Closed david-livefront closed 1 week ago
Checkmarx One â Scan Summary & Details â 1efbc03f-409a-4ab4-a5b8-1d9e42c2443b
Severity | Issue | Source File / Package | Checkmarx Insight |
---|---|---|---|
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/data/tools/generator/repository/utils/GeneratorRepositoryExtensions.kt: 11 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/data/autofill/manager/AutofillTotpManagerImpl.kt: 29 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModel.kt: 94 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 240 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 251 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 262 | Attack Vector | |
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 26 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 26 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Use_of_Hardcoded_Password | /app/src/main/java/com/x8bit/bitwarden/data/autofill/util/HtmlInfoExtensions.kt: 20 | Attack Vector |
Attention: Patch coverage is 98.04688%
with 5 lines
in your changes missing coverage. Please review.
Please upload report for BASE (
release/hotfix-v2024.11.4@ef01f27
). Learn more about missing BASE report.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Thanks @dseverns-livefront
đī¸ Tracking
PM-14805
đ Objective
This is a hotfix PR, the main PR has already been merged into main.
This PR adds a new class called
NetworkResult
to the app and uses it in place ofResult
for all network requests.This is done to avoid a
ClassCastException
that can occur where theResult
in unnecessarily boxed creating aResult<Result<T>>
. This should not happen with the newNetworkResult
.We will continue to use the regular
Result
everywhere else in the app.â° Reminders before review
đĻŽ Reviewer guidelines
:+1:
) or similar for great changes:memo:
) or âšī¸ (:information_source:
) for notes or general info:question:
) for questions:thinking:
) or đ (:thought_balloon:
) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion:art:
) for suggestions / improvements:x:
) or â ī¸ (:warning:
) for more significant problems or concerns needing attention:seedling:
) or âģī¸ (:recycle:
) for future improvements or indications of technical debt:pick:
) for minor or nitpick changes