pullrequests Search Results · language:Dune language:JavaScript language:Java language:Python language:HTML language:JavaScript
Filter by
210M results
Harness Pipeline
1. Locate the code where the access_token cookie is created (lines 114–115).
2. Set the Secure attribute on the cookie before adding it to the response:
cookie.setSecure(true); ...
Harness Pipeline
1. Locate all instances where the cookie spoof_auth is created or modified, including the cleanup method.
2. Add cookie.setSecure(true); to ensure the cookie is only sent over HTTPS ...
Harness Pipeline
1. Validate the column parameter against a strict allowlist of known, safe column names (e.g., id, hostname, ip, mac,
status, description).
2. Reject or default to a safe column ...
Harness Pipeline
1. Replace java.util.Random with a cryptographically secure random number generator such as SecureRandom.
2. Use the DRBG (Deterministic Random Bit Generator) instance of SecureRandom ...
Harness Pipeline
1. Sanitize user input: Strip or reject any path traversal characters such as ../ or absolute path indicators.
2. Normalize and validate paths: Use Java NIO Path APIs (toRealPath()) ...
Harness Pipeline
1. Sanitize the filename: Extract only the base filename, removing any path components, using a trusted utility like
org.apache.commons.io.FilenameUtils.getName(...).
2. Validate ...
Harness Pipeline
1. Identify all HTTP links in the HTML code.
2. Replace http:// URLs with their secure https:// equivalents, e.g., change a href= http://www.samsung.com to a href=
https://www.samsung.com ...
Harness Pipeline
1. Locate all instances where cookies are created or cleared (e.g., lines 58-60).
2. For every Cookie object, call cookie.setSecure(true); before adding it to the response.
3. Verify ...
Harness Pipeline
1. Locate where the cookie is created and added to the response (line 77 in SpoofCookieAssignment.java).
2. Add the call newCookie.setHttpOnly(true); before adding the cookie to the ...