Skip to content

Add semgrep rules for form-input components

Scott de Jonge requested to merge 48-input-semgrep-rules into main

Create semgrep scanner rule for usage in HAML/Vue of component, CSS class, and/or native HTML element

Note:

Testing for gl-form-input CSS class inside HAML files resulted in significant duplication of results against field types. e.g. f.text_field class: 'gl-form-input' results in 2 matches on text_field and gl-form-input class.

Likewise f.text_area class: 'gl-form-input' would be a false positive instead of being within form-textarea.

localhost_3000__search_check_id_20co_20_22form_input_22

Closes #48 (closed)

Merge request reports