Skip to content

Commit 239029b

Browse files
committed
fix: expand scope
1 parent b39505e commit 239029b

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

rules/security/rce.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,9 @@ rules:
1414

1515
- id: frappe-ssti
1616
patterns:
17-
- pattern: render_template($ARG, ...)
17+
- pattern-either:
18+
- pattern: render_template($ARG, ...)
19+
- pattern: frappe.render_template($ARG, ...)
1820
message: |
1921
Detected the use of render_template, make sure $ARG comes from trusted
2022
source. This code should be audited by security team.

0 commit comments

Comments
 (0)