Skip to content

Commit c094699

Browse files
jnovingerjeremystretch
authored andcommitted
Fixes #20484: Configure CodeQL to exclude URL redirect false positives
1 parent 5f77d68 commit c094699

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

.github/codeql/codeql-config.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,11 @@
11
paths-ignore:
22
# Ignore compiled JS
33
- netbox/project-static/dist
4+
5+
query-filters:
6+
# Exclude py/url-redirection: NetBox uses safe_for_redirect() wrapper function
7+
# which validates all redirects via Django's url_has_allowed_host_and_scheme().
8+
# CodeQL's taint tracking doesn't recognize wrapper functions without custom
9+
# query configuration. See #20484.
10+
- exclude:
11+
id: py/url-redirection

0 commit comments

Comments
 (0)