T09 · Insecure Skill Coding Practices
Error
- Location
scripts/full-audit.sh:199- Finding
Arbitrary JavaScript Execution Through Output Directory Injection
- Content
View full analysis
> "$report" echo "" >> "$report" node -e " const fs = require('fs'); try { const data = JSON.parse(fs.readFileSync('$OUTPUT_DIR/axe-full-$TIMESTAMP.json', 'utf8')); const violations = data.violations || []; const incomplete = data.incomplete || []; const passes = data.passes || []; console.log('| Kategori | Sayı |'); console.log('|----------|------|'); console.log('| İhlaller | ' + violations.length + ' |'); console.log('| İncelenecek | ' + incomplete.length + ' |'); console.log('| Geçen | ' + passes.length + ' |'); console.log(''); if (violations.length > 0) { console.log('### İhlal Detayları'); console.log(''); violations.forEach(v => { console.log('#### ' + v.id); console.log(''); console.log('- **Etki:** ' + v.impact); console.log('- **Açıklama:** ' + v.description); console.log('- **Yardım:** ' + v.helpUrl); console.log('- **Etkilenen Element:** ' + v.nodes.length); console.log(''); }); } } catch (e) { console.log('Sonuçlar işlenemedi'); } " >> "$report" 2>/dev/null || echo "Sonuçlar işlenemedi" >> "$report" fi ``` The same construction is used for the Lighthouse report: ```bash node -e " const fs = require('fs'); try ...[truncated 1668 chars]- Remediation
View remediation