-literal require, Severity: High
set(payloadsPerVersion,payloadPath,formatAsJsonCodeBlock(require(payloadFile)))
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(destDir)){
💡Title: Use of non-literal fs filename, Severity: High
dirStats=fs.statSync(earlyAccessLocalRepoDir)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(sourceDir)){
💡Title: Use of non-literal fs filename, Severity: High
fs.symlinkSync(sourceDir,destDir,'junction')
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(destDir)){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.lstatSync(destDir).isSymbolicLink()){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.statSync(destDir).isDirectory()){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(earlyAccessContentAndDataFiles)){
💡Title: Use of non-literal fs filename, Severity: High
constoldContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newContents)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(variablePath))returnfalse
💡Title: Use of non-literal fs filename, Severity: High
constvariableFileContent=yaml.safeLoad(fs.readFileSync(variablePath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
returnfs.existsSync(`${path.posix.join(earlyAccessData,reusablePath)}.md`)
💡Title: Use of non-literal fs filename, Severity: High
returnfs.existsSync(path.posix.join(earlyAccessImages,imagePath))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(fullPathToArchivalRepo)){
💡Title: Use of non-literal fs filename, Severity: High
fs.mkdirSync(finalDirectory,{recursive: true})
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(path.posix.join(finalDirectory,'redirects.json'),JSON.stringify(redirectsPerVersion,null,2))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal require, Severity: High
require(path.join(process.cwd(),removeUnusedAssetsScript))
💡Title: Use of non-literal fs filename, Severity: High
constoldContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(newSchemaFile)){
💡Title: Use of non-literal require, Severity: High
constpreviews=require(previewsFile)
💡Title: Use of non-literal require, Severity: High
💡Title: Use of non-literal require, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(previewsFile,JSON.stringify(previews,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(changesFile,JSON.stringify(changes,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(objectsFile,JSON.stringify(objects,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.readdirSync(srcDir).forEach(file=>{
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.readdirSync(destDir).length){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(oldDereferencedFile)){
💡Title: Use of non-literal fs filename, Severity: High
constoldDereferencedContent=fs.readFileSync(oldDereferencedFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newDereferencedFile,newDereferenceContent)
💡Title: Use of non-literal require, Severity: High
constdereferencedSchema=require(path.join(process.cwd(),newDereferencedFile))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newDecoratedFile,JSON.stringify(operations,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.readdirSync(srcDir).forEach(file=>{
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.readdirSync(destDir).length){
💡Title: Use of non-literal fs filename, Severity: High
constdataContent=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newDataContent)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constreleaseCandidateData=yaml.safeLoad(fs.readFileSync(releaseCandidateYaml,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(releaseCandidateYaml,yaml.safeDump(releaseCandidateData))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(localisedAbsPath,toWrite)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(categoryDir)){
💡Title: Use of non-literal fs filename, Severity: High
constpreviousChangelogString=fs.readFileSync(targetPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(targetPath,JSON.stringify(previousChangelog,null,2))
💡Title: Use of non-literal fs filename, Severity: High
constpreviousUpcomingChanges=yaml.safeLoad(fs.readFileSync(upcomingChangesPath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
constpreviousSchemaString=fs.readFileSync(schemaPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(filepath,content,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(tempSchemaFilePath,latestSchema)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(tempSchemaFilePath)
💡Title: Use of non-literal fs filename, Severity: High
constinputObjectIncludeFile=fs.readFileSync(path.join(includes,'graphql-input-object.html'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
constobjectIncludeFile=fs.readFileSync(path.join(includes,'graphql-object.html'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
assert(fs.existsSync(oldCategoryDir),`directory does not exist: ${oldCategoryDir}`)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(productDir)){
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(productTocPath,matter.stringify(content,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
consttocContents=fs.readFileSync(oldProductTocPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(oldProductTocPath,matter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newContents)
💡Title: Use of non-literal fs filename, Severity: High
constfileContent=fs.readFileSync(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(markdownFilename,value)
💡Title: Use of non-literal fs filename, Severity: High
if(batchFile&&!fs.existsSync(batchFile)){
💡Title: Use of non-literal fs filename, Severity: High
fs.readFileSync(batchFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
constcontents=fs.readFileSync(categoryIndex,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(categoryIndex,frontmatter.stringify(content,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
for(constarticleFileNameoffs.readdirSync(categoryDirPath)){
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=fs.readFileSync(articlePath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(articlePath,frontmatter.stringify(articleContent,articleData,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constproductIndexContents=fs.readFileSync(productIndexPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(productIndexPath,frontmatter.stringify(revisedProductIndex,productIndexData,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(categoryDirPath,newPath)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(oldFullPath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newFullPath,frontmatter.stringify(content,data))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
: fs.unlinkSync(reusablePath)
💡Title: Use of non-literal fs filename, Severity: High
: fs.unlinkSync(imagePath)
💡Title: Use of non-literal fs filename, Severity: High
constenterpriseDatesString=fs.readFileSync(enterpriseDatesFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(enterpriseDatesFile,formattedDatesString)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constreadmeComment=fs.readFileSync(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
if(template===fs.readFileSync(readme,'utf8')){
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(readme,template)
💡Title: Use of non-literal fs filename, Severity: High
constcontent=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newContent)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constcontents=fs.readFileSync(productIndex,'utf8')// TODO move to async
💡Title: Use of non-literal require, Severity: High
schemaForCurrentVersion: require(`../../lib/graphql/static/schema-${graphqlVersion}`),
💡Title: Use of non-literal require, Severity: High
constwebhookPayloads=require(path.join(process.cwd(),'lib/webhooks'))
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(fullPath)){
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(fullPath,fs.readFileSync(englishFullPath))
💡Title: Use of non-literal fs filename, Severity: High
fs.appendFileSync(logFile,JSON.stringify(result)+'\n')
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=fs.readFileSync(filePath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(filePath,newContents)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(existingFileToCompare)){
💡Title: Use of non-literal fs filename, Severity: High
constexistingImageToCompare=awaitfs.readFileSync(existingFileToCompare)
💡Title: Use of non-literal fs filename, Severity: High
constenterpriseImage=awaitfs.readFileSync(file)
💡Title: Use of non-literal fs filename, Severity: High
if(compareResult===0)fs.unlinkSync(file)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(existingFileToCompare)){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(newDirectoryName)){
💡Title: Use of non-literal fs filename, Severity: High
fs.mkdirSync(newDirectoryName,{recursive: true})
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(file,existingFileToCompare)
💡Title: Use of non-literal fs filename, Severity: High
constnewContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
letcategoryIndexContent=fs.readFileSync(categoryIndexFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(oldTopicFile))continue
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(newTopicDirectory))fs.mkdirSync(newTopicDirectory)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(oldTopicFile,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(`${oldTopicDirectory}/${article}.md`))return
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(`${oldTopicDirectory}/${article}.md`,newArticlePath)
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=frontmatter(fs.readFileSync(newArticlePath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newArticlePath,frontmatter.stringify(articleContents.content.trim(),articleContents.data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(`${newTopicDirectory}/index.md`,frontmatter.stringify(topicContent.trim(),data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(categoryIndexFile,categoryIndexContent)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(oldTopicFile)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(imagePath))fs.unlinkSync(imagePath)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(imagePath))fs.unlinkSync(imagePath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(path.join(process.cwd(),directoryImage))
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(indexFile,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(indexFile,frontmatter.stringify('',data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constglossary=yaml.safeLoad(fs.readFileSync(inputFile,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(sourceDir)){
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(sourceDir,destDir)
💡Title: Use of non-literal fs filename, Severity: High
assert(fs.existsSync(translationFilePath),`file does not exist: ${translationFilePath}`)
💡Title: Use of non-literal fs filename, Severity: High
assert(fs.existsSync(englishFile),`file does not exist: ${englishFile}`)
💡Title: Use of non-literal fs filename, Severity: High
constenglishContent=fs.readFileSync(englishFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(translationFilePath,englishContent)
💡Title: Use of non-literal fs filename, Severity: High
constrelativePath=fs.existsSync(pathArg)
💡Title: Use of non-literal require, Severity: High
constschemas=files.map(filename=>require(filename))
💡Title: Use of non-literal fs filename, Severity: High
constschemas=fs.readdirSync(dereferencedPath)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(githubRepoDir)){
💡Title: Use of non-literal require, Severity: High
constschema=require(path.join(dereferencedPath,filename))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(path.join(dereferencedPath,filename),JSON.stringify(schema,null,2))
💡Title: Use of non-literal require, Severity: High
constschema=require(path.join(dereferencedPath,filename))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(filename,JSON.stringify(operations,null,2))
💡Title: Use of non-literal fs filename, Severity: High
const{ content, data }=matter(fs.readFileSync(fullPath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(fullPath,matter.stringify(content,newData,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constfileContents=awaitfs.promises.readFile(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
.filter(link=>fs.existsSync(getPath(productDir,link,'index')))
💡Title: Use of non-literal fs filename, Severity: High
constchildEntries=awaitfs.promises.readdir(categoryDir,{withFileTypes: true})
💡Title: Use of non-literal fs filename, Severity: High
constgitignore=fs.readFileSync(gitignorePath,'utf8')
💡Title: Use of non-literal require, Severity: High
constschemaJsonPerVersion=require(`../../lib/graphql/static/schema-${version}`)
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.stat(filepath)
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.writeFile(newFile,'newvalue: bar')
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.unlink(newFile)
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.writeFile(testTargetPath,previousContents)
💡Title: Use of non-literal fs filename, Severity: High
returnyaml.load(fs.readFileSync(filename,'utf8'),{ filename })
💡Title: Use of non-literal fs filename, Severity: High
consttestDirectory=awaitfs.readdir(pathToTests)
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
constfilenames=(awaitfs.readdir(referenceDir))
💡Title: Use of non-literal fs filename, Severity: High
constworkflows=fs.readdirSync(workflowsDir)
💡Title: Use of non-literal fs filename, Severity: High
constdata=yaml.load(fs.readFileSync(fullpath,'utf8'),{ fullpath })
💡Title: Use of non-literal fs filename, Severity: High
expect(awaitfs.stat(eaDir)).toBeTruthy()
💡Title: Use of non-literal fs filename, Severity: High
expect(awaitfs.stat(eaDir)).toBeTruthy()
💡Title: Use of non-literal fs filename, Severity: High
expect(awaitfs.stat(eaDir)).toBeTruthy()
💡Title: Use of non-literal fs filename, Severity: High
constrssFeedContent=fs.readFileSync(path.join(process.cwd(),'tests/fixtures/rss-feed.xml'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
pageWithSections: fs.readFileSync(path.join(__dirname,'fixtures/page-with-sections.html'),'utf8'),
💡Title: Use of non-literal fs filename, Severity: High
pageWithoutSections: fs.readFileSync(path.join(__dirname,'fixtures/page-without-sections.html'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
constfileContent=fs.readFileSync(filename,'utf8')
💡Title: Path Traversal from user input, Severity: High
💡Title: Path Traversal from user input, Severity: High
newHref=path.join('/',languageCode,href)
💡Title: Path Traversal from user input, Severity: High
newHref=path.join('/',languageCode,href)
💡Title: Path Traversal from user input, Severity: High
constmapTopicOrArticlePath=path.posix.join(categoryPath,pathParts[2])
💡Title: Path Traversal from user input, Severity: High
constcategoryPath=removeFPTFromPath(path.posix.join('/','en',req.context.currentVersion,'early-access',pathParts[0],pathParts[1]))
💡Title: Path Traversal from user input, Severity: High
title: product.title
💡Title: Path Traversal from user input, Severity: High
constcategoryPath=removeFPTFromPath(path.posix.join('/',req.context.currentLanguage,req.context.currentVersion,productPath,pathParts[1]))
💡Title: Path Traversal from user input, Severity: High
constproductPath=path.posix.join('/',req.context.currentProduct)
💡Title: Path Traversal from user input, Severity: High
href: removeFPTFromPath(path.posix.join('/',req.context.currentLanguage,req.context.currentVersion,productPath)),
💡Title: Path Traversal from user input, Severity: High
constproxyPath=path.join('/',requestedVersion,assetPath)
💡Title: Path Traversal from user input, Severity: High
consthref=removeFPTFromPath(path.join('/',context.currentLanguage,version,linkPath))

More info on how to fix Insecure File Management in JavaScript.


Insecure Use of Regular Expressions (34)
DocsDetails
💡Title: Regex DOS (ReDOS), Severity: Medium
enterprise: /\/enterprise(?:\/|$|\?)(\d+\.\d+)?/,
💡Title: Regex DOS (ReDOS), Severity: Medium
admin: /enterprise\/(\d+\.\d+\/)?admin\/?/,
💡Title: Regex DOS (ReDOS), Severity: Medium
gheUser: /enterprise\/(\d+\.\d+\/)?user(\/|$|\?)/,
💡Title: Regex DOS (ReDOS), Severity: Medium
enterpriseHomepage: /\/enterprise\/?(\d+\.\d+)?$/,

This comment has been truncated due to comment length limitations, please go to the dashboard for further details.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@restyled-commits