CodeQL for Ruby: false alert for `URI.parse`
Aperta
bug
false-positive
Ruby
- Lingua principale
- CodeQL
- Stelle
- 10.1k
- Fork
- 2.1k
- Merge medio
- 2g 15h
- PR unite (30g)
- 141
Descrizione
https://github.com/ruby/ruby/security/code-scanning/127
`URI.parse('https://www.example.com/search?q=%XX')` is alerted to escape dots as the string is used as a regex and, but it is matched against `RFC3986_URI` and `RFC3986_relative_ref` which are regex both.
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.