[PPP-5351]-XSS Findings For Data-Access

[Rangashivani]

PPP-5351-XSS Findings For Data-Access

[hitachivantarasonarqube]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[buildguy]

Note:

---

Frogbot also supports Contextual Analysis, Secret Detection, IaC and SAST Vulnerabilities Scanning. This features are included as part of the JFrog Advanced Security package, which isn't enabled on your system.

---

🐸 JFrog Frogbot

[buildguy]

✅ Build finished in 1m 39s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -pl \
assemblies/data-access-plugin

---

❗ No tests found!

ℹ️ This is an automatic message

[dcleao]

AFAIK, this JS code in the data-access plugin is not used. In fact, it was duplicated and converted to RequireJS and now lives in https://github.com/pentaho/pentaho-platform-plugin-common-ui/tree/930bf603641698c4352d26d5a002f0659c61b5f3/impl/client/src/main/javascript/web/dataapi.

My advice is to remove this code, simultaneously fixing the XSS findings.