nccgroup/sobelow

sobelow should not accept `# sobelow_skip` that are not needed

Open

#159 建立於 2024年4月3日

在 GitHub 查看
 (4 留言) (0 反應) (0 負責人)Elixir (119 fork)batch import
backlogfeaturegood first issue

倉庫指標

Star
 (1,780 star)
PR 合併指標
 (30 天內沒有已合併 PR)

描述

I notice in our code an instance of

  # sobelow_skip ["XSS.Raw"]
  def a_function(arg) do
    that_does_not_call_raw()
  end

I believe sobelow should raise an error on these. They do not reflect the code / current intention. Although unlikely, they could allow someone to add raw without it being super apparent in the diff of the resulting PR.

Thanks for sobelow

貢獻者指南