[stable30] fix(core): ensure unique vcategory #62981
static-code-analysis.yml
on: pull_request
static-code-analysis
2m 45s
static-code-analysis-security
5m 28s
static-code-analysis-ocp
1m 9s
Annotations
10 errors and 1 warning
|
TaintedCallable:
lib/private/AppFramework/Http/Dispatcher.php#L208
lib/private/AppFramework/Http/Dispatcher.php:208:37: TaintedCallable: Detected tainted text (see https://psalm.dev/243)
|
|
TaintedFile:
lib/private/App/InfoParser.php#L39
lib/private/App/InfoParser.php:39:50: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)
|
|
TaintedHeader:
lib/base.php#L232
lib/base.php:232:12: TaintedHeader: Detected tainted header (see https://psalm.dev/256)
|
|
TaintedHeader:
lib/base.php#L150
lib/base.php:150:12: TaintedHeader: Detected tainted header (see https://psalm.dev/256)
|
|
TaintedFile:
apps/theming/lib/IconBuilder.php#L209
apps/theming/lib/IconBuilder.php:209:28: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)
|
|
TaintedFile:
apps/theming/lib/IconBuilder.php#L116
apps/theming/lib/IconBuilder.php:116:40: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)
|
|
TaintedCookie:
apps/files_sharing/lib/Controller/ShareController.php#L431
apps/files_sharing/lib/Controller/ShareController.php:431:35: TaintedCookie: Detected tainted cookie (see https://psalm.dev/257)
|
|
TaintedFile:
apps/files_external/lib/Lib/Storage/SFTP.php#L385
apps/files_external/lib/Lib/Storage/SFTP.php:385:22: TaintedFile: Detected tainted file handling (see https://psalm.dev/255)
|
|
TaintedCallable:
apps/files_external/lib/Config/ConfigAdapter.php#L53
apps/files_external/lib/Config/ConfigAdapter.php:53:50: TaintedCallable: Detected tainted text (see https://psalm.dev/243)
|
|
TaintedHtml:
apps/admin_audit/lib/Actions/Action.php#L42
apps/admin_audit/lib/Actions/Action.php:42:16: TaintedHtml: Detected tainted HTML (see https://psalm.dev/245)
|
|
static-code-analysis
This run of the CodeQL Action does not have permission to access Code Scanning API endpoints. As a result, it will not be opted into any experimental features. This could be because the Action is running on a pull request from a fork. If not, please ensure the Action has the 'security-events: write' permission. Details: Resource not accessible by integration - https://docs.github.com/rest
|