Repository navigation
fix: imported fixes 06-11-26 - #40889
Merged
Merged
RC - Layne / Layne Security Scan
succeeded
Jun 11, 2026 in 7s
Layne — success
Found 1 issue(s): 0 critical, 1 high, 0 medium, 0 low.
Excepted findings:
- LAYNE-2ddd92cdd5a7448f [semgrep/app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification] apps/meteor/app/apple/lib/handleIdentityToken.ts:42 — excepted by @julio-rocketchat: "hardcoded URL"
All findings are still annotated below for reference.
Annotations
Check failure on line 42 in apps/meteor/app/apple/lib/handleIdentityToken.ts
rc-layne / Layne Security Scan
[semgrep] app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification
[R42] SSRF validation is disabled. Ensure the URL is not user-controlled or is restricted to a known-safe allowlist.
Loading