Skip to content

Commit e06ad75

Browse files
committed
This pull request contains Script only check to find gs.log() in Client scripts, Business rules and Script includes.
1 parent f9427f3 commit e06ad75

File tree

2 files changed

+80
-1
lines changed

2 files changed

+80
-1
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
QX8vW5ES7j388pDbmjJbvPgE-AORb5rGJRrXpenMJTm-xWqWVTydXQeOUnQ-Cb9mN2dUY2sfc96DrQ8FHOKKd35XieHUdzx8fDum2K5ieOJibHKKirZ5FtadwC7FODeXZBLrigv9iUvDUHBHLe6LhjUOc5Kb-vUmQm7ltmdM7yRtPEKx5e0Mc6_rdlnhT67tlRg8_xFMoCva9j05-PUk8C95EfAFs31rA0XLCqXuwoUHiOq_sW3zsOPz0xKuFVDgPXOBvRH4CoTlgveiBGRMrxgso5OH3tkgyUpT8Um2I53wcxTI6K-HG_V0FdB10YjIW9XeHNECbUu2RVC0gr1OOBScMOo64_pOVJUt5wHb3EIROhoOEilNqZ2uPdoWcDqEJAIXjsyDlIpdvt79VQPTkuXAZt86fEgC0Kf4_COaHu_DpTy_5Q_D_VqBDzCqX3iWXpia-cSCuijGlwC-rDdQB_gYZPX7ZocpKvUOUaHaUpBDuWI--qbNZ5ynPFfgwuXSX07W9IKSUqTVN8PUiUukNGWXkT9_TMw3i-Vojz5v31F-rIu5IJNZGth1lny6z-CXTT8NtDR-6hDQr1c-MgF1ssiApwPWW09nSww1y2J7b6Vrg7T2Uul6dAl-NAHzusyLB2PnSRElzKuQGQKZMsbl2_uzzwnLP2aqMvty59AwcHI
1+
r1aCjXy_NM5G6v4SxZnCFSRY4D-VmJ--9_HedZJJQHLFtPSCsCqT6cbIQROUuO0XISWMEPPoJcJYdyQS0e5cspnrS-nmpRlSnEXCJfvzflGT7uZUtgociN6OIkniezj6qQkbJgPKxGjrWXqLZqoQfP91Rxdvk82pTZPwVmzf5N9R-TpfunihtDUaK6jtn8Mrv9m6_1EWVlDWML98jxTrCh9KE3rMDhovpaN-EaSxOfM9NtzNVekwKH0iWpqk-c51dW297dwB1ETVOpcFBiCiKCRUQLhfuIs-f6kPcNtmzOmUCGOLkiL-rNl6STtDfaNwzo5tv4sKnnCYrMsCTQMsF9CdusLDw-r9S5i1VBj0jqY0YGoAwOREQco_sJUBGTUo2XGgGPgYkWxv_jyG7KH1aFxsvzNBN1Pqelkk-VWB4tFJEPP4ujmaB48zpMKzg2K4b2q8Ub6BwDW0cKRazkmN06-VG5YL-F5v9eWj8wEfDhu56vhuQ-h9TcmFwesMR1iKT_6WRFGhBZxFcaw_1xntxRtwwS1DTIs-XWgB9ZY84Y4SueC0eExpFxUJqTMkFZzOy78peQrZfPr0TTDQvEenFQew0PK99xZ3aXUKYH8qiYxg_JENcCQv5fWo-MK9MShINN56Kog1UlduYq0kBCj0oOgI8MDgtuwC_dRQ_K8wqVk
Lines changed: 79 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
<?xml version="1.0" encoding="UTF-8"?><record_update table="scan_script_only_check">
2+
<scan_script_only_check action="INSERT_OR_UPDATE">
3+
<active>true</active>
4+
<category>manageability</category>
5+
<description>The gs.info() statement can be used to write information to the system log. It is generally used when debugging. Using gs.info() statements will pollute the system log. Prior to promoting artifacts to a production instance, debugging statement should - in most cases - be removed.</description>
6+
<documentation_url/>
7+
<finding_type>scan_finding</finding_type>
8+
<name>Check gs.info in scripts</name>
9+
<priority>2</priority>
10+
<resolution_details/>
11+
<run_condition/>
12+
<score_max>100</score_max>
13+
<score_min>0</score_min>
14+
<score_scale>1</score_scale>
15+
<script><![CDATA[(function(finding, current) {
16+
17+
var pattern = /gs\.info\((.*)\)/g;//gs.info() pattern
18+
19+
var grBr = new GlideRecord('sys_script'); //Business rule
20+
grBr.addActiveQuery();
21+
grBr.query();
22+
while (grBr.next()) {
23+
var scriptContent = grBr.getValue('script');
24+
if (pattern.test(scriptContent)) {
25+
finding.increment();
26+
}
27+
28+
}
29+
30+
var grCl = new GlideRecord('sys_script_client'); //Client script
31+
grCl.addActiveQuery();
32+
grCl.query();
33+
while (grCl.next()) {
34+
var scriptContent1 = grCl.getValue('script');
35+
if (pattern.test(scriptContent1)) {
36+
finding.increment();
37+
}
38+
39+
}
40+
41+
var grSi = new GlideRecord('sys_script_include'); //Script Include
42+
grSi.addActiveQuery();
43+
grSi.query();
44+
while (grSi.next()) {
45+
var scriptContent2 = grSi.getValue('script');
46+
if (pattern.test(scriptContent2)) {
47+
finding.increment();
48+
}
49+
50+
}
51+
52+
})(finding, current);]]></script>
53+
<short_description>Check gs.info in scripts</short_description>
54+
<sys_class_name>scan_script_only_check</sys_class_name>
55+
<sys_created_by>admin</sys_created_by>
56+
<sys_created_on>2024-10-14 23:06:12</sys_created_on>
57+
<sys_id>dcb996785399521000b51901a0490edb</sys_id>
58+
<sys_mod_count>0</sys_mod_count>
59+
<sys_name>Check gs.info in scripts</sys_name>
60+
<sys_package display_value="Example Instance Checks" source="x_appe_exa_checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_package>
61+
<sys_policy/>
62+
<sys_scope display_value="Example Instance Checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_scope>
63+
<sys_update_name>scan_script_only_check_dcb996785399521000b51901a0490edb</sys_update_name>
64+
<sys_updated_by>admin</sys_updated_by>
65+
<sys_updated_on>2024-10-14 23:06:12</sys_updated_on>
66+
</scan_script_only_check>
67+
<sys_translated_text action="delete_multiple" query="documentkey=dcb996785399521000b51901a0490edb"/>
68+
<sys_es_latest_script action="INSERT_OR_UPDATE">
69+
<id>dcb996785399521000b51901a0490edb</id>
70+
<sys_created_by>admin</sys_created_by>
71+
<sys_created_on>2024-10-14 23:06:12</sys_created_on>
72+
<sys_id>fc2a12b85399521000b51901a0490e9f</sys_id>
73+
<sys_mod_count>0</sys_mod_count>
74+
<sys_updated_by>admin</sys_updated_by>
75+
<sys_updated_on>2024-10-14 23:06:12</sys_updated_on>
76+
<table>scan_script_only_check</table>
77+
<use_es_latest>true</use_es_latest>
78+
</sys_es_latest_script>
79+
</record_update>

0 commit comments

Comments
 (0)