Skip to content

Commit bd7080a

Browse files
committed
ignore sqlx security alert for audit
1 parent 832a3ca commit bd7080a

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

.cargo/audit.toml

+7
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,13 @@ ignore = [
1010

1111
"RUSTSEC-2024-0320", # yaml-rust is unmaintained.
1212
# https://github.com/rust-lang/docs.rs/issues/2469
13+
14+
"RUSTSEC-2024-0363", # sqlx, Binary Protocol Misinterpretation caused by Truncating or Overflowing Cast
15+
# https://github.com/rust-lang/docs.rs/issues/2588
16+
# SECURITY:
17+
# We have plenty of places where user input ends up in sql, for example the inner doc path for doc pages, crate names etc.
18+
# But in all these places, the user content is part of the path of the URL.
19+
# Since URL length is limited by cloudfront, and also by nginx, to something much smaller than 4 GiB, I don't think this issue affects us.
1320
]
1421
informational_warnings = ["unmaintained"] # warn for categories of informational advisories
1522
severity_threshold = "low" # CVSS severity ("none", "low", "medium", "high", "critical")

0 commit comments

Comments
 (0)