Skip to content

SAST rule eslint.detect-object-injection not being suppressed

Summary

Category:SAST is failing to suppress eslint.detect-object-injection and should be investigated.

Steps to reproduce

Example Project

https://gitlab.com/gitlab-gold/cmutua-security-group/typescript-fp/-/pipelines/867907107

What is the current bug behavior?

eslint.detect-object-injection results are being returned

What is the expected correct behavior?

eslint.detect-object-injection should be disabled by default

Relevant logs and/or screenshots

Output of checks

This bug happens on GitLab.com

Possible fixes

Remove rule entirely since we have now bumped the MAJOR version to v4 for %16.0

Edited by Lucas Charles