Skip to content

Commit e37dfb4

Browse files
committed
🎨add semgrep rules
1 parent bbf4b71 commit e37dfb4

1 file changed

Lines changed: 14 additions & 0 deletions

File tree

  • server/projects/main/apps/scan_conf/management/commands/open_source

server/projects/main/apps/scan_conf/management/commands/open_source/semgrep.json

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15438,6 +15438,20 @@
1543815438
],
1543915439
"labels": []
1544015440
},
15441+
{
15442+
"real_name": "owasp.java.xxe.org.xml.sax.XMLReader",
15443+
"display_name": "Owasp.java.xxe.org.xml.sax.xmlreader",
15444+
"severity": "error",
15445+
"category": "security",
15446+
"rule_title": "contrib.owasp: owasp.java.xxe.org.xml.sax.XMLReader",
15447+
"description": "XMLReader being instantiated without calling the setFeature functions that are generally used for disabling entity processing\n",
15448+
"rule_params": null,
15449+
"solution": null,
15450+
"languages": [
15451+
"java"
15452+
],
15453+
"labels": []
15454+
},
1544115455
{
1544215456
"real_name": "insecure-pickle-use",
1544315457
"display_name": "InsecurePickleUse",

0 commit comments

Comments
 (0)