Amazon Q
Detector Library
Ruby detectors (29/29)
SQL InjectionDivide by ZeroSensitive HTTP ActionInsufficient Protected CredentialsSensitive Information LeakCross-Site Request Forgery (CSRF)Untrusted DeserializationLog InjectionXML External EntityPath InjectionDeprecated Get ConfigurationHttp to File AccessInsufficient Key SizeCode InjectionOS Command InjectionInsecure CookieResource leakCross Site Scripting (XSS)Untrusted OpenModel Attr AccessibleServer Side Request ForgeryImproper Input ValidationStack Trace ExposureOpen RedirectImproper Certificate Validationsend_file InjectionUnsafe File PermissionsInsecure CryptographyTainted Format
Open Redirect High
The application may allow open redirects if created using user supplied input. Open redirects are commonly abused in phishing attacks where the original domain or URL looks like a legitimate link, but then redirects a user to a malicious site.
