T09 · Insecure Skill Coding Practices
Error
- Location
scripts/bitbucket.mjs:84- Finding
Bitbucket Credentials Can Be Disclosed to an Untrusted Pagination Origin
- Content
View full analysis
setTimeout(r, backoff)); continue; } } if (resp.status === 204) return null; const body = await resp.text(); let json; try { json = JSON.parse(body); } catch { json = null; } if (!resp.ok) { const msg = json?.error?.message || json?.error?.detail || (json?.error && typeof json.error === 'string' ? json.error : null) || json?.message || body || resp.statusText; const err = new Error(msg); err.statusCode = resp.status; throw err; } return json; } } ``` ```js async function fetchAllPages(path, o, extra = {}) { if (!o.all) { return await bbFetch(`${path}${qs(o, extra)}`); } const allValues = []; let url = `${path}${qs(o, extra)}`; while (url) { const d = await bbFetch(url); if (d && d.values) allValues.push(...d.values); url = d && d.next ? d.next : null; ...[truncated 2460 chars]- Remediation
View remediation