{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:35:40.205679Z","repo":{"ref":{"host":"github.com","owner":"FrozenNode","name":"Laravel-Administrator"},"default_branch":"master","clone_url":"https://github.com/FrozenNode/Laravel-Administrator.git","html_url":"https://github.com/FrozenNode/Laravel-Administrator","description":"An administrative interface package for Laravel","stars":1912,"forks":484,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":7573,"primary_language":"PHP","license_spdx":"MIT","created_at":"2012-11-12T19:33:49Z","pushed_at":"2020-09-08T02:53:18Z","security_policy_url":null,"distribution":{"owner_created_at":"2012-09-06T04:54:09Z","owner_type":"Organization","release_assets":[]}},"commit_sha":"34d604c2029ce2b11f93599baf4ec909501fd356","profile":{"lines_by_language":{"JavaScript":21408,"PHP":16766,"Shell":69},"files_by_category":{"source":2306,"binary":290,"other":89,"docs":55,"test":28,"config":9,"vendored":8},"source_lines":33981,"test_lines":4262},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":67.1,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":73.9,"duplication":65.8,"lint":69.5,"testing":66.6,"docs":100.0,"type_safety":null,"process":20.0},"summary":"Code quality is adequate: test-to-source ratio 0.13, CI runs tests; 10% of function code in complex or long functions; 7% duplicated lines. Weakest area: process."},"security":{"score":53.5,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":36.5,"dependencies":null,"ci_actions":null,"posture":0.0,"scorecard":25.0},"summary":"Security posture is weak: 54 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":2.6,"check:Code-Review":4.0,"check:Maintained":0.0,"check:CII-Best-Practices":0.0,"check:Binary-Artifacts":10.0,"check:Security-Policy":0.0,"check:License":10.0,"check:Fuzzing":0.0,"check:Branch-Protection":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Code-Review: 4/10 (Found 7/17 approved changesets -- score normalized to 4)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":0.6},{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":1.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 10/10 (no binaries found in the repo)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 10/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/FrozenNode/Laravel-Administrator","weight":1.0}],"data":{"date":"2026-11-09","commit":"34d604c2029ce2b11f93599baf4ec909501fd356","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":793.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":90524.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2012-11":{"loc":20451,"attributed_loc":0},"2012-12":{"loc":4850,"attributed_loc":0},"2013-01":{"loc":20261,"attributed_loc":0},"2013-02":{"loc":7370,"attributed_loc":0},"2013-03":{"loc":972,"attributed_loc":0},"2013-04":{"loc":5304,"attributed_loc":0},"2013-05":{"loc":231,"attributed_loc":0},"2013-06":{"loc":4691,"attributed_loc":0},"2013-07":{"loc":11736,"attributed_loc":0},"2013-08":{"loc":2785,"attributed_loc":0},"2013-09":{"loc":289,"attributed_loc":0},"2013-10":{"loc":78,"attributed_loc":0},"2013-11":{"loc":1019,"attributed_loc":0},"2013-12":{"loc":189,"attributed_loc":0},"2014-01":{"loc":276,"attributed_loc":0},"2014-02":{"loc":2363,"attributed_loc":0},"2014-03":{"loc":5209,"attributed_loc":0},"2014-04":{"loc":82,"attributed_loc":0},"2014-05":{"loc":33,"attributed_loc":0},"2014-06":{"loc":38,"attributed_loc":0},"2014-07":{"loc":157,"attributed_loc":0},"2014-08":{"loc":53,"attributed_loc":0},"2014-09":{"loc":96,"attributed_loc":0},"2014-10":{"loc":444,"attributed_loc":0},"2014-11":{"loc":398,"attributed_loc":0},"2015-01":{"loc":48,"attributed_loc":0},"2015-02":{"loc":775,"attributed_loc":0},"2015-03":{"loc":39,"attributed_loc":0},"2015-07":{"loc":18,"attributed_loc":0},"2015-08":{"loc":95,"attributed_loc":0},"2015-09":{"loc":32,"attributed_loc":0},"2015-10":{"loc":90,"attributed_loc":0},"2015-11":{"loc":8,"attributed_loc":0},"2015-12":{"loc":33,"attributed_loc":0},"2016-01":{"loc":2,"attributed_loc":0},"2016-03":{"loc":2,"attributed_loc":0},"2016-05":{"loc":7,"attributed_loc":0},"2016-06":{"loc":0,"attributed_loc":0},"2017-12":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":310.0,"flagged_units":0.0,"pre_ai_era_bursts":7.0,"pre_ai_era_measured_loc":53433.0,"pre_ai_era_burst_loc":20402.0,"measured_loc":53433.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":1047.973917093619,"median_loc_per_hour":86.20871711738266,"pr_timed_units":0.0,"excluded_import_loc":33597.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["25b401bc91daa8b210770f9e35e03a42c8821735","2ab8be01157858a17dd54458d2ce53b10d3c24d7","2b55cb3497b340b6ba8450e8a10d0b26de615fd2","3162a9d05ba26bd9e99f55e2bf31e24543ac68f3","a09b47780b1c4c3e098893a1277052d9f8a2b9f5"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":57.0,"flagged_releases":0.0,"max_loc_per_day":15840.0},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.2.0","to":"v2.0.0","loc":5762,"days":4.28,"loc_per_day":1347.1,"flagged":false},{"from":"v2.0.0","to":"v2.1.0","loc":4499,"days":5.67,"loc_per_day":793.0,"flagged":false},{"from":"v2.1.0","to":"v2.2.0","loc":4776,"days":7.34,"loc_per_day":650.6,"flagged":false},{"from":"v2.2.0","to":"v2.3.0","loc":872,"days":30.64,"loc_per_day":28.5,"flagged":false},{"from":"v2.3.0","to":"v3.0.0","loc":3236,"days":20.8,"loc_per_day":155.5,"flagged":false},{"from":"v3.0.0","to":"v3.1.0","loc":7811,"days":18.51,"loc_per_day":421.9,"flagged":false},{"from":"v3.1.0","to":"v3.2.0","loc":6568,"days":70.45,"loc_per_day":93.2,"flagged":false},{"from":"v3.2.0","to":"v3.3.0","loc":287,"days":38.17,"loc_per_day":7.5,"flagged":false},{"from":"v3.3.0","to":"v3.3.1","loc":2,"days":4.06,"loc_per_day":0.5,"flagged":false},{"from":"v3.3.1","to":"v3.3.2","loc":4,"days":0.05,"loc_per_day":73.9,"flagged":false},{"from":"v3.3.2","to":"v4.0.0","loc":7,"days":1.3,"loc_per_day":5.4,"flagged":false},{"from":"v4.0.0","to":"v4.0.1","loc":1091,"days":4.62,"loc_per_day":236.1,"flagged":false},{"from":"v4.0.1","to":"v4.1.0","loc":131,"days":4.35,"loc_per_day":30.1,"flagged":false},{"from":"v4.1.0","to":"v4.2.0","loc":343,"days":16.98,"loc_per_day":20.2,"flagged":false},{"from":"v4.2.0","to":"v4.3.0","loc":10594,"days":18.55,"loc_per_day":571.0,"flagged":false},{"from":"v4.3.0","to":"v4.4.0","loc":777,"days":10.1,"loc_per_day":76.9,"flagged":false},{"from":"v4.4.0","to":"v4.4.1","loc":29,"days":1.08,"loc_per_day":26.8,"flagged":false},{"from":"v4.4.1","to":"v4.5.0","loc":272,"days":1.28,"loc_per_day":212.0,"flagged":false},{"from":"v4.5.0","to":"v4.6.0","loc":2545,"days":21.0,"loc_per_day":121.2,"flagged":false},{"from":"v4.6.0","to":"v4.6.1","loc":6,"days":2.74,"loc_per_day":2.2,"flagged":false},{"from":"v4.6.1","to":"v4.7.0","loc":356,"days":34.79,"loc_per_day":10.2,"flagged":false},{"from":"v4.7.0","to":"v4.7.1","loc":8,"days":4.33,"loc_per_day":1.8,"flagged":false},{"from":"v4.7.1","to":"v4.7.2","loc":4,"days":4.43,"loc_per_day":0.9,"flagged":false},{"from":"v4.7.2","to":"v4.8.0","loc":1091,"days":47.43,"loc_per_day":23.0,"flagged":false},{"from":"v4.8.0","to":"v4.9.0","loc":189,"days":41.88,"loc_per_day":4.5,"flagged":false},{"from":"v4.9.0","to":"v4.10.0","loc":369,"days":43.03,"loc_per_day":8.6,"flagged":false},{"from":"v4.10.0","to":"v4.11.0","loc":85,"days":28.07,"loc_per_day":3.0,"flagged":false},{"from":"v4.11.0","to":"v4.11.1","loc":44,"days":0.75,"loc_per_day":58.9,"flagged":false},{"from":"v4.11.1","to":"v4.11.2","loc":1,"days":0.14,"loc_per_day":7.3,"flagged":false},{"from":"v4.11.2","to":"v4.12.0","loc":2624,"days":165.16,"loc_per_day":15.9,"flagged":false},{"from":"v4.12.0","to":"v4.12.1","loc":9,"days":2.91,"loc_per_day":3.1,"flagged":false},{"from":"v4.12.1","to":"v4.13.0","loc":200,"days":57.78,"loc_per_day":3.5,"flagged":false},{"from":"v4.13.0","to":"v4.14.0","loc":332,"days":0.14,"loc_per_day":2352.8,"flagged":false},{"from":"v4.14.0","to":"v4.14.1","loc":5,"days":3.89,"loc_per_day":1.3,"flagged":false},{"from":"v4.14.1","to":"v4.14.2","loc":17,"days":2.19,"loc_per_day":7.8,"flagged":false},{"from":"v4.14.2","to":"v4.15.0","loc":376,"days":12.08,"loc_per_day":31.1,"flagged":false},{"from":"v4.15.0","to":"v4.16.0","loc":15,"days":66.88,"loc_per_day":0.2,"flagged":false},{"from":"v4.16.0","to":"v4.16.1","loc":25,"days":0.04,"loc_per_day":600.0,"flagged":false},{"from":"v4.16.1","to":"4.16.2","loc":0,"days":6.72,"loc_per_day":0.0,"flagged":false},{"from":"4.16.2","to":"v4.16.3","loc":8,"days":1.02,"loc_per_day":7.9,"flagged":false},{"from":"v4.16.3","to":"v4.16.4","loc":2,"days":17.5,"loc_per_day":0.1,"flagged":false},{"from":"v4.16.4","to":"v4.16.5","loc":11,"days":1.51,"loc_per_day":7.3,"flagged":false},{"from":"v4.16.5","to":"v5.0.0","loc":646,"days":8.34,"loc_per_day":77.5,"flagged":false},{"from":"v5.0.0","to":"v5.0.1","loc":14,"days":4.87,"loc_per_day":2.9,"flagged":false},{"from":"v5.0.1","to":"v4.16.6","loc":12,"days":167.86,"loc_per_day":0.1,"flagged":false},{"from":"v4.16.6","to":"v5.0.2","loc":660,"days":0.04,"loc_per_day":15840.0,"flagged":false},{"from":"v5.0.2","to":"v4.16.7","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v4.16.7","to":"v5.0.3","loc":660,"days":0.04,"loc_per_day":15840.0,"flagged":false},{"from":"v5.0.3","to":"v5.0.4","loc":9,"days":27.59,"loc_per_day":0.3,"flagged":false},{"from":"v5.0.4","to":"v5.0.5","loc":241,"days":12.21,"loc_per_day":19.7,"flagged":false},{"from":"v5.0.5","to":"v5.0.6","loc":115,"days":31.81,"loc_per_day":3.6,"flagged":false},{"from":"v5.0.6","to":"v5.0.7","loc":3,"days":7.06,"loc_per_day":0.4,"flagged":false},{"from":"v5.0.7","to":"v5.0.8","loc":7,"days":10.95,"loc_per_day":0.6,"flagged":false},{"from":"v5.0.8","to":"v5.0.9","loc":0,"days":34.55,"loc_per_day":0.0,"flagged":false},{"from":"v5.0.9","to":"v5.0.10","loc":20,"days":5.59,"loc_per_day":3.6,"flagged":false},{"from":"v5.0.10","to":"v5.0.11","loc":13,"days":0.24,"loc_per_day":53.3,"flagged":false},{"from":"v5.0.11","to":"v5.0.12","loc":11,"days":179.31,"loc_per_day":0.1,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":33086.0,"index":0.121,"count:narrated_steps":4.0,"per_kloc:narrated_steps":0.121,"files:narrated_steps":4.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // finally, fallback on the calculated width of the element","ref":"public/js/jquery/select2/select2.js:1720","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/jquery/select2/select2.js#L1720","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: //now we can instantiate the object","ref":"src/Frozennode/Administrator/Actions/Factory.php:95","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/src/Frozennode/Administrator/Actions/Factory.php#L95","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: //now we do some final organization to categorize these columns (useful later in the sorting)","ref":"src/Frozennode/Administrator/DataTable/Columns/Column.php:167","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/src/Frozennode/Administrator/DataTable/Columns/Column.php#L167","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: //now we need to limit and offset the rows in remembrance of our dear lost friend paginate()","ref":"src/Frozennode/Administrator/DataTable/DataTable.php:87","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/src/Frozennode/Administrator/DataTable/DataTable.php#L87","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":285.0,"findings_high":54.0,"findings_medium":227.0,"findings_low":4.0,"weighted_findings":97.85,"scanned_lines":33981.0,"parse_errors":2.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":72,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":72,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/ckeditor.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":72,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":72,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/ckeditor.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":72,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `a.$.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":72,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/ckeditor.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":73,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:73"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.$.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":73,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/ckeditor.js:73"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":391,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:391"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":656,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:656"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `g.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":656,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/ckeditor.js:656"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":877,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/ckeditor.js:877"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `d.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":877,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/ckeditor.js:877"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":179,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/uicolor/yui/yui.js:179"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.getElement(this.ID.R_HEX).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":179,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/uicolor/yui/yui.js:179"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":179,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/uicolor/yui/yui.js:179"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.getElement(this.ID.G_HEX).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":179,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/uicolor/yui/yui.js:179"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":179,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/uicolor/yui/yui.js:179"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.getElement(this.ID.B_HEX).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":179,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/uicolor/yui/yui.js:179"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":198,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/uicolor/yui/yui.js:198"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.getElement(this.ID.CONTROLS_LABEL).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":198,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/uicolor/yui/yui.js:198"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":56,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:56"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.getInputElement().$.children[0].innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":56,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:56"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":65,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:65"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `c.IgnoreAllCapsWords.getElement().$.lastChild.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":65,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:65"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":66,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `c.IgnoreWordsNumbers.getElement().$.lastChild.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":66,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":66,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `c.IgnoreMixedCaseWords.getElement().$.lastChild.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":66,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":66,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `c.IgnoreDomainNames.getElement().$.lastChild.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":66,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js","line":7,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js:7"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `b.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js","line":7,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js:7"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js","line":8,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js:8"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `d.getElementsByTagName(\"title\")[0].innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.flash.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.flash.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.flash.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.flash.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `l.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.flash.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.flash.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `o.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `m.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `G.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `y.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.html4.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.html4.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `i.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.html4.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.html4.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.html5.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.html5.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `G.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.html5.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.html5.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.silverlight.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:public/js/plupload/js/plupload.silverlight.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `o.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/plupload/js/plupload.silverlight.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:public/js/plupload/js/plupload.silverlight.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `b` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/accounting.js","line":4,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/accounting.js:4"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":305,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:305"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":348,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:348"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":584,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:584"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":844,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:844"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":844,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:844"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":869,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:869"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":905,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:905"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":929,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:929"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":1392,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:1392"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/admin.js","line":1399,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/admin.js:1399"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":180,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:180"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":183,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:public/js/ckeditor/ckeditor.js:183"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":203,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:203"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":242,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:public/js/ckeditor/ckeditor.js:242"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":293,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:293"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":351,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:351"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":484,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:484"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":505,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:505"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":530,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:530"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":530,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:530"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(\\s*[\\w-]+\\s*:\\s*[^:;]+(?:;|$))*$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a l [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":530,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/ckeditor/ckeditor.js:530"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(<div><br( ?\\/)?><\\/div>|<div>[^<]*<\\/div>)*$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if poss [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":558,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/ckeditor/ckeditor.js:558"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(<p>([^<]|<br( ?\\/)?>)*<\\/p>|(\\r\\n))*$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible us [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":558,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/ckeditor/ckeditor.js:558"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":577,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:577"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":577,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:577"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`(this.label||\"\").replace` method will only replace the first occurrence when used with a string argument (\"'\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":600,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/ckeditor/ckeditor.js:600"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`(this.title||\"\").replace` method will only replace the first occurrence when used with a string argument (\"'\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":687,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/ckeditor/ckeditor.js:687"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`(this.title||\"\").replace` method will only replace the first occurrence when used with a string argument (\"'\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":696,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/ckeditor/ckeditor.js:696"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`e.replace` method will only replace the first occurrence when used with a string argument (\"]\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":721,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/ckeditor/ckeditor.js:721"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`e.replace` method will only replace the first occurrence when used with a string argument (\"]\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":721,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/ckeditor/ckeditor.js:721"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":775,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:775"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/ckeditor.js","line":806,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/ckeditor.js:806"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/dialogadvtab/plugin.js","line":7,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/dialogadvtab/plugin.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":23,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/find/dialogs/find.js:23"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/image2/plugin.js","line":15,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/image2/plugin.js:15"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/image2/plugin.js","line":21,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/image2/plugin.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `b` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/indentblock/plugin.js","line":9,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/indentblock/plugin.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/justify/plugin.js","line":6,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/justify/plugin.js:6"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/lineutils/plugin.js","line":12,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/lineutils/plugin.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/lineutils/plugin.js","line":14,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/lineutils/plugin.js:14"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/mathjax/plugin.js","line":9,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/mathjax/plugin.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^([.\\d]*)+(em|ex|px|gd|rem|vw|vh|vm|ch|mm|cm|in|pt|pc|deg|rad|ms|s|hz|khz){1}?` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catast [confidence low]","path":"public/js/ckeditor/plugins/pastefromword/filter/default.js","line":12,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/ckeditor/plugins/pastefromword/filter/default.js:12"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(?:\\b0[^\\s]*\\s*){1,4}$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library whic [confidence low]","path":"public/js/ckeditor/plugins/pastefromword/filter/default.js","line":28,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/ckeditor/plugins/pastefromword/filter/default.js:28"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:public/js/ckeditor/plugins/uicolor/yui/yui.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":2,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/uicolor/yui/yui.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":10,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/uicolor/yui/yui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `b` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":10,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/uicolor/yui/yui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `d` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":10,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/uicolor/yui/yui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":32,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/uicolor/yui/yui.js:32"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":37,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/uicolor/yui/yui.js:37"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(\\d[.\\d]*)+(em|ex|px|gd|rem|vw|vh|vm|ch|mm|cm|in|pt|pc|deg|rad|ms|s|hz|khz|%){1}?` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to ca [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":37,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/ckeditor/plugins/uicolor/yui/yui.js:37"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":65,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:65"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"public/js/ckeditor/plugins/widget/plugin.js","line":11,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:public/js/ckeditor/plugins/widget/plugin.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/widget/plugin.js","line":12,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/widget/plugin.js:12"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/ckeditor/plugins/widget/plugin.js","line":35,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/ckeditor/plugins/widget/plugin.js:35"},{"rule_id":"opengrep/javascript.browser.security.wildcard-postmessage-configuration","severity":"medium","message":"The target origin of the window.postMessage() API is set to \"*\". This could allow for information disclosure due to the possibility of any origin allowed to receive the message. [confidence medium]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":7,"fingerprint":"javascript.browser.security.wildcard-postmessage-configuration:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `a` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":7,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":17,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:17"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":17,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:17"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":26,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:26"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/ckeditor/samples/plugins/htmlwriter/assets/outputforflash/swfobject.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.browser.security.eval-detected","severity":"medium","message":"Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources. [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.browser.security.eval-detected:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`b.replace` method will only replace the first occurrence when used with a string argument (\"<\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`b.replace(\"<\",\"&lt;\").replace` method will only replace the first occurrence when used with a string argument (\">\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/customscroll/jquery.customscroll.js","line":40,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/jquery/customscroll/jquery.customscroll.js:40"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/customscroll/jquery.customscroll.js","line":40,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/customscroll/jquery.customscroll.js:40"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/customscroll/jquery.customscroll.js","line":43,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/customscroll/jquery.customscroll.js:43"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/customscroll/jquery.customscroll.js","line":73,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/customscroll/jquery.customscroll.js:73"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/customscroll/jquery.customscroll.js","line":95,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/customscroll/jquery.customscroll.js:95"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/customscroll/jquery.customscroll.js","line":160,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/customscroll/jquery.customscroll.js:160"},{"rule_id":"opengrep/javascript.browser.security.eval-detected","severity":"medium","message":"Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":166,"fingerprint":"javascript.browser.security.eval-detected:public/js/jquery/jquery-ui-timepicker-addon.js:166"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":263,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:263"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.prepend(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":412,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/jquery/jquery-ui-timepicker-addon.js:412"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":435,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/jquery-ui-timepicker-addon.js:435"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`$g.css(rtl ? 'marginRight' : 'marginLeft').toString().replace` method will only replace the first occurrence when used with a string argument ('%'). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":522,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:public/js/jquery/jquery-ui-timepicker-addon.js:522"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.appendTo(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1004,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/jquery/jquery-ui-timepicker-addon.js:1004"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1004,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:1004"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `f` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1169,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/jquery/jquery-ui-timepicker-addon.js:1169"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `o` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1169,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/jquery/jquery-ui-timepicker-addon.js:1169"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1342,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:1342"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1478,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:1478"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1498,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:1498"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1513,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:1513"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":1641,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:1641"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2038,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/jquery-ui-timepicker-addon.js:2038"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2039,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/jquery-ui-timepicker-addon.js:2039"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2040,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/jquery-ui-timepicker-addon.js:2040"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2050,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/jquery-ui-timepicker-addon.js:2050"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2053,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/jquery-ui-timepicker-addon.js:2053"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2056,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/jquery-ui-timepicker-addon.js:2056"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2099,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:2099"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery-ui-timepicker-addon.js","line":2099,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery-ui-timepicker-addon.js:2099"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.appendTo(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery.ui.slider.js","line":85,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/jquery/jquery.ui.slider.js:85"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/jquery.ui.slider.js","line":280,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/jquery.ui.slider.js:280"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":191,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:191"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":269,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:269"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.append(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":311,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/jquery/select2/select2.js:311"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":323,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:323"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":332,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:332"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":505,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:505"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":516,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:516"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":526,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:526"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":526,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:526"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":526,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:526"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":726,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:726"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/select2/select2.js","line":861,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/select2/select2.js:861"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":952,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:952"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":952,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:952"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":955,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:955"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":1394,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:1394"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":1417,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:1417"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":1435,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:1435"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/select2/select2.js","line":1526,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/select2/select2.js:1526"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":1593,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:1593"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/select2/select2.js","line":1744,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/select2/select2.js:1744"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/select2/select2.js","line":2095,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/select2/select2.js:2095"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/jquery/select2/select2.js","line":2276,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/jquery/select2/select2.js:2276"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":2509,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:2509"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":2627,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:2627"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":2636,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:2636"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":2732,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:2732"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":2733,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:2733"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/jquery/select2/select2.js","line":2879,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/jquery/select2/select2.js:2879"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_cs.js","line":22,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_cs.js:22"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_cs.js","line":32,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_cs.js:32"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_cs.js","line":41,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_cs.js:41"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_hr.js","line":23,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_hr.js:23"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_hr.js","line":33,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_hr.js:33"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_sk.js","line":21,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_sk.js:21"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_sk.js","line":31,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_sk.js:31"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/jquery/select2/select2_locale_sk.js","line":40,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/jquery/select2/select2_locale_sk.js:40"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":9,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:9"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":31,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:31"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":96,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:96"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":100,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:100"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":105,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:105"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":105,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:105"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":108,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:108"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":108,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:108"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":110,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:110"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":115,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:115"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":117,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:117"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":118,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:118"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":126,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:126"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":127,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:127"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":130,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:130"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":130,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:130"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":137,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:137"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":154,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:154"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":159,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:159"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":166,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:166"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":194,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/knockout/custom-bindings.js:194"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":206,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/knockout/custom-bindings.js:206"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":215,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:215"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":241,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:241"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":252,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:252"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":275,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:275"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":275,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:275"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":277,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:277"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":282,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:282"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":284,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:284"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":285,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:285"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":292,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:292"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":356,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:356"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":371,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:371"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":390,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:390"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":392,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:392"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":411,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:411"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":435,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:435"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":438,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:438"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":463,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:463"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":484,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:484"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":514,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:514"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":525,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/knockout/custom-bindings.js:525"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":528,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/knockout/custom-bindings.js:528"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":530,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/knockout/custom-bindings.js:530"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":544,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:544"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":549,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:549"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":549,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:549"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":582,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:582"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":606,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:606"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":614,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:614"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":614,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:614"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":622,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:622"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":622,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:622"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":645,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:645"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":645,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:645"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":645,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:645"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":649,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:649"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":649,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:649"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":649,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:649"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":666,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:666"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":666,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:666"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":666,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:666"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":671,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:public/js/knockout/custom-bindings.js:671"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":671,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/knockout/custom-bindings.js:671"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":671,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:671"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"public/js/knockout/custom-bindings.js","line":706,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:public/js/knockout/custom-bindings.js:706"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/knockout/custom-bindings.js","line":733,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/knockout/custom-bindings.js:733"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(?:([\\s\\S]*?)\\n)?[ \\t]*([-_*])(?:[ \\t]*\\2){2,}[ \\t]*(?:\\n([\\s\\S]*))?$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic b [confidence low]","path":"public/js/markdown.js","line":377,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/markdown.js:377"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `depth` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"public/js/markdown.js","line":428,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/markdown.js:428"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `depth` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"public/js/markdown.js","line":470,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/markdown.js:470"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `depth` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"public/js/markdown.js","line":471,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/markdown.js:471"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `patterns_or_re` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user- [confidence low]","path":"public/js/markdown.js","line":750,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/markdown.js:750"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(?:\\w+:.*\\n)*\\w+:.*$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library which  [confidence low]","path":"public/js/markdown.js","line":1186,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/markdown.js:1186"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^((?:[^\\s:].*\\n)+):\\s+([\\s\\S]+)$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a lib [confidence low]","path":"public/js/markdown.js","line":1265,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/markdown.js:1265"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^((?:[^\\s:].*\\n)+):\\s+([\\s\\S]+)$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a lib [confidence low]","path":"public/js/markdown.js","line":1273,"fingerprint":"javascript.lang.security.audit.detect-redos:public/js/markdown.js:1273"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js","line":1,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:public/js/plupload/js/jquery.ui.plupload/jquery.ui.plupload.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `p` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `p` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"public/js/plupload/js/plupload.full.js","line":2,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:public/js/plupload/js/plupload.full.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `o` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/plupload/js/plupload.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/plupload/js/plupload.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `o` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"public/js/plupload/js/plupload.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:public/js/plupload/js/plupload.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"public/js/plupload/js/plupload.js","line":2,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:public/js/plupload/js/plupload.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"public/js/settings.js","line":200,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:public/js/settings.js:200"},{"rule_id":"opengrep/javascript.browser.security.js-open-redirect-from-function","severity":"low","message":"The application accepts potentially user-controlled input `response` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input be [confidence low]","path":"public/js/admin.js","line":624,"fingerprint":"javascript.browser.security.js-open-redirect-from-function:public/js/admin.js:624"},{"rule_id":"opengrep/javascript.audit.detect-replaceall-sanitization","severity":"low","message":"Detected a call to `replace()` in an attempt to HTML escape the string `b`. Manually sanitizing input through a manually built list can be circumvented in many situations, and it's better to use a well known sanitization library such as `sanitize-html` or `DOMPurify`. [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.audit.detect-replaceall-sanitization:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.audit.detect-replaceall-sanitization","severity":"low","message":"Detected a call to `replace()` in an attempt to HTML escape the string `b.replace(\"<\",\"&lt;\")`. Manually sanitizing input through a manually built list can be circumvented in many situations, and it's better to use a well known sanitization library such as `sanitize-html` or `DOMPurify`. [confidence low]","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.audit.detect-replaceall-sanitization:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.browser.security.js-open-redirect-from-function","severity":"low","message":"The application accepts potentially user-controlled input `response` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input be [confidence low]","path":"public/js/settings.js","line":155,"fingerprint":"javascript.browser.security.js-open-redirect-from-function:public/js/settings.js:155"}],"evidence":[],"data":{"rulesets":["javascript","php","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.005,"unpinned_manifests":2.0},"findings":[],"evidence":[{"kind":"posture","description":"composer.json has no lockfile alongside it (unpinned dependencies)","ref":"composer.json","url":null,"weight":0.3},{"kind":"posture","description":"public/js/ckeditor/composer.json has no lockfile alongside it (unpinned dependencies)","ref":"public/js/ckeditor/composer.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":6363.0,"function_nloc":21456.0,"mean_ccn":3.37,"p90_ccn":7.0,"complex_functions":154.0,"long_functions":7.0,"many_param_functions":2.0,"risky_nloc_share":0.1006},"findings":[],"evidence":[{"kind":"complex-function","description":"enlarge in public/js/ckeditor/ckeditor.js: complexity 107, 8 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L127","weight":1.0},{"kind":"complex-function","description":"(anonymous) in public/js/ckeditor/ckeditor.js: complexity 103, 11 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L323","weight":1.0},{"kind":"complex-function","description":"getNextParagraph in public/js/ckeditor/ckeditor.js: complexity 88, 9 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L157","weight":1.0},{"kind":"complex-function","description":"enterBlock in public/js/ckeditor/ckeditor.js: complexity 77, 5 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L648","weight":1.0},{"kind":"complex-function","description":"e in public/js/ckeditor/ckeditor.js: complexity 71, 6 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L380","weight":1.0},{"kind":"complex-function","description":"arrayToList in public/js/ckeditor/ckeditor.js: complexity 67, 6 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L629","weight":1.0},{"kind":"complex-function","description":"selectRanges in public/js/ckeditor/ckeditor.js: complexity 66, 7 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L370","weight":1.0},{"kind":"complex-function","description":"exec in public/js/ckeditor/ckeditor.js: complexity 63, 7 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L635","weight":1.0},{"kind":"complex-function","description":"exec in public/js/ckeditor/ckeditor.js: complexity 55, 7 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L538","weight":0.9166666666666666},{"kind":"complex-function","description":"CKEDITOR.env in public/js/ckeditor/ckeditor.js: complexity 52, 5 lines","ref":"public/js/ckeditor/ckeditor.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/ckeditor.js#L13","weight":0.8666666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":23819.0,"duplicated_lines":1660.0,"duplicated_share":0.0697,"files":2306.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: examples/app/config/administrator/actors.php:58 and examples/app/config/administrator/directors.php:52","ref":"examples/app/config/administrator/actors.php","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/examples/app/config/administrator/actors.php#L58","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/app/config/administrator/boxoffice.php:41 and examples/app/config/administrator/boxoffice.php:63","ref":"examples/app/config/administrator/boxoffice.php","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/examples/app/config/administrator/boxoffice.php#L41","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/app/config/administrator/films.php:34 and examples/app/config/administrator/theaters.php:28","ref":"examples/app/config/administrator/films.php","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/examples/app/config/administrator/films.php#L34","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/app/config/administrator/films.php:46 and examples/app/config/administrator/films.php:70","ref":"examples/app/config/administrator/films.php","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/examples/app/config/administrator/films.php#L46","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/app/config/packages/frozennode/administrator/administrator.php:66 and src/config/administrator.php:82","ref":"examples/app/config/packages/frozennode/administrator/administrator.php","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/examples/app/config/packages/frozennode/administrator/administrator.php#L66","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/app/database/migrations/2012_11_20_222938_create_box_office.php:18 and examples/app/database/migrations/2012_11_21_000526_create_films_theaters.php:17","ref":"examples/app/database/migrations/2012_11_20_222938_create_box_office.php","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/examples/app/database/migrations/2012_11_20_222938_create_box_office.php#L18","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: public/js/admin.js:1 and public/js/settings.js:1","ref":"public/js/admin.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/admin.js#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: public/js/ckeditor/plugins/a11yhelp/dialogs/lang/ar.js:6 and public/js/ckeditor/plugins/a11yhelp/dialogs/lang/bg.js:6","ref":"public/js/ckeditor/plugins/a11yhelp/dialogs/lang/ar.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/plugins/a11yhelp/dialogs/lang/ar.js#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: public/js/ckeditor/plugins/specialchar/dialogs/lang/ar.js:7 and public/js/ckeditor/plugins/specialchar/dialogs/lang/bg.js:7","ref":"public/js/ckeditor/plugins/specialchar/dialogs/lang/ar.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/plugins/specialchar/dialogs/lang/ar.js#L7","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: public/js/ckeditor/plugins/specialchar/dialogs/lang/bg.js:6 and public/js/ckeditor/plugins/specialchar/dialogs/lang/en-gb.js:6","ref":"public/js/ckeditor/plugins/specialchar/dialogs/lang/bg.js","url":"https://github.com/FrozenNode/Laravel-Administrator/blob/34d604c2029ce2b11f93599baf4ec909501fd356/public/js/ckeditor/plugins/specialchar/dialogs/lang/bg.js#L6","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":105.0,"weighted_findings":49.5,"scanned_lines":33981.0,"category:best-practice":31.0,"category:correctness":74.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/admin.js","line":339,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/admin.js:339"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/admin.js","line":431,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/admin.js:431"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/admin.js","line":577,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/admin.js:577"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/ckeditor.js","line":466,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/ckeditor.js:466"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/ckeditor/ckeditor.js","line":488,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/ckeditor/ckeditor.js:488"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/ckeditor.js","line":547,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/ckeditor.js:547"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/ckeditor.js","line":666,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/ckeditor.js:666"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/ckeditor/ckeditor.js","line":771,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/ckeditor/ckeditor.js:771"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":18,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/find/dialogs/find.js:18"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":20,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/find/dialogs/find.js:20"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":21,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/find/dialogs/find.js:21"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":21,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/find/dialogs/find.js:21"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":14,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/ckeditor/plugins/image/dialogs/image.js:14"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":14,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/ckeditor/plugins/image/dialogs/image.js:14"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":22,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/image/dialogs/image.js:22"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":23,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/image/dialogs/image.js:23"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/image2/dialogs/image2.js","line":5,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/image2/dialogs/image2.js:5"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/link/dialogs/anchor.js","line":8,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/link/dialogs/anchor.js:8"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/link/dialogs/link.js","line":15,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/link/dialogs/link.js:15"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/pastefromword/filter/default.js","line":31,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/pastefromword/filter/default.js:31"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/scayt/dialogs/options.js","line":12,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/scayt/dialogs/options.js:12"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/table/dialogs/table.js","line":5,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/table/dialogs/table.js:5"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":40,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:40"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":42,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:42"},{"rule_id":"opengrep/bash.lang.best-practice.useless-cat","severity":"medium","message":"Useless call to 'cat' in a pipeline. Use '<' and '>' for any command to read from a file or write to a file.","path":"public/js/jquery/select2/release.sh","line":48,"fingerprint":"bash.lang.best-practice.useless-cat:public/js/jquery/select2/release.sh:48"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/knockout/custom-bindings.js","line":722,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/knockout/custom-bindings.js:722"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/knockout/custom-bindings.js","line":736,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/knockout/custom-bindings.js:736"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"public/js/markdown.js","line":128,"fingerprint":"javascript.lang.best-practice.lazy-load-module:public/js/markdown.js:128"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js","line":1,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js:1"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js","line":1,"fingerprint":"javascript.lang.best-practice.javascript-alert:public/js/plupload/js/jquery.plupload.queue/jquery.plupload.queue.js:1"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"public/js/settings.js","line":128,"fingerprint":"javascript.lang.best-practice.javascript-confirm:public/js/settings.js:128"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":15,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:15"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":15,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:15"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":57,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:57"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":74,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:74"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":75,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:75"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":76,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:76"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`g` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":151,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:151"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`g` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":151,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:151"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":199,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:199"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":271,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:271"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`D` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":326,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:326"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`k` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":381,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:381"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`g` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":391,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:391"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":397,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:397"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":407,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:407"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`g` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":422,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:422"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`h` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":458,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:458"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":520,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:520"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":561,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:561"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":711,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:711"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":724,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:724"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":779,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:779"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":779,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:779"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`u` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":800,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:800"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`u` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":800,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:800"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":852,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:852"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":853,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:853"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/ckeditor.js","line":876,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/ckeditor.js:876"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/bidi/plugin.js","line":7,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/bidi/plugin.js:7"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/bidi/plugin.js","line":7,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/bidi/plugin.js:7"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/find/dialogs/find.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/find/dialogs/find.js","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/find/dialogs/find.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/forms/dialogs/checkbox.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/forms/dialogs/checkbox.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/forms/dialogs/hiddenfield.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/forms/dialogs/hiddenfield.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":27,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/image/dialogs/image.js:27"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":29,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/image/dialogs/image.js:29"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":31,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/image/dialogs/image.js:31"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":35,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/image/dialogs/image.js:35"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/image/dialogs/image.js","line":42,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/image/dialogs/image.js:42"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/indentblock/plugin.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/indentblock/plugin.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/justify/plugin.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/justify/plugin.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/preview/plugin.js","line":6,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/preview/plugin.js:6"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`window._cke_htmlToLoad` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/preview/plugin.js","line":6,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/preview/plugin.js:6"},{"rule_id":"opengrep/javascript.lang.correctness.eqeq-is-bad","severity":"low","message":"Detected a useless comparison operation `\"relative\" == \"relative\"` or `\"relative\" != \"relative\"`. This operation is always true. If testing for floating point NaN, use `math.isnan`, or `cmath.isnan` if the number is complex.","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":19,"fingerprint":"javascript.lang.correctness.eqeq-is-bad:public/js/ckeditor/plugins/uicolor/yui/yui.js:19"},{"rule_id":"opengrep/javascript.lang.correctness.eqeq-is-bad","severity":"low","message":"Detected a useless comparison operation `\"relative\" == \"relative\"` or `\"relative\" != \"relative\"`. This operation is always true. If testing for floating point NaN, use `math.isnan`, or `cmath.isnan` if the number is complex.","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":19,"fingerprint":"javascript.lang.correctness.eqeq-is-bad:public/js/ckeditor/plugins/uicolor/yui/yui.js:19"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":20,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:20"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":24,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`f` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":32,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:32"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c.Dom.getComputedStyle` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":33,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:33"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":33,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:33"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":41,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:41"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`i` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":45,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:45"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":49,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:49"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":50,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:50"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":57,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:57"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":58,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:58"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":59,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:59"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":72,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:72"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`o` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":83,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:83"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`a` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":99,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:99"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`g` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":99,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:99"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":130,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:130"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":131,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:131"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":151,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:151"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":175,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:175"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`e` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/uicolor/yui/yui.js","line":224,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/uicolor/yui/yui.js:224"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/widget/plugin.js","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/widget/plugin.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/widget/plugin.js","line":22,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/widget/plugin.js:22"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/widget/plugin.js","line":34,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/widget/plugin.js:34"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`h` is assigned twice; the first assignment is useless","path":"public/js/ckeditor/plugins/wsc/dialogs/wsc.js","line":6,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/ckeditor/plugins/wsc/dialogs/wsc.js:6"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/history/native.history.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/history/native.history.js:1"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"public/js/knockout/knockout.mapping.js","line":10,"fingerprint":"javascript.lang.correctness.useless-assignment:public/js/knockout/knockout.mapping.js:10"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.2508,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.5291,"test_lines":4262.0,"source_lines":33981.0,"test_ratio":0.1254,"ci_files":1.0,"cochange_share":0.1323,"cochange_commits":189.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (phpunit)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["phpunit"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":1.0,"readme_lines":85.0},"findings":[],"evidence":[{"kind":"docs","description":"readme.md","ref":"readme.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0},{"kind":"docs","description":"changelog.md","ref":"changelog.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}