Skip to content

feat: jira pdf creator#339

Open
armagandalkiran wants to merge 2 commits into
mainfrom
pdf-creator
Open

feat: jira pdf creator#339
armagandalkiran wants to merge 2 commits into
mainfrom
pdf-creator

Conversation

@armagandalkiran

@armagandalkiran armagandalkiran commented Mar 15, 2025

Copy link
Copy Markdown
Collaborator

No description provided.

@vercel

vercel Bot commented Mar 15, 2025 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
gurubu ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 15, 2025 5:16pm

github-advanced-security[bot]
github-advanced-security AI found potential problems Mar 15, 2025
View reviewed changes
Comment thread gurubu-backend/services/pdfService.js

Object.keys(translations).forEach((key) => {
const englishKey = this.turkishToEnglish(key);
const pattern = new RegExp(englishKey, "g");

Check warning

Code scanning / Semgrep OSS

Semgrep Finding: javascript.lang.security.audit.detect-non-literal-regexp.detect-non-literal-regexp

RegExp() called with a `key` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled input, consider performing input validation or use a regex checking/sanitization library such as https://www.npmjs.com/package/recheck to verify that the regex does not appear vulnerable to ReDoS.
Comment thread gurubu-backend/services/pdfService.js
try {
const tempFilePath = path.join(
os.tmpdir(),
`jira_board_${boardId}_report_${Date.now()}.pdf`

Check warning

Code scanning / Semgrep OSS

Semgrep Finding: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal

Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability, where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aahmetcakir aahmetcakir Awaiting requested review from aahmetcakir
@mertcanaltin mertcanaltin Awaiting requested review from mertcanaltin mertcanaltin is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@armagandalkiran @github-advanced-security