mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-21 14:09:27 +00:00
22 lines
453 B
YAML
22 lines
453 B
YAML
|
rules:
|
||
|
|
- id: ousast.groovy.regex.groovy-xss-unescaped
|
||
|
|
languages:
|
||
|
|
- generic
|
||
|
|
severity: WARNING
|
||
|
|
message: Groovy template unescaped output needs review
|
||
|
|
metadata:
|
||
|
|
family: output_encoding
|
||
|
|
cwe: CWE-79
|
||
|
|
origin: groovy-xss-unescaped
|
||
|
|
precision_estimate: '0.0'
|
||
|
|
kind: regex
|
||
|
|
tags:
|
||
|
|
- injection
|
||
|
|
status: enabled
|
||
|
|
version: '1'
|
||
|
|
pattern-regex: (yieldUnescaped)\s+[A-Za-z_]
|
||
|
|
paths:
|
||
|
|
include:
|
||
|
|
- '*.groovy'
|
||
|
|
- '*.tpl'
|