Skip to content

Code Security Report: 211 total findings #4

@mend-for-github-com

Description

@mend-for-github-com

Code Security Report

Scan Metadata

Latest Scan: 2024-06-16 08:33pm
Total Findings: 211 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 43
Detected Programming Languages: 3 (C/C++ (Beta), Swift, iOS Objective-C)

  • Check this box to manually trigger a scan

Most Relevant Findings

The list below presents the 10 most relevant findings that need your attention. To view information on the remaining findings, navigate to the Mend Application.

SeverityVulnerability TypeCWEFileData FlowsDate
LowExternal URL Access

N/A

EventMonitor.swift:211

12024-06-16 08:34pm
Vulnerable Code

/// downloaded file will be moved to.
func request(_ request: DownloadRequest, didCreateDestinationURL url: URL)
/// Event called when a `DownloadRequest` calls a `Validation`.
func request(_ request: DownloadRequest,
didValidateRequest urlRequest: URLRequest?,

1 Data Flow/s detected

didValidateRequest urlRequest: URLRequest?,

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

Response.swift:101

12024-06-16 08:34pm
Vulnerable Code

/// `HTTPURLResponse`'s status code, headers, and body; the duration of the network and serialization actions; and
/// the `Result` of serialization.
public var debugDescription: String {
guard let urlRequest = request else { return "[Request]: None\n[Result]: \(result)" }
let requestDescription = DebugDescription.description(of: urlRequest)

1 Data Flow/s detected

let requestDescription = DebugDescription.description(of: urlRequest)

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

Session.swift:662

12024-06-16 08:34pm
Vulnerable Code

/// - fileManager: `FileManager` instance to be used by the returned `UploadRequest`. `.default` instance by
/// default.
///
/// - Returns: The created `UploadRequest`.
open func upload(_ data: Data,
with convertible: URLRequestConvertible,

1 Data Flow/s detected

with convertible: URLRequestConvertible,

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

RequestInterceptor.swift:196

12024-06-16 08:34pm
Vulnerable Code

open func adapt(_ urlRequest: URLRequest, for session: Session, completion: @escaping (Result<URLRequest, Error>) -> Void) {
adapt(urlRequest, for: session, using: adapters, completion: completion)
}
private func adapt(_ urlRequest: URLRequest,

1 Data Flow/s detected

private func adapt(_ urlRequest: URLRequest,

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

RequestInterceptor.swift:97

12024-06-16 08:34pm
Vulnerable Code

/// Type that provides both `RequestAdapter` and `RequestRetrier` functionality.
public protocol RequestInterceptor: RequestAdapter, RequestRetrier {}
extension RequestInterceptor {
public func adapt(_ urlRequest: URLRequest, for session: Session, completion: @escaping (Result<URLRequest, Error>) -> Void) {
completion(.success(urlRequest))

1 Data Flow/s detected

completion(.success(urlRequest))

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

EventMonitor.swift:622

12024-06-16 08:34pm
Vulnerable Code

/// Closure called on the `request(_:didFailToCreateURLRequestWithError:)` event.
open var requestDidFailToCreateURLRequestWithError: ((Request, AFError) -> Void)?
/// Closure called on the `request(_:didAdaptInitialRequest:to:)` event.
open var requestDidAdaptInitialRequestToAdaptedRequest: ((Request, URLRequest, URLRequest) -> Void)?

1 Data Flow/s detected

open var requestDidAdaptInitialRequestToAdaptedRequest: ((Request, URLRequest, URLRequest) -> Void)?

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

RedirectHandler.swift:82

12024-06-16 08:34pm
Vulnerable Code

// MARK: -
extension Redirector: RedirectHandler {
public func task(_ task: URLSessionTask,
willBeRedirectedTo request: URLRequest,

1 Data Flow/s detected

willBeRedirectedTo request: URLRequest,

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

ParameterEncoder.swift:38

12024-06-16 08:34pm
Vulnerable Code

/// - request: The `URLRequest` into which to encode the parameters.
///
/// - Returns: A `URLRequest` with the result of the encoding.
/// - Throws: An `Error` when encoding fails. For Alamofire provided encoders, this will be an instance of
/// `AFError.parameterEncoderFailed` with an associated `ParameterEncoderFailureReason`.
func encode<Parameters: Encodable>(_ parameters: Parameters?, into request: URLRequest) throws -> URLRequest

1 Data Flow/s detected

func encode<Parameters: Encodable>(_ parameters: Parameters?, into request: URLRequest) throws -> URLRequest

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

Session.swift:599

12024-06-16 08:34pm
Vulnerable Code

let url: URLConvertible
let method: HTTPMethod
let headers: HTTPHeaders?
let requestModifier: RequestModifier?
func asURLRequest() throws -> URLRequest {

1 Data Flow/s detected

func asURLRequest() throws -> URLRequest {

Secure Code Warrior Training Material
 
LowExternal URL Access

N/A

Session.swift:247

12024-06-16 08:34pm
Vulnerable Code

// MARK: - DataRequest
/// Closure which provides a `URLRequest` for mutation.
public typealias RequestModifier = (inout URLRequest) throws -> Void
struct RequestConvertible: URLRequestConvertible {

1 Data Flow/s detected

struct RequestConvertible: URLRequestConvertible {

Secure Code Warrior Training Material

Findings Overview

Severity Vulnerability Type CWE Language Count
Low External URL Access N/A Swift 211

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions