Potential false positive - CGI script vulnerable to cross-site scripting
オープン
C++
false-positive
- 主要言語
- CodeQL
- スター
- 10.1k
- フォーク
- 2.1k
- 平均マージ
- 2日 15時間
- マージ済み PR（30日）
- 141
説明
Possible Multiple False Positives - CGI script vulnerable to cross-site scripting
This CGI script does use the QUERY_STRING but it only parses integers from the string. The browser input cell is constrained to a limited min/max integer range (which could be manually overcome) but the input is range checked and therefore I'm not clear why this issue is being flagged. 24 new alerts are currently being reported - previously 0.
https://lgtm.com/projects/g/timsgit/ipscan/snapshot/23c5eb1919ea0a75aeb2f33e0a8fd77fe58a8354/files/ipscan.c?sort=name&dir=ASC&mode=heatmap#xe232b15863a022b6:1
コントリビューションガイド
評価
この issue はまだ評価されていません。