nccgroup/sobelow
sobelow should not accept `# sobelow_skip` that are not needed
オープン
#159 opened on 2024/04/03
backlogfeaturegood first issue
Repository metrics
- Stars
- (1,780 個のスター)
- PR merge metrics
- (30d に merged PR はありません)
説明
I notice in our code an instance of
# sobelow_skip ["XSS.Raw"]
def a_function(arg) do
that_does_not_call_raw()
end
I believe sobelow should raise an error on these. They do not reflect the code / current intention. Although unlikely, they could allow someone to add raw without it being super apparent in the diff of the resulting PR.
Thanks for sobelow