mirror of
https://github.com/netbox-community/netbox.git
synced 2025-12-09 01:49:35 -06:00
Fixes #20484: Configure CodeQL to exclude URL redirect false positives
Some checks failed
CodeQL / Analyze (${{ matrix.language }}) (none, javascript-typescript) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, actions) (push) Has been cancelled
CI / build (20.x, 3.10) (push) Has been cancelled
CI / build (20.x, 3.11) (push) Has been cancelled
CI / build (20.x, 3.12) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, python) (push) Has been cancelled
Some checks failed
CodeQL / Analyze (${{ matrix.language }}) (none, javascript-typescript) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, actions) (push) Has been cancelled
CI / build (20.x, 3.10) (push) Has been cancelled
CI / build (20.x, 3.11) (push) Has been cancelled
CI / build (20.x, 3.12) (push) Has been cancelled
CodeQL / Analyze (${{ matrix.language }}) (none, python) (push) Has been cancelled
This commit is contained in:
parent
5f77d684e1
commit
c094699dc0
8
.github/codeql/codeql-config.yml
vendored
8
.github/codeql/codeql-config.yml
vendored
@ -1,3 +1,11 @@
|
|||||||
paths-ignore:
|
paths-ignore:
|
||||||
# Ignore compiled JS
|
# Ignore compiled JS
|
||||||
- netbox/project-static/dist
|
- netbox/project-static/dist
|
||||||
|
|
||||||
|
query-filters:
|
||||||
|
# Exclude py/url-redirection: NetBox uses safe_for_redirect() wrapper function
|
||||||
|
# which validates all redirects via Django's url_has_allowed_host_and_scheme().
|
||||||
|
# CodeQL's taint tracking doesn't recognize wrapper functions without custom
|
||||||
|
# query configuration. See #20484.
|
||||||
|
- exclude:
|
||||||
|
id: py/url-redirection
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user