[Demo]#5747
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| except Exception as e: | ||
| logging.exception("Error verifying claim") | ||
| return jsonify({"error": str(e)}), 500 |
Check warning
Code scanning / CodeQL
Information exposure through an exception Medium
| return jsonify({"claims": claims}) | ||
| except Exception as e: | ||
| logging.exception("Error extracting claims") | ||
| return jsonify({"error": str(e)}), 500 |
Check warning
Code scanning / CodeQL
Information exposure through an exception Medium
| tab.url.startsWith('about:') || | ||
| tab.url.startsWith('view-source:') || | ||
| tab.url.startsWith('https://chrome.google.com/webstore') || | ||
| tab.url.startsWith('https://chromewebstore.google.com')) { |
Check failure
Code scanning / CodeQL
Incomplete URL substring sanitization High
| } else if (event.data.type === 'VERIFY_ERROR') { | ||
| loading.style.display = 'none'; | ||
| verifyBtn.disabled = false; | ||
| resultsDiv.innerHTML = `<div class="error-message" style="color: #d93025; padding: 10px; background: #fce8e6; border-radius: 4px;">${event.data.error}</div>`; |
Check failure
Code scanning / CodeQL
Client-side cross-site scripting High
| iframe.contentWindow.postMessage({ | ||
| type: 'SET_API_KEY', | ||
| key: geminiApiKey | ||
| }, '*'); |
Check warning
Code scanning / CodeQL
Cross-window communication with unrestricted target origin Medium
| iframe.contentWindow.postMessage({ | ||
| type: 'SET_API_KEY', | ||
| key: geminiApiKey | ||
| }, '*'); |
Check warning
Code scanning / CodeQL
Cross-window communication with unrestricted target origin Medium
…ct class. Cleanup overall
2 participants
No description provided.