Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HIGH SECURITY VIOLATION in cypress/support/utils.ts #983

Open
hayescode opened this issue May 9, 2024 · 1 comment
Open

HIGH SECURITY VIOLATION in cypress/support/utils.ts #983

hayescode opened this issue May 9, 2024 · 1 comment

Comments

@hayescode
Copy link
Contributor

Describe the bug
My workplace uses Apiiro for security compliance and this section of code gives a high severity security violation.

Error message: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References: https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html#do-not-use-dangerous-functions

image

@willydouhard
Copy link
Collaborator

Thank you for the report. This code is only used to orchestrate the CI. It never lands in any Chainlit application.

That being said, it would be nice to clear the warning!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants