Client_Hardcoded_Domain @ /docs/index.html

[AASMACMX]

Client_Hardcoded_Domain issue exists @ index.html in branch main

The JavaScript file imported in https://owasp.org/www-project-webgoat/ in /docs/index.html at line 7 is from a remote domain, which may allow attackers to replace its contents with malicious code.

Namespace: CxDemoInABoxRepos
Repository: Java-Webgoat
Repository Url: https://github.com/CxDemoInABoxRepos/Java-Webgoat
CxAST-Project: CxDemoInABoxRepos/Java-Webgoat
CxAST platform scan: 466e73ae-3cc9-415a-8383-b7e20e1af3be
Branch: main
Application: Java-Webgoat
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
CWE: 829
Lines: 7

---

References
Read more