T09 · Insecure Skill Coding Practices
Warning
- Location
lib.sh:277- Finding
Unredacted Diagnostic Data Can Be Sent to a User-Configured Healthcheck Endpoint
- Content
View full analysis
/dev/null 2>&1 \ || log_warn "Healthcheck ping failed for state '${state:-success}'" else curl -fsS -m 10 --retry 2 "$url" >/dev/null 2>&1 \ || log_warn "Healthcheck ping failed for state '${state:-success}'" fi } ``` Related failure calls include: ```bash if [[ $BACKUP_EXIT -ne 0 ]]; then log_error "restic backup failed (exit $BACKUP_EXIT)" log_error "$BACKUP_OUTPUT" tg_failure "restic backup failed (exit $BACKUP_EXIT):\n\n$BACKUP_OUTPUT" hc_send /fail "restic backup failed (exit $BACKUP_EXIT)" exit 1 fi ``` ```bash if [[ $FORGET_EXIT -ne 0 ]]; then log_error "restic forget failed (exit $FORGET_EXIT)" log_error "$FORGET_OUTPUT" tg_failure "restic forget failed (exit $FORGET_EXIT):\n\n$FORGET_OUTPUT" hc_send /fail "restic forget failed (exit $FORGET_EXIT)" exit 1 fi ``` ```bash if [[ $CHECK_EXIT -ne 0 ]]; then log_error "restic check failed (exit $CHECK_EXIT)" log_error "$CHECK_OUTPUT" tg_failure "restic check failed (exit $CHECK_EXIT):\n\n$CHECK_OUTPUT" hc_send /fail "restic check failed (exit $CHECK_EXIT)" fi ``` ### Technical Analysis When both external healthchecks and `privacy.send_error_details` are enabled, `hc_send` tr ...[truncated 2242 chars]- Remediation
View remediation