Potential false positive - CGI script vulnerable to cross-site scripting
Abierto
C++
false-positive
- Lenguaje dominante
- CodeQL
- Estrellas
- 10.1k
- Forks
- 2.1k
- Merge medio
- 2 d 15 h
- PR fusionados (30 d)
- 141
Descripción
Possible Multiple False Positives - CGI script vulnerable to cross-site scripting
This CGI script does use the QUERY_STRING but it only parses integers from the string. The browser input cell is constrained to a limited min/max integer range (which could be manually overcome) but the input is range checked and therefore I'm not clear why this issue is being flagged. 24 new alerts are currently being reported - previously 0.
https://lgtm.com/projects/g/timsgit/ipscan/snapshot/23c5eb1919ea0a75aeb2f33e0a8fd77fe58a8354/files/ipscan.c?sort=name&dir=ASC&mode=heatmap#xe232b15863a022b6:1
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.