Sobelow.XSS.Raw (Sobelow v0.14.0)

View Source

XSS in raw

This submodule checks for the use of raw in templates as this can lead to XSS vulnerabilities if taking user input.

Raw checks can be ignored with the following command:

$ mix sobelow -i XSS.Raw

Summary

Functions

details()

id()

parse_raw_def(fun)

parse_render_def(fun)

rule()

run(fun, meta_file, arg3, controller)