We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b39505e commit 239029bCopy full SHA for 239029b
1 file changed
rules/security/rce.yml
@@ -14,7 +14,9 @@ rules:
14
15
- id: frappe-ssti
16
patterns:
17
- - pattern: render_template($ARG, ...)
+ - pattern-either:
18
+ - pattern: render_template($ARG, ...)
19
+ - pattern: frappe.render_template($ARG, ...)
20
message: |
21
Detected the use of render_template, make sure $ARG comes from trusted
22
source. This code should be audited by security team.
0 commit comments