Information Disclosure file scan

FeeiCN · Jun 8, 2016 · a758d77 · a758d77
1 parent 4a9d6d1
commit a758d77
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/app/templates/report.html b/app/templates/report.html
@@ -133,8 +133,12 @@ <h4>{{ vulnerability.vul_type }}</h4>
                                     <td>{{ each_vul.level }}</td>
                                     <td>{{ each_vul.rule }}</td>
                                     <td>
-                                        <span style="background-color: #8A8585;color: white;padding: 3px;border-radius: 3px;">{{ each_vul.file }}:{{ each_vul.line }}</span>
-                                        <pre><code class="language-php">{{ each_vul.code }}</code></pre>
+                                        {% if each_vul.line == 0 %}
+                                            <span style="background-color: #8A8585;color: white;padding: 3px;border-radius: 3px;">{{ each_vul.file }}</span>
+                                        {% else %}
+                                            <span style="background-color: #8A8585;color: white;padding: 3px;border-radius: 3px;">{{ each_vul.file }}:{{ each_vul.line }}</span>
+                                            <pre><code class="language-php">{{ each_vul.code }}</code></pre>
+                                        {% endif %}
                                     </td>
                                     <td>{{ each_vul.repair }}</td>
                                     <td class="text-right">

diff --git a/engine/static.py b/engine/static.py
@@ -197,6 +197,7 @@ def analyse(self, directory=None, task_id=None, project_id=None):
                                             # Didn't filter line when regex is empty
                                             r_content = CobraResults.query.filter_by(task_id=task_id, rule_id=rule_id,
                                                                                      file=m_file).first()
+                                            m_line = 0
                                         else:
                                             r_content = CobraResults.query.filter_by(task_id=task_id, rule_id=rule_id,
                                                                                      file=m_file,