nccgroup/sobelow

sobelow should not accept `# sobelow_skip` that are not needed

開放

#159 建立於 2024年4月3日

 (4 則留言) (0 個反應) (0 位負責人)Elixir (119 個分叉)batch import
backlogfeaturegood first issue

倉庫指標

星標
 (1,780 顆星)
PR 合併指標
 (30 天內沒有已合併 PR)

描述

I notice in our code an instance of

  # sobelow_skip ["XSS.Raw"]
  def a_function(arg) do
    that_does_not_call_raw()
  end

I believe sobelow should raise an error on these. They do not reflect the code / current intention. Although unlikely, they could allow someone to add raw without it being super apparent in the diff of the resulting PR.

Thanks for sobelow

貢獻者指南