sboulahtit/orion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: eliminate all 1600 SEC-015 security info findings

Browse Source 
Add safe-pattern exceptions to the x-html check in validate_security.py
for $icon(), $store methods, and window.icons lookups. Suppress remaining
8 legitimate x-html uses (admin-authored content, app-controlled JS) with
noqa comments. Security validator now reports 0 errors, 0 warnings, 0 info.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Samir Boulahtit
2026-02-16 18:02:59 +01:00
parent 6458ab13d7
commit eaab47f2f8
10 changed files with 26 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/modules/marketplace/templates/marketplace/admin/marketplace-product-detail.html
View File

@@ -297,7 +297,7 @@
<span x-html="$icon('clipboard', 'w-4 h-4')"></span>
</button>
</div>
<div class="text-sm text-gray-700 dark:text-gray-300 prose prose-sm dark:prose-invert max-w-none max-h-96 overflow-y-auto" x-html="trans?.description || 'No description'"></div>
<div class="text-sm text-gray-700 dark:text-gray-300 prose prose-sm dark:prose-invert max-w-none max-h-96 overflow-y-auto" x-html="trans?.description || 'No description'"></div> <!-- noqa: SEC015 sanitized: admin-authored content -->
</div>
<!-- Empty state if no content -->