{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-c7a962119b92c2e4", "name": "Insecure pattern 'direct_innerhtml_assignment' in showcase.html:670", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in showcase.html:670"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f26fd5f323e9e8c4", "name": "Insecure pattern 'direct_innerhtml_assignment' in marking.html:797", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in marking.html:797"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f8c5a33d39c2f98", "name": "Insecure pattern 'domparser_html_parse' in marking.html:653", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in marking.html:653"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b334919bf6f7f6d", "name": "Insecure pattern 'direct_innerhtml_assignment' in meet-js.html:1400", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in meet-js.html:1400"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1633d891c99784c8", "name": "Insecure pattern 'domparser_html_parse' in meet-js.html:2683", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in meet-js.html:2683"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6807b745517cabd7", "name": "Insecure pattern 'direct_innerhtml_assignment' in practice-l5.html:149", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in practice-l5.html:149"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f773f47ae3d95a9b", "name": "Insecure pattern 'domparser_html_parse' in practice-l5.html:843", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in practice-l5.html:843"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5ddb927b85f224f", "name": "Insecure pattern 'eval_used' in livecode.html:152", "shortDescription": {"text": "Insecure pattern 'eval_used' in livecode.html:152"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-042876290867a88c", "name": "Insecure pattern 'direct_innerhtml_assignment' in livecode.html:108", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in livecode.html:108"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1aa348058c2f393", "name": "Insecure pattern 'direct_innerhtml_assignment' in g8.html:651", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in g8.html:651"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d556d6ce5bfd56c6", "name": "Insecure pattern 'direct_innerhtml_assignment' in js2.html:408", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in js2.html:408"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9c3572112fd71d06", "name": "Insecure pattern 'direct_innerhtml_assignment' in practice-l3.html:340", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in practice-l3.html:340"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42ca1ef4bdd9c253", "name": "Insecure pattern 'domparser_html_parse' in practice-l3.html:558", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in practice-l3.html:558"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-236be02410d2ddf2", "name": "Insecure pattern 'direct_innerhtml_assignment' in g8-bonus.html:649", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in g8-bonus.html:649"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-297076728dd57fa6", "name": "Insecure pattern 'direct_innerhtml_assignment' in demo-buttons.html:127", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in demo-buttons.html:127"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a509ed020f7d00f5", "name": "Insecure pattern 'direct_innerhtml_assignment' in demo.html:474", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in demo.html:474"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2abe19b22d6829fa", "name": "Insecure pattern 'direct_innerhtml_assignment' in meet-js-v1.html:582", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in meet-js-v1.html:582"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17aa97e1657175ed", "name": "Insecure pattern 'direct_innerhtml_assignment' in js1.html:656", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in js1.html:656"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e17c82a20244fd1", "name": "Insecure pattern 'direct_innerhtml_assignment' in workshop.html:2153", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in workshop.html:2153"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1a90c801ec191d8c", "name": "Insecure pattern 'domparser_html_parse' in workshop.html:2798", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in workshop.html:2798"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-68854e83cfafb2e0", "name": "Insecure pattern 'direct_innerhtml_assignment' in practice-l4.html:146", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in practice-l4.html:146"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b518d323c1b1319", "name": "Insecure pattern 'domparser_html_parse' in practice-l4.html:897", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in practice-l4.html:897"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/30618"}, "properties": {"repository": "YunshuGao/year9-computing", "repoUrl": "https://github.com/YunshuGao/year9-computing", "branch": "main"}, "results": [{"ruleId": "scanner-c7a962119b92c2e4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in showcase.html:670"}, "properties": {"repobilityId": "39fd832ed246bd13", "scanner": "scanner-primary", "fingerprint": "c7a962119b92c2e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "showcase.html"}, "region": {"startLine": 670}}}]}, {"ruleId": "scanner-f26fd5f323e9e8c4", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in marking.html:797"}, "properties": {"repobilityId": "3da2099be5f54758", "scanner": "scanner-primary", "fingerprint": "f26fd5f323e9e8c4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marking.html"}, "region": {"startLine": 797}}}]}, {"ruleId": "scanner-0f8c5a33d39c2f98", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in marking.html:653"}, "properties": {"repobilityId": "94af10d0877c07b3", "scanner": "scanner-primary", "fingerprint": "0f8c5a33d39c2f98", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "marking.html"}, "region": {"startLine": 653}}}]}, {"ruleId": "scanner-5b334919bf6f7f6d", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in meet-js.html:1400"}, "properties": {"repobilityId": "a2cb6d700a1a859b", "scanner": "scanner-primary", "fingerprint": "5b334919bf6f7f6d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "meet-js.html"}, "region": {"startLine": 1400}}}]}, {"ruleId": "scanner-1633d891c99784c8", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in meet-js.html:2683"}, "properties": {"repobilityId": "c6faf74500ee5907", "scanner": "scanner-primary", "fingerprint": "1633d891c99784c8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "meet-js.html"}, "region": {"startLine": 2683}}}]}, {"ruleId": "scanner-6807b745517cabd7", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in practice-l5.html:149"}, "properties": {"repobilityId": "6b763632830368a7", "scanner": "scanner-primary", "fingerprint": "6807b745517cabd7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "practice-l5.html"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-f773f47ae3d95a9b", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in practice-l5.html:843"}, "properties": {"repobilityId": "2fc99b806205529c", "scanner": "scanner-primary", "fingerprint": "f773f47ae3d95a9b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "practice-l5.html"}, "region": {"startLine": 843}}}]}, {"ruleId": "scanner-e5ddb927b85f224f", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in livecode.html:152"}, "properties": {"repobilityId": "45e61e38f3d8c2bb", "scanner": "scanner-primary", "fingerprint": "e5ddb927b85f224f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "livecode.html"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-042876290867a88c", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in livecode.html:108"}, "properties": {"repobilityId": "26364ca8a17b1628", "scanner": "scanner-primary", "fingerprint": "042876290867a88c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "livecode.html"}, "region": {"startLine": 108}}}]}, {"ruleId": "scanner-d1aa348058c2f393", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in g8.html:651"}, "properties": {"repobilityId": "3a3dc70c485432b4", "scanner": "scanner-primary", "fingerprint": "d1aa348058c2f393", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "g8.html"}, "region": {"startLine": 651}}}]}, {"ruleId": "scanner-d556d6ce5bfd56c6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in js2.html:408"}, "properties": {"repobilityId": "cbb5b073ff4a1b13", "scanner": "scanner-primary", "fingerprint": "d556d6ce5bfd56c6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "js2.html"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-9c3572112fd71d06", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in practice-l3.html:340"}, "properties": {"repobilityId": "75687e096a79d356", "scanner": "scanner-primary", "fingerprint": "9c3572112fd71d06", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "practice-l3.html"}, "region": {"startLine": 340}}}]}, {"ruleId": "scanner-42ca1ef4bdd9c253", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in practice-l3.html:558"}, "properties": {"repobilityId": "cf2f78f73dfb9037", "scanner": "scanner-primary", "fingerprint": "42ca1ef4bdd9c253", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "practice-l3.html"}, "region": {"startLine": 558}}}]}, {"ruleId": "scanner-236be02410d2ddf2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in g8-bonus.html:649"}, "properties": {"repobilityId": "fb8b49ef7a32107e", "scanner": "scanner-primary", "fingerprint": "236be02410d2ddf2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "g8-bonus.html"}, "region": {"startLine": 649}}}]}, {"ruleId": "scanner-297076728dd57fa6", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in demo-buttons.html:127"}, "properties": {"repobilityId": "7910c143a566f75c", "scanner": "scanner-primary", "fingerprint": "297076728dd57fa6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "demo-buttons.html"}, "region": {"startLine": 127}}}]}, {"ruleId": "scanner-a509ed020f7d00f5", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in demo.html:474"}, "properties": {"repobilityId": "6b68320339549820", "scanner": "scanner-primary", "fingerprint": "a509ed020f7d00f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "demo.html"}, "region": {"startLine": 474}}}]}, {"ruleId": "scanner-2abe19b22d6829fa", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in meet-js-v1.html:582"}, "properties": {"repobilityId": "f2811e2785135d2f", "scanner": "scanner-primary", "fingerprint": "2abe19b22d6829fa", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "meet-js-v1.html"}, "region": {"startLine": 582}}}]}, {"ruleId": "scanner-17aa97e1657175ed", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in js1.html:656"}, "properties": {"repobilityId": "92c78828992767a6", "scanner": "scanner-primary", "fingerprint": "17aa97e1657175ed", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "js1.html"}, "region": {"startLine": 656}}}]}, {"ruleId": "scanner-2e17c82a20244fd1", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in workshop.html:2153"}, "properties": {"repobilityId": "fdb8b2eda2b55a32", "scanner": "scanner-primary", "fingerprint": "2e17c82a20244fd1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "workshop.html"}, "region": {"startLine": 2153}}}]}, {"ruleId": "scanner-1a90c801ec191d8c", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in workshop.html:2798"}, "properties": {"repobilityId": "f41f7aa7ffe3a1b0", "scanner": "scanner-primary", "fingerprint": "1a90c801ec191d8c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "workshop.html"}, "region": {"startLine": 2798}}}]}, {"ruleId": "scanner-68854e83cfafb2e0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in practice-l4.html:146"}, "properties": {"repobilityId": "1783da73ad859246", "scanner": "scanner-primary", "fingerprint": "68854e83cfafb2e0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "practice-l4.html"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-6b518d323c1b1319", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in practice-l4.html:897"}, "properties": {"repobilityId": "8825cc1d0571da0e", "scanner": "scanner-primary", "fingerprint": "6b518d323c1b1319", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "practice-l4.html"}, "region": {"startLine": 897}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}]}]}