gitea_admin/pragent
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

test: webhook e2e sample #2

Closed
gitea_admin wants to merge 1 commits from test-userhook into main
pull from: test-userhook
merge into: gitea_admin:main
Conversation 1 Commits 1 Files Changed 1
+4
gitea_admin commented 2026-08-17 19:23:08 +00:00
Owner
Copy Link
Copy Source

Deliberately buggy. Expect eval() + SQL injection findings.

Deliberately buggy. Expect eval() + SQL injection findings.
gitea_admin added 1 commit 2026-08-17 19:23:09 +00:00
add buggy sample for webhook e2e
AI Review / review (pull_request) Successful in 10s
Details
99d4aac34d
gitea_admin added 1 commit 2026-08-17 19:23:09 +00:00
add buggy sample for webhook e2e
AI Review / review (pull_request) Successful in 10s
Details
99d4aac34d
pragent-bot bot added the AI-REVIEW label 2026-08-17 19:23:11 +00:00
pragent-bot bot reviewed 2026-08-17 19:23:21 +00:00
pragent-bot bot left a comment
Copy Link
Copy Source

🤖 AI Review · pragent pilot · glm-5.2:cloud · 99d4aac3

  • [critical] test_review_sample.py:3 — eval(user_input) enables arbitrary code execution. remove eval entirely; do not evaluate untrusted input.
  • [high] test_review_sample.py:2 — SQL built via string concatenation with untrusted user_input (and table) allows SQL injection. use parameterized queries/prepared statements.
🤖 **AI Review** · pragent pilot · glm-5.2:cloud · `99d4aac3` - [critical] test_review_sample.py:3 — eval(user_input) enables arbitrary code execution. remove eval entirely; do not evaluate untrusted input. - [high] test_review_sample.py:2 — SQL built via string concatenation with untrusted user_input (and table) allows SQL injection. use parameterized queries/prepared statements.
gitea_admin closed this pull request 2026-08-17 19:31:42 +00:00
Some checks are pending
AI Review / review (pull_request) Successful in 10s
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
pragent-bot
Labels
Clear labels
AI-REVIEW
Trigger pragent-bot AI review
 AI-USAGE
Opt-in: append AI token-usage summary + per-comment attribution to the review
No Label AI-REVIEW
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
pragent-bot (pragent AI review bot) gitea_admin
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: gitea_admin/pragent#2
Delete Branch "test-userhook"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?