{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:03.809065Z","repo":{"ref":{"host":"github.com","owner":"dathlin","name":"ClientServerProject"},"default_branch":"master","clone_url":"https://github.com/dathlin/ClientServerProject.git","html_url":"https://github.com/dathlin/ClientServerProject","description":"一个C-S模版，该模版由三部分的程序组成，一个服务端运行的程序，一个客户端运行的程序，还有一个公共的组件，实现了基础的账户管理功能，版本控制，软件升级，公告管理，消息群发，共享文件上传下载，批量文件传送功能。具体的操作方法见演示就行。本项目的一个目标是：提供一个基础的中小型系统的C-S框架，客户端有三种模式，无缝集成访问，winform版本，wpf版本，asp.net mvc版本，方便企业进行中小型系统的二次开发和个人学习。同时网络组件方便的支持读写三菱和西门子PLC的数据，详细见Readme","stars":1457,"forks":613,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":16213,"primary_language":"C#","license_spdx":"MIT","created_at":"2017-02-22T06:34:03Z","pushed_at":"2019-02-07T13:13:49Z","security_policy_url":null,"distribution":{"owner_created_at":"2016-05-13T07:26:24Z","owner_type":"User","release_assets":[]}},"commit_sha":"06bbf954e141e07cf17f5d1c53686b2e9e2bcbec","profile":{"lines_by_language":{"C#":23057,"JavaScript":6374,"Java":1126},"files_by_category":{"binary":195,"source":163,"other":130,"config":30,"vendored":12,"docs":10,"test":2},"source_lines":30514,"test_lines":43},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":49.0,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":39.6,"duplication":47.7,"lint":100.0,"testing":20.4,"docs":65.0,"type_safety":null,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 31% of function code in complex or long functions; 12% duplicated lines. Weakest area: testing."},"security":{"score":68.6,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":63.6,"dependencies":null,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 4 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":361.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":22066.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2017-02":{"loc":113,"attributed_loc":0},"2017-03":{"loc":121,"attributed_loc":0},"2017-04":{"loc":184,"attributed_loc":0},"2017-05":{"loc":1636,"attributed_loc":0},"2017-06":{"loc":107,"attributed_loc":0},"2017-07":{"loc":1754,"attributed_loc":0},"2017-08":{"loc":1,"attributed_loc":0},"2017-09":{"loc":3787,"attributed_loc":0},"2017-10":{"loc":8887,"attributed_loc":0},"2017-11":{"loc":5223,"attributed_loc":0},"2017-12":{"loc":36,"attributed_loc":0},"2018-02":{"loc":0,"attributed_loc":0},"2018-04":{"loc":9,"attributed_loc":0},"2018-05":{"loc":169,"attributed_loc":0},"2018-07":{"loc":39,"attributed_loc":0},"2019-02":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":120.0,"flagged_units":0.0,"pre_ai_era_bursts":2.0,"pre_ai_era_measured_loc":22066.0,"pre_ai_era_burst_loc":7417.0,"measured_loc":22066.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":1081.25,"median_loc_per_hour":77.25,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":7.0,"flagged_releases":0.0,"max_loc_per_day":146.1},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.0.3","to":"v1.0.4","loc":30,"days":13.68,"loc_per_day":2.2,"flagged":false},{"from":"v1.0.4","to":"V1.0.5","loc":5,"days":15.07,"loc_per_day":0.3,"flagged":false},{"from":"V1.0.5","to":"v1.0.6","loc":56,"days":11.94,"loc_per_day":4.7,"flagged":false},{"from":"v1.0.6","to":"v1.0.7","loc":69,"days":17.0,"loc_per_day":4.1,"flagged":false},{"from":"v1.0.7","to":"v1.1.0","loc":109,"days":4.18,"loc_per_day":26.1,"flagged":false},{"from":"v1.1.0","to":"v1.2.0","loc":1613,"days":11.04,"loc_per_day":146.1,"flagged":false},{"from":"v1.2.0","to":"v1.3.0","loc":421,"days":46.93,"loc_per_day":9.0,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":30514.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":150.0,"findings_high":4.0,"findings_medium":144.0,"findings_low":2.0,"weighted_findings":39.475,"scanned_lines":30514.0,"parse_errors":33.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/respond.js","line":12,"fingerprint":"javascript.browser.security.insecure-document-method:软件系统浏览器模版/Scripts/respond.js:12"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `div.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/respond.js","line":12,"fingerprint":"javascript.browser.security.insecure-innerhtml:软件系统浏览器模版/Scripts/respond.js:12"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js","line":12,"fingerprint":"javascript.browser.security.insecure-document-method:软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js:12"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `div.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js","line":12,"fingerprint":"javascript.browser.security.insecure-innerhtml:软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js:12"},{"rule_id":"opengrep/java.android.security.exported_activity","severity":"medium","message":"The application exports an activity. Any application on the device can launch the exported activity which may compromise the integrity of your application or its data.  Ensure that any exported activities do not have privileged access to your application's control plane. [confidence medium]","path":"AndroidTemplate/app/src/main/AndroidManifest.xml","line":20,"fingerprint":"java.android.security.exported_activity:AndroidTemplate/app/src/main/AndroidManifest.xml:20"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":72,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:72"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":96,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:96"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":190,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:190"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":284,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:284"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":286,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:286"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":295,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:295"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":316,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:316"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":439,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:439"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":484,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:484"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":510,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:510"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":510,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:510"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":555,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:555"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":557,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:557"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":558,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:558"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":605,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:605"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":617,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:617"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":629,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:629"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":643,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:643"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":643,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:643"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":666,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:666"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":677,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:677"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":680,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:680"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":700,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:700"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":715,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:715"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":769,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:769"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":782,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:782"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":935,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:935"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":988,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:988"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1215,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:1215"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1241,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1241"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1308,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1308"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1310,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1310"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1368,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1368"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1372,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1372"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1405,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1405"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1409,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1409"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1571,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1571"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1715,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1715"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1718,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1718"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1758,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:1758"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1834,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/bootstrap.js:1834"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1867,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:1867"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1904,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1904"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1904,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1904"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":1999,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:1999"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":2029,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:2029"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":2077,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:2077"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":2183,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:2183"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":2234,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:2234"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":2238,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/bootstrap.js:2238"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/bootstrap.js","line":2341,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/bootstrap.js:2341"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":27,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:27"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":54,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:54"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.prepend(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":59,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:59"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.append(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":62,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:62"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":68,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:68"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":68,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:68"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":82,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:82"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":123,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:123"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":138,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:138"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":139,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:139"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":154,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:154"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js","line":155,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.unobtrusive-ajax.js:155"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `i` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":249,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:249"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":297,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:297"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":300,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:300"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":342,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:342"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":344,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:344"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":415,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:415"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":552,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:552"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":586,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:586"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":630,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:630"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":631,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:631"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":728,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:728"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":731,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:731"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":731,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:731"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":742,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:742"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":772,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:772"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":790,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:790"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":874,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:874"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":885,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:885"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":907,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:907"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":908,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:908"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1033,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1033"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^((([a-z]|\\d|[!#\\$%&'\\*\\+\\-\\/=\\?\\^_`{\\|}~]|[\\u00A0-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFEF])+(\\.([a-z]|\\d|[!#\\$%&'\\*\\+\\-\\/=\\?\\^_`{\\|}~]|[\\u00A0-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFEF])+)*)|((\\x22)((((\\x20|\\x09)*(\\x0d\\x0a))?(\\x20|\\x09)+)?(([\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f] [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1130,"fingerprint":"javascript.lang.security.audit.detect-redos:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1130"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(https?|ftp):\\/\\/(((([a-z]|\\d|-|\\.|_|~|[\\u00A0-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFEF])|(%[\\da-f]{2})|[!\\$&'\\(\\)\\*\\+,;=]|:)*@)?(((\\d|[1-9]\\d|1\\d\\d|2[0-4]\\d|25[0-5])\\.(\\d|[1-9]\\d|1\\d\\d|2[0-4]\\d|25[0-5])\\.(\\d|[1-9]\\d|1\\d\\d|2[0-4]\\d|25[0-5])\\.(\\d|[1-9]\\d|1\\d\\d|2[0-4 [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1136,"fingerprint":"javascript.lang.security.audit.detect-redos:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1136"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `param` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1190,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1190"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1197,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1197"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1198,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1198"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":1281,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:1281"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":81,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:81"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":222,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:222"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":227,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:227"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":233,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:233"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `i` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":263,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.js:263"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":345,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:345"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":352,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:352"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":386,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:386"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":388,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:388"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":508,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:508"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":663,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:663"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":695,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:695"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":744,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:744"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":820,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:820"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":821,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:821"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":934,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:934"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":942,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/jquery.validate.js:942"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":946,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/jquery.validate.js:946"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":946,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:946"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":962,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:962"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `$` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":981,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.js:981"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `element` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-control [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":981,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.js:981"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `message` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-control [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":981,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.js:981"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":986,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:986"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1014,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1014"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1047,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1047"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1071,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:软件系统浏览器模版/Scripts/jquery.validate.js:1071"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1094,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1094"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1107,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1107"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1171,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1171"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1208,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1208"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1243,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1243"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1287,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1287"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1368,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1368"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^[a-zA-Z0-9.!#$%&'*+\\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to rev [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1384,"fingerprint":"javascript.lang.security.audit.detect-redos:软件系统浏览器模版/Scripts/jquery.validate.js:1384"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1452,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1452"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `$` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1455,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.js:1455"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `element` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-control [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1455,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.js:1455"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1492,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1492"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":1495,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.js:1495"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.html(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":77,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:77"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":77,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:77"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":124,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:124"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":182,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:182"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":234,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:234"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `params` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controll [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":345,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:345"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":376,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:376"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js","line":397,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:软件系统浏览器模版/Scripts/jquery.validate.unobtrusive.js:397"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js","line":611,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:软件系统浏览器模版/Scripts/jquery.validate-vsdoc.js:611"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"软件系统浏览器模版/Scripts/jquery.validate.js","line":798,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:软件系统浏览器模版/Scripts/jquery.validate.js:798"}],"evidence":[],"data":{"rulesets":["csharp","javascript","java"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":1148.0,"function_nloc":17479.0,"mean_ccn":2.53,"p90_ccn":5.0,"complex_functions":9.0,"long_functions":21.0,"many_param_functions":0.0,"risky_nloc_share":0.3088},"findings":[],"evidence":[{"kind":"complex-function","description":"FormServerWindow::DataProcessingWithStartA in 软件系统服务端模版/FormServerWindow.cs: complexity 40, 218 lines","ref":"软件系统服务端模版/FormServerWindow.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统服务端模版/FormServerWindow.cs#L465","weight":0.6666666666666666},{"kind":"complex-function","description":"FileSupport::GetFileRenderIcon in ClientsLibrary/FileSupport/FileSupport.cs: complexity 35, 136 lines","ref":"ClientsLibrary/FileSupport/FileSupport.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/FileSupport/FileSupport.cs#L55","weight":0.5833333333333334},{"kind":"complex-function","description":"applyMedia in 软件系统浏览器模版/Scripts/respond.js: complexity 30, 49 lines","ref":"软件系统浏览器模版/Scripts/respond.js","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统浏览器模版/Scripts/respond.js#L97","weight":0.5},{"kind":"complex-function","description":"applyMedia in 软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js: complexity 30, 49 lines","ref":"软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js#L146","weight":0.5},{"kind":"complex-function","description":"FormServerWindow::DataProcessingWithStartB in 软件系统服务端模版/FormServerWindow.cs: complexity 28, 142 lines","ref":"软件系统服务端模版/FormServerWindow.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统服务端模版/FormServerWindow.cs#L736","weight":0.4666666666666667},{"kind":"complex-function","description":"Tooltip.prototype.show in 软件系统浏览器模版/Scripts/bootstrap.js: complexity 21, 51 lines","ref":"软件系统浏览器模版/Scripts/bootstrap.js","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统浏览器模版/Scripts/bootstrap.js#L1429","weight":0.35},{"kind":"complex-function","description":"translate in 软件系统浏览器模版/Scripts/respond.js: complexity 17, 34 lines","ref":"软件系统浏览器模版/Scripts/respond.js","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统浏览器模版/Scripts/respond.js#L145","weight":0.2833333333333333},{"kind":"complex-function","description":"translate in 软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js: complexity 17, 34 lines","ref":"软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统浏览器模版/Scripts/respond.matchmedia.addListener.js#L194","weight":0.2833333333333333},{"kind":"complex-function","description":"check in 软件系统浏览器模版/Scripts/jquery.validate.js: complexity 16, 54 lines","ref":"软件系统浏览器模版/Scripts/jquery.validate.js","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/软件系统浏览器模版/Scripts/jquery.validate.js#L741","weight":0.26666666666666666},{"kind":"complex-function","description":"AccountLogin::AccountLoginServer in ClientsLibrary/AccountSupport/AccountLogin.cs: complexity 12, 115 lines","ref":"ClientsLibrary/AccountSupport/AccountLogin.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/AccountLogin.cs#L43","weight":0.2}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":19539.0,"duplicated_lines":2411.0,"duplicated_share":0.1234,"files":163.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: AndroidTemplate/app/src/main/java/com/example/UserSoftwareAndroidTemplate/LoginSupport/LoginActivity.java:226 and AndroidTemplate/app/src/main/java/com/example/UserSoftwareAndroidTemplate/LoginSupport/SplashActivity.java:166","ref":"AndroidTemplate/app/src/main/java/com/example/UserSoftwareAndroidTemplate/LoginSupport/LoginActivity.java","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/AndroidTemplate/app/src/main/java/com/example/UserSoftwareAndroidTemplate/LoginSupport/LoginActivity.java#L226","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/AccountLogin.cs:67 and ClientsLibrary/AccountSupport/AccountLogin.cs:164","ref":"ClientsLibrary/AccountSupport/AccountLogin.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/AccountLogin.cs#L67","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormAccountDetails.Designer.cs:5 and ClientsLibrary/AccountSupport/FormAccountSelect.Designer.cs:5","ref":"ClientsLibrary/AccountSupport/FormAccountDetails.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormAccountDetails.Designer.cs#L5","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormAccountDetails.Designer.cs:423 and ClientsLibrary/Configuration/ListConfiguration.Designer.cs:78","ref":"ClientsLibrary/AccountSupport/FormAccountDetails.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormAccountDetails.Designer.cs#L423","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormAccountDetails.cs:72 and ClientsLibrary/AccountSupport/FormInputNewRole.cs:29","ref":"ClientsLibrary/AccountSupport/FormAccountDetails.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormAccountDetails.cs#L72","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs:25 and ClientsLibrary/AccountSupport/FormRegisterAccount.Designer.cs:27","ref":"ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs#L25","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs:27 and CommonLibrary/BasicSupport/FormInputAndAction.designer.cs:27","ref":"ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs#L27","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs:110 and HslCommunicationNetTestTool/FormCreateClient.Designer.cs:131","ref":"ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormInputNewRole.Designer.cs#L110","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/AccountSupport/FormRegisterAccount.Designer.cs:29 and CommonLibrary/BasicSupport/FormVersionControl.designer.cs:29","ref":"ClientsLibrary/AccountSupport/FormRegisterAccount.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/AccountSupport/FormRegisterAccount.Designer.cs#L29","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ClientsLibrary/BasicSupport/FormDownloading.Designer.cs:26 and CommonLibrary/BasicSupport/FormMatterRemind.designer.cs:26","ref":"ClientsLibrary/BasicSupport/FormDownloading.Designer.cs","url":"https://github.com/dathlin/ClientServerProject/blob/06bbf954e141e07cf17f5d1c53686b2e9e2bcbec/ClientsLibrary/BasicSupport/FormDownloading.Designer.cs#L26","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":0.0,"weighted_findings":0.0,"scanned_lines":30514.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.0028,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.036,"test_lines":43.0,"source_lines":30514.0,"test_ratio":0.0014,"ci_files":0.0,"cochange_share":0.009,"cochange_commits":111.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":210.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}