-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Do not merge: test PR #18
Do not merge: test PR #18
Conversation
…-custom-forms-from-kogito-apps-to-kie-tools
…e-tools' into KOGITO-9918-migrations
…to-kie-tools' into KOGITO-9918-migrations
…e-tools' into KOGITO-9965-Migrate-runtime-tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools
…es-on-Serverless-Logic-Web-Tools-Iteration-2' into KOGITO-9965-Migrate-runtime-tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools
…-tools-features-on-Serverless-Logic-Web-Tools-Iteration-2
…Web-Tools-Iteration-2' into KOGITO-9965-Migrate-runtime-tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools
…ools-features-on-Serverless-Logic-Web-Tools-Iteration-2
…Web-Tools-Iteration-2' into KOGITO-9965-Migrate-runtime-tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools
…tools-dev-ui-webapp-package-from-kogito-apps-to-kie-tools KOGITO-9965: Migrate runtime-tools-dev-ui-webapp package from kogito-apps to kie-tools
app.post("/management/processes/:processId/instances/:processInstanceId/nodes/:nodeId", controller.callNodeTrigger); | ||
app.get("/management/processes/:processId/nodes", controller.getTriggerableNodes); | ||
app.delete("/jobs/:jobId", controller.callJobCancel); | ||
app.get("/svg/processes/:processId/instances/:id", controller.dispatchSVG); |
Check failure
Code scanning / CodeQL
Missing rate limiting High
a file system access
This route handler performs
a file system access
This route handler performs
a file system access
|
||
app.get("/forms/list", controller.getForms); | ||
app.get("/customDashboard/list", controller.getCustomDashboards); | ||
app.get("/customDashboard/:name", controller.getCustomDashboardContent); |
Check failure
Code scanning / CodeQL
Missing rate limiting High
a file system access
This route handler performs
a file system access
app.get("/forms/list", controller.getForms); | ||
app.get("/customDashboard/list", controller.getCustomDashboards); | ||
app.get("/customDashboard/:name", controller.getCustomDashboardContent); | ||
app.get("/forms/:formName", controller.getFormContent); |
Check failure
Code scanning / CodeQL
Missing rate limiting High
a file system access
This route handler performs
a file system access
This route handler performs
a file system access
} | ||
if (req.body.kogitobusinesskey) { | ||
console.log(`Starting Serverless workflow with business key: ${req.body.kogitobusinesskey}`); | ||
return res.status(200).send(req.body.kogitobusinesskey); |
Check failure
Code scanning / CodeQL
Reflected cross-site scripting High
user-provided value
return res.status(200).send(req.body.kogitobusinesskey); | ||
} else if (req.body.kogitoprocrefid) { | ||
console.log(`Serverless Workflow with id ${req.body.kogitoprocrefid} successfully completed`); | ||
return res.status(200).send(req.body.kogitoprocrefid); |
Check failure
Code scanning / CodeQL
Reflected cross-site scripting High
user-provided value
} | ||
let sourceString; | ||
|
||
const configString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.config`), "utf8"); |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
user-provided value
|
||
const configString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.config`), "utf8"); | ||
if (formInfo[0].type.toLowerCase() === "html") { | ||
sourceString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.html`), "utf8"); |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
user-provided value
if (formInfo[0].type.toLowerCase() === "html") { | ||
sourceString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.html`), "utf8"); | ||
} else if (formInfo[0].type.toLowerCase() === "tsx") { | ||
sourceString = fs.readFileSync(path.join(`${__dirname}/forms/examples/${formName}.tsx`), "utf8"); |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
user-provided value
res.send(null); | ||
} | ||
} catch (error) { | ||
res.status(404).send(error); |
Check warning
Code scanning / CodeQL
Information exposure through a stack trace Medium
This PR is to run the CI checks only