Client_Hardcoded_Domain @ /src/main/webapp/eb/v1/dfi/style_google_mdl.html

[AaronZhouYu]

Checkmarx (SAST): Client_Hardcoded_Domain
Security Issue: Read More about Client_Hardcoded_Domain
Checkmarx Project: AaronZhouYu/TotallySecureApp
Repository URL: https://github.com/AaronZhouYu/TotallySecureApp
Branch: main
Scan ID: 9f309b69-ceac-446c-bc88-26f9199ee002

---

The JavaScript file imported in https://cdn.rtlcss.com/mdl/1.2.1/material.rtl.min.css in /src/main/webapp/eb/v1/dfi/style_google_mdl.html at line 3 is from a remote domain, which may allow attackers to replace its contents with malicious code.

Result #1:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. https://cdn.rtlcss.com/mdl/1.2.1/material.rtl.min.css: /src/main/webapp/eb/v1/dfi/style_google_mdl.html[3,30]
    Review result in Checkmarx One: Client_Hardcoded_Domain

Result #2:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. https://fonts.googleapis.com/icon?family=Material\+Icons: /src/main/webapp/eb/v1/dfi/style_google_mdl.html[1,30]
    Review result in Checkmarx One: Client_Hardcoded_Domain

Result #3:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. "https://cdn.rtlcss.com/mdl/1.2.1/material.min.js": /src/main/webapp/eb/v1/dfi/style_google_mdl.html[5,42]
    Review result in Checkmarx One: Client_Hardcoded_Domain