Potential false positive - CGI script vulnerable to cross-site scripting
Offen
C++
false-positive
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
Possible Multiple False Positives - CGI script vulnerable to cross-site scripting
This CGI script does use the QUERY_STRING but it only parses integers from the string. The browser input cell is constrained to a limited min/max integer range (which could be manually overcome) but the input is range checked and therefore I'm not clear why this issue is being flagged. 24 new alerts are currently being reported - previously 0.
https://lgtm.com/projects/g/timsgit/ipscan/snapshot/23c5eb1919ea0a75aeb2f33e0a8fd77fe58a8354/files/ipscan.c?sort=name&dir=ASC&mode=heatmap#xe232b15863a022b6:1
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.