Potential false positive - CGI script vulnerable to cross-site scripting
Ouverte
C++
false-positive
- Langage dominant
- CodeQL
- Étoiles
- 10.1k
- Forks
- 2.1k
- Merge moyen
- 2 j 15 h
- PR mergées (30 j)
- 141
Description
Possible Multiple False Positives - CGI script vulnerable to cross-site scripting
This CGI script does use the QUERY_STRING but it only parses integers from the string. The browser input cell is constrained to a limited min/max integer range (which could be manually overcome) but the input is range checked and therefore I'm not clear why this issue is being flagged. 24 new alerts are currently being reported - previously 0.
https://lgtm.com/projects/g/timsgit/ipscan/snapshot/23c5eb1919ea0a75aeb2f33e0a8fd77fe58a8354/files/ipscan.c?sort=name&dir=ASC&mode=heatmap#xe232b15863a022b6:1
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.