yup#89
Conversation
…uaViewSDK into feature/playground
…ground Conflicts: Android/LuaViewDemo/LuaViewDemo.iml Android/LuaViewSDK/LuaViewSDK.iml
Dev 5.10.0 playground See merge request !54
# Conflicts: # LuaViewSDK.podspec
|
城西 seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account. You have signed the CLA already but the status is still pending? Let us recheck it. |
|
城西 seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account. You have signed the CLA already but the status is still pending? Let us recheck it. |
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| <repository> | ||
| <id>releases</id> | ||
| <url>http://mvnrepo.alibaba-inc.com/mvn/releases</url> | ||
| </repository> |
Check failure
Code scanning / CodeQL
Failure to use HTTPS or SFTP URL in Maven artifact upload/download
| <snapshotRepository> | ||
| <id>snapshots</id> | ||
| <url>http://mvnrepo.alibaba-inc.com/mvn/snapshots</url> | ||
| </snapshotRepository> |
Check failure
Code scanning / CodeQL
Failure to use HTTPS or SFTP URL in Maven artifact upload/download
| DebugUtil.tsi("luaviewp-unpackBundle-zip"); | ||
| while ((entry = zipStream.getNextEntry()) != null) { | ||
| // 处理../ 这种方式只能使用单层路径，不能处理子目录，在这里可以添加公用path | ||
| rawName = entry.getName(); |
Check failure
Code scanning / CodeQL
Arbitrary file access during archive extraction ("Zip Slip")
| if (entry.isDirectory()) { | ||
| filePath = FileUtil.buildPath(scriptBundleFolderPath, fileName); | ||
| File dir = new File(filePath); | ||
| if (!dir.exists()) { |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression
| filePath = FileUtil.buildPath(scriptBundleFolderPath, fileName); | ||
| File dir = new File(filePath); | ||
| if (!dir.exists()) { | ||
| dir.mkdir(); |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression
| if (cipher == null) { | ||
| final SecretKeySpec skeySpec = new SecretKeySpec(keys, ALGORITHM_AES); | ||
| final IvParameterSpec ivParameterSpec = new IvParameterSpec(cIv); | ||
| cipher = Cipher.getInstance(ALGORITHM_AES); |
Check failure
Code scanning / CodeQL
Use of a broken or risky cryptographic algorithm
| final SecretKeySpec skeySpec = new SecretKeySpec(keys, ALGORITHM_AES); | ||
| final IvParameterSpec ivParameterSpec = new IvParameterSpec(cIv); | ||
| cipher = Cipher.getInstance(ALGORITHM_AES); | ||
| cipher.init(Cipher.DECRYPT_MODE, skeySpec, ivParameterSpec); |
Check failure
Code scanning / CodeQL
Using a static initialization vector for encryption
|
|
||
| public long skip(long n) throws IOException { | ||
| final long k = Math.min(n, j - i); | ||
| i += k; |
Check failure
Code scanning / CodeQL
Implicit narrowing conversion in compound assignment
|
|
||
| void reserveregs(int n) { | ||
| this.checkstack(n); | ||
| this.freereg += n; |
Check failure
Code scanning / CodeQL
Implicit narrowing conversion in compound assignment
| <!--shake--> | ||
| <uses-permission android:name="android.permission.VIBRATE"/> | ||
| <uses-sdk android:minSdkVersion="14"/> | ||
| <application android:allowBackup="true" android:label="@string/app_name" tools:replace="android:allowBackup,android:label" android:debuggable="true"> |
Check failure
Code scanning / CodeQL
Android debuggable attribute enabled
4 participants
macports.conf.5.txt