nccgroup/sobelow

sobelow should not accept `# sobelow_skip` that are not needed

Open

#159 创建于 2024年4月3日

在 GitHub 查看
 (4 评论) (0 反应) (0 负责人)Elixir (119 fork)batch import
backlogfeaturegood first issue

仓库指标

Star
 (1,780 star)
PR 合并指标
 (30 天内没有已合并 PR)

描述

I notice in our code an instance of

  # sobelow_skip ["XSS.Raw"]
  def a_function(arg) do
    that_does_not_call_raw()
  end

I believe sobelow should raise an error on these. They do not reflect the code / current intention. Although unlikely, they could allow someone to add raw without it being super apparent in the diff of the resulting PR.

Thanks for sobelow

贡献者指南