Safe

[Spomky]

No description provided.

[sonarqubecloud]

SonarCloud Quality Gate failed.

0 Bugs
0 Vulnerabilities (and 0 Security Hotspots to review)
0 Code Smells

No Coverage information
3.0% Duplication

[guardrails]

⚠️ We detected security issues in this pull request:

Insecure File Management (9)

webauthn-framework/src/webauthn/src/CertificateToolbox.php

Line 60 in c5e228f

file_put_contents($untrustedFilename, PHP_EOL, FILE_APPEND);

webauthn-framework/src/webauthn/src/StringStream.php

Line 46 in c5e228f

fwrite($resource, $data);

webauthn-framework/src/webauthn/src/CertificateToolbox.php

Line 51 in c5e228f

file_put_contents($trustedFilename, $certificate, FILE_APPEND);

webauthn-framework/src/webauthn/src/StringStream.php

Line 47 in c5e228f

rewind($resource);

webauthn-framework/src/webauthn/src/CertificateToolbox.php

Line 59 in c5e228f

file_put_contents($untrustedFilename, $certificate, FILE_APPEND);

webauthn-framework/src/webauthn/src/CertificateToolbox.php

Line 44 in c5e228f

file_put_contents($leafFilename, $leafCertificate);

webauthn-framework/src/webauthn/src/StringStream.php

Line 66 in c5e228f

fclose($this->data);

webauthn-framework/src/webauthn/src/CertificateToolbox.php

Line 75 in c5e228f

unlink($filename);

webauthn-framework/src/webauthn/src/CertificateToolbox.php

Line 52 in c5e228f

file_put_contents($trustedFilename, PHP_EOL, FILE_APPEND);

More info on how to fix Insecure File Management in PHP.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[ildyria]

This is breaking any PHP 8 build relying on dev (as there is no stable branch providing PHP 8 support yet).

[Spomky]

Hi @ildyria,

PHP8 support will be fixed in v3.3
See https://github.com/web-auth/webauthn-framework/actions/runs/415425926 and https://github.com/web-auth/webauthn-framework/actions/runs/415425928 (failing test will be corrected soon).