Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CSSとJavaScriptを切り出す #93 #95

Merged
merged 2 commits into from
Mar 7, 2021
Merged

Conversation

Robot-Inventor
Copy link
Owner

close #93

@Robot-Inventor Robot-Inventor linked an issue Mar 7, 2021 that may be closed by this pull request
@ghost
Copy link

ghost commented Mar 7, 2021

DeepCode's analysis on #eefc02 found:

  • 1 critical issue, ℹ️ 4 minor issues. 👇

Top issues

Description Example fixes
Unsanitized input from the document location flows into a member access and is used to access a property of a field assignment by name. This may allow a malicious user to access methods (e.g. toString) as opposed to regular properties of objects and cause a crash, remote code execution or more serious problems. This is known as a Prototype Pollution vulnerability. Occurrences: 🔧 Example fixes
Use an object literal instead of using the Object constructor. Occurrences: 🔧 Example fixes
Use the rest parameters instead of 'arguments'. Occurrences: 🔧 Example fixes

👉 View analysis in DeepCode’s Dashboard | Configure the bot

@Robot-Inventor Robot-Inventor merged commit 10d21b8 into develop Mar 7, 2021
@Robot-Inventor Robot-Inventor deleted the extract-css-and-js#93 branch March 7, 2021 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CSSとJavaScriptを切り出す
1 participant