Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix Snyk errors #8288

Closed
alexec opened this issue Apr 1, 2022 · 0 comments · Fixed by #8289 or #8290
Closed

Fix Snyk errors #8288

alexec opened this issue Apr 1, 2022 · 0 comments · Fixed by #8289 or #8290
Labels
area/sdks area/sso-rbac type/feature Feature request type/security Security related

Comments

@alexec
Copy link
Contributor

alexec commented Apr 1, 2022 •
edited
Loading

https://app.snyk.io/org/argoproj/project/e917d104-c0c4-477b-853c-9d1451b6f803

  • Cross-site Scripting (XSS) - simply delete the line echoing the content
  • WebCookieMissesCallToSecure - add secure flag
  • Sensitive Cookie Without 'HttpOnly' Flag - add flag

https://app.snyk.io/org/argoproj/project/6a18a1f2-ca23-4308-af78-ec3a9478fc95

The only fixable errors are medium severity. No action.

https://app.snyk.io/org/argoproj/project/b741edcd-8851-4a87-a531-deb09ce34ee1

  • org.bouncycastle:bcprov-ext-jdk15on - we should upgrade the OpenAPI generator we use. See if that will fix this.
This was referenced Apr 1, 2022
Merged
Merged
alexec added a commit that referenced this issue Apr 1, 2022
@alexec
fix: Snyk security recommendations (Node). Fixes #8288
221d998 
Signed-off-by: Alex Collins <alex_collins@intuit.com>
alexec added a commit that referenced this issue Apr 1, 2022
@alexec
fix: Snyk security recommendations (Golang). Fixes #8288
996655f 
Signed-off-by: Alex Collins <alex_collins@intuit.com>
@sarabala1979 sarabala1979 mentioned this issue Apr 14, 2022
Closed
85 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/sdks area/sso-rbac type/feature Feature request type/security Security related
Projects
None yet
Milestone
No milestone
1 participant
@alexec