github / github/codeql

LGTM.com - false positive: "Duplicate HTML element attributes" caused by valid Django template tags

未关闭
#5,296 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
false-positive
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

**Description of the false positive**

```html
{% csrf_token %}
```
This is valid Django template HTML with no duplicate attributes, however LGTM reports it as having duplicate tags due to it seeing `{%` and `%}` appear multiple times in a single opening tag.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/ArchiveBox/ArchiveBox/snapshot/665e2817780d54eb2e1540fd80e48aeef9950775/files/archivebox/templates/admin/private_index_grid.html#L61

![image](https://user-images.githubusercontent.com/511499/109436156-37c78f00-79ec-11eb-9a8a-7a1f79c9bf0c.png)

**Possibly related PRs/Issues:**

- https://github.com/github/codeql/pull/5236
- https://github.com/github/codeql/issues/5224

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。