Potential false positive - CGI script vulnerable to cross-site scripting
Aberta
C++
false-positive
- Linguagem predominante
- CodeQL
- Estrelas
- 10.1k
- Forks
- 2.1k
- Merge médio
- 2d 15h
- PRs com merge (30d)
- 141
Descrição
Possible Multiple False Positives - CGI script vulnerable to cross-site scripting
This CGI script does use the QUERY_STRING but it only parses integers from the string. The browser input cell is constrained to a limited min/max integer range (which could be manually overcome) but the input is range checked and therefore I'm not clear why this issue is being flagged. 24 new alerts are currently being reported - previously 0.
https://lgtm.com/projects/g/timsgit/ipscan/snapshot/23c5eb1919ea0a75aeb2f33e0a8fd77fe58a8354/files/ipscan.c?sort=name&dir=ASC&mode=heatmap#xe232b15863a022b6:1
Guia de contribuição
Avaliação
Esta issue ainda não foi avaliada.