cxnleach / Vuln_GO_App

MIT License
0 stars 0 forks source link

CX Client_Hardcoded_Domain @ template/Karma Shop-doc/index.html [master] #61

Open github-actions[bot] opened 3 months ago

github-actions[bot] commented 3 months ago

Client_Hardcoded_Domain issue exists @ template/Karma Shop-doc/index.html in branch master

The JavaScript file imported in "https://maps.googleapis.com/maps/api/js?key=AIzaSyCjCGmQ0Uq4exrzdcL6rvxywDDOvfAu6eE" in template\Karma Shop-doc\index.html at line 185 is from a remote domain, which may allow attackers to replace its contents with malicious code.Similarity ID: 1796586392

Severity: Low

CWE:829

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 185


Code (Line #185):

<script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyCjCGmQ0Uq4exrzdcL6rvxywDDOvfAu6eE"></script>

github-actions[bot] commented 3 months ago

Issue still exists.