Closed rr-bw closed 31 minutes ago
Checkmarx One â Scan Summary & Details â 0d59feac-0f93-451d-aca4-57e2719e0b46
Severity | Issue | Source File / Package |
---|---|---|
Client_DOM_XSS | /apps/web/src/connectors/redirect.ts: 15 | |
Client_DOM_XSS | /apps/web/src/connectors/redirect.ts: 6 | |
Absolute_Path_Traversal | /apps/cli/src/oss-serve-configurator.ts: 287 | |
Absolute_Path_Traversal | /apps/cli/src/oss-serve-configurator.ts: 319 | |
Absolute_Path_Traversal | /apps/cli/src/oss-serve-configurator.ts: 287 | |
Absolute_Path_Traversal | /apps/cli/src/oss-serve-configurator.ts: 319 | |
Angular_Improper_Type_Pipe_Usage | /apps/browser/src/autofill/popup/fido2/fido2-use-browser-link-v1.component.html: 1 | |
Angular_Improper_Type_Pipe_Usage | /apps/web/src/app/layouts/product-switcher/product-switcher.component.html: 1 | |
Angular_Improper_Type_Pipe_Usage | /libs/components/src/navigation/nav-divider.component.html: 1 | |
Angular_Improper_Type_Pipe_Usage | /apps/browser/src/autofill/popup/fido2/fido2-use-browser-link.component.html: 1 | |
Client_Privacy_Violation | /apps/web/src/app/tools/access-intelligence/password-health-members.component.html: 50 | |
Client_Privacy_Violation | /apps/web/src/app/tools/access-intelligence/password-health-members.component.html: 50 | |
Client_Privacy_Violation | /apps/web/src/app/tools/access-intelligence/password-health-members.component.html: 55 | |
Client_Privacy_Violation | /apps/web/src/app/tools/access-intelligence/password-health-members.component.html: 45 | |
Client_Privacy_Violation | /libs/tools/generator/components/src/credential-generator-history.component.html: 3 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 502 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 514 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 657 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 670 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 564 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 580 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 684 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 496 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 557 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 653 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 209 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 656 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 647 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 646 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 645 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 644 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 643 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 710 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 409 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 2873 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 136 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 1644 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 2768 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 368 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 222 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 548 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 1719 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 453 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 436 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 413 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 1719 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 588 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 368 | |
Client_Privacy_Violation | /apps/browser/src/autofill/background/overlay.background.ts: 1718 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 484 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation | /apps/desktop/src/vault/app/vault/view.component.html: 457 | |
Client_Privacy_Violation |
Attention: Patch coverage is 0%
with 2 lines
in your changes missing coverage. Please review.
Project coverage is 33.42%. Comparing base (
e6c68b7
) to head (96cae79
). Report is 8 commits behind head on main.
:white_check_mark: All tests successful. No failed tests found.
Files with missing lines | Patch % | Lines |
---|---|---|
.../auth/popup/settings/account-security.component.ts | 0.00% | 2 Missing :warning: |
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
đ¨ Try these New Features:
đī¸ Tracking
https://bitwarden.atlassian.net/browse/PM-14593
đ Objective
In the legacy
AccountSercurityV1Component
theupdateBiometric(enabled: boolean)
method had an else block to handle anenabled
value offalse
. The newAccountSecurityComponent
is missing this block, which makes it so the user cannot disable biometrics because we aren't handling the case where they uncheck the biometrics checkbox. This PR just adds it back in so we handle afalse
value.đ¸ Screenshots
â° Reminders before review
đĻŽ Reviewer guidelines
:+1:
) or similar for great changes:memo:
) or âšī¸ (:information_source:
) for notes or general info:question:
) for questions:thinking:
) or đ (:thought_balloon:
) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion:art:
) for suggestions / improvements:x:
) or â ī¸ (:warning:
) for more significant problems or concerns needing attention:seedling:
) or âģī¸ (:recycle:
) for future improvements or indications of technical debt:pick:
) for minor or nitpick changes