External/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-12-17 17:56:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixes #20484: Configure CodeQL to exclude URL redirect false positives

Browse Source
This commit is contained in:
Jason Novinger 2025-10-02 16:27:31 -05:00 committed by Jeremy Stretch
parent 5f77d684e1
commit c094699dc0
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/codeql/codeql-config.yml vendored
View File

@ -1,3 +1,11 @@
paths-ignore: paths-ignore:
# Ignore compiled JS # Ignore compiled JS
- netbox/project-static/dist - netbox/project-static/dist
query-filters:
# Exclude py/url-redirection: NetBox uses safe_for_redirect() wrapper function
# which validates all redirects via Django's url_has_allowed_host_and_scheme().
# CodeQL's taint tracking doesn't recognize wrapper functions without custom
# query configuration. See #20484.
- exclude:
id: py/url-redirection