Sobelow v0.3.3 API Reference

Modules

Mix.Tasks.Sobelow

Sobelow is a static analysis tool for discovering vulnerabilities in Phoenix applications

Sobelow is a static analysis tool for discovering vulnerabilities in Phoenix applications

Command Injection

Sobelow.CI.System

Sobelow.Config.CSRF

Cross-Site Request Forgery

Sobelow.Config.HTTPS

HTTPS

Sobelow.Config.Secrets

Hard-coded Secrets

Sobelow.Finding

Sobelow.FindingLog

Sobelow.Misc.BinToTerm

Insecure use of `binary_to_term`

Sobelow.Misc.StringToAtom

Insecure use of `String.to_atom`

SQL Injection

Sobelow.SQL.Query

Sobelow.SQL.Stream

Sobelow.Traversal

Path Traversal

Sobelow.Traversal.FileModule

Sobelow.Traversal.SendFile

Cross-Site Scripting

Sobelow.XSS.Raw

Sobelow.XSS.SendResp