T09 · Insecure Skill Coding Practices
Error
- Location
scripts/htaccess_gen.py:51- Finding
Apache Configuration Injection Through Unsanitized CLI Arguments
- Content
View full analysis
") parts.append(f' Header set Access-Control-Allow-Origin "{origin}"') ``` ```python # Hotlink protection if args.hotlink_protection: domain = args.domain or "example.com" parts.append(section("Hotlink Protection")) parts.append("RewriteEngine On") parts.append("RewriteCond %{HTTP_REFERER} !^$") parts.append(f"RewriteCond %{{HTTP_REFERER}} !^https?://(www\\.)?{domain.replace('.', '\\.')} [NC]") parts.append("RewriteRule \\.(jpg|jpeg|png|gif|webp|svg)$ - [F,NC]") ``` ```python # IP blocking if args.block_ip: parts.append(section("IP Blocking")) parts.append("") parts.append(" Require all granted") for ip in args.block_ip: parts.append(f" Require not ip {ip}") parts.append("") ``` ```python # Directory index if args.index: parts.append(section("Directory Index")) parts.append(f"DirectoryIndex {args.index}") ``` ```python def redirect(args): code = args.type or 301 parts = [] parts.append("RewriteEngine On") parts.append(f"RewriteRule ^{args.from_path.lstrip('/')}$ {args.to} [L,R={code}]") print("\n".join(parts)) ``` ```python def rewrite(args): parts = [] parts.append("RewriteEngine On") if args.condition: for cond in args.condition: parts.append(f"RewriteCond {cond}") flags = args.flags or "[L,QSA]" parts.append(f"RewriteRule {args.pattern} {args.target} {flags}") ...[truncated 3267 chars]- Remediation
View remediation