Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not merge: test PR #18

Conversation

fantonangeli
Copy link
Owner

This PR is to run the CI checks only

…e-tools' into KOGITO-9965-Migrate-runtime-tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools
…es-on-Serverless-Logic-Web-Tools-Iteration-2' into KOGITO-9965-Migrate-runtime-tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools
…tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools

KOGITO-9965: Migrate runtime-tools-dev-ui-webapp package from kogito-apps to kie-tools
app.post("/management/processes/:processId/instances/:processInstanceId/nodes/:nodeId", controller.callNodeTrigger);
app.get("/management/processes/:processId/nodes", controller.getTriggerableNodes);
app.delete("/jobs/:jobId", controller.callJobCancel);
app.get("/svg/processes/:processId/instances/:id", controller.dispatchSVG);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.
This route handler performs
a file system access
, but is not rate-limited.
This route handler performs
a file system access
, but is not rate-limited.

app.get("/forms/list", controller.getForms);
app.get("/customDashboard/list", controller.getCustomDashboards);
app.get("/customDashboard/:name", controller.getCustomDashboardContent);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.
This route handler performs
a file system access
, but is not rate-limited.
app.get("/forms/list", controller.getForms);
app.get("/customDashboard/list", controller.getCustomDashboards);
app.get("/customDashboard/:name", controller.getCustomDashboardContent);
app.get("/forms/:formName", controller.getFormContent);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.
This route handler performs
a file system access
, but is not rate-limited.
This route handler performs
a file system access
, but is not rate-limited.
}
if (req.body.kogitobusinesskey) {
console.log(`Starting Serverless workflow with business key: ${req.body.kogitobusinesskey}`);
return res.status(200).send(req.body.kogitobusinesskey);

Check failure

Code scanning / CodeQL

Reflected cross-site scripting High

Cross-site scripting vulnerability due to a
user-provided value
.
return res.status(200).send(req.body.kogitobusinesskey);
} else if (req.body.kogitoprocrefid) {
console.log(`Serverless Workflow with id ${req.body.kogitoprocrefid} successfully completed`);
return res.status(200).send(req.body.kogitoprocrefid);

Check failure

Code scanning / CodeQL

Reflected cross-site scripting High

Cross-site scripting vulnerability due to a
user-provided value
.
}
let sourceString;

const configString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.config`), "utf8");

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.

const configString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.config`), "utf8");
if (formInfo[0].type.toLowerCase() === "html") {
sourceString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.html`), "utf8");

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.
if (formInfo[0].type.toLowerCase() === "html") {
sourceString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.html`), "utf8");
} else if (formInfo[0].type.toLowerCase() === "tsx") {
sourceString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.tsx`), "utf8");

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.
res.send(null);
}
} catch (error) {
res.status(404).send(error);

Check warning

Code scanning / CodeQL

Information exposure through a stack trace Medium

This information exposed to the user depends on
stack trace information
.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant