🛡️ Open-source and cloud-native Web Application Firewall (WAF)
This report presents the forensic synthetic code analysis of bunkerity/bunkerweb, a Python project with 10,717 GitHub stars. SynthScan v2.0 examined 1,933,326 lines of code across 6079 source files, recording 3661 pattern matches distributed across 25 syntactic categories. The overall adjusted score of 2.3 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 3661 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/install-bunkerweb.sh | 101 | COMMENT | |
| LOW | misc/install-bunkerweb.sh | 241 | DOCKER_FASTAPI_PORT="8888" # api FastAPI service (container 8888) | COMMENT |
| LOW | misc/install-bunkerweb.sh | 761 | # Probe whether the controlling terminal answers control-sequence queries. | COMMENT |
| LOW | misc/install-bunkerweb.sh | 2341 | write_default_api_env_template() { | COMMENT |
| LOW | misc/install-bunkerweb.sh | 2361 | # LOG_LEVEL affects most components; CUSTOM_LOG_LEVEL overrides when provided. | COMMENT |
| LOW | misc/install-bunkerweb.sh | 2381 | # Enable and shape inbound IP allowlist for the API. | COMMENT |
| LOW | misc/install-bunkerweb.sh | 2401 | # API_SSL_CA_CERTS= | COMMENT |
| LOW | misc/install-bunkerweb.sh | 2421 | # Authentication endpoint limit. | COMMENT |
| LOW | misc/install-bunkerweb.sh | 7841 | COMMENT | |
| LOW | misc/update-openstreetmap-tiles.sh | 61 | echo "All tiles downloaded under $OUT_DIR." | COMMENT |
| LOW | misc/nginx2bw.sh | 1 | #!/bin/bash | COMMENT |
| LOW | misc/nginx2bw.sh | 561 | SERVE_FILES: "no" | COMMENT |
| LOW | tests/Upgrade.py | 1961 | else: | COMMENT |
| LOW | tests/Upgrade.py | 1981 | # "docker", | COMMENT |
| LOW | tests/Upgrade.py | 2001 | # "-c", | COMMENT |
| LOW | tests/Upgrade.py | 2021 | # "systemd-rhel", | COMMENT |
| LOW | tests/Upgrade.py | 2041 | # [ | COMMENT |
| LOW | tests/Upgrade.py | 2061 | # "bash", | COMMENT |
| LOW | tests/Upgrade.py | 2081 | # "-it", | COMMENT |
| LOW | tests/ui/services_page.py | 601 | # log_info("Start checking steps buttons and default SERVER_NAME state ...") | COMMENT |
| LOW | tests/ui/services_page.py | 621 | # log_error("Next button should be disabled, exiting ...") | COMMENT |
| LOW | tests/ui/services_page.py | 641 | # # Select antibot plugin and click on javascript value | COMMENT |
| LOW | tests/ui/services_page.py | 661 | # # Check if data-step is 1 looking for hidden | COMMENT |
| LOW | tests/ui/services_page.py | 681 | COMMENT | |
| LOW | tests/ui/services_page.py | 701 | # access_page(DRIVER, "//form[@data-services-modal-form and @data-simple]//button[@data-services-modal-submit='']", | COMMENT |
| LOW | tests/ui/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/bunkernet/api/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/whitelist/api/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/limit/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/antibot/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/redis/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/redis/requirements.txt | 21 | --hash=sha256:4640d96be84d82d02ed59ea2b7105a0f7b33abe8703703cd0ab0bf87c427522f \ | COMMENT |
| LOW | tests/core/redis/requirements.txt | 421 | --hash=sha256:04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d \ | COMMENT |
| LOW | tests/core/redis/main.py | 341 | # flush=True, | COMMENT |
| LOW | tests/core/redis/main.py | 361 | # ) | COMMENT |
| LOW | tests/core/redis/main.py | 381 | # print( | COMMENT |
| LOW | tests/core/redis/main.py | 401 | # key_value = redis_client.get(f"plugin_greylist_www.example.comip{ip_to_check}") | COMMENT |
| LOW | tests/core/redis/main.py | 421 | # "ℹ️ Checking if the dnsbl keys were created ...", | COMMENT |
| LOW | tests/core/greylist/api/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/authbasic/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/reverseproxy/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/reverseproxy/api/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/reversescan/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/sessions/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/blacklist/api/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/cors/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/redirect/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/dnsbl/init/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/errors/requirements.txt | 1 | # | COMMENT |
| LOW | tests/core/customcert/requirements.txt | 1 | # | COMMENT |
| LOW | docs/integrations.md | 3781 | # Replace with your DNS resolver | COMMENT |
| LOW | docs/overrides/main.html | 101 | COMMENT | |
| LOW | docs/fr/integrations.md | 3621 | ```yaml | COMMENT |
| LOW | examples/magento/setup-swarm.sh | 1 | #!/bin/bash | COMMENT |
| LOW | examples/reverse-proxy-singlesite/setup-swarm.sh | 1 | #!/bin/bash | COMMENT |
| LOW | examples/mongo-express/setup-swarm.sh | 1 | #!/bin/bash | COMMENT |
| LOW | examples/community/photoprism/photoprism-compose.yml | 1 | # Adapted Example Docker Compose config file for PhotoPrism (Linux / AMD64) | COMMENT |
| LOW | examples/community/photoprism/photoprism-compose.yml | 21 | # Troubleshooting Checklists: | COMMENT |
| LOW | examples/community/photoprism/photoprism-compose.yml | 101 | PHOTOPRISM_SITE_DESCRIPTION: "AI-Powered Photos App for the Decentralized Web" # meta site descript | COMMENT |
| LOW | examples/community/photoprism/photoprism-compose.yml | 121 | # - "/dev/nvidiactl:/dev/nvidiactl" | COMMENT |
| 1923 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | misc/install-bunkerweb.sh | 1328 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | misc/install-bunkerweb.sh | 1331 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 207 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 215 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 243 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 247 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 298 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 302 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 345 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 347 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 595 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 598 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 1284 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 2268 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 2273 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 2343 | # ============================== | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 2347 | # ============================== | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 3883 | # Render a section divider: "── Section ──────────────────────" | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 7171 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 7175 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/community/photoprism/photoprism-compose.yml | 3 | # ---------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | examples/community/photoprism/photoprism-compose.yml | 6 | # ---------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 12 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 14 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 72 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 74 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 190 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 192 | # -------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 312 | # -------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 314 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 497 | # -------------------------------------------------- | COMMENT |
| MEDIUM | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 499 | # -------------------------------------------------- | COMMENT |
| MEDIUM | src/common/utils/common_utils.py | 168 | # ----------------------- | COMMENT |
| MEDIUM | src/common/utils/common_utils.py | 170 | # ----------------------- | COMMENT |
| MEDIUM | src/common/helpers/utils.sh | 286 | # ============================================================================ | COMMENT |
| MEDIUM | src/common/helpers/utils.sh | 289 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 4 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 6 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 11 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 13 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 16 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 18 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 276 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 278 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 286 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 288 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 294 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 296 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | src/linux/build-freebsd.sh | 298 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 45 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 47 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 80 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 82 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 140 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 142 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 153 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 155 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 167 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 169 | # ------------------------------------------------------------ | COMMENT |
| MEDIUM | src/linux/build-freebsd.sh | 201 | # ------------------------------------------------------------ | COMMENT |
| 81 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/plugins.md | 773 | print("Error encountered:", error, flush=True) | CODE |
| MEDIUM | docs/zh/plugins.md | 769 | print("Error encountered:", error, flush=True) | CODE |
| MEDIUM | docs/de/plugins.md | 768 | print("Error encountered:", error, flush=True) | CODE |
| MEDIUM | docs/fr/plugins.md | 770 | print("Error encountered:", error, flush=True) | CODE |
| MEDIUM | docs/es/plugins.md | 767 | print("Error encontrado:", error, flush=True) | CODE |
| LOW⚡ | src/ui/main.py | 1052 | except Exception: | CODE |
| LOW⚡ | src/ui/main.py | 1060 | except Exception: | CODE |
| LOW | src/ui/main.py | 377 | except Exception as exec_err: | CODE |
| LOW | src/ui/main.py | 403 | except Exception as exc: | CODE |
| LOW | src/ui/main.py | 499 | except Exception as exc: | CODE |
| LOW | src/ui/main.py | 772 | except Exception: | CODE |
| LOW | src/ui/main.py | 800 | except Exception: | CODE |
| LOW | src/ui/main.py | 828 | except Exception: | CODE |
| LOW | src/ui/main.py | 1039 | except Exception: | CODE |
| LOW | src/ui/main.py | 1348 | except Exception: | CODE |
| LOW | src/ui/main.py | 1413 | except Exception: | CODE |
| LOW | src/ui/main.py | 1428 | except Exception: | CODE |
| MEDIUM | src/ui/app/models/instance.py | 104 | def reload(self) -> str: | CODE |
| LOW⚡ | src/ui/app/models/instance.py | 251 | except Exception: | CODE |
| LOW⚡ | src/ui/app/models/instance.py | 261 | except Exception: | CODE |
| LOW⚡ | src/ui/app/models/instance.py | 1444 | except Exception as e: | CODE |
| LOW⚡ | src/ui/app/models/instance.py | 1449 | except Exception as e: | CODE |
| LOW | src/ui/app/models/instance.py | 283 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 315 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 330 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 349 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 363 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 416 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 448 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 588 | except Exception as e: | CODE |
| LOW | src/ui/app/models/instance.py | 609 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 655 | except Exception as e: | CODE |
| LOW | src/ui/app/models/instance.py | 750 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 825 | except Exception as e: | CODE |
| LOW | src/ui/app/models/instance.py | 932 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 961 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 981 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 1325 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 1372 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 1379 | except Exception: | CODE |
| LOW | src/ui/app/models/instance.py | 1460 | except Exception as e: | CODE |
| LOW | src/ui/app/models/instance.py | 1530 | except Exception: | CODE |
| LOW | src/ui/app/models/biscuit.py | 139 | except Exception as e: | CODE |
| LOW | src/ui/app/models/biscuit.py | 176 | except Exception as e: | CODE |
| LOW | src/ui/app/models/biscuit.py | 222 | except Exception as e: | CODE |
| LOW | src/ui/app/routes/plugins.py | 370 | except Exception as e: | CODE |
| LOW | src/ui/app/routes/home.py | 61 | except Exception: | CODE |
| LOW | src/ui/app/routes/bans.py | 155 | except Exception: | CODE |
| LOW | src/ui/app/routes/bans.py | 281 | except Exception: | CODE |
| LOW | src/ui/app/routes/bans.py | 550 | except Exception as e: | CODE |
| LOW | src/ui/app/routes/bans.py | 576 | except Exception as e: | CODE |
| MEDIUM | src/ui/app/routes/bans.py | 148 | def _to_float(value, default=0.0): | CODE |
| MEDIUM | src/ui/app/routes/bans.py | 263 | def bans_fetch(): | CODE |
| LOW | src/ui/app/routes/templates.py | 114 | except Exception as exc: # pragma: no cover - defensive | CODE |
| LOW | src/ui/app/routes/templates.py | 131 | except Exception as exc: # pragma: no cover - defensive | CODE |
| LOW | src/ui/app/routes/templates.py | 139 | except Exception as exc: # pragma: no cover - defensive | CODE |
| LOW | src/ui/app/routes/setup.py | 378 | except Exception: | CODE |
| LOW | src/ui/app/routes/logs.py | 275 | except Exception: | CODE |
| LOW | src/ui/app/routes/reports.py | 110 | except Exception: | CODE |
| LOW | src/ui/app/routes/reports.py | 124 | except Exception: | CODE |
| 166 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/json2md.py | 342 | def get_global_readme_content(lang: str = "en"): | CODE |
| LOW | docs/assets/preserve-version-on-language-switch.js | 55 | function getCurrentContentPathSegments() { | CODE |
| LOW | docs/assets/toc-dropdown.js | 91 | function expandFirstDropdownIfNeeded() { | CODE |
| LOW⚡ | src/ui/main.py | 1066 | def _enforce_session_lifetime() -> bool: | CODE |
| LOW | src/ui/main.py | 234 | def create_global_jinja_loader(self): | CODE |
| LOW | src/ui/main.py | 899 | def update_latest_stable_release(): | CODE |
| LOW | src/ui/main.py | 956 | def schedule_database_state_check(request_method: str, request_path: str): | CODE |
| LOW | src/ui/main.py | 1025 | def _delete_session_store_entry(sid: str) -> None: | CODE |
| LOW | src/ui/app/utils.py | 323 | def password_exceeds_bcrypt_limit(password: str) -> bool: | CODE |
| LOW | src/ui/app/utils.py | 367 | def get_latest_stable_release(): | CODE |
| LOW | src/ui/app/utils.py | 478 | def _revoked_session_ttl_seconds(): | CODE |
| LOW⚡ | src/ui/app/models/instance.py | 245 | def _get_max_blocked_requests_redis(self) -> int: | CODE |
| LOW⚡ | src/ui/app/models/instance.py | 254 | def _get_redis_scan_start_index(self, redis_client, max_requests: int) -> int: | CODE |
| LOW | src/ui/app/models/instance.py | 299 | def _get_redis_top_ip_counts_from_facets(self, redis_client, *, limit: int = 10) -> tuple[list[tuple[str, int]], int | CODE |
| LOW | src/ui/app/models/instance.py | 336 | def _get_redis_pane_counts_from_facets(self, redis_client, pane_fields: List[str]) -> Optional[dict[str, dict[str, d | CODE |
| LOW | src/ui/app/models/instance.py | 371 | def _get_redis_pane_counts_streaming_fallback( | CODE |
| LOW | src/ui/app/models/instance.py | 398 | def _get_redis_requests_fast_page( | CODE |
| LOW | src/ui/app/models/instance.py | 972 | def _iter_instance_api_requests(self): | CODE |
| LOW | src/ui/app/models/ui_database.py | 321 | def refresh_ui_user_recovery_codes(self, username: str, codes: List[str]) -> str: | CODE |
| LOW | src/ui/app/models/ui_database.py | 346 | def delete_ui_user_recovery_codes(self, username: str) -> str: | CODE |
| LOW | src/ui/app/models/ui_database.py | 374 | def get_ui_user_recovery_codes(self, username: str) -> List[str]: | CODE |
| LOW | src/ui/app/models/ui_database.py | 389 | def use_ui_user_recovery_code(self, username: str, hashed_code: str) -> str: | CODE |
| LOW | src/ui/app/models/ui_database.py | 409 | def delete_ui_user_old_sessions(self, username: str) -> str: | CODE |
| LOW | src/ui/app/models/ui_database.py | 430 | def update_ui_user_columns_preferences(self, username: str, table_name: str, columns: Dict[str, bool]) -> str: | CODE |
| LOW | src/ui/app/models/ui_database.py | 453 | def get_ui_user_columns_preferences(self, username: str, table_name: str) -> Dict[str, bool]: | CODE |
| LOW | src/ui/app/models/biscuit.py | 250 | def _apply_core_role_permissions(self, builder: BiscuitBuilder, role: str) -> None: | CODE |
| LOW | src/ui/app/static/js/dataTableInit.js | 32 | (function patchDataTablesButtonsForFormulaInjection() { | CODE |
| LOW | src/ui/app/static/js/i18n.js | 226 | function updateTableLanguageAndTranslations(table) { | CODE |
| LOW | src/ui/app/static/js/pages/profile.js | 348 | function initializeAccountImageHandling() { | CODE |
| LOW | src/ui/app/static/js/pages/bans.js | 1591 | function initializeBanScopeHandlers($banItem) { | CODE |
| LOW | src/ui/app/static/js/pages/home.js | 124 | function sanitizeDonutSliceEffects(chartSelector) { | CODE |
| LOW | src/ui/app/static/js/pages/home.js | 1234 | function updateChartsWithTranslations() { | CODE |
| LOW | src/ui/app/static/js/pages/home.js | 1302 | function setupLanguageChangeListener() { | CODE |
| LOW | src/ui/app/static/js/pages/logs.js | 346 | function scheduleAnnotationRefresh() { | CODE |
| LOW | src/ui/app/static/js/pages/reports.js | 1256 | function normalizeBadBehaviorEntries(data) { | CODE |
| LOW | src/ui/app/static/js/pages/reports.js | 1298 | function parseBadBehaviorEntryTimestamp(entry) { | CODE |
| LOW | src/ui/app/static/js/pages/reports.js | 1504 | function shouldFilterBadBehaviorByServer(serverName) { | CODE |
| LOW | src/ui/app/static/js/pages/reports.js | 1511 | function filterBadBehaviorEntriesByServer(entries, serverName) { | CODE |
| LOW | src/ui/app/static/js/pages/reports.js | 1576 | function formatBadBehaviorTimestamp(value) { | CODE |
| LOW | …/ui/app/static/libs/lottie-player/lottie-player.min.js | 76 | */function o(t,e,r){var i,s=t;return"object"==typeof t?(s=t.slot,i=t):i={flatten:e},r?l({slot:s,flatten:e,selector:r} | COMMENT |
| LOW | src/ui/app/routes/configs.py | 210 | def _use_modsecurity_global_crs() -> bool: | CODE |
| LOW | src/ui/app/routes/templates.py | 33 | def _build_multisite_settings_catalog() -> List[Dict[str, Any]]: | CODE |
| LOW | src/ui/app/routes/templates.py | 179 | def _convert_template_details(details: Dict[str, Any]) -> Dict[str, Any]: | CODE |
| LOW | src/ui/app/routes/templates.py | 231 | def _load_template_from_request() -> Dict[str, Any]: | CODE |
| LOW | src/ui/app/routes/templates.py | 466 | def templates_delete_multiple(): | CODE |
| LOW | src/ui/app/routes/utils.py | 225 | def extract_file_setting_names(variables: Dict[str, str]) -> Dict[str, str]: | CODE |
| LOW | src/ui/app/routes/reports.py | 27 | def prune_reports_filters_cache(cache_now: float) -> None: | CODE |
| LOW | src/ui/app/routes/reports.py | 44 | def build_search_panes_options(pane_counts_backend: dict) -> dict: | CODE |
| LOW | src/scheduler/JobScheduler.py | 319 | def __update_cache_permissions(self): | CODE |
| LOW | src/scheduler/main.py | 321 | def generate_external_plugins(original_path: Union[Path, str] = EXTERNAL_PLUGINS_PATH, *, send: bool = True): | CODE |
| LOW⚡ | src/common/core/misc/jobs/download-plugins.py | 58 | def _plugin_checksum_matches_database(plugin_path: Path, checksum: str) -> bool: | CODE |
| LOW⚡ | src/common/core/misc/jobs/download-plugins.py | 68 | def _cleanup_stale_plugin_dirs() -> None: | CODE |
| LOW⚡ | src/common/core/misc/jobs/download-plugins.py | 76 | def _install_plugin_atomically(plugin_path: Path, new_plugin_path: Path) -> None: | CODE |
| LOW | src/common/core/letsencrypt/ui/hooks.py | 39 | def _detect_orphans_from_db_cache() -> List[Dict[str, str]]: | CODE |
| LOW | src/common/core/letsencrypt/ui/actions.py | 47 | def retrieve_certificates_info(folder_paths: Tuple[Path, Path]) -> dict: | CODE |
| LOW | src/common/core/letsencrypt/jobs/certbot_concurrency.py | 149 | def _collect_account_candidates(scoped_root: Path) -> List[Tuple[Path, str]]: | CODE |
| LOW | src/common/core/letsencrypt/jobs/certbot_concurrency.py | 216 | def _collect_account_candidates_legacy(accounts_root: Path, staging: bool) -> List[Tuple[Path, str]]: | CODE |
| LOW | src/common/core/letsencrypt/jobs/letsencrypt_utils.py | 186 | def write_provider_credentials_file(provider_instance: Provider, data_path: Union[str, Path] = LETSENCRYPT_CACHE_PATH) - | CODE |
| LOW | src/common/core/letsencrypt/jobs/letsencrypt_utils.py | 403 | def resolve_certbot_entrypoint( | CODE |
| LOW | src/common/core/letsencrypt/jobs/letsencrypt_utils.py | 429 | def get_expected_acme_directory(server: str, staging: bool) -> str: | CODE |
| 204 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/fix_readme_indentation.py | 29 | CODE | |
| LOW | tests/Test.py | 130 | CODE | |
| LOW | tests/KubernetesTest.py | 19 | CODE | |
| LOW | tests/SwarmTest.py | 131 | CODE | |
| LOW | tests/LinuxTest.py | 29 | CODE | |
| LOW | tests/ui/utils.py | 14 | CODE | |
| LOW | tests/ui/utils.py | 53 | CODE | |
| LOW | docs/json2md.py | 175 | CODE | |
| LOW | src/ui/main.py | 304 | CODE | |
| LOW | src/ui/main.py | 765 | CODE | |
| LOW | src/ui/main.py | 905 | CODE | |
| LOW | src/ui/main.py | 956 | CODE | |
| LOW | src/ui/main.py | 1122 | CODE | |
| LOW | src/ui/app/utils.py | 207 | CODE | |
| LOW | src/ui/app/dependencies.py | 40 | CODE | |
| LOW | src/ui/app/models/instance.py | 299 | CODE | |
| LOW | src/ui/app/models/instance.py | 336 | CODE | |
| LOW | src/ui/app/models/instance.py | 556 | CODE | |
| LOW | src/ui/app/models/instance.py | 662 | CODE | |
| LOW | src/ui/app/models/instance.py | 916 | CODE | |
| LOW | src/ui/app/models/instance.py | 1068 | CODE | |
| LOW | src/ui/app/models/instance.py | 1198 | CODE | |
| LOW | src/ui/app/models/instance.py | 1231 | CODE | |
| LOW | src/ui/app/models/instance.py | 1269 | CODE | |
| LOW | src/ui/app/models/config.py | 315 | CODE | |
| LOW | src/ui/app/models/ui_database.py | 26 | CODE | |
| LOW | src/ui/app/models/ui_database.py | 295 | CODE | |
| LOW | src/ui/app/models/ui_data.py | 17 | CODE | |
| LOW | src/ui/app/models/template.py | 8 | CODE | |
| LOW | src/ui/app/models/biscuit.py | 109 | CODE | |
| LOW | src/ui/app/models/biscuit.py | 250 | CODE | |
| LOW | src/ui/app/routes/plugins.py | 112 | CODE | |
| LOW | src/ui/app/routes/plugins.py | 219 | CODE | |
| LOW | src/ui/app/routes/plugins.py | 406 | CODE | |
| LOW | src/ui/app/routes/plugins.py | 473 | CODE | |
| LOW | src/ui/app/routes/services.py | 154 | CODE | |
| LOW | src/ui/app/routes/services.py | 243 | CODE | |
| LOW | src/ui/app/routes/services.py | 699 | CODE | |
| LOW | src/ui/app/routes/services.py | 169 | CODE | |
| LOW | src/ui/app/routes/services.py | 275 | CODE | |
| LOW | src/ui/app/routes/support.py | 26 | CODE | |
| LOW | src/ui/app/routes/configs.py | 115 | CODE | |
| LOW | src/ui/app/routes/configs.py | 355 | CODE | |
| LOW | src/ui/app/routes/configs.py | 705 | CODE | |
| LOW | src/ui/app/routes/configs.py | 374 | CODE | |
| LOW | src/ui/app/routes/home.py | 15 | CODE | |
| LOW | src/ui/app/routes/instances.py | 114 | CODE | |
| LOW | src/ui/app/routes/profile.py | 220 | CODE | |
| LOW | src/ui/app/routes/bans.py | 46 | CODE | |
| LOW | src/ui/app/routes/bans.py | 159 | CODE | |
| LOW | src/ui/app/routes/bans.py | 263 | CODE | |
| LOW | src/ui/app/routes/bans.py | 572 | CODE | |
| LOW | src/ui/app/routes/bans.py | 742 | CODE | |
| LOW | src/ui/app/routes/bans.py | 163 | CODE | |
| LOW | src/ui/app/routes/global_settings.py | 19 | CODE | |
| LOW | src/ui/app/routes/setup.py | 24 | CODE | |
| LOW | src/ui/app/routes/logs.py | 182 | CODE | |
| LOW | src/ui/app/routes/logs.py | 200 | CODE | |
| LOW | src/ui/app/routes/reports.py | 44 | CODE | |
| LOW | src/ui/app/routes/reports.py | 106 | CODE | |
| 185 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/dev/docker-compose.autoconf.ui.api.yml | 194 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.ui.misc.yml | 130 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.autoconf.ui.yml | 161 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.ui.api.yml | 156 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.wizard.yml | 120 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.autoconf.ui.misc.yml | 167 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.ui.yml | 125 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/dev/docker-compose.autoconf.wizard.yml | 155 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | misc/migration/create.sh | 159 | # Check if the target tag already has a migration | COMMENT |
| LOW | tests/ui/services_page.py | 633 | # # Check if data-step is 2 looking for hidden | COMMENT |
| LOW | tests/ui/services_page.py | 661 | # # Check if data-step is 1 looking for hidden | COMMENT |
| LOW | tests/ui/services_page.py | 685 | # # Check if data-step is 2 looking for hidden | COMMENT |
| LOW | tests/core/bunkernet/test.sh | 122 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/misc/test.sh | 188 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/letsencrypt/test.sh | 109 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/whitelist/test.sh | 320 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/limit/test.sh | 180 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/clientcache/test.sh | 149 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/inject/test.sh | 77 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/antibot/test.sh | 124 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/redis/test.sh | 360 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/brotli/test.sh | 112 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/greylist/test.sh | 316 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/authbasic/test.sh | 151 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/gzip/test.sh | 112 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/reverseproxy/test.sh | 211 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/reversescan/test.sh | 120 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/bwcli/test.sh | 96 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/sessions/test.sh | 123 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/blacklist/test.sh | 476 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/headers/test.sh | 296 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/badbehavior/test.sh | 168 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/cors/test.sh | 193 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/redirect/test.sh | 116 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/db/test.sh | 228 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/modsecurity/test.sh | 146 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/dnsbl/test.sh | 175 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/errors/test.sh | 123 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/customcert/test.sh | 160 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/backup/test.sh | 159 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/country/test.sh | 126 | # Check if stack is healthy | COMMENT |
| LOW | tests/core/selfsigned/test.sh | 126 | # Check if stack is healthy | COMMENT |
| LOW | tests/linux/Linux.sh | 4 | # Check if the package already exists in /tmp/$DISTRO/bunkerweb.deb or /tmp/$DISTRO/bunkerweb.rpm | COMMENT |
| LOW | docs/json2md.py | 192 | # Check if README.md exists for global settings and use its content instead | COMMENT |
| LOW | docs/json2md.py | 270 | # Check if README.md exists and use its content instead | COMMENT |
| LOW | examples/syslog/docker-compose.yml | 58 | - DAC_READ_SEARCH # Read files bypassing permissions | CODE |
| LOW | .github/workflows/push-github.yml | 71 | # Check if this is a stable release (no -rc/-beta or ~rc/~beta suffix) | COMMENT |
| LOW | src/ui/main.py | 276 | # Check if a blueprint with this name is already registered. | COMMENT |
| LOW | src/ui/main.py | 542 | # Check if we should replace existing blueprint | COMMENT |
| LOW | src/ui/entrypoint.sh | 14 | # Check if the temporary web UI process exists and stop it gracefully. | COMMENT |
| LOW | src/ui/app/models/instance.py | 1134 | # Check if blocked (403, 429, 444) | COMMENT |
| LOW | src/ui/app/models/instance.py | 1295 | # Check if METRICS_SAVE_TO_REDIS is enabled for errors | COMMENT |
| LOW | src/ui/app/models/config.py | 166 | # Check if the variable is not editable because it is managed externally. | COMMENT |
| LOW | src/ui/app/models/ui_database.py | 43 | # Check if admin role exists, create it if not | COMMENT |
| LOW | src/ui/app/routes/plugins.py | 522 | # Check if at least one service is using metrics and/or the plugin | COMMENT |
| LOW | src/ui/utils/gunicorn.conf.py | 625 | # Check if Redis is enabled via environment variable or database before closing DB | COMMENT |
| LOW | src/scheduler/JobScheduler.py | 244 | # Check if module is already cached | COMMENT |
| LOW | src/scheduler/main.py | 921 | # Check if any external or pro plugin has been added by the user | COMMENT |
| LOW | src/scheduler/entrypoint.sh | 71 | # Check if the table exists first | COMMENT |
| LOW | src/common/core/bunkernet/jobs/bunkernet-register.py | 20 | # Check if at least a server has BunkerNet activated | COMMENT |
| 72 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/fix_readme_indentation.py | 16 | CODE | |
| LOW | src/common/core/letsencrypt/jobs/letsencrypt_utils.py | 441 | CODE | |
| LOW | src/common/core/letsencrypt/jobs/letsencrypt_utils.py | 441 | CODE | |
| LOW | …les/coreruleset-v4/util/crs-rules-check/rules-check.py | 4 | CODE | |
| LOW | …les/coreruleset-v4/util/crs-rules-check/rules-check.py | 5 | CODE | |
| LOW | …/coreruleset-v3/util/regexp-assemble/regexp-cmdline.py | 13 | CODE | |
| LOW | …y/files/coreruleset-v3/util/crs2-renumbering/update.py | 5 | CODE | |
| LOW | …sql_versions/a48eacc5e5b6_upgrade_to_version_1_6_11.py | 12 | CODE | |
| LOW | …sql_versions/12ffcd2b9d63_upgrade_to_version_1_5_11.py | 13 | CODE | |
| LOW | …ysql_versions/b45f98a50b5c_upgrade_to_version_1_5_8.py | 13 | CODE | |
| LOW | …ysql_versions/c2ea0c19c08f_upgrade_to_version_1_6_1.py | 13 | CODE | |
| LOW | …_versions/53accecd001e_upgrade_to_version_1_6_0_rc3.py | 12 | CODE | |
| LOW | …_versions/53accecd001e_upgrade_to_version_1_6_0_rc3.py | 13 | CODE | |
| LOW | …ysql_versions/ae3e1b23457d_upgrade_to_version_1_6_4.py | 12 | CODE | |
| LOW | …ysql_versions/9f917f5e76b3_upgrade_to_version_1_6_0.py | 12 | CODE | |
| LOW | …ysql_versions/9f917f5e76b3_upgrade_to_version_1_6_0.py | 13 | CODE | |
| LOW | …ysql_versions/c6fcd4f6971d_upgrade_to_version_1_5_9.py | 12 | CODE | |
| LOW | …ysql_versions/c6fcd4f6971d_upgrade_to_version_1_5_9.py | 13 | CODE | |
| LOW | …sql_versions/c6673c17e477_upgrade_to_version_1_6_10.py | 12 | CODE | |
| LOW | …sql_versions/3d6af0bf1bec_upgrade_to_version_1_5_12.py | 12 | CODE | |
| LOW | …sql_versions/3d6af0bf1bec_upgrade_to_version_1_5_12.py | 13 | CODE | |
| LOW | …_versions/bd24b496a4e3_upgrade_to_version_1_6_3_rc2.py | 12 | CODE | |
| LOW | …_versions/aaa57bd5828f_upgrade_to_version_1_6_3_rc3.py | 12 | CODE | |
| LOW | …_versions/2c8a1caf53fa_upgrade_to_version_1_6_5_rc3.py | 12 | CODE | |
| LOW | …_versions/2c8a1caf53fa_upgrade_to_version_1_6_5_rc3.py | 13 | CODE | |
| LOW | …ysql_versions/3f152772560d_upgrade_to_version_1_5_4.py | 13 | CODE | |
| LOW | …_versions/62334353ef44_upgrade_to_version_1_6_0_rc4.py | 12 | CODE | |
| LOW | …_versions/62334353ef44_upgrade_to_version_1_6_0_rc4.py | 13 | CODE | |
| LOW | …ysql_versions/edcde398c829_upgrade_to_version_1_5_1.py | 13 | CODE | |
| LOW | …ysql_versions/e65b18370d91_upgrade_to_version_1_5_3.py | 12 | CODE | |
| LOW | …ysql_versions/e65b18370d91_upgrade_to_version_1_5_3.py | 13 | CODE | |
| LOW | …_versions/0e74389d938f_upgrade_to_version_1_6_5_rc2.py | 12 | CODE | |
| LOW | …_versions/c56f10a148e9_upgrade_to_version_1_6_3_rc1.py | 12 | CODE | |
| LOW | …ysql_versions/4f46305855fd_upgrade_to_version_1_6_3.py | 12 | CODE | |
| LOW | …sql_versions/b03a64d4d34a_upgrade_to_version_1_5_10.py | 12 | CODE | |
| LOW | …sql_versions/b03a64d4d34a_upgrade_to_version_1_5_10.py | 13 | CODE | |
| LOW | …ysql_versions/e4ccc523fea5_upgrade_to_version_1_5_2.py | 12 | CODE | |
| LOW | …ysql_versions/e4ccc523fea5_upgrade_to_version_1_5_2.py | 13 | CODE | |
| LOW | …_versions/927114675a7d_upgrade_to_version_1_6_0_rc4.py | 12 | CODE | |
| LOW | …ite_versions/20966abcdf3e_upgrade_to_version_1_6_11.py | 12 | CODE | |
| LOW | …lite_versions/7be1a99223e6_upgrade_to_version_1_6_4.py | 12 | CODE | |
| LOW | …versions/9c5dcacc541a_upgrade_to_version_1_6_10_rc5.py | 12 | CODE | |
| LOW | …ite_versions/f5ad08b01f62_upgrade_to_version_1_6_10.py | 12 | CODE | |
| LOW | …ite_versions/760f95e8bee7_upgrade_to_version_1_5_10.py | 12 | CODE | |
| LOW | …lite_versions/4f7bdc32c662_upgrade_to_version_1_5_9.py | 12 | CODE | |
| LOW | …_versions/7a8df0c89512_upgrade_to_version_1_6_5_rc2.py | 12 | CODE | |
| LOW | …_versions/fd214d08928f_upgrade_to_version_1_6_5_rc3.py | 12 | CODE | |
| LOW | …ite_versions/75a5d34f9a7d_upgrade_to_version_1_5_12.py | 12 | CODE | |
| LOW | …_versions/76ce66b69597_upgrade_to_version_1_6_0_rc3.py | 12 | CODE | |
| LOW | …_versions/10d5e9b3e39e_upgrade_to_version_1_6_3_rc3.py | 12 | CODE | |
| LOW | …_versions/cc59051c313d_upgrade_to_version_1_6_3_rc1.py | 12 | CODE | |
| LOW | …lite_versions/b3717dab5cdf_upgrade_to_version_1_6_3.py | 12 | CODE | |
| LOW | …_versions/940d4e056335_upgrade_to_version_1_6_3_rc2.py | 12 | CODE | |
| LOW | …_versions/166ec9cfef46_upgrade_to_version_1_6_5_rc3.py | 12 | CODE | |
| LOW | …_versions/166ec9cfef46_upgrade_to_version_1_6_5_rc3.py | 13 | CODE | |
| LOW | …_versions/28d521ac2009_upgrade_to_version_1_6_0_rc3.py | 12 | CODE | |
| LOW | …_versions/28d521ac2009_upgrade_to_version_1_6_0_rc3.py | 13 | CODE | |
| LOW | …_versions/d97f19935f96_upgrade_to_version_1_6_5_rc2.py | 12 | CODE | |
| LOW | …iadb_versions/1cc06aa8335c_upgrade_to_version_1_5_4.py | 13 | CODE | |
| LOW | …iadb_versions/24e08b364fa1_upgrade_to_version_1_5_2.py | 12 | CODE | |
| 121 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | misc/install-bunkerweb.sh | 20 | # Create a registered 0600 tempfile and echo its path; returns 1 if mktemp fails. | COMMENT |
| MEDIUM | tests/linux/Linux.sh | 55 | # Create the container and copy the package to the host | COMMENT |
| MEDIUM | examples/authentik/setup-kubernetes.sh | 4 | # Create the Authentik blueprint ConfigMap first so the Helm chart can mount it | COMMENT |
| MEDIUM | src/ui/entrypoint.sh | 7 | # Define a function to handle SIGTERM and SIGINT signals. | COMMENT |
| MEDIUM | src/ui/app/models/instance.py | 528 | # Create a unique key that combines IP, ban scope, and service | COMMENT |
| MEDIUM | src/scheduler/JobScheduler.py | 231 | # Create a unique module name based on path | COMMENT |
| MEDIUM | src/common/core/misc/jobs/default-server-cert.py | 42 | # Create a temporary OpenSSL config file with enhanced security settings | COMMENT |
| MEDIUM | src/common/core/authbasic/ui/actions.py | 158 | # Create a unique key for deduplication | COMMENT |
| MEDIUM | src/common/core/jobs/jobs/api-server-cert.py | 34 | # Create a temporary OpenSSL config file with enhanced security settings | COMMENT |
| MEDIUM | src/common/db/Database.py | 2591 | # Define the join operation | COMMENT |
| MEDIUM | src/common/db/Database.py | 2594 | # Define the select statement | COMMENT |
| MEDIUM | src/common/db/Database.py | 2667 | # Define the join operation | COMMENT |
| MEDIUM | src/common/db/Database.py | 2671 | # Define the select statement | COMMENT |
| MEDIUM⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 38 | # Create the new 'bw_cli_commands' table | COMMENT |
| MEDIUM | …versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py | 153 | # Create a new table with the updated custom_configs schema | COMMENT |
| MEDIUM | …versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py | 205 | # Create a new bw_settings table with updated schema (only 'id' as PK and 'name' as unique) | STRING |
| MEDIUM | …versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py | 272 | # Create a temporary new table | STRING |
| MEDIUM⚡ | …_versions/8c096ca1beb8_upgrade_to_version_1_6_1_rc1.py | 25 | # Create a new connection from the engine | COMMENT |
| MEDIUM | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 31 | # Create the new bw_services table with updated schema | COMMENT |
| MEDIUM | src/linux/scripts/bunkerweb-ui.sh | 43 | # Create the ui.env file if it doesn't exist | COMMENT |
| MEDIUM | src/linux/scripts/bunkerweb-scheduler.sh | 38 | # Create the scheduler.env file if it doesn't exist | COMMENT |
| MEDIUM | src/api/entrypoint.sh | 7 | # Define a function to handle SIGTERM and SIGINT signals. | COMMENT |
| MEDIUM | …a-native/proofs/hol_light/x86_64/proofs/build-proof.sh | 12 | # This file is derived from s2n-bignum's tools/build-proof.sh | COMMENT |
| MEDIUM | …/mbedtls/tf-psa-crypto/framework/scripts/code_style.py | 95 | # Create an environment without these variables for running commands on the | COMMENT |
| MEDIUM | …mbedtls/tf-psa-crypto/framework/scripts/all-helpers.sh | 6 | # This file contains helpers for test components that are executed by all.sh. | COMMENT |
| MEDIUM | …mbedtls/tf-psa-crypto/framework/scripts/all-helpers.sh | 9 | # This file is the right place for helpers: | COMMENT |
| MEDIUM | …/tf-psa-crypto/framework/scripts/generate_test_code.py | 1114 | # Create a placeholder pattern with the correct named capture groups | STRING |
| MEDIUM | …mbedtls/tf-psa-crypto/framework/scripts/demo_common.sh | 125 | # This function is commonly called in an if condition, where "set -e" | COMMENT |
| MEDIUM | …mbedtls/tf-psa-crypto/framework/scripts/demo_common.sh | 176 | # Create a seedfile that's sufficiently long in all library configurations. | COMMENT |
| MEDIUM | …pto/framework/scripts/mbedtls_framework/test_driver.py | 164 | # Create the test driver tree | COMMENT |
| MEDIUM | …framework/scripts/mbedtls_framework/generated_files.py | 126 | # This file is optional and didn't exist before, so | COMMENT |
| MEDIUM | …ework/scripts/mbedtls_framework/c_wrapper_generator.py | 60 | # This class is designed to have many methods potentially overloaded. | COMMENT |
| MEDIUM | …s/src/mbedtls/tf-psa-crypto/include/psa/crypto_extra.h | 1507 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 958 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 1225 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 1510 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 1570 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 1919 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 1982 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 2437 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/include/psa/crypto.h | 2507 | * -# Initialize the operation object with one of the methods described in the | COMMENT |
| MEDIUM | …tf-psa-crypto/tests/scripts/components-basic-checks.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …pto/tests/scripts/components-configuration-platform.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …tf-psa-crypto/tests/scripts/components-build-system.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …s/tf-psa-crypto/tests/scripts/components-sanitizers.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …tls/tf-psa-crypto/tests/scripts/components-platform.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …ls/tf-psa-crypto/tests/scripts/generate_test_driver.py | 111 | #Create the test driver tree from `drivers/builtin` | COMMENT |
| MEDIUM | …s/tf-psa-crypto/tests/scripts/components-compliance.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …rypto/tests/scripts/components-configuration-tuning.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …f-psa-crypto/tests/scripts/components-configuration.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …rypto/tests/scripts/components-configuration-crypto.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | …tls/tf-psa-crypto/tests/scripts/components-compiler.sh | 6 | # This file contains test components that are executed by all.sh | COMMENT |
| MEDIUM | src/deps/src/mbedtls/tf-psa-crypto/tests/scripts/all.sh | 8 | # This file is executable; it is the entry point for users and the CI. | COMMENT |
| MEDIUM | src/deps/src/zlib/os400/make.sh | 164 | # Create the OS/400 library if it does not exist. | COMMENT |
| MEDIUM | src/deps/src/zlib/os400/make.sh | 172 | # Create the DOCS source file if it does not exist. | COMMENT |
| MEDIUM | src/deps/src/zlib/os400/make.sh | 195 | # Create the OS/400 source program file for the C header files. | COMMENT |
| MEDIUM | src/deps/src/zlib/os400/make.sh | 206 | # Create the IFS directory for the C header files. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/dummy-plugin/plugin.json | 13 | "id": "dummy-id", | CODE |
| LOW | docs/integrations.md | 4001 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/integrations.md | 4103 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/integrations.md | 4265 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/integrations.md | 4327 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/advanced.md | 4434 | OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com" | CODE |
| LOW | docs/advanced.md | 5127 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/plugins.md | 326 | "id": "dummy-id", | CODE |
| LOW | docs/plugins.md | 791 | "current_user": "John Doe", | CODE |
| LOW | docs/features.md | 3302 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/features.md | 3312 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/features.md | 3325 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/features.md | 3338 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/features.md | 3350 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/features.md | 3363 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/integrations.md | 3874 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/integrations.md | 3976 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/integrations.md | 4138 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/integrations.md | 4200 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/advanced.md | 4441 | OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com" | CODE |
| LOW | docs/zh/advanced.md | 5134 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/plugins.md | 323 | "id": "dummy-id", | CODE |
| LOW | docs/zh/plugins.md | 787 | "current_user": "John Doe", | CODE |
| LOW | docs/zh/features.md | 3297 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/features.md | 3307 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/features.md | 3320 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/features.md | 3333 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/features.md | 3345 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/zh/features.md | 3358 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/integrations.md | 3877 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/integrations.md | 3979 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/integrations.md | 4141 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/integrations.md | 4203 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/advanced.md | 4444 | OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com" | CODE |
| LOW | docs/de/advanced.md | 5137 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/plugins.md | 322 | "id": "dummy-id", | CODE |
| LOW | docs/de/plugins.md | 786 | "current_user": "John Doe", | CODE |
| LOW | docs/de/features.md | 3234 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/features.md | 3244 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/features.md | 3257 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/features.md | 3270 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/features.md | 3282 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/de/features.md | 3295 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/integrations.md | 3849 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/integrations.md | 3951 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/integrations.md | 4113 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/integrations.md | 4175 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/advanced.md | 4443 | OPENIDC_ACL_CLAIM_VALUE_1: "admin@example.com" | CODE |
| LOW | docs/fr/advanced.md | 5136 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/plugins.md | 323 | "id": "dummy-id", | CODE |
| LOW | docs/fr/plugins.md | 788 | "current_user": "John Doe", | CODE |
| LOW | docs/fr/features.md | 3187 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/features.md | 3197 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/features.md | 3210 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/features.md | 3223 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/features.md | 3235 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/fr/features.md | 3248 | EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/es/integrations.md | 3877 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/es/integrations.md | 3979 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| LOW | docs/es/integrations.md | 4141 | bunkerweb.io/EMAIL_LETS_ENCRYPT: "admin@example.com" | CODE |
| 83 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | docs/features.md | 2101 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/features.md | 2112 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/features.md | 3099 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | docs/zh/features.md | 2099 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/zh/features.md | 2110 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/zh/features.md | 3095 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | docs/de/features.md | 2064 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/de/features.md | 2075 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/de/features.md | 3032 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | docs/fr/features.md | 2026 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/fr/features.md | 2037 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | docs/fr/features.md | 2987 | INJECT_BODY: '<script src="https://cdn.example.com/js/widget.js"></script><script>initializeWidget(''your-api-key'') | CODE |
| HIGH | docs/es/features.md | 3084 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | examples/dns-dnsmadeeasy/docker-compose.yml | 40 | LETS_ENCRYPT_DNS_CREDENTIAL_ITEM: "dns_dnsmadeeasy_api_key <your-api-key>" # replace with your DNS Made Easy API k | CODE |
| HIGH | src/common/core/inject/README.zh.md | 65 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | src/common/core/inject/README.fr.md | 57 | INJECT_BODY: '<script src="https://cdn.example.com/js/widget.js"></script><script>initializeWidget(''your-api-key'') | CODE |
| HIGH | src/common/core/inject/README.es.md | 65 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | src/common/core/inject/README.de.md | 65 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | src/common/core/inject/README.md | 65 | INJECT_BODY: "<script src=\"https://cdn.example.com/js/widget.js\"></script><script>initializeWidget('your-api-key') | CODE |
| HIGH | src/common/core/crowdsec/README.zh.md | 333 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.zh.md | 344 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.fr.md | 333 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.fr.md | 344 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.de.md | 331 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.de.md | 342 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.md | 335 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| HIGH | src/common/core/crowdsec/README.md | 346 | CROWDSEC_API_KEY: "your-api-key-here" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …versions/839424d81cf7_upgrade_to_version_1_6_0_beta.py | 0 | update bw_plugin_pages set data = template_file, checksum = template_checksum where template_file is not null | STRING |
| HIGH | …versions/bfa7869e34c3_upgrade_to_version_1_6_0_beta.py | 0 | update bw_plugin_pages set data = template_file, checksum = template_checksum where template_file is not null | STRING |
| HIGH | …versions/0b08c406d820_upgrade_to_version_1_6_0_beta.py | 0 | update bw_plugin_pages set data = template_file, checksum = template_checksum where template_file is not null | STRING |
| HIGH | …ysql_versions/021e3123e517_upgrade_to_version_1_5_6.py | 0 | update bw_plugins set external = true where type = 'external' | STRING |
| HIGH | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 0 | update bw_plugins set external = true where type = 'external' | STRING |
| HIGH | …iadb_versions/18e9d2191dcc_upgrade_to_version_1_5_6.py | 0 | update bw_plugins set external = true where type = 'external' | STRING |
| HIGH | …esql_versions/b4abd1acf9f1_upgrade_to_version_1_5_6.py | 0 | update bw_plugins set external = true where type = 'external' | STRING |
| HIGH | …ysql_versions/021e3123e517_upgrade_to_version_1_5_6.py | 0 | update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha | STRING |
| HIGH | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 0 | update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha | STRING |
| HIGH | …iadb_versions/18e9d2191dcc_upgrade_to_version_1_5_6.py | 0 | update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha | STRING |
| HIGH | …esql_versions/b4abd1acf9f1_upgrade_to_version_1_5_6.py | 0 | update bw_metadata set is_pro = false, pro_status = 'invalid', pro_services = 0, pro_overlapped = false, pro_plugins_cha | STRING |
| HIGH | …ysql_versions/edcde398c829_upgrade_to_version_1_5_1.py | 0 | update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false, | STRING |
| HIGH | …lite_versions/6599b34870d1_upgrade_to_version_1_5_1.py | 0 | update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false, | STRING |
| HIGH | …iadb_versions/cc61497f1976_upgrade_to_version_1_5_1.py | 0 | update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false, | STRING |
| HIGH | …esql_versions/3133d7320b63_upgrade_to_version_1_5_1.py | 0 | update bw_metadata set scheduler_first_start = false, custom_configs_changed = false, external_plugins_changed = false, | STRING |
| HIGH | …versions/1e1fc017a424_upgrade_to_version_1_6_0_beta.py | 0 | insert into bw_custom_configs_old (id, service_id, type, name, data, checksum, method) select id, service_id, type, name | STRING |
| HIGH | …_versions/5b0ea031ccfc_upgrade_to_version_1_6_0_rc1.py | 0 | insert into bw_custom_configs_old (id, service_id, type, name, data, checksum, method) select id, service_id, type, name | STRING |
| HIGH | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 0 | insert into bw_custom_configs_old (id, service_id, type, name, data, checksum, method) select id, service_id, type, name | STRING |
| HIGH | …ramework/scripts/mbedtls_framework/min_requirements.py | 0 | install all the required python packages, with the minimum python version. | STRING |
| HIGH | …/src/mbedtls/tf-psa-crypto/scripts/min_requirements.py | 0 | install all the required python packages, with the minimum python version. | STRING |
| HIGH | src/deps/src/mbedtls/scripts/min_requirements.py | 0 | install all the required python packages, with the minimum python version. | STRING |
| HIGH | src/deps/src/lua-resty-openssl/scripts/type_x509_req.py | 0 | -- note: this is defined by standards (x.509 et al) to be one less than the certificate version. -- so a version 3 certi | STRING |
| HIGH | src/deps/src/lua-resty-openssl/scripts/type_x509.py | 0 | -- note: this is defined by standards (x.509 et al) to be one less than the certificate version. -- so a version 3 certi | STRING |
| HIGH | src/deps/src/lua-resty-openssl/scripts/type_x509_crl.py | 0 | -- note: this is defined by standards (x.509 et al) to be one less than the certificate version. -- so a version 3 certi | STRING |
| HIGH | src/deps/src/libinjection/misc/sqliserver.py | 0 | returns the value of token, handling opening and closing quote characters | STRING |
| HIGH | src/deps/src/libinjection/python/test_driver.py | 0 | returns the value of token, handling opening and closing quote characters | STRING |
| HIGH | src/deps/src/libinjection/python/apitest.py | 0 | returns the value of token, handling opening and closing quote characters | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | examples/php-singlesite/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/php-singlesite/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/php-singlesite/docker-compose.yml | 48 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/php-singlesite/docker-compose.yml | 48 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/autoconf.yml | 6 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/autoconf.yml | 6 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/autoconf.yml | 9 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/autoconf.yml | 9 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/autoconf.yml | 23 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/autoconf.yml | 23 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/autoconf.yml | 26 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/autoconf.yml | 26 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 16 | - ./www:/var/www/html # contains web files (PHP, assets, ...), don't forget to rename the subfolders | CODE |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 16 | - ./www:/var/www/html # contains web files (PHP, assets, ...), don't forget to rename the subfolders | CODE |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 53 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 53 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 56 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 56 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 64 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 64 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 67 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/php-multisite/docker-compose.yml | 67 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| MEDIUM | examples/bigbluebutton/docker-compose.yml | 9 | # after generating your bigbluebutton docker-compose.yml file, you can modify the following to add bunkerweb to it | COMMENT |
| MEDIUM | examples/passbolt/docker-compose.yml | 49 | #Alternatively you can use rootless: | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 10 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 10 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 13 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/autoconf.yml | 13 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/autoconf.yml | 29 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 29 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 32 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/autoconf.yml | 32 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/autoconf.yml | 46 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 46 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/autoconf.yml | 49 | - ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/autoconf.yml | 49 | - ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it) | CODE |
| LOW | examples/cors/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/cors/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 57 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 57 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 60 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/docker-compose.yml | 60 | - ./www/app1.example.com:/app # folder containing PHP app1 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/docker-compose.yml | 68 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 68 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 71 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/docker-compose.yml | 71 | - ./www/app2.example.com:/app # folder containing PHP app2 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/docker-compose.yml | 79 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 79 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW⚡ | examples/cors/docker-compose.yml | 82 | - ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it) | CODE |
| LOW⚡ | examples/cors/docker-compose.yml | 82 | - ./www/app3.example.com:/app # folder containing PHP app3 (don't forget to rename it) | CODE |
| LOW | examples/php-cookie-flags/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/php-cookie-flags/docker-compose.yml | 11 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/php-cookie-flags/docker-compose.yml | 50 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | examples/php-cookie-flags/docker-compose.yml | 50 | # don't forget to edit the permissions of the files and folders accordingly | COMMENT |
| LOW | .github/ISSUE_TEMPLATE/bug_report.yml | 36 | ⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️ | CODE |
| LOW | .github/ISSUE_TEMPLATE/bug_report.yml | 45 | ⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️ | CODE |
| LOW | src/ui/app/static/libs/apexcharts/apexcharts.min.js | 5 | !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define | CODE |
| LOW | …n/core/modsecurity/files/coreruleset-v3/util/verify.rb | 64 | # then make sure to split the quoting out of the quoted strings | COMMENT |
| 8 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | BUILD.md | 168 | ### Step 1: build builder image | COMMENT |
| LOW | BUILD.md | 176 | ### Step 2: build package | COMMENT |
| LOW | docs/integrations.md | 3150 | ##### Step 1: Scheduler Configuration | COMMENT |
| LOW | docs/integrations.md | 3175 | ##### Step 2: Creating the Deployment with Sidecar | COMMENT |
| LOW | docs/integrations.md | 3277 | ##### Step 3: Creating Services | COMMENT |
| LOW | docs/integrations.md | 3325 | ##### Step 4: Reverse Proxy Configuration | COMMENT |
| LOW | docs/integrations.md | 3361 | ##### Step 5: Deployment | COMMENT |
| LOW | docs/zh/integrations.md | 3022 | ##### Step 1: Scheduler Configuration | COMMENT |
| LOW | docs/zh/integrations.md | 3047 | ##### Step 2: Creating the Deployment with Sidecar | COMMENT |
| LOW | docs/zh/integrations.md | 3150 | ##### Step 3: Creating Services | COMMENT |
| LOW | docs/zh/integrations.md | 3198 | ##### Step 4: Reverse Proxy Configuration | COMMENT |
| LOW | docs/zh/integrations.md | 3234 | ##### Step 5: Deployment | COMMENT |
| LOW | docs/de/integrations.md | 3025 | ##### Step 1: Scheduler Configuration | COMMENT |
| LOW | docs/de/integrations.md | 3050 | ##### Step 2: Creating the Deployment with Sidecar | COMMENT |
| LOW | docs/de/integrations.md | 3153 | ##### Step 3: Creating Services | COMMENT |
| LOW | docs/de/integrations.md | 3201 | ##### Step 4: Reverse Proxy Configuration | COMMENT |
| LOW | docs/de/integrations.md | 3237 | ##### Step 5: Deployment | COMMENT |
| LOW | docs/es/integrations.md | 3026 | ##### Step 1: Scheduler Configuration | COMMENT |
| LOW | docs/es/integrations.md | 3051 | ##### Step 2: Creating the Deployment with Sidecar | COMMENT |
| LOW | docs/es/integrations.md | 3154 | ##### Step 3: Creating Services | COMMENT |
| LOW | docs/es/integrations.md | 3202 | ##### Step 4: Reverse Proxy Configuration | COMMENT |
| LOW | docs/es/integrations.md | 3238 | ##### Step 5: Deployment | COMMENT |
| LOW⚡ | src/common/core/letsencrypt/ui/hooks.py | 57 | # Step 1: metadata-only fetch to check if we can short-circuit via checksum. | COMMENT |
| LOW⚡ | src/common/core/letsencrypt/ui/hooks.py | 71 | # Step 2: tar blob fetch + in-memory walk. | COMMENT |
| LOW⚡ | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 317 | # Step 0 - Init | COMMENT |
| LOW | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 332 | # Step 1 - Clone PHP repo | COMMENT |
| LOW⚡ | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 352 | # Step 2 - Extract Function Names | COMMENT |
| LOW⚡ | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 360 | # Step 3 - Filter 1: Is it an English word | COMMENT |
| LOW⚡ | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 366 | # Step 4 - Output 933161 | COMMENT |
| LOW | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 393 | # Step 5 - Create or update frequency list | COMMENT |
| LOW | …t-v4/util/php-dictionary-gen/php-dictionary-creator.sh | 436 | # Step 6 - Filter 2: Output depending on frequency | COMMENT |
| LOW | …oreruleset-v3/util/regexp-tricks/negative-lookahead.py | 3 | # WARNING: This script is EXPERIMENTAL. Use with caution. | COMMENT |
| LOW | …ysql_versions/41d395e48cfd_upgrade_to_version_1_5_0.py | 23 | # Step 1: Drop 'order' column from 'bw_plugins' | COMMENT |
| LOW⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 22 | # Step 1: Add 'order' column as nullable with a default | COMMENT |
| LOW⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 26 | # Step 2: Set default value for existing rows | COMMENT |
| LOW⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 29 | # Step 3: Alter 'order' column to NOT NULL | COMMENT |
| LOW⚡ | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 45 | # Step 1: Add the new 'type' column with default 'external' | COMMENT |
| LOW⚡ | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 48 | # Step 2: Migrate data: Set 'type' to 'external' where 'external' was true | COMMENT |
| LOW⚡ | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 55 | # Step 3: Drop the 'external' column and alter the 'stream' column to STREAM_TYPES_ENUM | STRING |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 22 | # Step 1: Drop 'order' column from 'bw_plugins' | COMMENT |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 31 | # Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint) | COMMENT |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 35 | # Step 2: Set default value for existing rows | COMMENT |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 38 | # Step 3: Alter 'order' column to NOT NULL | COMMENT |
| LOW | …iadb_versions/b46c7ecfba26_upgrade_to_version_1_5_0.py | 23 | # Step 1: Drop 'order' column from 'bw_plugins' | COMMENT |
| LOW⚡ | …esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py | 29 | # Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint) | COMMENT |
| LOW⚡ | …esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py | 33 | # Step 2: Set default value for existing rows | COMMENT |
| LOW⚡ | …esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py | 36 | # Step 3: Alter 'order' column to NOT NULL | COMMENT |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 159 | # Step 1: Add column as nullable | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 162 | # Step 2: Populate default values | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 173 | # Step 3: Alter column to NOT NULL | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 176 | # Step 4: Add unique constraint | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 180 | # Step 1: Add column as nullable | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 183 | # Step 2: Populate default values | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 194 | # Step 3: Alter column to NOT NULL | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 197 | # Step 4: Add unique constraint | STRING |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 23 | # Step 1: Add column as nullable | COMMENT |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 26 | # Step 2: Populate default values | COMMENT |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 37 | # Step 3: Alter column to NOT NULL | STRING |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 40 | # Step 4: Add unique constraint | STRING |
| LOW⚡ | …esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py | 55 | # Step 1: Add column as nullable | STRING |
| 6 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tests/Upgrade.py | 61 | apt update && apt install -y sudo && \ | CODE |
| HIGH | tests/Upgrade.py | 423 | apt update && apt install -y sudo && \ | CODE |
| HIGH | tests/Upgrade.py | 430 | sudo apt update && sudo apt install -y nginx=1.30.3-1~jammy | CODE |
| HIGH | tests/Upgrade.py | 592 | apt update && apt install -y sudo && \ | CODE |
| HIGH | tests/Upgrade.py | 943 | apt update && apt install -y sudo && \ | CODE |
| HIGH | tests/Upgrade.py | 950 | sudo apt update && sudo apt install -y nginx=1.30.3-1~bookworm | CODE |
| HIGH | tests/LinuxTest.py | 133 | f"cd /opt/{self._name} && ./setup-linux.sh && chown -R nginx:nginx /etc/bunkerweb/configs", | CODE |
| HIGH | …-psa-crypto/framework/scripts/generate_bignum_tests.py | 107 | return "0 (null)" | CODE |
| HIGH | …-psa-crypto/framework/scripts/generate_bignum_tests.py | 109 | return "negative 0 (null)" | CODE |
| HIGH | …deps/src/lua-resty-openssl/scripts/find_unused_cdef.py | 96 | def display(unused, undefined): | CODE |
| HIGH | src/deps/src/libinjection/python/speedtest.py | 25 | "1 || COS(+0X04) --FOOBAR", | CODE |
| HIGH | src/deps/src/libinjection/php/json2php.py | 19 | if ($keyword == $fingerprints && libinjection.sqli_not_whitelist($state)) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | src/common/core/letsencrypt/ui/hooks.py | 57 | # Step 1: metadata-only fetch to check if we can short-circuit via checksum. | COMMENT |
| LOW⚡ | src/common/core/letsencrypt/ui/hooks.py | 71 | # Step 2: tar blob fetch + in-memory walk. | COMMENT |
| LOW | …ysql_versions/41d395e48cfd_upgrade_to_version_1_5_0.py | 23 | # Step 1: Drop 'order' column from 'bw_plugins' | COMMENT |
| LOW⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 22 | # Step 1: Add 'order' column as nullable with a default | COMMENT |
| LOW⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 26 | # Step 2: Set default value for existing rows | COMMENT |
| LOW⚡ | …lite_versions/91859f8f75ad_upgrade_to_version_1_5_7.py | 29 | # Step 3: Alter 'order' column to NOT NULL | COMMENT |
| LOW⚡ | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 45 | # Step 1: Add the new 'type' column with default 'external' | COMMENT |
| LOW⚡ | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 48 | # Step 2: Migrate data: Set 'type' to 'external' where 'external' was true | COMMENT |
| LOW⚡ | …lite_versions/0a4144dd55d4_upgrade_to_version_1_5_6.py | 55 | # Step 3: Drop the 'external' column and alter the 'stream' column to STREAM_TYPES_ENUM | STRING |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 22 | # Step 1: Drop 'order' column from 'bw_plugins' | COMMENT |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 31 | # Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint) | COMMENT |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 35 | # Step 2: Set default value for existing rows | COMMENT |
| LOW⚡ | …lite_versions/8bb3be426524_upgrade_to_version_1_5_0.py | 38 | # Step 3: Alter 'order' column to NOT NULL | COMMENT |
| LOW | …iadb_versions/b46c7ecfba26_upgrade_to_version_1_5_0.py | 23 | # Step 1: Drop 'order' column from 'bw_plugins' | COMMENT |
| LOW⚡ | …esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py | 29 | # Step 1: Add 'order' column back to 'bw_plugins' (with a default value of 0 for NOT NULL constraint) | COMMENT |
| LOW⚡ | …esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py | 33 | # Step 2: Set default value for existing rows | COMMENT |
| LOW⚡ | …esql_versions/4badb3a66963_upgrade_to_version_1_5_0.py | 36 | # Step 3: Alter 'order' column to NOT NULL | COMMENT |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 159 | # Step 1: Add column as nullable | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 162 | # Step 2: Populate default values | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 173 | # Step 3: Alter column to NOT NULL | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 176 | # Step 4: Add unique constraint | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 180 | # Step 1: Add column as nullable | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 183 | # Step 2: Populate default values | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 194 | # Step 3: Alter column to NOT NULL | STRING |
| LOW⚡ | …_versions/940350925f36_upgrade_to_version_1_6_0_rc1.py | 197 | # Step 4: Add unique constraint | STRING |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 23 | # Step 1: Add column as nullable | COMMENT |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 26 | # Step 2: Populate default values | COMMENT |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 37 | # Step 3: Alter column to NOT NULL | STRING |
| LOW⚡ | …_versions/b56eb8d8dbf2_upgrade_to_version_1_6_0_rc2.py | 40 | # Step 4: Add unique constraint | STRING |
| LOW⚡ | …esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py | 55 | # Step 1: Add column as nullable | STRING |
| LOW⚡ | …esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py | 58 | # Step 2: Populate default values | STRING |
| LOW⚡ | …esql_versions/5201c88f004d_upgrade_to_version_1_5_7.py | 61 | # Step 3: Alter column to NOT NULL | STRING |
| LOW | …crypto/framework/tests/include/test/psa_exercise_key.h | 177 | * The result is discarded. The purpose of this function is to smoke-test a key. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | src/ui/app/static/libs/datatables/datatables.min.js | 121 | !function(e){var n,s;"function"==typeof define&&define.amd?define(["jquery","datatables.net"],function(t){return e(t,win | CODE |
| CRITICAL⚡ | src/ui/app/static/libs/datatables/datatables.min.js | 131 | !function(e){var a,i;"function"==typeof define&&define.amd?define(["jquery","datatables.net"],function(t){return e(t,win | CODE |
| CRITICAL | src/ui/app/static/libs/apexcharts/apexcharts.min.js | 5 | !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define | CODE |
| CRITICAL | src/deps/src/brotli/csharp/org/brotli/dec/Dictionary.cs | 61 | string[] chunks = new string[] { Org.Brotli.Dec.Dictionary.DataHolder0.GetData(), Org.Brotli.Dec.Dictionary.DataHold | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | src/ui/app/models/instance.py | 1440 | # For other types, just use the latest value | COMMENT |
| MEDIUM | src/ui/app/static/js/pages/bans.js | 1368 | // Use ipaddr.js for robust IP validation | COMMENT |
| MEDIUM | src/api/app/routers/global_settings.py | 43 | # Be robust to unexpected values | COMMENT |
| MEDIUM | …bedtls/tf-psa-crypto/drivers/pqcp/mldsa-native/META.sh | 24 | # More robust extraction using yq | COMMENT |
| MEDIUM | …o/drivers/pqcp/mldsa-native/proofs/cbmc/list_proofs.sh | 6 | # which are those containing a *harness.c file. | COMMENT |
| LOW | …f-psa-crypto/framework/scripts/generate_pkcs7_tests.py | 99 | # off the bat just add bytes to start and end of the buffer | COMMENT |
| LOW | …s/tf-psa-crypto/framework/scripts/project_detection.sh | 21 | # - 0: simply return an error | COMMENT |
| MEDIUM | …o/framework/scripts/mbedtls_framework/psa_test_case.py | 196 | # the output robust with respect to refactoring of the scripts. | COMMENT |
| MEDIUM | …framework/scripts/mbedtls_framework/macro_collector.py | 259 | # something more robust. | COMMENT |
| MEDIUM | …o/framework/scripts/mbedtls_framework/bignum_common.py | 143 | # provides earlier/more robust input validation. | COMMENT |
| MEDIUM | …o/framework/scripts/mbedtls_framework/bignum_common.py | 308 | # provides earlier/more robust input validation. | COMMENT |
| MEDIUM | src/deps/src/modsecurity/doc/doxygen.cfg | 1136 | # it is more robust and this tag (HTML_STYLESHEET) will in the future become | COMMENT |
| MEDIUM | src/deps/src/modsecurity/doc/doxygen.cfg | 1146 | # standard style sheet and is therefor more robust against future updates. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …mbedtls/tf-psa-crypto/framework/scripts/quiet/quiet.sh | 22 | # be silenced, e.g. " --version | test ". In this example, "make lib test" will | COMMENT |
| HIGH | src/deps/src/zlib/contrib/dotzlib/DotZLib/GZipStream.cs | 263 | /// <remarks>In this implementation, this method does nothing. This is because excessive | COMMENT |
| HIGH | src/deps/src/zlib/contrib/dotzlib/DotZLib/GZipStream.cs | 273 | /// <remarks>In this implementation this property is not supported</remarks> | COMMENT |
| HIGH | src/deps/src/zlib/contrib/dotzlib/DotZLib/GZipStream.cs | 290 | /// <remarks>In this implementation this property is not supported</remarks> | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/ui/app/models/totp.py | 95 | def set_last_counter(self, user: UiUsers, tmatch: TotpMatch) -> None: | CODE |
| LOW | src/common/core/misc/jobs/download-plugins.py | 45 | def _set_plugin_permissions(plugin_path: Path) -> None: | CODE |
| LOW | src/common/core/pro/jobs/download-pro-plugins.py | 44 | def _set_plugin_permissions(plugin_path: Path) -> None: | CODE |
| LOW | …o/framework/scripts/mbedtls_framework/config_macros.py | 128 | def update_shadow_file(self, always_update: bool) -> None: | CODE |
| LOW | …/framework/scripts/mbedtls_framework/bignum_mod_raw.py | 132 | def set_representation(self, r: bignum_common.ModulusRepresentation) -> None: | CODE |
| LOW | …pto/framework/scripts/mbedtls_framework/psa_storage.py | 41 | def update_cache(self) -> None: | CODE |
| LOW⚡ | …rypto/framework/scripts/mbedtls_framework/test_case.py | 65 | def set_description(self, description: str) -> None: | CODE |
| LOW⚡ | …rypto/framework/scripts/mbedtls_framework/test_case.py | 71 | def set_dependencies(self, dependencies: List[str]) -> None: | CODE |
| LOW⚡ | …rypto/framework/scripts/mbedtls_framework/test_case.py | 74 | def set_function(self, function: str) -> None: | CODE |
| LOW⚡ | …rypto/framework/scripts/mbedtls_framework/test_case.py | 77 | def set_arguments(self, arguments: List[str]) -> None: | CODE |
| LOW | …o/framework/scripts/mbedtls_framework/psa_test_case.py | 90 | def set_key_bits(self, key_bits: Optional[int]) -> None: | CODE |
| LOW | …o/framework/scripts/mbedtls_framework/psa_test_case.py | 100 | def set_key_pair_usage(self, key_pair_usage: Optional[List[str]]) -> None: | CODE |
| LOW | …o/framework/scripts/mbedtls_framework/psa_test_case.py | 170 | def set_arguments(self, arguments: List[str]) -> None: | CODE |
| LOW | …o/framework/scripts/mbedtls_framework/psa_test_case.py | 180 | def set_dependencies(self, dependencies: List[str]) -> None: | CODE |
| LOW | …ework/scripts/mbedtls_framework/c_wrapper_generator.py | 403 | def set_stream(self, stream: str) -> None: | STRING |
| LOW | src/deps/src/mbedtls/scripts/code_size_compare.py | 512 | def _set_size_record(self, git_rev: str, mod: str, size_text: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | misc/install-bunkerweb.sh | 1329 | # Docker install mode — compose/.env rendering, stack lifecycle, orchestration. | COMMENT |
| MEDIUM | misc/install-bunkerweb.sh | 7301 | # Non-interactive guardrails — silent installs must not end up unusable. | COMMENT |
| MEDIUM | misc/nginx2bw.sh | 8 | # Semi-automated Nginx -> BunkerWeb migration scaffold. | COMMENT |
| MEDIUM | src/common/db/Database.py | 1811 | # so they can be re-published when the orchestration object returns. | COMMENT |
| MEDIUM | src/common/db/Database.py | 1935 | # survive and the service can be republished by bringing the orchestration object | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/update-dockerfile-digests.sh | 11 | # Usage: | COMMENT |
| LOW | …files/coreruleset-v3/util/join-multiline-rules/join.py | 10 | # Usage: | COMMENT |
| LOW | …rypto/tests/scripts/components-configuration-tuning.sh | 12 | ## Usage: | COMMENT |
| LOW | src/deps/src/zlib/contrib/minizip/skipset.h | 20 | // Example usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/ui/app/models/instance.py | 116 | CODE | |
| MEDIUM | src/ui/app/models/instance.py | 121 | CODE | |
| MEDIUM | src/ui/app/models/instance.py | 123 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/ui/app/static/locales/README.md | 3 | This directory contains translation files for the BunkerWeb UI. Below is a summary of which files were created manually | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/deps/src/brotli/python/brotli.py | 26 | Compress a byte string. Args: string (bytes): The input data. mode (int, optional): The compression mod | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/ui/app/models/instance.py | 662 | CODE | |
| LOW | src/ui/app/models/ui_database.py | 85 | CODE | |
| LOW | …les/coreruleset-v4/util/crs-rules-check/rules-check.py | 846 | CODE | |
| LOW | src/common/utils/common_utils.py | 387 | CODE | |
| LOW | …/tf-psa-crypto/framework/scripts/generate_test_code.py | 767 | CODE |