Commit6cc4edb

committed

fix semgrep

1 parentfdb231b commit6cc4edbCopy full SHA for 6cc4edb

File tree

+25

-40

lines changed

+25

-40

lines changed

Lines changed: 1 addition & 1 deletion

Lines changed: 0 additions & 32 deletions

This file was deleted.

Lines changed: 11 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,11 @@`
	`1`	`+functionTestComponent(){`
	`2`	`+// ruleid:react-dangerouslysetinnerhtml`
	`3`	`+return<divdangerouslySetInnerHTML={createMarkup()}/>;`
	`4`	`+}`
	`5`	`+`
	`6`	`+functionOkComponent(){`
	`7`	`+// OK`
	`8`	`+constdiscordClientKey='8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ';`
	`9`	`+return{__html:'Первый · Второй'};`
	`10`	`+}`
	`11`	`+`

Lines changed: 13 additions & 7 deletions

Original file line number	Diff line number	Diff line change
`@@ -1,8 +1,14 @@`
`1`	`1`	`rules:`
`2`		`- -id:hardcoded-password`
`3`		`-pattern:password = "$SECRET"`
`4`		`-message:"Avoid hardcoded passwords"`
`5`		`-severity:ERROR`
`6`		`-languages:[python]`
`7`		`-metadata:`
`8`		`-category:security`
	`2`	`+ -id:docs-react-dangerouslysetinnerhtml`
	`3`	`+languages:`
	`4`	`+ -typescript`
	`5`	`+ -javascript`
	`6`	`+message:>`
	`7`	`+ Setting HTML from code is risky because it’s easy to inadvertently expose`
	`8`	`+ your users to a cross-site scripting (XSS) attack.`
	`9`	`+pattern-either:`
	`10`	`+ -pattern:\|`
	`11`	`+ <$X dangerouslySetInnerHTML=... />`
	`12`	`+ -pattern:\|`
	`13`	`+ {dangerouslySetInnerHTML: ...}`
	`14`	`+severity:WARNING`

Comments

(0)