Open source DocuSign alternative. Create, fill, and sign digital documents ✍️
228 matches across 6 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | app/mailers/submitter_mailer.rb | 225 | def build_submitter_preferences_index(submitter) |
| LOW | app/mailers/submitter_mailer.rb | 229 | def add_attachments_with_size_limit(submitter, storage_attachments, current_size, filename_format = nil) |
| LOW | app/mailers/submitter_mailer.rb | 244 | def from_address_for_submitter(submitter) |
| LOW | …avascript/template_builder/dynamic_variables_schema.js | 278 | function parseComparisonOrPresence (tokens, pos) { |
| LOW | …avascript/template_builder/dynamic_variables_schema.js | 325 | function extractConditionVariables (node, acc = []) { |
| LOW | …avascript/template_builder/dynamic_variables_schema.js | 462 | function assignNestedSchemaWithPriority (propertiesHash, parentProperties, keyString, newType) { |
| LOW | …avascript/template_builder/dynamic_variables_schema.js | 491 | function processConditionVariables (condition, propertiesHash, parentProperties) { |
| LOW | app/jobs/process_submitter_completion_job.rb | 80 | def enqueue_completed_webhooks(submitter, is_all_completed: false) |
| LOW | app/jobs/process_submitter_completion_job.rb | 131 | def maybe_enqueue_copy_emails(submitter) |
| LOW | app/jobs/process_submitter_completion_job.rb | 160 | def enqueue_next_submitter_request_notification(submitter) |
| LOW | app/controllers/start_form_controller.rb | 91 | def enqueue_new_submitter_jobs(submitter) |
| LOW | app/controllers/start_form_controller.rb | 119 | def find_or_initialize_submitter(template, submitter_params) |
| LOW | app/controllers/start_form_controller.rb | 150 | def assign_submission_attributes(submitter, template) |
| LOW | app/controllers/start_form_controller.rb | 182 | def filter_undefined_submitters(template) |
| LOW | app/controllers/templates_clone_controller.rb | 49 | def maybe_redirect_to_template(template) |
| LOW | app/controllers/passwords_controller.rb | 28 | def after_resetting_password_path_for(_) |
| LOW | app/controllers/preview_document_page_controller.rb | 43 | def find_or_create_document_tempfile_path(attachment) |
| LOW | app/controllers/api/attachments_controller.rb | 59 | def build_new_cookie_signatures_json(submitter, attachment) |
| LOW | app/controllers/api/submitters_controller.rb | 107 | def maybe_filder_by_completed_at(submitters, params) |
| LOW | app/controllers/api/submitters_controller.rb | 150 | def maybe_assign_completed_attributes(submitter, attrs) |
| LOW | app/controllers/api/submission_documents_controller.rb | 32 | def build_completed_documents(submission, merge: false) |
| LOW | app/controllers/api/api_base_controller.rb | 42 | def access_denied_error_message(error) |
| LOW | lib/pdfium.rb | 898 | def calculate_render_dimensions(width_param, height_param, scale_param) |
| LOW | lib/email_messages.rb | 6 | def find_or_create_for_account_user(account, user, subject, body) |
| LOW | lib/submissions.rb | 189 | def filtered_conditions_schema(submission, values: nil, include_submitter_uuid: nil) |
| LOW | lib/submissions.rb | 201 | def filtered_conditions_fields(submitter, only_submitter_fields: true) |
| LOW | lib/templates.rb | 74 | def filter_undefined_submitters(template_submitters) |
| LOW | lib/submission_events.rb | 14 | def create_with_tracking_data(submitter, event_type, request, data = {}) |
| LOW | lib/template_versions.rb | 60 | def serialize_dynamic_documents(template, dynamic_docs) |
| LOW | lib/search_entries.rb | 115 | def build_weights_wildcard_tsquery(keyword, weight) |
| LOW | lib/search_entries.rb | 175 | def build_submitter_values_string(submitter) |
| LOW | lib/replace_email_variables.rb | 91 | def build_documents_links_text(submitter, sig = nil) |
| LOW | lib/replace_email_variables.rb | 176 | def build_submission_submitters(submission) |
| LOW | lib/account_configs.rb | 25 | def find_or_initialize_for_key(account, key) |
| LOW | lib/load_bmp.rb | 144 | def extract_raw_pixel_data_blob(bmp_bytes, pixel_data_offset, bmp_stride, height) |
| LOW | lib/load_bmp.rb | 167 | def prepare_unpadded_pixel_data_string(raw_pixel_data_from_file, bpp, width, height, bmp_stride) |
| LOW | lib/load_bmp.rb | 194 | def decode_indexed_pixel_data(raw_data, bpp, width, height, bmp_stride, color_table) |
| LOW | lib/accounts.rb | 47 | def find_or_create_testing_user(account) |
| LOW | lib/accounts.rb | 71 | def generate_unique_test_email(original_email) |
| LOW | lib/accounts.rb | 104 | def load_recipient_form_fields(_account) |
| LOW | lib/document_metadatas.rb | 6 | def find_or_create_for_document(document, account_id:) |
| LOW | lib/submitters.rb | 107 | def select_attachments_for_download(submitter) |
| LOW | lib/submitters.rb | 229 | def send_shared_link_email_verification_code(submitter, request:) |
| LOW | lib/submitters/maybe_update_default_values.rb | 30 | def get_default_value_for_field(field, user, submitter) |
| LOW | lib/submitters/submit_values.rb | 70 | def assign_completed_attributes(submitter, request, validate_required: true) |
| LOW | lib/submitters/submit_values.rb | 249 | def replace_current_date_placeholders(submitter) |
| LOW | lib/submitters/submit_values.rb | 262 | def template_default_value_for_submitter(value, submitter, with_time: false, field: nil) |
| LOW | lib/submitters/submit_values.rb | 275 | def maybe_remove_condition_values(submitter, required_field_uuids_acc: nil) |
| LOW | lib/submitters/submit_values.rb | 322 | def check_field_areas_attachments(field, attachments_index) |
| LOW | lib/submitters/submit_values.rb | 409 | def replace_default_variables(value, attrs, submission, with_time: false, field: nil) |
| LOW | lib/submitters/normalize_values.rb | 182 | def normalize_attachment_value(value, field, account, attachments, for_submitter: nil, purpose: nil) |
| LOW | lib/submitters/normalize_values.rb | 235 | def find_or_create_blob_from_html(_account, value, _field) |
| LOW | lib/submitters/normalize_values.rb | 262 | def find_or_create_blob_from_text(account, text, type) |
| LOW | lib/submitters/normalize_values.rb | 275 | def find_or_create_blob_from_url(account, url) |
| LOW | lib/params/submission_create_validator.rb | 20 | def validate_creation_from_emails(params) |
| LOW | lib/params/submission_create_validator.rb | 37 | def validate_creation_from_submitters(params) |
| LOW | lib/params/submission_create_validator.rb | 107 | def validate_creation_from_submission(params) |
| LOW | lib/submissions/generate_preview_attachments.rb | 127 | def build_submitter_values_hash(submitter) |
| LOW | lib/submissions/create_from_submitters.rb | 103 | def maybe_set_dynamic_documents(submission) |
| LOW | lib/submissions/create_from_submitters.rb | 151 | def maybe_add_invite_submitters(submission, template, submitter_attrs) |
| 25 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | spec/system/signing_form_spec.rb | 171 | fill_in 'Name', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 231 | expect(submitter.name).to eq('John Doe') |
| LOW | spec/system/signing_form_spec.rb | 262 | fill_in 'Name', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 319 | expect(submitter.name).to eq('John Doe') |
| LOW | spec/system/signing_form_spec.rb | 617 | fill_in 'signature_text_input', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 740 | fill_in 'initials_text_input', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 960 | fill_in 'Full Name (optional)', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 977 | expect(field_value(submitter, 'Full Name')).to eq 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 985 | fill_in 'Full Name (optional)', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 1002 | expect(field_value(submitter, 'Full Name')).to eq 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 1011 | fill_in 'Full Name (optional)', with: 'Jane Doe' |
| LOW | spec/system/signing_form_spec.rb | 1025 | expect(field_value(submitter, 'Full Name')).to eq 'Jane Doe' |
| LOW | spec/system/signing_form_spec.rb | 1296 | fill_in 'First Name', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 1307 | fill_in 'First Name', with: 'John Doe' |
| LOW | spec/system/signing_form_spec.rb | 1317 | expect(field_value(submitter, 'First Name')).to eq 'John Doe' |
| LOW | spec/system/email_settings_spec.rb | 17 | fill_in 'Username', with: 'user@example.com' |
| LOW | spec/system/email_settings_spec.rb | 20 | fill_in 'Send from Email', with: 'user@example.com' |
| LOW | spec/system/email_settings_spec.rb | 32 | expect(encrypted_config.value['username']).to eq('user@example.com') |
| LOW | spec/system/email_settings_spec.rb | 37 | expect(encrypted_config.value['from_email']).to eq('user@example.com') |
| LOW | docs/openapi.json | 1623 | "name": "John Doe", |
| LOW | docs/openapi.json | 2259 | "value": "John Doe" |
| LOW | docs/openapi.json | 2746 | "name": "John Doe", |
| LOW | docs/openapi.json | 2754 | "value": "John Doe" |
| LOW | docs/openapi.json | 3199 | "value": "John Doe" |
| LOW | docs/openapi.json | 4213 | "value": "John Doe" |
| LOW | docs/openapi.json | 5126 | "value": "John Doe" |
| LOW | docs/openapi.json | 5267 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n ro |
| LOW | docs/openapi.json | 6054 | "value": "John Doe" |
| LOW | docs/openapi.json | 6412 | "name": "John Doe", |
| LOW | docs/openapi.json | 6436 | "value": "John Doe" |
| LOW | docs/openapi.json | 6964 | "name": "John Doe", |
| LOW | docs/openapi.json | 6973 | "value": "John Doe" |
| LOW | docs/openapi.json | 7374 | "name": "John Doe", |
| LOW | docs/openapi.json | 7398 | "value": "John Doe" |
| LOW | docs/openapi.json | 8399 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/openapi.json | 8459 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n ro |
| LOW | docs/api/go.md | 1769 | payload := strings.NewReader("{\"name\":\"Test Submission Document\",\"documents\":[{\"name\":\"Test Document\",\"html\ |
| LOW | docs/api/go.md | 1877 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/go.md | 3767 | payload := strings.NewReader("{\"html\":\"<p>Lorem Ipsum is simply dummy text of the\\n<text-field\\n name=\\\"Industr |
| LOW | docs/api/go.md | 3811 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First P |
| LOW | docs/api/go.md | 3871 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/python.md | 1694 | "html": """<p>Lorem Ipsum is simply dummy text of the |
| LOW | docs/api/python.md | 1804 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/python.md | 3561 | "html": """<p>Lorem Ipsum is simply dummy text of the |
| LOW | docs/api/python.md | 3600 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First P |
| LOW | docs/api/python.md | 3660 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/csharp.md | 1628 | request.AddParameter("application/json", "{\"name\":\"Test Submission Document\",\"documents\":[{\"name\":\"Test Documen |
| LOW | docs/api/csharp.md | 1722 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/csharp.md | 3429 | request.AddParameter("application/json", "{\"html\":\"<p>Lorem Ipsum is simply dummy text of the\\n<text-field\\n name= |
| LOW | docs/api/csharp.md | 3459 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First P |
| LOW | docs/api/csharp.md | 3519 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/php.md | 1673 | 'html' => '<p>Lorem Ipsum is simply dummy text of the |
| LOW | docs/api/php.md | 1783 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/php.md | 3513 | 'html' => '<p>Lorem Ipsum is simply dummy text of the |
| LOW | docs/api/php.md | 3552 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First P |
| LOW | docs/api/php.md | 3612 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/javascript.md | 1687 | html: `<p>Lorem Ipsum is simply dummy text of the |
| LOW | docs/api/javascript.md | 1797 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"F |
| LOW | docs/api/javascript.md | 3545 | html: `<p>Lorem Ipsum is simply dummy text of the |
| LOW | docs/api/javascript.md | 3584 | "example": "<p>Lorem Ipsum is simply dummy text of the\n<text-field\n name=\"Industry\"\n role=\"First P |
| 26 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | app/models/submission_event.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/account_linked_account.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/email_message.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/account.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/submitter.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/submitter.rb | 21 | # uuid :string not null |
| LOW | app/models/search_entry.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/lock_event.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/dynamic_document_version.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/encrypted_user_config.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/webhook_url.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/email_event.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/template_folder.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/template.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/template.rb | 21 | # author_id :bigint not null |
| LOW | app/models/webhook_event.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/template_version.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/template_sharing.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/user_config.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/document_generation_event.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/template_access.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/mcp_token.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/submitter_version.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/account_config.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/encrypted_config.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/dynamic_document.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/submission.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/submission.rb | 21 | # updated_at :datetime not null |
| LOW | app/models/webhook_attempt.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/completed_document.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/account_access.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/completed_submitter.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/document_metadata.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/user.rb | 1 | # frozen_string_literal: true |
| LOW | app/models/user.rb | 21 | # last_sign_in_ip :string |
| LOW | app/models/access_token.rb | 1 | # frozen_string_literal: true |
| LOW | config/initializers/devise.rb | 41 | end |
| LOW | config/initializers/devise.rb | 61 | # Configure the parent class responsible to send e-mails. |
| LOW | config/initializers/devise.rb | 81 | # given should be a request method and it will automatically be passed to the |
| LOW | config/initializers/devise.rb | 101 | # config.params_authenticatable = true |
| LOW | config/initializers/devise.rb | 121 | # Does not affect registerable. |
| LOW | config/initializers/devise.rb | 141 | config.reload_routes = false |
| LOW | config/initializers/devise.rb | 161 | # Send a notification email when the user's password is changed. |
| LOW | config/initializers/devise.rb | 181 | # config.confirm_within = 3.days |
| LOW | config/initializers/devise.rb | 201 | |
| LOW | config/initializers/devise.rb | 221 | # Defines which strategy will be used to lock an account. |
| LOW | config/initializers/devise.rb | 241 | # config.unlock_in = 1.hour |
| LOW | config/initializers/devise.rb | 261 | # Allow you to use another hashing or encryption algorithm besides bcrypt (default). |
| LOW | config/initializers/devise.rb | 281 | # only the current scope. By default, Devise signs out all scopes. |
| LOW | config/initializers/devise.rb | 301 | # |
| LOW | config/initializers/devise.rb | 321 | |
| LOW | db/schema.rb | 1 | # This file is auto-generated from the current state of the database. Instead |
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | app/javascript/template_builder/dynamic_area.vue | 274 | const tr = this.editor.view.state.tr.setNodeMarkup(pos, undefined, { |
| CRITICAL | app/javascript/template_builder/dynamic_area.vue | 275 | ...this.editor.view.state.doc.nodeAt(pos)?.attrs, |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | db/schema.rb | 1 | # This file is auto-generated from the current state of the database. Instead |
| MEDIUM | db/schema.rb | 5 | # This file is the source Rails uses to define your schema when running `bin/rails |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | config/environments/production.rb | 77 | # Set this to true and configure the email server for immediate delivery to raise delivery errors. |