juice-shop/juice-shop

Pattern Findings

186 matches across 6 categories. Click a row to expand file-level details.

Fake / Example Data133 hits · 160 pts

Severity	File	Line	Snippet
LOW	ftp/acquisitions.md	9	Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy
LOW	ftp/acquisitions.md	9	Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy
LOW	ftp/acquisitions.md	12	clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit
LOW	ftp/acquisitions.md	13	amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam
LOW	ftp/acquisitions.md	13	amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam
LOW	ftp/acquisitions.md	17	ipsum dolor sit amet.
LOW	frontend/src/app/app.guard.spec.ts	49	name: 'John Doe',
LOW	frontend/src/app/oauth/oauth.component.spec.ts	89	userService.oauthLogin.mockReturnValue(of({ email: 'test@test.com' }))
LOW	frontend/src/app/oauth/oauth.component.spec.ts	91	expect(userService.save).toHaveBeenCalledWith({ email: 'test@test.com', password: 'bW9jLnRzZXRAdHNldA==', passwo
LOW	frontend/src/app/oauth/oauth.component.spec.ts	95	userService.oauthLogin.mockReturnValue(of({ email: 'test@test.com' }))
LOW	frontend/src/app/oauth/oauth.component.spec.ts	98	expect(userService.login).toHaveBeenCalledWith({ email: 'test@test.com', password: 'bW9jLnRzZXRAdHNldA==', oauth
LOW	…onents/challenge-card/challenge-card.component.spec.ts	19	description: 'lorem ipsum',
LOW	…l-mode-warning/tutorial-mode-warning.component.spec.ts	28	description: 'lorem ipsum',
LOW	…l-mode-warning/tutorial-mode-warning.component.spec.ts	69	description: 'lorem ipsum',
LOW	…rning/challenges-unavailable-warning.component.spec.ts	26	description: 'lorem ipsum',
LOW	…rning/challenges-unavailable-warning.component.spec.ts	35	description: 'lorem ipsum',
LOW	…rning/challenges-unavailable-warning.component.spec.ts	60	description: 'lorem ipsum',
LOW	…rning/challenges-unavailable-warning.component.spec.ts	79	description: 'lorem ipsum',
LOW	…rning/challenges-unavailable-warning.component.spec.ts	88	description: 'lorem ipsum',
LOW	…rc/app/score-board/helpers/challenge-filtering.spec.ts	7	description: 'lorem ipsum',
LOW	…rc/app/score-board/helpers/challenge-filtering.spec.ts	8	originalDescription: 'lorem ipsum',
LOW	…rc/app/score-board/helpers/challenge-filtering.spec.ts	24	description: 'lorem ipsum',
LOW	…rc/app/score-board/helpers/challenge-filtering.spec.ts	25	originalDescription: 'lorem ipsum',
LOW	…rc/app/score-board/helpers/challenge-filtering.spec.ts	41	description: 'lorem ipsum',
LOW	…rc/app/score-board/helpers/challenge-filtering.spec.ts	42	originalDescription: 'lorem ipsum',
LOW	…/src/app/score-board/helpers/challenge-sorting.spec.ts	6	description: 'lorem ipsum',
LOW	…/src/app/score-board/helpers/challenge-sorting.spec.ts	7	originalDescription: 'lorem ipsum',
LOW	…/src/app/score-board/helpers/challenge-sorting.spec.ts	23	description: 'lorem ipsum',
LOW	…/src/app/score-board/helpers/challenge-sorting.spec.ts	24	originalDescription: 'lorem ipsum',
LOW	…/src/app/score-board/helpers/challenge-sorting.spec.ts	40	description: 'lorem ipsum',
LOW	…/src/app/score-board/helpers/challenge-sorting.spec.ts	41	originalDescription: 'lorem ipsum',
LOW	frontend/src/app/recycle/recycle.component.html	67	<small>Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut
LOW	frontend/src/app/recycle/recycle.component.html	67	<small>Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut
LOW	frontend/src/app/recycle/recycle.component.html	79	<small>Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor
LOW	frontend/src/app/recycle/recycle.component.html	79	<small>Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor
LOW	frontend/src/app/about/about.component.html	16	Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et
LOW	frontend/src/app/about/about.component.html	16	Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et
LOW	frontend/src/app/about/about.component.html	18	clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet,
LOW	frontend/src/app/about/about.component.html	18	clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet,
LOW	frontend/src/app/about/about.component.html	21	takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed
LOW	frontend/src/app/about/about.component.html	21	takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed
LOW	frontend/src/app/about/about.component.html	26	delenit augue duis dolore te feugait nulla facilisi. Lorem ipsum dolor sit amet, consectetuer adipiscing elit,
LOW	frontend/src/app/about/about.component.html	26	delenit augue duis dolore te feugait nulla facilisi. Lorem ipsum dolor sit amet, consectetuer adipiscing elit,
LOW	frontend/src/app/about/about.component.html	32	Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod
LOW	frontend/src/app/about/about.component.html	32	Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod
LOW	frontend/src/app/about/about.component.html	34	dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem
LOW	frontend/src/app/about/about.component.html	34	dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem
LOW	frontend/src/app/about/about.component.html	35	ipsum dolor sit amet, consetetur sadipscing elitr, At accusam aliquyam diam diam dolore dolores duo eirmod eos
LOW	frontend/src/app/token-sale/token-sale.component.html	28	Lorem ipsum dolor sit amet <strong><i class='fab fa-bitcoin'></i> {{altcoinName}}</strong>, consetetur sadipsc
LOW	frontend/src/app/token-sale/token-sale.component.html	28	Lorem ipsum dolor sit amet <strong><i class='fab fa-bitcoin'></i> {{altcoinName}}</strong>, consetetur sadipsc
LOW	frontend/src/app/token-sale/token-sale.component.html	32	Duis autem vel eum iriure dolor in hendrerit in vulputate velit esse molestie consequat, vel illum dolore eu f
LOW	frontend/src/app/token-sale/token-sale.component.html	32	Duis autem vel eum iriure dolor in hendrerit in vulputate velit esse molestie consequat, vel illum dolore eu f
LOW	frontend/src/app/token-sale/token-sale.component.html	40	Nam liber tempor cum soluta nobis eleifend option congue nihil imperdiet doming id quod mazim placerat facer p
LOW	frontend/src/app/token-sale/token-sale.component.html	40	Nam liber tempor cum soluta nobis eleifend option congue nihil imperdiet doming id quod mazim placerat facer p
LOW	frontend/src/app/token-sale/token-sale.component.html	48	At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus es
LOW	frontend/src/app/token-sale/token-sale.component.html	48	At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus es
LOW	frontend/src/app/token-sale/token-sale.component.html	62	Stet clita kasd gubergren, no <strong><i class='fab fa-bitcoin'></i> {{altcoinName}}</strong> sea takimata s
LOW	frontend/src/app/token-sale/token-sale.component.html	62	Stet clita kasd gubergren, no <strong><i class='fab fa-bitcoin'></i> {{altcoinName}}</strong> sea takimata s
LOW	frontend/src/app/token-sale/token-sale.component.html	71	Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed <strong><i class='fab fa-bitcoin'></i> {{altcoi
LOW	frontend/src/app/token-sale/token-sale.component.html	71	Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed <strong><i class='fab fa-bitcoin'></i> {{altcoi
73 more matches not shown…

Hyper-Verbose Identifiers39 hits · 39 pts

Severity	File	Line	Snippet
LOW	frontend/src/hacking-instructor/index.ts	190	export async function startHackingInstructorFor (challengeName: string): Promise<void> {
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	65	export function waitForInputToNotHaveValue (inputSelector: string, value: string, options = { ignoreCase: true }) {
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	82	export function waitForInputToNotHaveValueAndNotBeEmpty (inputSelector: string, value: string, options = { ignoreCase: t
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	116	export function waitForElementToGetClicked (elementSelector: string) {
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	131	export function waitForElementsInnerHtmlToBe (elementSelector: string, value: string) {
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	159	export function waitForAngularRouteToBeVisited (route: string) {
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	244	export function waitForSelectToNotHaveValue (selectSelector: string, value: string) {
LOW	frontend/src/hacking-instructor/helpers/helpers.ts	259	export function waitForRightUriQueryParamPair (key: string, value: string) {
LOW	…er-settings/pipes/difficulty-selection-summary.pipe.ts	27	function breakDifficultiesIntoNeighboringGroups (difficulties: (1 \| 2 \| 3 \| 4 \| 5 \| 6)[]): DifficultyGroup[] {
LOW	…er-settings/pipes/difficulty-selection-summary.pipe.ts	46	function convertDifficultyGroupsToString (difficultyGroups: DifficultyGroup[]): string {
LOW	…end/src/app/score-board/helpers/challenge-filtering.ts	100	function getCompleteChallengeStatus (
LOW	frontend/src/assets/private/three.js	21805	function materialNeedsSmoothNormals ( material ) {
LOW	frontend/src/assets/private/three.js	21833	function bufferGuessVertexColorType( material ) {
LOW	frontend/src/assets/private/three.js	24365	function unrollImmediateBufferMaterial ( globject ) {
LOW	lib/antiCheat.ts	148	function isLooselyCoupledToPreviouslySolved (challenge: Challenge) {
LOW	lib/utils.ts	154	export function getChallengeEnablementStatus (challenge: Challenge,
LOW	lib/codingChallenges.ts	46	function getCodeChallengesFromFile (file: FileMatch) {
LOW	lib/codingChallenges.ts	58	function getCodingChallengeFromFileContent (source: string, challengeKey: string) {
LOW	data/staticData.ts	93	export async function loadStaticSecurityQuestionsData (): Promise<StaticSecurityQuestions[]> {
LOW	data/datacreator.ts	295	function getGeneratedRandomFakeUserEmail () {
LOW	data/datacreator.ts	471	function customizeChangeProductChallenge (description: string, customUrl: string, customProduct: Product) {
LOW	data/datacache.ts	35	export function setRetrieveBlueprintChallengeFile (retrieveBlueprintChallengeFileArg: string) {
LOW	data/static/codefixes/xssBonusChallenge.info.yml	7	explanation: 'Using bypassSecurityTrustSoundCloud() instead of bypassSecurityTrustHtml() supposedly bypasses sanitiz
LOW	routes/login.ts	69	function verifyPostLoginChallenges (user: { data: User }) {
LOW	routes/verify.ts	138	async function checkPatternInFeedbackAndComplaints (
LOW	routes/verify.ts	231	function knownVulnerableComponentChallenge () {
LOW	routes/verify.ts	238	function knownVulnerableComponents () {
LOW	routes/verify.ts	272	function typosquattingNpmChallenge () {
LOW	routes/verify.ts	279	function typosquattingAngularChallenge () {
LOW	routes/verify.ts	293	function supplyChainAttackChallenge () {
LOW	routes/verify.ts	307	function dlpPastebinDataLeakChallenge () {
LOW	routes/resetPassword.ts	57	function verifySecurityAnswerChallenges (user: UserModel, answer: string) {
LOW	routes/basketItems.ts	58	export function quantityCheckBeforeBasketItemAddition () {
LOW	routes/basketItems.ts	65	export function quantityCheckBeforeBasketItemUpdate () {
LOW	routes/order.ts	184	function calculateApplicableDiscount (basket: BasketModel, req: Request) {
LOW	routes/fileServer.ts	40	function verifySuccessfulPoisonNullByteExploit (file: string) {
LOW	routes/fileServer.ts	52	function endsWithAllowlistedFileType (param: string) {
LOW	routes/metrics.ts	45	export function observeRequestMetricsMiddleware () {
LOW	routes/metrics.ts	55	export function observeFileUploadMetricsMiddleware () {

Synthetic Comment Markers2 hits · 10 pts

Severity	File	Line	Snippet
HIGH	CONTRIBUTING.md	19	6. Noise (e.g. unnecessary comments) generated by AI tools _must_ be removed before opening a PR.
HIGH	AGENTS.md	63	Required per CONTRIBUTING.md rule #6: Remove unnecessary AI-generated content before submitting PRs.

Hallucination Indicators1 hit · 10 pts

Severity	File	Line	Snippet
CRITICAL	frontend/src/app/oauth/oauth.component.ts	71	const hash = this.route.snapshot.data.params.substr(1)

Over-Commented Block9 hits · 9 pts

Severity	File	Line	Snippet
LOW	frontend/src/assets/private/three.js	30161	points.push( points[ 0 ] );
LOW	frontend/src/assets/private/three.js	30501	//
LOW	frontend/src/assets/private/three.js	31321	// var c = [];
LOW	frontend/src/assets/private/OrbitControls.js	1	/**
LOW	…efixes/resetPasswordBjoernOwaspChallenge_2_correct.yml	1	# Provide password reset option via a one-time link with
LOW	…c/codefixes/resetPasswordBjoernChallenge_1_correct.yml	1	# Provide password reset option via a one-time link with
LOW	…c/codefixes/resetPasswordBenderChallenge_2_correct.yml	1	# Provide password reset option via a one-time link with
LOW	…c/codefixes/resetPasswordUvoginChallenge_3_correct.yml	1	# Provide password reset option via a one-time link with
LOW	…atic/codefixes/resetPasswordJimChallenge_3_correct.yml	1	# Provide password reset option via a one-time link with

AI Slop Vocabulary2 hits · 6 pts

Severity	File	Line	Snippet
MEDIUM	frontend/src/assets/private/three.js	3514	// this is a more robust check for empty than ( volume <= 0 ) because volume can get positive with two negative axes
MEDIUM	frontend/src/assets/private/three.js	3838	// this is a more robust check for empty than ( volume <= 0 ) because volume can get positive with two negative axes

Score History

Severity Breakdown

Pattern Findings