Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion mintlify-docs/cheat-sheets/java-jsp-xss.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ semgrep --config p/minusworld.java-httpservlet-jsp-xss
### 1.A Using the **PrintWriter** from **HttpServletResponse**


The `PrintWriter from `HttpServletResponse` permits writing data directly to the response that will be returned to the user. This bypasses any safety mechanisms built into any frameworks in use.
The `PrintWriter` from `HttpServletResponse` permits writing data directly to the response that will be returned to the user. This bypasses any safety mechanisms built into any frameworks in use.

Example:

Expand Down
2 changes: 1 addition & 1 deletion mintlify-docs/customize-semgrep-ce.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ Semgrep collects pseudonymous metrics when you use rules from the Registry. You
To scan your codebase with a specific ruleset, either one that you write or one that you obtain from the [ Semgrep Registry](https://semgrep.dev/explore), use the `--config` flag.

```bash
# Scan with the the JavaScript rules from Semgrep Registry
# Scan with the JavaScript rules from Semgrep Registry
semgrep scan --config p/javascript
```

Expand Down
2 changes: 1 addition & 1 deletion mintlify-docs/deployment/teams/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -101,7 +101,7 @@ Members and managers can create projects by scanning a repository using the Semg
## How team access works

- Members of a top-level team gain access to the projects of its subteams. They are indirect members of a subteam.
- Members of a subteam do not have access to the projects of teams or subteams above it.`
- Members of a subteam do not have access to the projects of teams or subteams above it.

In the following diagram, team 1 gains access to subteam 1b's projects, but team 1b does not gain access to projects from team 1.

Expand Down
2 changes: 1 addition & 1 deletion mintlify-docs/kb/integrations/defect-dojo-integration.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ The DefectDojo API uses the `/api/v2/import-scan/` endpoint for the first import
These endpoints take the following parameters:

- `file`: The Semgrep scan findings report or export in JSON format.
- `scan_type`: A descriptive name for the scan type. In this example, the scan type is "Semgrep JSON Report`".
- `scan_type`: A descriptive name for the scan type. In this example, the scan type is "Semgrep JSON Report".
- `product_name`: The name of the product in DefectDojo to send the Semgrep findings report to.
- `engagement_name`: The name of the engagement you created the preceding "Integration" section. In this example, `semgrep`.

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: The semgrep login command doesn't redirect to my Semgrep tenant site"
title: The semgrep login command doesn't redirect to my Semgrep tenant site
---

When executing the command:
Expand Down
2 changes: 1 addition & 1 deletion mintlify-docs/learn/vulnerabilities/open-redirect.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ In this fictional example, we notice an open redirect in the `redirect_view` . A

### Chaining with SSRF

Even if an application tries to restrict which hosts it can fetch from, an open redirect can bypass those defenses. Suppose `semgrep.dev` has an image loader that only allows fetching from `*.semgrep.dev` , the implementation might look something like the Python code snippet below.
Even if an application tries to restrict which hosts it can fetch from, an open redirect can bypass those defenses. Suppose `semgrep.dev` has an image loader that only allows fetching from `*.semgrep.dev`, the implementation might look something like the Python code snippet below.

```python
import requests
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,4 +26,4 @@ If you add `package-lock.json` to the `.semgrepignore` file, Semgrep will not sc
```
# .semgrepignore
package-lock.json
````
```
Loading