{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:34:09.565067Z","repo":{"ref":{"host":"github.com","owner":"TideSec","name":"WDScanner"},"default_branch":"master","clone_url":"https://github.com/TideSec/WDScanner.git","html_url":"https://github.com/TideSec/WDScanner","description":"WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。","stars":2098,"forks":537,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":27526,"primary_language":"PHP","license_spdx":null,"created_at":"2019-01-21T07:11:32Z","pushed_at":"2020-06-22T05:24:01Z","security_policy_url":null,"distribution":{"owner_created_at":"2019-01-01T13:05:08Z","owner_type":"User","release_assets":[]}},"commit_sha":"aebfddd4eb2d4f719b56a798f3ff196302baa55e","profile":{"lines_by_language":{"PHP":6711,"Python":6580,"JavaScript":1203},"files_by_category":{"docs":149,"source":78,"other":59,"binary":53,"config":16,"vendored":6,"oversized":5},"source_lines":14494,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.49,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":21.6,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":41.6,"duplication":31.4,"lint":2.9,"testing":0.0,"docs":40.0,"type_safety":40.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 29% of function code in complex or long functions; 19% duplicated lines. Weakest area: testing."},"security":{"score":38.3,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":56.7,"sast":4.4,"dependencies":68.2,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 4 known vulnerabilities in 2 dependencies; 78 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":12.0,"checked":12.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":34.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":183349.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2019-01":{"loc":0,"attributed_loc":0},"2019-02":{"loc":7730,"attributed_loc":0},"2019-04":{"loc":0,"attributed_loc":0},"2019-05":{"loc":175619,"attributed_loc":0},"2019-06":{"loc":0,"attributed_loc":0},"2019-07":{"loc":0,"attributed_loc":0},"2020-03":{"loc":0,"attributed_loc":0},"2020-06":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":3.0,"flagged_units":0.0,"pre_ai_era_bursts":1.0,"pre_ai_era_measured_loc":7730.0,"pre_ai_era_burst_loc":6513.0,"measured_loc":7730.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":1628.25,"median_loc_per_hour":188.25,"pr_timed_units":0.0,"excluded_import_loc":175619.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["6ed3967b17dff12dd3827efc2e01df9ab4833975"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":14494.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":17.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py","line":17,"fingerprint":"TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py:generic-api-key:17"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/9b20620a18e0ef7f542a1ef51ffa7b96/wvs_log_2019031915404100.csv","line":24,"fingerprint":"report/9b20620a18e0ef7f542a1ef51ffa7b96/wvs_log_2019031915404100.csv:generic-api-key:24"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/358066961ec043941983855238c65619/wvs_log_2019031915453000.csv","line":24,"fingerprint":"report/358066961ec043941983855238c65619/wvs_log_2019031915453000.csv:generic-api-key:24"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/ec1d0085488097c51c6e433520b2cc5b/export.xml","line":2045,"fingerprint":"report/ec1d0085488097c51c6e433520b2cc5b/export.xml:generic-api-key:2045"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/fcee4c56499a9d717304040dbf2e2590/wvs_log_2017093005184300.csv","line":24,"fingerprint":"report/fcee4c56499a9d717304040dbf2e2590/wvs_log_2017093005184300.csv:generic-api-key:24"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/0ddf68dcf63e0cc39aed76cd96d5773d/wvs_log_2019031916004400.csv","line":24,"fingerprint":"report/0ddf68dcf63e0cc39aed76cd96d5773d/wvs_log_2019031916004400.csv:generic-api-key:24"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/da7acffdbc450ed7a04e6ccf20fb5c82/export.xml","line":4964,"fingerprint":"report/da7acffdbc450ed7a04e6ccf20fb5c82/export.xml:generic-api-key:4964"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/6560689483f8fd7793b67ce4f79803b9/wvs_log_2019031916005000.csv","line":24,"fingerprint":"report/6560689483f8fd7793b67ce4f79803b9/wvs_log_2019031916005000.csv:generic-api-key:24"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/6560689483f8fd7793b67ce4f79803b9/export.xml","line":1009,"fingerprint":"report/6560689483f8fd7793b67ce4f79803b9/export.xml:generic-api-key:1009"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/fcee4c56499a9d717304040dbf2e2590/export.xml","line":30,"fingerprint":"report/fcee4c56499a9d717304040dbf2e2590/export.xml:generic-api-key:30"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/0ddf68dcf63e0cc39aed76cd96d5773d/export.xml","line":48,"fingerprint":"report/0ddf68dcf63e0cc39aed76cd96d5773d/export.xml:generic-api-key:48"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/36f0ec6fe6399491ed166c2132493e0b/export.xml","line":30,"fingerprint":"report/36f0ec6fe6399491ed166c2132493e0b/export.xml:generic-api-key:30"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/8058d809b01005a65e3f3359b21de527/export.xml","line":30,"fingerprint":"report/8058d809b01005a65e3f3359b21de527/export.xml:generic-api-key:30"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/da12fdc291fdc06b67455a640a865d93/export.xml","line":30,"fingerprint":"report/da12fdc291fdc06b67455a640a865d93/export.xml:generic-api-key:30"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/45c20358adc310212646795fc0986a3e/export.xml","line":1759,"fingerprint":"report/45c20358adc310212646795fc0986a3e/export.xml:generic-api-key:1759"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"report/8058d809b01005a65e3f3359b21de527/wvs_log_2019031915583600.csv","line":24,"fingerprint":"report/8058d809b01005a65e3f3359b21de527/wvs_log_2019031915583600.csv:generic-api-key:24"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 5cfdc3dc08); removed from the current tree but still retrievable","path":"report/00dde594e5f4fbef569bf66947122478/export.xml","line":1505,"fingerprint":"5cfdc3dc0823f62f1341b2ac8d38fde2f624ca3d:report/00dde594e5f4fbef569bf66947122478/export.xml:generic-api-key:1505"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":174.0,"findings_high":78.0,"findings_medium":93.0,"findings_low":3.0,"weighted_findings":129.8,"scanned_lines":14494.0,"parse_errors":7.0},"findings":[{"rule_id":"opengrep/python.lang.security.unverified-ssl-context","severity":"high","message":"Unverified SSL context detected. This will permit insecure connections without verifying SSL certificates. Use 'ssl.create_default_context' instead. [confidence medium]","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":38,"fingerprint":"python.lang.security.unverified-ssl-context:TaskPython/TaskInfo/BBScan/BBScan.py:38"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"TaskPython/TaskInfo/fileinfo.php","line":14,"fingerprint":"php.lang.security.injection.echoed-request:TaskPython/TaskInfo/fileinfo.php:14"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/subDomainsBrute-master/run.py","line":10,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/subDomainsBrute-master/run.py:10"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/banner.py","line":20,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/subDomainsBrute-master/utils/banner.py:20"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'Popen' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":69,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:69"},{"rule_id":"opengrep/python.lang.security.audit.subprocess-shell-true","severity":"high","message":"Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead. [confidence medium]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":71,"fingerprint":"python.lang.security.audit.subprocess-shell-true:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:71"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py","line":126,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py:126"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":273,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/taskinfo-win.py:273"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":305,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/taskinfo-win.py:305"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":311,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/taskinfo-win.py:311"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":317,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/taskinfo-win.py:317"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":326,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/taskinfo-win.py:326"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":341,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/TaskInfo/taskinfo-win.py:341"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":28,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/assess_quality.py:28"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":38,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/assess_quality.py:38"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":48,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/assess_quality.py:48"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":63,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/assess_quality.py:63"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":72,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/assess_quality.py:72"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":119,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/assess_quality.py:119"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":47,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:47"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":48,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:48"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":49,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:49"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":50,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:50"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":209,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:209"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":214,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:214"},{"rule_id":"opengrep/python.sqlalchemy.security.sqlalchemy-execute-raw-query","severity":"high","message":"Avoiding SQL string concatenation: untrusted input concatenated with raw SQL query can result in SQL Injection. In order to execute raw query safely, prepared statement should be used. SQLAlchemy provides TextualSQL to easily used prepared statement with named parameters. For complex SQL composition [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":241,"fingerprint":"python.sqlalchemy.security.sqlalchemy-execute-raw-query:TaskPython/proxy/ip_pool.py:241"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-system-call-audit","severity":"high","message":"Found dynamic content used in a system call. This is dangerous if external data can reach this function call because it allows a malicious actor to execute commands. Use the 'subprocess' module instead, which is easier to use without accidentally exposing a command injection vulnerability. [confidence low]","path":"TaskPython/taskscan.py","line":69,"fingerprint":"python.lang.security.audit.dangerous-system-call-audit:TaskPython/taskscan.py:69"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"file.php","line":17,"fingerprint":"php.lang.security.injection.echoed-request:file.php:17"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"fileinfo.php","line":17,"fingerprint":"php.lang.security.injection.echoed-request:fileinfo.php:17"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"filespider.php","line":20,"fingerprint":"php.lang.security.injection.echoed-request:filespider.php:20"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"filespider.php","line":22,"fingerprint":"php.lang.security.injection.echoed-request:filespider.php:22"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/common.fun.php","line":944,"fingerprint":"php.lang.security.weak-crypto:include/common.fun.php:944"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/common.fun.php","line":1244,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/common.fun.php:1244"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/common.fun.php","line":1274,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/common.fun.php:1274"},{"rule_id":"opengrep/php.lang.security.exec-use","severity":"high","message":"Executing non-constant commands. This can lead to command injection. [confidence low]","path":"include/common.fun.php","line":1355,"fingerprint":"php.lang.security.exec-use:include/common.fun.php:1355"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/doc.class.php","line":53,"fingerprint":"php.lang.security.weak-crypto:include/doc.class.php:53"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":321,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:321"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":341,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:341"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/index.action.php","line":362,"fingerprint":"php.lang.security.injection.echoed-request:include/index.action.php:362"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":371,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:371"},{"rule_id":"opengrep/php.lang.security.injection.echoed-request","severity":"high","message":"`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users. [confidence medium]","path":"include/index.action.php","line":392,"fingerprint":"php.lang.security.injection.echoed-request:include/index.action.php:392"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":412,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:412"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":537,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:537"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":588,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:588"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":1039,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:1039"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":1079,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:1079"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1138,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1138"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":1265,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:1265"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1311,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1311"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1421,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1421"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1423,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1423"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1425,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1425"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1427,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1427"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1508,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1508"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1605,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1605"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1677,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1677"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":1819,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:1819"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":1939,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:1939"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":2016,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:2016"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":2136,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:2136"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":2151,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:2151"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":2173,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:2173"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"include/index.action.php","line":2294,"fingerprint":"php.lang.security.weak-crypto:include/index.action.php:2294"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/index.action.php","line":2358,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/index.action.php:2358"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":12,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:12"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":28,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:28"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":44,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:44"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":73,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:73"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":200,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:200"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":214,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:214"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":436,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:436"},{"rule_id":"opengrep/php.lang.security.injection.tainted-sql-string","severity":"high","message":"User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data [confidence medium]","path":"include/report.action.php","line":682,"fingerprint":"php.lang.security.injection.tainted-sql-string:include/report.action.php:682"},{"rule_id":"opengrep/php.lang.security.file-inclusion","severity":"high","message":"Detected non-constant file inclusion. This can lead to local file inclusion (LFI) or remote file inclusion (RFI) if user input reaches this statement. LFI and RFI could lead to sensitive files being obtained by attackers. Instead, explicitly specify what to include. If that is not a viable solution, [confidence low]","path":"index.php","line":19,"fingerprint":"php.lang.security.file-inclusion:index.php:19"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/jquery.htmlClean.js","line":28,"fingerprint":"javascript.browser.security.insecure-document-method:js/jquery.htmlClean.js:28"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/jquery.htmlClean.js","line":28,"fingerprint":"javascript.browser.security.insecure-innerhtml:js/jquery.htmlClean.js:28"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.browser.security.insecure-document-method:js/shims.js:1"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `c.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.browser.security.insecure-innerhtml:js/shims.js:1"},{"rule_id":"opengrep/php.lang.security.weak-crypto","severity":"high","message":"Detected usage of weak crypto function. Consider using stronger alternatives. [confidence low]","path":"taskscan.php","line":86,"fingerprint":"php.lang.security.weak-crypto:taskscan.php:86"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"TaskPython/TaskInfo/fileinfo.php","line":14,"fingerprint":"php.lang.security.injection.tainted-filename:TaskPython/TaskInfo/fileinfo.php:14"},{"rule_id":"opengrep/python.lang.security.audit.regex_dos","severity":"medium","message":"Detected usage of re.compile with an inefficient regular expression. This can lead to regular expression denial of service, which can result in service down time. Instead, check all regexes or use safer alternatives such as pyre2. [confidence low]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":26,"fingerprint":"python.lang.security.audit.regex_dos:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:26"},{"rule_id":"opengrep/python.lang.security.audit.dynamic-urllib-use-detected","severity":"medium","message":"Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. [confidence low]","path":"TaskPython/TaskInfo/taskinfo-win.py","line":10,"fingerprint":"python.lang.security.audit.dynamic-urllib-use-detected:TaskPython/TaskInfo/taskinfo-win.py:10"},{"rule_id":"opengrep/python.lang.security.insecure-hash-algorithm-md5","severity":"medium","message":"Detected MD5 hash algorithm which is considered insecure. MD5 is not collision resistant and is therefore not suitable as a cryptographic signature. Use SHA256 or SHA3 instead. [confidence medium]","path":"TaskPython/TaskInfo/whatcms.py","line":34,"fingerprint":"python.lang.security.insecure-hash-algorithm-md5:TaskPython/TaskInfo/whatcms.py:34"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":28,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/assess_quality.py:28"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":38,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/assess_quality.py:38"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":48,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/assess_quality.py:48"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":63,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/assess_quality.py:63"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":72,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/assess_quality.py:72"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/assess_quality.py","line":119,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/assess_quality.py:119"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":209,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/ip_pool.py:209"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":214,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/ip_pool.py:214"},{"rule_id":"opengrep/python.lang.security.audit.formatted-sql-query","severity":"medium","message":"Detected possible formatted SQL query. Use parameterized queries instead. [confidence low]","path":"TaskPython/proxy/ip_pool.py","line":241,"fingerprint":"python.lang.security.audit.formatted-sql-query:TaskPython/proxy/ip_pool.py:241"},{"rule_id":"opengrep/python.lang.security.audit.eval-detected","severity":"medium","message":"Detected the use of eval(). eval() can be dangerous if used to evaluate dynamic content. If this content can be input from outside the program, this may be a code injection vulnerability. Ensure evaluated content is not definable by external sources. [confidence low]","path":"TaskPython/taskspider.py","line":384,"fingerprint":"python.lang.security.audit.eval-detected:TaskPython/taskspider.py:384"},{"rule_id":"opengrep/php.lang.security.injection.tainted-callable","severity":"medium","message":"Callable based on user input risks remote code execution. [confidence medium]","path":"ajax.php","line":11,"fingerprint":"php.lang.security.injection.tainted-callable:ajax.php:11"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"file.php","line":16,"fingerprint":"php.lang.security.injection.tainted-filename:file.php:16"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"file.php","line":17,"fingerprint":"php.lang.security.injection.tainted-filename:file.php:17"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"fileinfo.php","line":16,"fingerprint":"php.lang.security.injection.tainted-filename:fileinfo.php:16"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"fileinfo.php","line":17,"fingerprint":"php.lang.security.injection.tainted-filename:fileinfo.php:17"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"filespider.php","line":18,"fingerprint":"php.lang.security.injection.tainted-filename:filespider.php:18"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"filespider.php","line":20,"fingerprint":"php.lang.security.injection.tainted-filename:filespider.php:20"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"filespider.php","line":22,"fingerprint":"php.lang.security.injection.tainted-filename:filespider.php:22"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/login.html","line":63,"fingerprint":"python.django.security.django-no-csrf-token:html/login.html:63"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/point.html","line":137,"fingerprint":"python.django.security.django-no-csrf-token:html/point.html:137"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/point.html","line":158,"fingerprint":"python.django.security.django-no-csrf-token:html/point.html:158"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/pro.html","line":145,"fingerprint":"python.django.security.django-no-csrf-token:html/pro.html:145"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/pro.html","line":171,"fingerprint":"python.django.security.django-no-csrf-token:html/pro.html:171"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/set.html","line":139,"fingerprint":"python.django.security.django-no-csrf-token:html/set.html:139"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/set.html","line":167,"fingerprint":"python.django.security.django-no-csrf-token:html/set.html:167"},{"rule_id":"opengrep/python.django.security.django-no-csrf-token","severity":"medium","message":"Manually-created forms in django templates should specify a csrf_token to prevent CSRF attacks. [confidence medium]","path":"html/vul.html","line":150,"fingerprint":"python.django.security.django-no-csrf-token:html/vul.html:150"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"include/common.fun.php","line":1148,"fingerprint":"php.lang.security.injection.tainted-filename:include/common.fun.php:1148"},{"rule_id":"opengrep/php.lang.security.unlink-use","severity":"medium","message":"Using user input when deleting files with `unlink()` is potentially dangerous. A malicious actor could use this to modify or access files they have no right to. [confidence low]","path":"include/common.fun.php","line":1149,"fingerprint":"php.lang.security.unlink-use:include/common.fun.php:1149"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"include/common.fun.php","line":1149,"fingerprint":"php.lang.security.injection.tainted-filename:include/common.fun.php:1149"},{"rule_id":"opengrep/php.lang.security.injection.tainted-filename","severity":"medium","message":"File name based on user input risks server-side request forgery. [confidence medium]","path":"include/doc.class.php","line":229,"fingerprint":"php.lang.security.injection.tainted-filename:include/doc.class.php:229"},{"rule_id":"opengrep/php.lang.security.injection.tainted-callable","severity":"medium","message":"Callable based on user input risks remote code execution. [confidence medium]","path":"index.php","line":18,"fingerprint":"php.lang.security.injection.tainted-callable:index.php:18"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":5,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":5,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":5,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `i` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `t` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":9,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":9,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":9,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:9"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":9,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `e` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"js/jquery-ui.js","line":10,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:js/jquery-ui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `e` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"js/jquery-ui.js","line":10,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:js/jquery-ui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":10,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":10,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/jquery-ui.js","line":10,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/jquery-ui.js:10"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":11,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:11"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":11,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:11"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":12,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:12"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/jquery-ui.js","line":12,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/jquery-ui.js:12"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":9,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:9"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":52,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:52"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":61,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:61"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":73,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:js/scripts.js:73"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":73,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:73"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":96,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:js/scripts.js:96"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":96,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:96"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":186,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:186"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":234,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:js/scripts.js:234"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":237,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:js/scripts.js:237"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":237,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:237"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":237,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:js/scripts.js:237"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":241,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:241"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":241,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:241"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":270,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:270"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":286,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:js/scripts.js:286"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":286,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:286"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":295,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:295"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"js/scripts.js","line":307,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:js/scripts.js:307"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":307,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:307"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":386,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:386"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"js/scripts.js","line":391,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:js/scripts.js:391"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/shims.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/shims.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:js/shims.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:js/shims.js:1"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"js/shims.js","line":1,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:js/shims.js:1"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/banner.py","line":39,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:TaskPython/TaskInfo/subDomainsBrute-master/utils/banner.py:39"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/page_catcher.py","line":82,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:TaskPython/TaskInfo/subDomainsBrute-master/utils/page_catcher.py:82"},{"rule_id":"opengrep/python.lang.security.audit.insecure-transport.requests.request-with-http","severity":"low","message":"Detected a request using 'http://'. This request will be unencrypted, and attackers could listen into traffic on the network and be able to obtain sensitive information. Use 'https://' instead. [confidence medium]","path":"TaskPython/taskspider.py","line":381,"fingerprint":"python.lang.security.audit.insecure-transport.requests.request-with-http:TaskPython/taskspider.py:381"}],"evidence":[],"data":{"rulesets":["php","python","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":2.0,"vulnerabilities":4.0,"vulns_critical":1.0,"vulns_high":2.0,"vulns_medium":1.0,"vulns_low":0.0,"vulns_unknown":0.0,"penalty":23.0},"findings":[{"rule_id":"osv/GHSA-x7m3-jprg-wc5g","severity":"critical","message":"gevent@1.2.1 (PyPI) is affected by PYSEC-2023-177, GHSA-x7m3-jprg-wc5g","path":"TaskPython/TaskInfo/BBScan/requirements.txt","line":null,"fingerprint":"gevent@1.2.1 (PyPI):GHSA-x7m3-jprg-wc5g"},{"rule_id":"osv/GHSA-45c3-73f7-pv4m","severity":"high","message":"dnspython@1.15.0 (PyPI) is affected by GHSA-45c3-73f7-pv4m","path":"TaskPython/TaskInfo/BBScan/requirements.txt","line":null,"fingerprint":"dnspython@1.15.0 (PyPI):GHSA-45c3-73f7-pv4m"},{"rule_id":"osv/GHSA-vvf4-9x63-8xvv","severity":"high","message":"dnspython@1.15.0 (PyPI) is affected by GHSA-vvf4-9x63-8xvv","path":"TaskPython/TaskInfo/BBScan/requirements.txt","line":null,"fingerprint":"dnspython@1.15.0 (PyPI):GHSA-vvf4-9x63-8xvv"},{"rule_id":"osv/GHSA-3rq5-2g8h-59hc","severity":"medium","message":"dnspython@1.15.0 (PyPI) is affected by PYSEC-2026-1307, GHSA-3rq5-2g8h-59hc","path":"TaskPython/TaskInfo/BBScan/requirements.txt","line":null,"fingerprint":"dnspython@1.15.0 (PyPI):GHSA-3rq5-2g8h-59hc"}],"evidence":[],"data":{"ecosystems":["PyPI"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0294,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":1671.0,"function_nloc":11078.0,"mean_ccn":3.82,"p90_ccn":9.0,"complex_functions":50.0,"long_functions":17.0,"many_param_functions":1.0,"risky_nloc_share":0.2926},"findings":[],"evidence":[{"kind":"complex-function","description":"g in js/shims.js: complexity 90, 1 lines","ref":"js/shims.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/shims.js#L1","weight":1.0},{"kind":"complex-function","description":"_generateHTML in js/jquery-ui.js: complexity 87, 1 lines","ref":"js/jquery-ui.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery-ui.js#L9","weight":1.0},{"kind":"complex-function","description":"_scan_worker in TaskPython/TaskInfo/BBScan/BBScan.py: complexity 50, 95 lines","ref":"TaskPython/TaskInfo/BBScan/BBScan.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/BBScan/BBScan.py#L389","weight":0.8333333333333334},{"kind":"complex-function","description":"_doKeyDown in js/jquery-ui.js: complexity 45, 2 lines","ref":"js/jquery-ui.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery-ui.js#L8","weight":0.75},{"kind":"complex-function","description":"drag in js/jquery-ui.js: complexity 44, 1 lines","ref":"js/jquery-ui.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery-ui.js#L5","weight":0.7333333333333333},{"kind":"complex-function","description":"parseDate in js/jquery-ui.js: complexity 41, 1 lines","ref":"js/jquery-ui.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery-ui.js#L9","weight":0.6833333333333333},{"kind":"complex-function","description":"$.htmlClean in js/jquery.htmlClean.js: complexity 41, 112 lines","ref":"js/jquery.htmlClean.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery.htmlClean.js#L34","weight":0.6833333333333333},{"kind":"complex-function","description":"render in js/jquery.htmlClean.js: complexity 37, 74 lines","ref":"js/jquery.htmlClean.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery.htmlClean.js#L223","weight":0.6166666666666667},{"kind":"complex-function","description":"_mouseDrag in js/jquery-ui.js: complexity 33, 2 lines","ref":"js/jquery-ui.js","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/js/jquery-ui.js#L6","weight":0.55},{"kind":"complex-function","description":"_scan in TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py: complexity 31, 89 lines","ref":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py#L229","weight":0.5166666666666667}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":11237.0,"duplicated_lines":2170.0,"duplicated_share":0.1931,"files":78.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/BBScan/BBScan.py:211 and TaskPython/TaskInfo/BBScan/BBScan.py:230","ref":"TaskPython/TaskInfo/BBScan/BBScan.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/BBScan/BBScan.py#L211","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/fileinfo.php:1 and file.php:1","ref":"TaskPython/TaskInfo/fileinfo.php","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/fileinfo.php#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/subDomainsBrute-master/ip_translate.py:42 and TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:214","ref":"TaskPython/TaskInfo/subDomainsBrute-master/ip_translate.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/ip_translate.py#L42","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:94 and TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:139","ref":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py#L94","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/subDomainsBrute-master/utils/baidu.py:86 and TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py:116","ref":"TaskPython/TaskInfo/subDomainsBrute-master/utils/baidu.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/utils/baidu.py#L86","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:38 and TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:56","ref":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py#L38","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py:125 and TaskPython/TaskInfo/subDomainsBrute-master/utils/get_ssl.py:43","ref":"TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py#L125","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/subDomainsBrute-master/utils/threatcrowd.py:30 and TaskPython/TaskInfo/subDomainsBrute-master/utils/threatminer.py:31","ref":"TaskPython/TaskInfo/subDomainsBrute-master/utils/threatcrowd.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/subDomainsBrute-master/utils/threatcrowd.py#L30","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/taskinfo-win.py:14 and TaskPython/taskscan.py:26","ref":"TaskPython/TaskInfo/taskinfo-win.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/taskinfo-win.py#L14","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: TaskPython/TaskInfo/taskinfo-win.py:355 and TaskPython/taskspider.py:719","ref":"TaskPython/TaskInfo/taskinfo-win.py","url":"https://github.com/TideSec/WDScanner/blob/aebfddd4eb2d4f719b56a798f3ff196302baa55e/TaskPython/TaskInfo/taskinfo-win.py#L355","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":142.0,"weighted_findings":206.25,"scanned_lines":14494.0,"category:best-practice":125.0,"category:correctness":16.0,"category:maintainability":1.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":568,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/BBScan/BBScan.py:568"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":672,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/BBScan/BBScan.py:672"},{"rule_id":"opengrep/python.lang.correctness.list-modify-while-iterate","severity":"high","message":"It appears that `ips_to_scan` is a list that is being modified while in a for loop. This will likely cause a runtime error or an infinite loop.","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":695,"fingerprint":"python.lang.correctness.list-modify-while-iterate:TaskPython/TaskInfo/BBScan/BBScan.py:695"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/subDomainsBrute-master/extract_domain.py","line":1,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/subDomainsBrute-master/extract_domain.py:1"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/lib/threadpool.py","line":150,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/lib/threadpool.py:150"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/lib/threadpool.py","line":186,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/lib/threadpool.py:186"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/subDomainsBrute-master/run.py","line":4,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/subDomainsBrute-master/run.py:4"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":85,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:85"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":93,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:93"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py","line":68,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py:68"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py","line":75,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py:75"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/netcraft.py","line":46,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/netcraft.py:46"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":77,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:77"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":122,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:122"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":131,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:131"},{"rule_id":"opengrep/python.lang.correctness.list-modify-while-iterate","severity":"high","message":"It appears that `normal_lines` is a list that is being modified while in a for loop. This will likely cause a runtime error or an infinite loop.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":196,"fingerprint":"python.lang.correctness.list-modify-while-iterate:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:196"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":228,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:228"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":426,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:426"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/taskinfo-win.py","line":48,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/taskinfo-win.py:48"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/taskinfo-win.py","line":60,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/taskinfo-win.py:60"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/taskinfo-win.py","line":77,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/taskinfo-win.py:77"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/taskinfo-win.py","line":187,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/taskinfo-win.py:187"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/taskinfo-win.py","line":191,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/taskinfo-win.py:191"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/taskinfo-win.py","line":363,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/taskinfo-win.py:363"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/TaskInfo/taskinfo-win.py","line":368,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/TaskInfo/taskinfo-win.py:368"},{"rule_id":"opengrep/python.lang.best-practice.open-never-closed","severity":"high","message":"file object opened without corresponding close","path":"TaskPython/TaskInfo/whatcms.py","line":24,"fingerprint":"python.lang.best-practice.open-never-closed:TaskPython/TaskInfo/whatcms.py:24"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/proxy/ip_pool.py","line":110,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/proxy/ip_pool.py:110"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/proxy/ip_pool.py","line":122,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/proxy/ip_pool.py:122"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/proxy/ip_pool.py","line":134,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/proxy/ip_pool.py:134"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/proxy/ip_pool.py","line":146,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/proxy/ip_pool.py:146"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/proxy/ip_pool.py","line":190,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/proxy/ip_pool.py:190"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/taskscan.py","line":22,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/taskscan.py:22"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/taskscan.py","line":90,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/taskscan.py:90"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/taskscan.py","line":95,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/taskscan.py:95"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/taskspider.py","line":112,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/taskspider.py:112"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/taskspider.py","line":726,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/taskspider.py:726"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"TaskPython/taskspider.py","line":731,"fingerprint":"python.lang.best-practice.arbitrary-sleep:TaskPython/taskspider.py:731"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":127,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:127"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":187,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:187"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":213,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:213"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":232,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:232"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":358,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:358"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":664,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:664"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/BBScan/BBScan.py","line":672,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/BBScan/BBScan.py:672"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/extract_domain.py","line":1,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/extract_domain.py:1"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/extract_domain.py","line":13,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/extract_domain.py:13"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/run.py","line":4,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/run.py:4"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":64,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:64"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":101,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:101"},{"rule_id":"opengrep/python.lang.correctness.use-sys-exit","severity":"medium","message":"Detected use of `exit`. Use `sys.exit` over the python shell `exit` built-in. `exit` is a helper for the interactive shell and may not be available on all Python implementations.","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":121,"fingerprint":"python.lang.correctness.use-sys-exit:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:121"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":130,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:130"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":169,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:169"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":329,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:329"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py","line":347,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/subDomainsBrute.py:347"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/banner.py","line":39,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/banner.py:39"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py","line":35,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py:35"},{"rule_id":"opengrep/python.requests.best-practice.use-timeout","severity":"medium","message":"Detected a 'requests' call without a timeout set. By default, 'requests' calls wait until the connection is closed. This means a 'requests' call without a timeout will hang the program if a response is never received. Consider setting a timeout for all 'requests'.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py","line":35,"fingerprint":"python.requests.best-practice.use-timeout:TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py:35"},{"rule_id":"opengrep/python.requests.best-practice.python.requests.best-practice.use-response-json-shortcut","severity":"medium","message":"The requests library has a convenient shortcut for reading JSON responses, which lets you stop worrying about deserializing the response yourself.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py","line":36,"fingerprint":"python.requests.best-practice.python.requests.best-practice.use-response-json-shortcut:TaskPython/TaskInfo/subDomainsBrute-master/utils/captcha.py:36"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":35,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:35"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":52,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:52"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":85,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:85"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py","line":93,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/common.py:93"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/fileutils.py","line":79,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/fileutils.py:79"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/fileutils.py","line":92,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/fileutils.py:92"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/fileutils.py","line":99,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/fileutils.py:99"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/g_config.py","line":16,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/g_config.py:16"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py","line":37,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py:37"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py","line":45,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/get_by_ssl.py:45"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py","line":65,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py:65"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py","line":104,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/juanluo.py:104"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/page_catcher.py","line":82,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/TaskInfo/subDomainsBrute-master/utils/page_catcher.py:82"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":33,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:33"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":109,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:109"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":146,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:146"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":175,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:175"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":242,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:242"},{"rule_id":"opengrep/python.lang.maintainability.useless-if-body","severity":"medium","message":"Useless if statement; both blocks have the same body","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":286,"fingerprint":"python.lang.maintainability.useless-if-body:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:286"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py","line":402,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/subDomainsBrute-master/utils/sub_domains_brute.py:402"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":16,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:16"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":48,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:48"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":50,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:50"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":60,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:60"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":77,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:77"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":135,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:135"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":161,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:161"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":180,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:180"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":182,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:182"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":187,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:187"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":191,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:191"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":221,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:221"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":222,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:222"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":223,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:223"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":224,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:224"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":225,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:225"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":226,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:226"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":227,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:227"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":228,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:228"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":229,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:229"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/taskinfo-win.py","line":260,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/taskinfo-win.py:260"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/whatcms.py","line":24,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/whatcms.py:24"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/TaskInfo/whatcms.py","line":26,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/TaskInfo/whatcms.py:26"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/proxy/assess_quality.py","line":96,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/proxy/assess_quality.py:96"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/proxy/ip_pool.py","line":68,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/proxy/ip_pool.py:68"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/proxy/ip_pool.py","line":166,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/proxy/ip_pool.py:166"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskscan.py","line":28,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskscan.py:28"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/taskspider.py","line":113,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/taskspider.py:113"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":206,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:206"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/taskspider.py","line":381,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/taskspider.py:381"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":404,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:404"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":492,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:492"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":494,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:494"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":496,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:496"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":574,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:574"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":576,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:576"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":578,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:578"},{"rule_id":"opengrep/python.requests.best-practice.use-raise-for-status","severity":"medium","message":"There's an HTTP request made with requests, but the raise_for_status() utility method isn't used. This can result in request errors going unnoticed and your code behaving in unexpected ways, such as if your authorization API returns a 500 error while you're only checking for a 401.","path":"TaskPython/taskspider.py","line":629,"fingerprint":"python.requests.best-practice.use-raise-for-status:TaskPython/taskspider.py:629"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":638,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:638"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"TaskPython/taskspider.py","line":693,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:TaskPython/taskspider.py:693"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":10,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:10"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":23,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:23"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":37,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:37"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":50,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:50"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":63,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:63"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":76,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:76"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":89,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:89"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":101,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:101"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":113,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:113"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":125,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:125"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"js/action.js","line":139,"fingerprint":"javascript.lang.best-practice.javascript-alert:js/action.js:139"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`e` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`c` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":5,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`h` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":6,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:6"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`e` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`s` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":7,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:7"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`o` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`n` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`p` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":8,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:8"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`t` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":9,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:9"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`s` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":10,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:10"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`s` is assigned twice; the first assignment is useless","path":"js/jquery-ui.js","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:js/jquery-ui.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`b` is assigned twice; the first assignment is useless","path":"js/shims.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:js/shims.js:1"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":14494.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":6.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":151.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}