{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:00.437167Z","repo":{"ref":{"host":"github.com","owner":"Elyld","name":"Verdant"},"default_branch":"main","clone_url":"https://github.com/Elyld/Verdant.git","html_url":"https://github.com/Elyld/Verdant","description":"🌿 A self-hosted garden journal built by a gardener — log plantings, harvests, pests and costs, plan the backyard, organize the seed stash. One Docker container, no cloud, your data stays home.","stars":1,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":59466,"primary_language":"Python","license_spdx":"MIT","created_at":"2026-09-07T16:05:58Z","pushed_at":"2026-10-28T19:47:30Z","security_policy_url":null,"distribution":{"owner_created_at":"2022-05-08T20:57:23Z","owner_type":"User","release_assets":[{"name":"Verdant-2.65.1-x64.msi","size":34321641,"download_count":0,"release_tag":"v2.65.1","url":"https://github.com/Elyld/Verdant/releases/download/v2.65.1/Verdant-2.65.1-x64.msi"},{"name":"Verdant-2.65.0-x64.msi","size":34321641,"download_count":0,"release_tag":"v2.65.0","url":"https://github.com/Elyld/Verdant/releases/download/v2.65.0/Verdant-2.65.0-x64.msi"},{"name":"Verdant-2.64.1-x64.msi","size":34313449,"download_count":0,"release_tag":"v2.64.1","url":"https://github.com/Elyld/Verdant/releases/download/v2.64.1/Verdant-2.64.1-x64.msi"},{"name":"Verdant-2.64.0-x64.msi","size":34301314,"download_count":0,"release_tag":"v2.64.0","url":"https://github.com/Elyld/Verdant/releases/download/v2.64.0/Verdant-2.64.0-x64.msi"},{"name":"Verdant-2.63.0-x64.msi","size":34223490,"download_count":0,"release_tag":"v2.63.0","url":"https://github.com/Elyld/Verdant/releases/download/v2.63.0/Verdant-2.63.0-x64.msi"},{"name":"Verdant-2.62.0-x64.msi","size":33883372,"download_count":0,"release_tag":"v2.62.0","url":"https://github.com/Elyld/Verdant/releases/download/v2.62.0/Verdant-2.62.0-x64.msi"},{"name":"Verdant-2.61.0-x64.msi","size":33650218,"download_count":0,"release_tag":"v2.61.0","url":"https://github.com/Elyld/Verdant/releases/download/v2.61.0/Verdant-2.61.0-x64.msi"},{"name":"Verdant-2.60.0-x64.msi","size":33629738,"download_count":0,"release_tag":"v2.60.0","url":"https://github.com/Elyld/Verdant/releases/download/v2.60.0/Verdant-2.60.0-x64.msi"},{"name":"Verdant-2.59.4-x64.msi","size":33625642,"download_count":0,"release_tag":"v2.59.4","url":"https://github.com/Elyld/Verdant/releases/download/v2.59.4/Verdant-2.59.4-x64.msi"},{"name":"Verdant-2.59.3-x64.msi","size":33617450,"download_count":0,"release_tag":"v2.59.3","url":"https://github.com/Elyld/Verdant/releases/download/v2.59.3/Verdant-2.59.3-x64.msi"}]}},"commit_sha":"e889ed86bde9094c8d28f6ef2d736423515f5a27","profile":{"lines_by_language":{"Python":33733,"JavaScript":15578,"PowerShell":72,"Shell":18},"files_by_category":{"binary":128,"source":123,"test":81,"other":30,"config":20,"vendored":8,"docs":7,"oversized":1},"source_lines":30976,"test_lines":18425},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.5307,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":13.0,"flagged_releases":0.0,"style_index":5.456},"summary":"Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence)."},"quality":{"score":71.5,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":51.0,"duplication":85.9,"lint":68.2,"testing":90.0,"docs":65.0,"type_safety":40.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.59, CI runs tests; 22% of function code in complex or long functions; 3% duplicated lines. Weakest area: type safety."},"security":{"score":47.9,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":96.7,"sast":3.9,"dependencies":87.5,"ci_actions":4.3,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 5 known vulnerabilities in 1 dependencies; 268 high-severity SAST findings; 15 high-severity workflow issues. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":10.0,"checked":10.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":167.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":55936.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2026-09":{"loc":32466,"attributed_loc":0},"2026-10":{"loc":23470,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":67.0,"flagged_units":13.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":55936.0,"flagged_loc":29688.0,"flagged_loc_share":0.5307494279176201,"max_loc_per_hour":1831.2814682475232,"median_loc_per_hour":332.5927932809537,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"3,132 lines of first-party code in ~1.7h (1,831 lines/hour, 3 commit session)","ref":"67ff9513a57ff2fa9c4aef85911a0247d5b5b622","url":"https://github.com/Elyld/Verdant/commit/67ff9513a57ff2fa9c4aef85911a0247d5b5b622","weight":0.5493844404742569},{"kind":"velocity-burst","description":"4,002 lines of first-party code in ~2.5h (1,613 lines/hour, 5 commit session)","ref":"7c528648734842c5fa5db42df23c510264bd123a","url":"https://github.com/Elyld/Verdant/commit/7c528648734842c5fa5db42df23c510264bd123a","weight":0.4839502855223379},{"kind":"velocity-burst","description":"3,922 lines of first-party code in ~2.7h (1,457 lines/hour, 4 commit session)","ref":"ebb33044a0afb3c29de49397a31aa786984cb21e","url":"https://github.com/Elyld/Verdant/commit/ebb33044a0afb3c29de49397a31aa786984cb21e","weight":0.4371269349845201},{"kind":"velocity-burst","description":"1,912 lines of first-party code in ~1.3h (1,421 lines/hour, 2 commit session)","ref":"d228c7ef957117c07f2f857845287a68e94efca8","url":"https://github.com/Elyld/Verdant/commit/d228c7ef957117c07f2f857845287a68e94efca8","weight":0.42638034276275033},{"kind":"velocity-burst","description":"2,348 lines of first-party code in ~1.8h (1,328 lines/hour, 4 commit session)","ref":"ed21164371981513ca988b05ca094f6c148d2c05","url":"https://github.com/Elyld/Verdant/commit/ed21164371981513ca988b05ca094f6c148d2c05","weight":0.39827862415580345},{"kind":"velocity-burst","description":"2,747 lines of first-party code in ~2.1h (1,299 lines/hour, 7 commit session)","ref":"35571455d7a399c9abd530d526b00bb088b61e6f","url":"https://github.com/Elyld/Verdant/commit/35571455d7a399c9abd530d526b00bb088b61e6f","weight":0.3896453900709219},{"kind":"velocity-burst","description":"1,125 lines of first-party code in ~0.9h (1,243 lines/hour, 2 commit session)","ref":"fe4392e78f4a3224b2e9206b91ad9f6590ae1c89","url":"https://github.com/Elyld/Verdant/commit/fe4392e78f4a3224b2e9206b91ad9f6590ae1c89","weight":0.37292817679558005},{"kind":"velocity-burst","description":"1,936 lines of first-party code in ~1.8h (1,090 lines/hour, 3 commit session)","ref":"73469632470c39d673cd8ba863f9eff3f9dd4ac7","url":"https://github.com/Elyld/Verdant/commit/73469632470c39d673cd8ba863f9eff3f9dd4ac7","weight":0.3270577193805725},{"kind":"velocity-burst","description":"2,290 lines of first-party code in ~2.3h (977 lines/hour, 5 commit session)","ref":"06953dc8153f44a25cd934cd615168395540ead3","url":"https://github.com/Elyld/Verdant/commit/06953dc8153f44a25cd934cd615168395540ead3","weight":0.29313737110347277},{"kind":"velocity-burst","description":"2,174 lines of first-party code in ~2.9h (758 lines/hour, 7 commit session)","ref":"a2fbd2ff5fe8ebbb341f614e6e0dc955fffa5e1d","url":"https://github.com/Elyld/Verdant/commit/a2fbd2ff5fe8ebbb341f614e6e0dc955fffa5e1d","weight":0.2274455100261552},{"kind":"velocity-burst","description":"1,286 lines of first-party code in ~2.1h (627 lines/hour, 3 commit session)","ref":"aa68a936505d3351665bfb78a88aa2992231fba4","url":"https://github.com/Elyld/Verdant/commit/aa68a936505d3351665bfb78a88aa2992231fba4","weight":0.18816962471209864},{"kind":"velocity-burst","description":"1,662 lines of first-party code in ~3.1h (528 lines/hour, 4 commit session)","ref":"8de0ab9be6df0eaba1e8ddbf17707e53136d6cf3","url":"https://github.com/Elyld/Verdant/commit/8de0ab9be6df0eaba1e8ddbf17707e53136d6cf3","weight":0.15829967369256548},{"kind":"velocity-burst","description":"1,152 lines of first-party code in ~2.2h (520 lines/hour, 2 commit session)","ref":"d858497da02b7f1986fae29fe2932f9aed08573c","url":"https://github.com/Elyld/Verdant/commit/d858497da02b7f1986fae29fe2932f9aed08573c","weight":0.15606623181133972}],"data":{"flagged_loc_by_commit":{"def225dbdf366a19632c294d1a81e34eea12caeb":230,"6a9221b6197b380647a8a40926ea51a08f1d58d6":347,"4f9ac2496a7614ce885ac237b85e3acf16e68001":27,"2e85e04821171331617a7b97b4ed5a2f21a82112":1255,"88a028019ab640da56c912412b7eac47606d1669":340,"403ce042486f206df46b698106aa652193f05410":318,"35571455d7a399c9abd530d526b00bb088b61e6f":230,"dcbe54cbaaf3cd6388c543b08a388595afc9cb22":113,"fe4392e78f4a3224b2e9206b91ad9f6590ae1c89":1012,"b2d7f62ea6e609879afe645d0d66f3921de24a63":79,"d858497da02b7f1986fae29fe2932f9aed08573c":1073,"e588d57440c87ab185d7100247dddd9e64de1391":2272,"73530035714876b89b4fdd66e49c73c229a939ac":606,"7eaf3604bbc35e3cf46eb0c7f502fc1e226bbc56":1017,"ebb33044a0afb3c29de49397a31aa786984cb21e":27,"69723aed5b61f596a9ab5ff36125d37af68e1c8b":1670,"d228c7ef957117c07f2f857845287a68e94efca8":242,"46aca9277358a18f573b872baa5764f9c3e6f318":531,"d357f00d0daa8b4492615812aa4f8cf7ca676be1":140,"aa68a936505d3351665bfb78a88aa2992231fba4":615,"d8406271b6edba6222ba0640164adc9a72f28999":378,"b5addbb726b69855fd1cc3a13a12dc415e2e83e0":790,"bc5c07e55e3b065b35f2d8846c203486c6231f1e":6,"8de0ab9be6df0eaba1e8ddbf17707e53136d6cf3":488,"8267cbf71167a73da2e0f22bc52ac98bb1d4f3f1":719,"ead01a605012f9eb873283ba9dc41575d4380b95":1417,"f43f0166fb2f243ea767d101603852b38895b684":124,"e1754a9279b797ffc4c406dcc2e05167abd0ece3":17,"06953dc8153f44a25cd934cd615168395540ead3":13,"79001db7a6befea2f2eee3559f6d65422a2769cb":1543,"0f733ed0f09160ab76ea5ab882a6fc4053208421":598,"cc398bb178f851a8b5eb3141e4b7e2be8e735777":799,"4d3577c2408dd03a43682e958aa73bc751b3043b":883,"7c528648734842c5fa5db42df23c510264bd123a":179,"807261b002f1a1b9789cdd3ca87b168d56022558":278,"641656405356ddb58a34c045d21b1d23fa3ae4da":974,"73b6a0823c825c691b24511d46b0f99d4f73b1a4":565,"ed21164371981513ca988b05ca094f6c148d2c05":531,"e9c319181be2a95e12fdd71552395c6aed6d0f0a":2380,"675f5d5dfa24d858aac7d996cac8bcccb3947b04":744,"67ff9513a57ff2fa9c4aef85911a0247d5b5b622":8,"993c38dd8d26824ad60d42ef7044fbee8543bdc2":901,"91b1bbeb9ef82ba147527379b84a0748a8c92d62":1019,"73469632470c39d673cd8ba863f9eff3f9dd4ac7":16,"a66f355b3589df03f40eaa2729d640b35c20864f":147,"f27e1c56743097f1ff980a458e8af4a12e9e2138":348,"4d9a1ac1be30ee27f5b8ca10efdfdf67742c6a99":505,"d8f2cc8eaadfdfff5d95cad4bc041de46bb58c5d":500,"59ed71d27bc1c559b32111b7a21b7363b06a0cc7":446,"c0db794d5bb6b4e7d7d523f1a110e8dcf37db979":218,"a2fbd2ff5fe8ebbb341f614e6e0dc955fffa5e1d":10},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":58.0,"flagged_releases":0.0,"max_loc_per_day":52230.6},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.1.0","to":"v1.3.0","loc":244,"days":2.51,"loc_per_day":97.1,"flagged":false},{"from":"v1.3.0","to":"v1.3.2","loc":139,"days":0.14,"loc_per_day":1024.6,"flagged":false},{"from":"v1.3.2","to":"v1.3.3","loc":1,"days":0.7,"loc_per_day":1.4,"flagged":false},{"from":"v1.3.3","to":"v2.18.0","loc":19480,"days":15.78,"loc_per_day":1234.7,"flagged":false},{"from":"v2.18.0","to":"v2.19.0","loc":531,"days":0.07,"loc_per_day":7646.4,"flagged":false},{"from":"v2.19.0","to":"v2.26.0","loc":3707,"days":0.45,"loc_per_day":8255.4,"flagged":false},{"from":"v2.26.0","to":"v2.27.0","loc":194,"days":0.34,"loc_per_day":562.7,"flagged":false},{"from":"v2.27.0","to":"v2.28.0","loc":584,"days":0.1,"loc_per_day":5964.3,"flagged":false},{"from":"v2.28.0","to":"v2.29.0","loc":527,"days":0.04,"loc_per_day":12648.0,"flagged":false},{"from":"v2.29.0","to":"v2.30.0","loc":673,"days":0.04,"loc_per_day":16152.0,"flagged":false},{"from":"v2.30.0","to":"v2.31.0","loc":515,"days":0.04,"loc_per_day":12360.0,"flagged":false},{"from":"v2.31.0","to":"v2.32.0","loc":47,"days":0.04,"loc_per_day":1128.0,"flagged":false},{"from":"v2.32.0","to":"v2.32.1","loc":70,"days":0.04,"loc_per_day":1680.0,"flagged":false},{"from":"v2.32.1","to":"v2.33.0","loc":321,"days":0.04,"loc_per_day":7704.0,"flagged":false},{"from":"v2.33.0","to":"v2.34.0","loc":719,"days":0.07,"loc_per_day":9816.9,"flagged":false},{"from":"v2.34.0","to":"v2.35.0","loc":1541,"days":0.04,"loc_per_day":36984.0,"flagged":false},{"from":"v2.35.0","to":"v2.35.1","loc":30,"days":0.04,"loc_per_day":720.0,"flagged":false},{"from":"v2.35.1","to":"v2.36.0","loc":355,"days":0.04,"loc_per_day":8510.5,"flagged":false},{"from":"v2.36.0","to":"v2.37.0","loc":128,"days":0.04,"loc_per_day":3072.0,"flagged":false},{"from":"v2.37.0","to":"v2.38.0","loc":451,"days":0.04,"loc_per_day":10824.0,"flagged":false},{"from":"v2.38.0","to":"v2.38.1","loc":17,"days":0.08,"loc_per_day":224.8,"flagged":false},{"from":"v2.38.1","to":"v2.38.2","loc":16,"days":0.04,"loc_per_day":384.0,"flagged":false},{"from":"v2.38.2","to":"v2.38.3","loc":26,"days":0.04,"loc_per_day":624.0,"flagged":false},{"from":"v2.38.3","to":"v2.39.0","loc":63,"days":0.04,"loc_per_day":1512.0,"flagged":false},{"from":"v2.39.0","to":"v2.40.0","loc":103,"days":2.71,"loc_per_day":38.0,"flagged":false},{"from":"v2.40.0","to":"v2.41.0","loc":1543,"days":0.06,"loc_per_day":27168.4,"flagged":false},{"from":"v2.41.0","to":"v2.42.0","loc":598,"days":0.04,"loc_per_day":14352.0,"flagged":false},{"from":"v2.42.0","to":"v2.43.0","loc":799,"days":0.04,"loc_per_day":19176.0,"flagged":false},{"from":"v2.43.0","to":"v2.44.0","loc":883,"days":0.04,"loc_per_day":21192.0,"flagged":false},{"from":"v2.44.0","to":"v2.45.0","loc":179,"days":0.04,"loc_per_day":4296.0,"flagged":false},{"from":"v2.45.0","to":"v2.46.0","loc":341,"days":0.04,"loc_per_day":8181.7,"flagged":false},{"from":"v2.46.0","to":"v2.47.0","loc":278,"days":0.05,"loc_per_day":6174.6,"flagged":false},{"from":"v2.47.0","to":"v2.48.0","loc":974,"days":0.04,"loc_per_day":23376.0,"flagged":false},{"from":"v2.48.0","to":"v2.49.0","loc":565,"days":0.04,"loc_per_day":13560.0,"flagged":false},{"from":"v2.49.0","to":"v2.50.0","loc":531,"days":0.04,"loc_per_day":12744.0,"flagged":false},{"from":"v2.50.0","to":"v2.51.0","loc":2380,"days":0.05,"loc_per_day":52230.6,"flagged":false},{"from":"v2.51.0","to":"v2.52.0","loc":752,"days":0.04,"loc_per_day":18048.0,"flagged":false},{"from":"v2.52.0","to":"v2.52.1","loc":1,"days":0.64,"loc_per_day":1.6,"flagged":false},{"from":"v2.52.1","to":"v2.53.0","loc":1550,"days":1.18,"loc_per_day":1316.9,"flagged":false},{"from":"v2.53.0","to":"v2.54.0","loc":1557,"days":6.13,"loc_per_day":254.2,"flagged":false},{"from":"v2.54.0","to":"v2.55.0","loc":377,"days":0.05,"loc_per_day":6879.2,"flagged":false},{"from":"v2.55.0","to":"v2.55.1","loc":26,"days":0.22,"loc_per_day":120.9,"flagged":false},{"from":"v2.55.1","to":"v2.56.0","loc":1936,"days":0.07,"loc_per_day":26563.5,"flagged":false},{"from":"v2.56.0","to":"v2.57.0","loc":17,"days":0.78,"loc_per_day":21.8,"flagged":false},{"from":"v2.57.0","to":"v2.58.0","loc":341,"days":0.15,"loc_per_day":2340.0,"flagged":false},{"from":"v2.58.0","to":"v2.59.0","loc":269,"days":0.96,"loc_per_day":280.7,"flagged":false},{"from":"v2.59.0","to":"v2.59.1","loc":21,"days":0.04,"loc_per_day":504.0,"flagged":false},{"from":"v2.59.1","to":"v2.59.2","loc":162,"days":0.04,"loc_per_day":3888.0,"flagged":false},{"from":"v2.59.2","to":"v2.59.3","loc":305,"days":0.08,"loc_per_day":3666.1,"flagged":false},{"from":"v2.59.3","to":"v2.59.4","loc":556,"days":0.33,"loc_per_day":1667.4,"flagged":false},{"from":"v2.59.4","to":"v2.60.0","loc":744,"days":0.04,"loc_per_day":17856.0,"flagged":false},{"from":"v2.60.0","to":"v2.61.0","loc":2544,"days":0.12,"loc_per_day":22117.3,"flagged":false},{"from":"v2.61.0","to":"v2.62.0","loc":529,"days":0.08,"loc_per_day":6384.4,"flagged":false},{"from":"v2.62.0","to":"v2.63.0","loc":369,"days":0.04,"loc_per_day":8856.0,"flagged":false},{"from":"v2.63.0","to":"v2.64.0","loc":998,"days":14.78,"loc_per_day":67.5,"flagged":false},{"from":"v2.64.0","to":"v2.64.1","loc":332,"days":0.99,"loc_per_day":335.7,"flagged":false},{"from":"v2.64.1","to":"v2.65.0","loc":761,"days":0.04,"loc_per_day":18264.0,"flagged":false},{"from":"v2.65.0","to":"v2.65.1","loc":149,"days":0.2,"loc_per_day":743.3,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":30976.0,"index":5.456,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":338.0,"per_kloc:emoji_in_code":10.912,"files:emoji_in_code":44.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":1.0,"secrets_low_confidence":0.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"tests/test_digest.py","line":175,"fingerprint":"tests/test_digest.py:generic-api-key:175"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":609.0,"findings_high":268.0,"findings_medium":341.0,"findings_low":0.0,"weighted_findings":286.6,"scanned_lines":30904.0,"parse_errors":2.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":63,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/agent.js:63"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `div.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":63,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/agent.js:63"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":87,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/agent.js:87"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `b.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":87,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/agent.js:87"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":153,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/agent.js:153"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":153,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/agent.js:153"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":249,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/agent.js:249"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `card.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/agent.js","line":249,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/agent.js:249"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/backup.js","line":70,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/backup.js:70"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `result.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/backup.js","line":70,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/backup.js:70"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/backup.js","line":76,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/backup.js:76"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `result.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/backup.js","line":76,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/backup.js:76"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/blog.js","line":35,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/blog.js:35"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `feed.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/blog.js","line":35,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/blog.js:35"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/blog.js","line":42,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/blog.js:42"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#post-images-preview').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/blog.js","line":42,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/blog.js:42"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/calendar.js","line":48,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/calendar.js:48"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/calendar.js","line":48,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/calendar.js:48"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/calendar.js","line":77,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/calendar.js:77"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/calendar.js","line":77,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/calendar.js:77"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/calendar.js","line":91,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/calendar.js:91"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/calendar.js","line":91,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/calendar.js:91"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":191,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:191"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `linksHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":191,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:191"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":195,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:195"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":195,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:195"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":253,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:253"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":253,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:253"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":322,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:322"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `panel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":322,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:322"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":335,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:335"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `pill.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":335,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:335"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":368,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:368"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `inner.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":368,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:368"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":410,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/core.js:410"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/core.js","line":410,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/core.js:410"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":31,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:31"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `listHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":31,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:31"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":123,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:123"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":123,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:123"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":178,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:178"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":178,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:178"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":186,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:186"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#costs-by-cat').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":186,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:186"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":190,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:190"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#costs-rows').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":190,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:190"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":317,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:317"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":317,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:317"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":337,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:337"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#invoices-rows').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":337,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:337"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":479,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:479"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `scanBox.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":479,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:479"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":511,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/costs.js:511"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `scanBox.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/costs.js","line":511,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/costs.js:511"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/fertilizers.js","line":14,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/fertilizers.js:14"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#fert-products').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/fertilizers.js","line":14,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/fertilizers.js:14"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/immich.js","line":20,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/immich.js:20"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/immich.js","line":20,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/immich.js:20"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":50,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/import.js:50"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `previewBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":50,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/import.js:50"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":62,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/import.js:62"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `assignHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":62,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/import.js:62"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":72,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/import.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `assignHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":72,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/import.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":146,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/import.js:146"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `resultBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/import.js","line":146,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/import.js:146"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":41,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/match.js:41"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `albumSel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":41,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/match.js:41"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":64,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/match.js:64"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `targetSel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":64,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/match.js:64"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":70,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/match.js:70"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `containerSel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":70,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/match.js:70"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":76,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/match.js:76"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `vocabBox.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":76,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/match.js:76"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":81,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/match.js:81"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tagFilter.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":81,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/match.js:81"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":162,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/match.js:162"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tagsEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/match.js","line":162,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/match.js:162"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":46,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/observations.js:46"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#fert-rows').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":46,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/observations.js:46"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":63,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/observations.js:63"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#obs-rows').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":63,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/observations.js:63"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":108,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/observations.js:108"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `obsSel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":108,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/observations.js:108"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":114,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/observations.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `fertSel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":114,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/observations.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":130,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/observations.js:130"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#fert-catalog').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/observations.js","line":130,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/observations.js:130"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":36,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/order_assistant.js:36"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#oa-spend').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":36,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/order_assistant.js:36"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":54,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/order_assistant.js:54"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#oa-ratings').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":54,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/order_assistant.js:54"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":72,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/order_assistant.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#oa-wishlist').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":72,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/order_assistant.js:72"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":86,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/order_assistant.js:86"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `list.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":86,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/order_assistant.js:86"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":114,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/order_assistant.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `body.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/order_assistant.js","line":114,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/order_assistant.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":34,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pantry.js:34"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#pres-variety-list').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":34,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pantry.js:34"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":43,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pantry.js:43"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":43,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pantry.js:43"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":91,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pantry.js:91"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":91,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pantry.js:91"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":146,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pantry.js:146"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pantry.js","line":146,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pantry.js:146"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":25,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pests.js:25"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":25,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pests.js:25"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":60,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pests.js:60"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":60,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pests.js:60"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":126,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pests.js:126"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":126,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pests.js:126"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":132,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pests.js:132"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#pests-open').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":132,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pests.js:132"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":133,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/pests.js:133"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#pests-done').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/pests.js","line":133,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/pests.js:133"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/photos.js","line":24,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/photos.js:24"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `picker.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/photos.js","line":24,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/photos.js:24"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/photos.js","line":60,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/photos.js:60"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tagsEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/photos.js","line":60,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/photos.js:60"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":100,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:100"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":100,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:100"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":177,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:177"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#rotation-list').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":177,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:177"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":219,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:219"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#planner-year').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":219,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:219"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":220,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:220"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#copy-from').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":220,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:220"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":224,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:224"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#container-location').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":224,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:224"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":245,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:245"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":245,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:245"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":262,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:262"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `panel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":262,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:262"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":369,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:369"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":369,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:369"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":418,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:418"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#container-plant-add').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":418,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:418"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":3421,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/planner.js:3421"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `hotbarSlots.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/planner.js","line":3421,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/planner.js:3421"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":183,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:183"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":183,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:183"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":231,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:231"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `list.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":231,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:231"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":252,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:252"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":252,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:252"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":285,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:285"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":285,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:285"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":328,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:328"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":328,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:328"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":337,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:337"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `sel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":337,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:337"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":449,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:449"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":449,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:449"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":452,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:452"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":452,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:452"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":456,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:456"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":456,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:456"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":459,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:459"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `btn.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":459,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:459"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":597,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:597"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#sow-list').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":597,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:597"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":626,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:626"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":626,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:626"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":678,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:678"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":678,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:678"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":708,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:708"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":708,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:708"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":726,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:726"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `detail.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":726,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:726"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":751,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:751"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `detail.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":751,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:751"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":802,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:802"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":802,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:802"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":950,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/plants.js:950"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `results.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/plants.js","line":950,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/plants.js:950"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":18,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/quick.js:18"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `btn.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":18,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/quick.js:18"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":92,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/quick.js:92"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `card.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":92,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/quick.js:92"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":163,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/quick.js:163"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#quick-today-log').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":163,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/quick.js:163"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":202,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/quick.js:202"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `header.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":202,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/quick.js:202"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":305,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/quick.js:305"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/quick.js","line":305,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/quick.js:305"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":44,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:44"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-stats').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":44,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:44"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":56,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:56"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-activity').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":56,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:56"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":61,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:61"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-health').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":61,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:61"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":67,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:67"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-months').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":67,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:67"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":68,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:68"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-months-2').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":68,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:68"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":70,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:70"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-top').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":70,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:70"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":81,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:81"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-highlights').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":81,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:81"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":93,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:93"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-yield-weight').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":93,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:93"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":96,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:96"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#review-yield-count').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":96,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:96"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":106,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:106"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#scorecard-rows').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":106,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:106"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":121,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/review.js:121"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#truecost-rows').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/review.js","line":121,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/review.js:121"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":76,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:76"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#catalog-category').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":76,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:76"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":78,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:78"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#packet-categories').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":78,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:78"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":80,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:80"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#packet-vendor-list').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":80,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:80"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":84,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:84"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":84,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:84"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":323,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:323"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `wrap.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":323,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:323"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":367,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:367"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#library-grid').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":367,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:367"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":383,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seed_catalog.js:383"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#library-album').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seed_catalog.js","line":383,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seed_catalog.js:383"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":114,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seedlings.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#seedling-varieties').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":114,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seedlings.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":116,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seedlings.js:116"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#seedling-packet').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":116,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seedlings.js:116"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":125,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seedlings.js:125"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#seedling-active').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":125,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seedlings.js:125"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":126,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seedlings.js:126"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#seedling-done').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seedlings.js","line":126,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seedlings.js:126"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seeds.js","line":50,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/seeds.js:50"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/seeds.js","line":50,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/seeds.js:50"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":13,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/settings.js:13"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":13,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/settings.js:13"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":62,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/settings.js:62"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `box.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":62,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/settings.js:62"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":413,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/settings.js:413"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `listHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":413,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/settings.js:413"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":420,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/settings.js:420"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `listHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":420,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/settings.js:420"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":431,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/settings.js:431"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#tok-scopes').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/settings.js","line":431,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/settings.js:431"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/slideshow.js","line":94,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/slideshow.js:94"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `select.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/slideshow.js","line":94,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/slideshow.js:94"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":60,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/tags.js:60"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#tag-list').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":60,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/tags.js:60"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":85,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/tags.js:85"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#tag-target').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":85,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/tags.js:85"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":88,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/tags.js:88"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#tag-target').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":88,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/tags.js:88"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":91,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/tags.js:91"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#tag-target').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":91,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/tags.js:91"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":98,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/tags.js:98"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `$('#tag-action').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/tags.js","line":98,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/tags.js:98"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":33,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/today.js:33"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `card.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":33,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/today.js:33"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":52,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/today.js:52"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `host.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":52,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/today.js:52"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":74,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/today.js:74"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `dueHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":74,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/today.js:74"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":104,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/today.js:104"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `hvHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":104,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/today.js:104"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":121,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/today.js:121"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `frostHost.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/today.js","line":121,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/today.js:121"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/voice_log.js","line":187,"fingerprint":"javascript.browser.security.insecure-document-method:app/static/js/voice_log.js:187"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `draftEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/static/js/voice_log.js","line":187,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/static/js/voice_log.js:187"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/retake_screenshots.py","line":428,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/retake_screenshots.py:428"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"scripts/retake_screenshots.py","line":435,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:scripts/retake_screenshots.py:435"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"app/growstuff.py","line":135,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:app/growstuff.py:135"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"app/llm.py","line":91,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:app/llm.py:91"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"app/llm.py","line":106,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:app/llm.py:106"},{"rule_id":"opengrep/python.fastapi.security.wildcard-cors","severity":"medium","message":"CORS policy allows any origin (using wildcard '*'). This is insecure and should be avoided. [confidence medium]","path":"app/main.py","line":179,"fingerprint":"python.fastapi.security.wildcard-cors:app/main.py:179"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"app/routers/ai_log.py","line":244,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:app/routers/ai_log.py:244"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"app/routers/weather.py","line":115,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:app/routers/weather.py:115"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":87,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:87"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":88,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:88"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":139,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:139"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":140,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:140"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":143,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:143"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":144,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:144"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":146,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:146"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":182,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:182"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":184,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:184"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/agent.js","line":249,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/agent.js:249"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/backup.js","line":70,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/backup.js:70"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/backup.js","line":76,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/backup.js:76"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/blog.js","line":10,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/blog.js:10"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/blog.js","line":15,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/blog.js:15"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/blog.js","line":16,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/blog.js:16"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/blog.js","line":16,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/blog.js:16"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/blog.js","line":42,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/blog.js:42"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":25,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:25"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":26,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:26"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":28,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:28"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":77,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:77"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":89,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:89"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":89,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:89"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":90,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:90"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":104,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:104"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/static/js/calendar.js","line":106,"fingerprint":"javascript.lang.security.html-in-template-string:app/static/js/calendar.js:106"}],"evidence":[],"data":{"rulesets":["python","javascript","bash","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":1.0,"vulnerabilities":5.0,"vulns_critical":0.0,"vulns_high":2.0,"vulns_medium":3.0,"vulns_low":0.0,"vulns_unknown":0.0,"penalty":8.0},"findings":[{"rule_id":"osv/GHSA-gmj6-6f8f-6699","severity":"high","message":"jinja2@3.1 (PyPI) is affected by PYSEC-2026-1472, GHSA-gmj6-6f8f-6699","path":"requirements.txt","line":null,"fingerprint":"jinja2@3.1 (PyPI):GHSA-gmj6-6f8f-6699"},{"rule_id":"osv/GHSA-q2x7-8rv6-6q7h","severity":"high","message":"jinja2@3.1 (PyPI) is affected by PYSEC-2026-1475, GHSA-q2x7-8rv6-6q7h","path":"requirements.txt","line":null,"fingerprint":"jinja2@3.1 (PyPI):GHSA-q2x7-8rv6-6q7h"},{"rule_id":"osv/GHSA-cpwx-vrp4-4pq7","severity":"medium","message":"jinja2@3.1 (PyPI) is affected by PYSEC-2026-1471, GHSA-cpwx-vrp4-4pq7","path":"requirements.txt","line":null,"fingerprint":"jinja2@3.1 (PyPI):GHSA-cpwx-vrp4-4pq7"},{"rule_id":"osv/GHSA-h5c8-rqwp-cp95","severity":"medium","message":"jinja2@3.1 (PyPI) is affected by PYSEC-2026-1473, GHSA-h5c8-rqwp-cp95","path":"requirements.txt","line":null,"fingerprint":"jinja2@3.1 (PyPI):GHSA-h5c8-rqwp-cp95"},{"rule_id":"osv/GHSA-h75v-3vvj-5mfj","severity":"medium","message":"jinja2@3.1 (PyPI) is affected by PYSEC-2026-1474, GHSA-h75v-3vvj-5mfj","path":"requirements.txt","line":null,"fingerprint":"jinja2@3.1 (PyPI):GHSA-h75v-3vvj-5mfj"}],"evidence":[],"data":{"ecosystems":["PyPI"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":4.0,"findings":21.0,"findings_high":15.0,"findings_medium":5.0,"findings_low":1.0,"penalty":188.2},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-publish.yml","line":31,"fingerprint":"unpinned-uses:.github/workflows/docker-publish.yml:31"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-publish.yml","line":34,"fingerprint":"unpinned-uses:.github/workflows/docker-publish.yml:34"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-publish.yml","line":37,"fingerprint":"unpinned-uses:.github/workflows/docker-publish.yml:37"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-publish.yml","line":41,"fingerprint":"unpinned-uses:.github/workflows/docker-publish.yml:41"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-publish.yml","line":49,"fingerprint":"unpinned-uses:.github/workflows/docker-publish.yml:49"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/docker-publish.yml","line":59,"fingerprint":"unpinned-uses:.github/workflows/docker-publish.yml:59"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/msi.yml","line":62,"fingerprint":"template-injection:.github/workflows/msi.yml:62"},{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/msi.yml","line":63,"fingerprint":"template-injection:.github/workflows/msi.yml:63"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/msi.yml","line":37,"fingerprint":"unpinned-uses:.github/workflows/msi.yml:37"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/msi.yml","line":40,"fingerprint":"unpinned-uses:.github/workflows/msi.yml:40"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/msi.yml","line":76,"fingerprint":"unpinned-uses:.github/workflows/msi.yml:76"},{"rule_id":"zizmor/excessive-permissions","severity":"high","message":"overly broad permissions [confidence high]","path":".github/workflows/release.yml","line":19,"fingerprint":"excessive-permissions:.github/workflows/release.yml:19"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":29,"fingerprint":"unpinned-uses:.github/workflows/release.yml:29"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test.yml","line":24,"fingerprint":"unpinned-uses:.github/workflows/test.yml:24"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test.yml","line":27,"fingerprint":"unpinned-uses:.github/workflows/test.yml:27"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/docker-publish.yml","line":30,"fingerprint":"artipacked:.github/workflows/docker-publish.yml:30"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/msi.yml","line":36,"fingerprint":"artipacked:.github/workflows/msi.yml:36"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":28,"fingerprint":"artipacked:.github/workflows/release.yml:28"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/test.yml","line":23,"fingerprint":"artipacked:.github/workflows/test.yml:23"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test.yml","line":19,"fingerprint":"excessive-permissions:.github/workflows/test.yml:19"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/release.yml","line":86,"fingerprint":"self-repository:.github/workflows/release.yml:86"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.012,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":2.0,"binary_assets":10.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v2.65.1 ships Verdant-2.65.1-x64.msi (0 downloads)","ref":"Verdant-2.65.1-x64.msi","url":"https://github.com/Elyld/Verdant/releases/download/v2.65.1/Verdant-2.65.1-x64.msi","weight":0.0},{"kind":"binary-release-asset","description":"release v2.65.0 ships Verdant-2.65.0-x64.msi (0 downloads)","ref":"Verdant-2.65.0-x64.msi","url":"https://github.com/Elyld/Verdant/releases/download/v2.65.0/Verdant-2.65.0-x64.msi","weight":0.0},{"kind":"binary-release-asset","description":"release v2.64.1 ships Verdant-2.64.1-x64.msi (0 downloads)","ref":"Verdant-2.64.1-x64.msi","url":"https://github.com/Elyld/Verdant/releases/download/v2.64.1/Verdant-2.64.1-x64.msi","weight":0.0},{"kind":"binary-release-asset","description":"release v2.64.0 ships Verdant-2.64.0-x64.msi (0 downloads)","ref":"Verdant-2.64.0-x64.msi","url":"https://github.com/Elyld/Verdant/releases/download/v2.64.0/Verdant-2.64.0-x64.msi","weight":0.0},{"kind":"binary-release-asset","description":"release v2.63.0 ships Verdant-2.63.0-x64.msi (0 downloads)","ref":"Verdant-2.63.0-x64.msi","url":"https://github.com/Elyld/Verdant/releases/download/v2.63.0/Verdant-2.63.0-x64.msi","weight":0.0},{"kind":"readme-download-lure","description":"gives an archive password","ref":"README.md","url":null,"weight":0.0}],"data":{"signals":["binary-release-assets","readme-download-lure"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2038.0,"function_nloc":22591.0,"mean_ccn":4.11,"p90_ccn":9.0,"complex_functions":79.0,"long_functions":10.0,"many_param_functions":7.0,"risky_nloc_share":0.2242},"findings":[],"evidence":[{"kind":"complex-function","description":"build_context in app/ai_context.py: complexity 67, 161 lines","ref":"app/ai_context.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/ai_context.py#L52","weight":1.0},{"kind":"complex-function","description":"apply_draft in app/routers/agent.py: complexity 62, 130 lines","ref":"app/routers/agent.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/agent.py#L288","weight":1.0},{"kind":"complex-function","description":"_validate in app/routers/settings.py: complexity 59, 82 lines","ref":"app/routers/settings.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/settings.py#L131","weight":0.9833333333333333},{"kind":"complex-function","description":"build_write_draft in app/ai_tools.py: complexity 54, 109 lines","ref":"app/ai_tools.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/ai_tools.py#L627","weight":0.9},{"kind":"complex-function","description":"compute_alerts in app/garden_alerts.py: complexity 52, 108 lines","ref":"app/garden_alerts.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/garden_alerts.py#L110","weight":0.8666666666666667},{"kind":"complex-function","description":"save_settings in app/routers/settings.py: complexity 46, 66 lines","ref":"app/routers/settings.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/settings.py#L308","weight":0.7666666666666667},{"kind":"complex-function","description":"run_agent_turn in app/routers/ai_log.py: complexity 45, 108 lines","ref":"app/routers/ai_log.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/ai_log.py#L343","weight":0.75},{"kind":"complex-function","description":"(anonymous) in app/static/js/planner.js: complexity 37, 37 lines","ref":"app/static/js/planner.js","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/static/js/planner.js#L2411","weight":0.6166666666666667},{"kind":"complex-function","description":"suggestions in app/succession.py: complexity 35, 88 lines","ref":"app/succession.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/succession.py#L115","weight":0.5833333333333334},{"kind":"complex-function","description":"merge_duplicate_albums in app/routers/albums.py: complexity 34, 108 lines","ref":"app/routers/albums.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/albums.py#L302","weight":0.5666666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":24590.0,"duplicated_lines":625.0,"duplicated_share":0.0254,"files":123.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: app/ai_context.py:17 and app/ai_tools.py:20","ref":"app/ai_context.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/ai_context.py#L17","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/ai_context.py:156 and app/frost_gamble.py:68","ref":"app/ai_context.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/ai_context.py#L156","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/chaos.py:260 and app/chaos.py:276","ref":"app/chaos.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/chaos.py#L260","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/database.py:93 and app/database.py:124","ref":"app/database.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/database.py#L93","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/fertilizers.py:9 and app/routers/fertilizers.py:11","ref":"app/fertilizers.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/fertilizers.py#L9","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/harvests.py:13 and app/routers/harvests.py:15","ref":"app/harvests.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/harvests.py#L13","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/locations.py:1 and app/routers/locations.py:1","ref":"app/locations.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/locations.py#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/plants.py:25 and app/routers/plants.py:80","ref":"app/plants.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/plants.py#L25","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/routers/ai_log.py:414 and app/routers/ai_log.py:426","ref":"app/routers/ai_log.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/ai_log.py#L414","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/routers/albums.py:56 and app/routers/digest.py:398","ref":"app/routers/albums.py","url":"https://github.com/Elyld/Verdant/blob/e889ed86bde9094c8d28f6ef2d736423515f5a27/app/routers/albums.py#L56","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":60.0,"weighted_findings":47.25,"scanned_lines":30904.0,"category:best-practice":12.0,"category:correctness":32.0,"category:maintainability":14.0,"category:performance":2.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"app/routers/digest.py","line":547,"fingerprint":"python.lang.best-practice.arbitrary-sleep:app/routers/digest.py:547"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"app/routers/digest.py","line":555,"fingerprint":"python.lang.best-practice.arbitrary-sleep:app/routers/digest.py:555"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"scripts/retake_screenshots.py","line":303,"fingerprint":"python.lang.best-practice.arbitrary-sleep:scripts/retake_screenshots.py:303"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"app/database.py","line":196,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:app/database.py:196"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_error\" a function or an attribute? If it is a function, you may have meant resp.is_error() because resp.is_error is always true.","path":"app/immich.py","line":44,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:app/immich.py:44"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":176,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:176"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":186,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:186"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":249,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:249"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":273,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:273"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":313,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:313"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":454,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:454"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":522,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:522"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"app/models.py","line":595,"fingerprint":"python.lang.maintainability.return-not-in-function:app/models.py:595"},{"rule_id":"opengrep/python.sqlalchemy.performance.len-all-count","severity":"medium","message":"Using QUERY.count() instead of len(QUERY.all()) sends less data to the client since the SQLAlchemy method is performed server-side.","path":"app/routers/agent.py","line":131,"fingerprint":"python.sqlalchemy.performance.len-all-count:app/routers/agent.py:131"},{"rule_id":"opengrep/python.sqlalchemy.performance.len-all-count","severity":"medium","message":"Using QUERY.count() instead of len(QUERY.all()) sends less data to the client since the SQLAlchemy method is performed server-side.","path":"app/routers/agent.py","line":134,"fingerprint":"python.sqlalchemy.performance.len-all-count:app/routers/agent.py:134"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_generated\" a function or an attribute? If it is a function, you may have meant img.is_generated() because img.is_generated is always true.","path":"app/routers/albums.py","line":221,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:app/routers/albums.py:221"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_generated\" a function or an attribute? If it is a function, you may have meant img.is_generated() because img.is_generated is always true.","path":"app/routers/albums.py","line":224,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:app/routers/albums.py:224"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_generated\" a function or an attribute? If it is a function, you may have meant AlbumImage.is_generated() because AlbumImage.is_generated is always true.","path":"app/routers/albums.py","line":779,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:app/routers/albums.py:779"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"app/routers/caretaker.py","line":81,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:app/routers/caretaker.py:81"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"app/routers/caretaker.py","line":102,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:app/routers/caretaker.py:102"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"app/routers/caretaker.py","line":119,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:app/routers/caretaker.py:119"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/fertilizers.js","line":48,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/fertilizers.js:48"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/order_assistant.js","line":183,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/order_assistant.js:183"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/planner.js","line":543,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/planner.js:543"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/planner.js","line":3503,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/planner.js:3503"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/seed_catalog.js","line":127,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/seed_catalog.js:127"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/seed_catalog.js","line":488,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/seed_catalog.js:488"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/seedlings.js","line":201,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/seedlings.js:201"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/static/js/tags.js","line":138,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/static/js/tags.js:138"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_generated\" a function or an attribute? If it is a function, you may have meant AlbumImage.is_generated() because AlbumImage.is_generated is always true.","path":"app/yearbook.py","line":105,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:app/yearbook.py:105"},{"rule_id":"opengrep/python.lang.best-practice.pass-body-fn","severity":"medium","message":"`pass` is the body of function cover_footer. Consider removing this or raise NotImplementedError() if this is a TODO","path":"app/yearbook.py","line":332,"fingerprint":"python.lang.best-practice.pass-body-fn:app/yearbook.py:332"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"app/yearbook.py","line":478,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:app/yearbook.py:478"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"scripts/seed_demo.py","line":40,"fingerprint":"python.lang.maintainability.return-not-in-function:scripts/seed_demo.py:40"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/seed_demo.py","line":352,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/seed_demo.py:352"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"scripts/seed_demo.py","line":355,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:scripts/seed_demo.py:355"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/calendar.js","line":106,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/calendar.js:106"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/calendar.js","line":106,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/calendar.js:106"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/import.js","line":60,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/import.js:60"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/import.js","line":60,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/import.js:60"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/import.js","line":60,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/import.js:60"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/import.js","line":60,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/import.js:60"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/import.js","line":60,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/import.js:60"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/import.js","line":60,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/import.js:60"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":378,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:378"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":378,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:378"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":378,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:378"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":378,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:378"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":411,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:411"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":411,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:411"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":411,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:411"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/quick.js","line":411,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/quick.js:411"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/static/js/settings.js","line":24,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/static/js/settings.js:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"docker-entrypoint.sh","line":18,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:docker-entrypoint.sh:18"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":18425.0,"source_lines":30976.0,"test_ratio":0.5948,"ci_files":4.0,"cochange_share":0.7985,"cochange_commits":134.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/docker-publish.yml","ref":".github/workflows/docker-publish.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/msi.yml","ref":".github/workflows/msi.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/release.yml","ref":".github/workflows/release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/test.yml","ref":".github/workflows/test.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (pytest)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["pytest"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":1580.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":43.0,"escapes_per_kloc":2.139},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}