Graham McIntire
d8606bb609
Software design fixes: - Add proper aliases for all nested modules - release.ex: Ecto.Adapters.SQL - packet_consumer.ex: Aprsme.Cluster.PacketDistributor - cleanup_scheduler.ex: Aprsme.Workers.PacketCleanupWorker - health_check.ex: Ecto.Adapters.SQL - status_live/index.ex: Aprsme.Cluster.LeaderElection - packet_receiver.ex: Aprsme.Cluster.LeaderElection - packet_distributor.ex: Aprsme.Cluster.LeaderElection, AprsmeWeb.MapLive.PacketStore Security: - Update .sobelow-skips for false positive SQL injection warning (div is builtin function) All 13 software design suggestions now complete. All 13 warnings previously fixed. Remaining: 42 refactoring opportunities (complex/nested functions)
18 lines
No EOL
1.2 KiB
Text
18 lines
No EOL
1.2 KiB
Text
|
|
Traversal.FileModule: Directory Traversal in `File.read`,lib/aprsme/devices_seeder.ex:8,1BF74FD
|
|
SQL.Query: SQL injection,lib/aprsme_web/live/info_live/show.ex:347,1CB06D3
|
|
SQL.Query: SQL injection,lib/aprsme/db_optimizer.ex:152,1DA970
|
|
Config.HTTPS: HTTPS Not Enabled,config/prod.exs:0,2B5C077
|
|
Config.Headers: Missing Secure Browser Headers,lib/aprsme_web/router.ex:11,32F6644
|
|
SQL.Query: SQL injection,lib/aprsme/db_optimizer.ex:33,339B6E6
|
|
SQL.Query: SQL injection,lib/aprsme_web/live/info_live/show.ex:462,3418D79
|
|
XSS.Raw: XSS,lib/aprsme_web/live/info_live/show.ex:632,395070D
|
|
XSS.Raw: XSS,lib/aprsme_web/live/info_live/show.ex:650,44312C
|
|
SQL.Query: SQL injection,lib/aprsme/packets.ex:661,498E4DF
|
|
Traversal.FileModule: Directory Traversal in `File.read`,lib/aprsme_web/components/core_components.ex:37,4DB3CEF
|
|
SQL.Query: SQL injection,lib/aprsme/release.ex:159,5D9BE66
|
|
SQL.Query: SQL injection,lib/aprsme/db_optimizer.ex:107,5ECC490
|
|
SQL.Query: SQL injection,lib/aprsme_web/live/info_live/show.ex:576,6A503E9
|
|
XSS.Raw: XSS,lib/aprsme_web/components/core_components.ex:52,6B2C0EC
|
|
SQL.Query: SQL injection,lib/aprsme/db_optimizer.ex:129,711E151
|
|
SQL.Query: SQL injection,lib/aprsme/release.ex:163,7079EA4 |