Closed dseverns-livefront closed 2 weeks ago
Checkmarx One โ Scan Summary & Details โ d048f3c4-0ea4-4ba2-befd-c2dc2fa8b429
Severity | Issue | Source File / Package | Checkmarx Insight |
---|---|---|---|
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/data/tools/generator/repository/utils/GeneratorRepositoryExtensions.kt: 11 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/data/autofill/manager/AutofillTotpManagerImpl.kt: 29 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModel.kt: 94 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 240 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 251 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 262 | Attack Vector | |
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 26 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 26 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Use_of_Hardcoded_Password | /app/src/main/java/com/x8bit/bitwarden/data/autofill/util/HtmlInfoExtensions.kt: 20 | Attack Vector |
All modified and coverable lines are covered by tests :white_check_mark:
Please upload report for BASE (
release/hotfix-v2024.11.4@966a521
). Learn more about missing BASE report.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
(cherry picked from commit fd4a7c5716f188d049fa5dbd9c9df19896b44e31)
๐๏ธ Tracking
Cherry picking commit for hotfix from #4256
โฐ Reminders before review
๐ฆฎ Reviewer guidelines
:+1:
) or similar for great changes:memo:
) or โน๏ธ (:information_source:
) for notes or general info:question:
) for questions:thinking:
) or ๐ญ (:thought_balloon:
) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion:art:
) for suggestions / improvements:x:
) or โ ๏ธ (:warning:
) for more significant problems or concerns needing attention:seedling:
) or โป๏ธ (:recycle:
) for future improvements or indications of technical debt:pick:
) for minor or nitpick changes