Release: Merge back 2.57.2 into dev from: master-into-dev/2.57.2-2.58.0-dev

[github-actions]

Release triggered by rossops

[dryrunsecurity]

This pull request modifies many sensitive template and backend files (multiple dojo templates, templatetags, context processors, API/permissions/serializers, importers, and tasks) triggering configured-codepaths alerts, and introduces numerous instances where a custom markdown_render filter or the safe filter outputs HTML into templates, raising multiple high/critical potential Cross-Site Scripting (XSS) findings that require verifying/sanitizing the renderer and trusted sources (or updating .dryrunsecurity.yaml to allow these changes).

🔴 Configured Codepaths Edit in dojo/templates/dojo/endpoint_pdf_report.html (drs_6f176390)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/report_base.html (drs_07488137)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templatetags/display_tags.py (drs_0f1cbd51)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_type_pdf_report.html (drs_c2bd7bc2)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/test_pdf_report.html (drs_1adac117)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_endpoint_pdf_report.html (drs_9bf04591)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_pdf_report.html (drs_a0b92cf2)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/context_processors.py (drs_bb00b3c8)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/engagement/views.py (drs_1ae25cad)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/importers/auto_create_context.py (drs_f69d80a2)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/engagement_pdf_report.html (drs_0b9461fe)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/finding_pdf_report.html (drs_4bba7bf4)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_endpoint_pdf_report.html (drs_8419a7f4)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_pdf_report.html (drs_96fbd951)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_type_pdf_report.html (drs_fc6a507f)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/test_pdf_report.html (drs_3fcea6e0)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/report_base.html (drs_b221b222)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/announcement/os_message.py (drs_894d87d0)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/announcement/signals.py (drs_c35bc322)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/api_v2/permissions.py (drs_1b53aff4)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/api_v2/serializers.py (drs_3462414a)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_endpoint_pdf_report.html (drs_62126547)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_pdf_report.html (drs_ac7aa781)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/risk_acceptance/api.py (drs_c791cf6c)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/engagement/views.py (drs_30062496)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/api_v2/serializers.py (drs_95f69632)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/engagement/views.py (drs_fe475fa1)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/api_v2/permissions.py (drs_9add9c87)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/importers/auto_create_context.py (drs_48ded0e4)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templatetags/display_tags.py (drs_72f3a588)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/api_v2/permissions.py (drs_70c2eb97)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/api_v2/serializers.py (drs_7c55789f)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/engagement/views.py (drs_ac7776dc)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/importers/auto_create_context.py (drs_ac204e6d)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/risk_acceptance/api.py (drs_2162a427)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/snippets/endpoints.html (drs_a8f431e6)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templatetags/display_tags.py (drs_7ae5c2f4)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/endpoint_pdf_report.html (drs_6150295f)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/engagement_pdf_report.html (drs_f5cef475)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/finding_pdf_report.html (drs_14a8d6fa)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/risk_acceptance/api.py (drs_03281958)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/tasks.py (drs_08032020)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/base.html (drs_238044b6)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/endpoint_pdf_report.html (drs_1c4fe8ec)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/engagement_pdf_report.html (drs_72cc5752)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/finding_pdf_report.html (drs_aa7dfeaa)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/product_type_pdf_report.html (drs_2686b42f)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/snippets/endpoints.html (drs_45c02244)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/dojo/test_pdf_report.html (drs_45b564d4)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templates/report_base.html (drs_a0da58ae)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/templatetags/display_tags.py (drs_483d4bac)

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Potential Cross-Site Scripting in dojo/templates/dojo/test_pdf_report.html (drs_d2181462)

Vulnerability	Potential Cross-Site Scripting
Description	The templates render user-controllable model fields through a custom 'markdown_render' filter which may emit raw HTML. If that filter returns unsanitized HTML (i.e. the filter marks output safe or allows raw HTML), Django auto-escaping is bypassed and XSS is possible.

django-DefectDojo/dojo/templates/dojo/test_pdf_report.html

Lines 332 to 335 in e507378

	<div class="report-field">{{ finding.description|markdown_render }}</div>
	{% if finding.mitigation %}
	<h6>Mitigation</h6>

🔴 Potential Cross-Site Scripting in dojo/templates/dojo/engagement_pdf_report.html (drs_56e00397)

Vulnerability	Potential Cross-Site Scripting
Description	Templates use a custom filter markdown_render to render Finding fields into HTML. If that filter outputs unsafe HTML, user-controlled data could reach the page without proper escaping, causing XSS.

django-DefectDojo/dojo/templates/dojo/engagement_pdf_report.html

Lines 313 to 327 in e507378

	{% if finding.cvssv3 %}
	<h6>CVSS v3</h6>
	<div class="report-field">{{ finding.cvssv3|markdown_render }}</div>
	{% endif %}
	<h6>Description</h6>
	<div class="report-field">{{ finding.description|markdown_render }}</div>
	{% if finding.mitigation %}
	<h6>Mitigation</h6>
	<div class="report-field">{{ finding.mitigation|markdown_render }}</div>
	{% endif %}
	{% if finding.get_report_requests %}

🔴 Potential Cross-Site Scripting in dojo/templates/dojo/finding_pdf_report.html (drs_2d92ce52)

Vulnerability

Potential Cross-Site Scripting

Description

Templates render multiple finding fields using a custom template filter markdown_render. If that filter returns HTML that is not properly escaped/sanitized (or is marked safe after unsafe rendering), user-controlled content could reach the page as raw HTML and enable XSS. The PR shows many fields switched to use this filter in HTML contexts and also adds banner.messagesafe elsewhere, increasing places where HTML may be rendered unsafely.

django-DefectDojo/dojo/templates/dojo/finding_pdf_report.html

Lines 164 to 167 in e507378

	<div class="report-field">{{ finding.description|markdown_render }}</div>
	{% if finding.mitigation %}
	<h6>Mitigation</h6>

🔴 Potential Cross-Site Scripting in dojo/templates/dojo/endpoint_pdf_report.html (drs_0323ca3a)

Vulnerability	Potential Cross-Site Scripting
Description	The templates render user-controlled finding text through a custom template filter markdown_render which converts Markdown to HTML and returns mark_safe. If markdown_render does not reliably remove or neutralize unsafe HTML, this can allow attacker-supplied HTML/JS to be emitted unescaped to pages (XSS).

django-DefectDojo/dojo/templates/dojo/endpoint_pdf_report.html

Lines 203 to 224 in e507378

	{% if finding.impact %}
	<h6>Impact</h6>
	<div class="report-field">{{ finding.impact|markdown_render }}</div>
	{% endif %}
	{% if finding.steps_to_reproduce %}
	<h6>Steps to Reproduce</h6>
	<div class="report-field">{{ finding.steps_to_reproduce|markdown_render }}</div>
	{% endif %}
	{% if finding.severity_justification %}
	<h6>Severity Justification</h6>
	<div class="report-field">{{ finding.severity_justification|markdown_render }}</div>
	{% endif %}
	{% if finding.references %}
	<h6>References</h6>
	<div class="report-field">{{ finding.references|markdown_render }}</div>
	{% endif %}
	{% if include_finding_images %}

🔴 Potential Cross-Site Scripting in dojo/templates/dojo/product_endpoint_pdf_report.html (drs_3331e854)

Vulnerability	Potential Cross-Site Scripting
Description	Templates were changed to render various finding text fields using a custom template filter 'markdown_render' and the rendered HTML is output into templates using plain variable substitution (no additional escaping in templates). If markdown_render returns unsanitized HTML (or marks it safe), user-controlled content could reach the rendered page as raw HTML, enabling XSS.

django-DefectDojo/dojo/templates/dojo/product_endpoint_pdf_report.html

Lines 234 to 237 in e507378

	<div class="report-field">{{ finding.description|markdown_render }}</div>
	{% if finding.mitigation %}
	<h6>Mitigation</h6>

🟠 Potential Cross-Site Scripting in dojo/templates/base.html (drs_2ee06d4b)

Vulnerability	Potential Cross-Site Scripting
Description	The template uses the Django safe filter to render banner.message and banner.expanded_html, which disables auto-escaping. We must verify whether those values originate from trusted, properly sanitized sources. If untrusted user input can reach these fields unsanitized, XSS is possible.

django-DefectDojo/dojo/templates/base.html

Lines 673 to 690 in e507378

	{% for banner in additional_banners %}
	<div role="alert" class="announcement-banner alert alert-{{ banner.style }} show"
	data-source="{{ banner.source }}">
	{{ banner.message|safe }}{% if banner.url %} <a href="{{ banner.url }}">{{ banner.link_text }}</a>{% endif %}
	{% if banner.expanded_html %}
	<button type="button" class="banner-toggle collapsed"
	data-toggle="collapse"
	data-target="#banner-expanded-{{ forloop.counter }}"
	aria-expanded="false"
	aria-controls="banner-expanded-{{ forloop.counter }}">
	<i class="fa-solid fa-caret-down"></i>
	</button>
	<div id="banner-expanded-{{ forloop.counter }}" class="collapse banner-expanded">
	{{ banner.expanded_html|safe }}
	</div>
	{% endif %}
	</div>
	{% endfor %}

🟠 Potential Cross-Site Scripting in dojo/context_processors.py (drs_8bbce52e)

Vulnerability

Potential Cross-Site Scripting

Description

Banner content from two sources is injected into template context and rendered with the safe filter in templates: (1) OS banner produced by get_os_banner() and (2) product banners stored to request.session. get_os_banner() fetches markdown, renders it to HTML via markdown.markdown(), and then uses bleach.clean() with explicit tag/attribute allowlists — the headline uses INLINE_TAGS/INLINE_ATTRS and the expanded body uses BLOCK_TAGS/BLOCK_ATTRS. Session-stored product banners are appended directly into context without additional sanitization. The template uses the safe filter ({{ banner.messagesafe }} and {{ banner.expanded_htmlsafe }}) when rendering banners, which disables Django auto-escaping. If session-sourced banners can contain attacker-controlled HTML, they will be rendered unsanitized, causing XSS.

django-DefectDojo/dojo/context_processors.py

Lines 36 to 67 in e507378

	"DOCUMENTATION_URL": settings.DOCUMENTATION_URL,
	"API_TOKENS_ENABLED": settings.API_TOKENS_ENABLED,
	"API_TOKEN_AUTH_ENDPOINT_ENABLED": settings.API_TOKEN_AUTH_ENDPOINT_ENABLED,
	"SHOW_PLG_LINK": True,
	# V3 Feature Flags
	"V3_FEATURE_LOCATIONS": settings.V3_FEATURE_LOCATIONS,
	}
	additional_banners = []
	if (os_banner := get_os_banner()) is not None:
	additional_banners.append({
	"source": "os",
	"message": os_banner["message"],
	"style": "info",
	"url": "",
	"link_text": "",
	"expanded_html": os_banner["expanded_html"],
	})
	if hasattr(request, "session"):
	for banner in request.session.pop("_product_banners", []):
	additional_banners.append(banner)
	if additional_banners:
	context["additional_banners"] = additional_banners
	return context
	def bind_system_settings(request):
	"""Load system settings and display warning if there's a database error."""

🟠 Potential Cross-Site Scripting in dojo/templates/dojo/finding_pdf_report.html (drs_d58ffe28)

Vulnerability	Potential Cross-Site Scripting
Description	Templates were changed to render multiple finding fields using a custom template filter 'markdown_render' which outputs HTML into the template without additional escaping (the output is placed directly in the template context and not post-processed). A custom renderer that returns HTML can introduce XSS if it does not sanitize untrusted input.

django-DefectDojo/dojo/templates/dojo/finding_pdf_report.html

Lines 182 to 203 in e507378

	{% if finding.impact %}
	<h6>Impact</h6>
	<div class="report-field">{{ finding.impact|markdown_render }}</div>
	{% endif %}
	{% if finding.steps_to_reproduce %}
	<h6>Steps to Reproduce</h6>
	<div class="report-field">{{ finding.steps_to_reproduce|markdown_render }}</div>
	{% endif %}
	{% if finding.severity_justification %}
	<h6>Severity Justification</h6>
	<div class="report-field">{{ finding.severity_justification|markdown_render }}</div>
	{% endif %}
	{% if finding.references %}
	<h6>References</h6>
	<div class="report-field">{{ finding.references|markdown_render }}</div>
	{% endif %}
	{% if include_finding_images %}

🟠 Potential Cross-Site Scripting in dojo/templates/dojo/endpoint_pdf_report.html (drs_078abd64)

Vulnerability	Potential Cross-Site Scripting
Description	Templates render user-controlled finding fields through a custom template filter markdown_render which returns mark_safe(bleach.clean(...)). If markdown_render does not properly sanitize or still allows unsafe HTML, this could enable XSS.

django-DefectDojo/dojo/templates/dojo/endpoint_pdf_report.html

Lines 185 to 188 in e507378

	<div class="report-field">{{ finding.description|markdown_render }}</div>
	{% if finding.mitigation %}
	<h6>Mitigation</h6>

🟠 Potential Cross-Site Scripting in dojo/templates/dojo/test_pdf_report.html (drs_9d255940)

Vulnerability

Potential Cross-Site Scripting

Description

The change renders various finding text fields in PDF/HTML templates using a custom template filter markdown_render. If that filter returns raw HTML (i.e. converts Markdown to HTML) and that HTML is inserted into templates without sanitization, attacker-controlled markdown could result in XSS. The patch does not show the implementation of markdown_render or any sanitization step before rendering these fields; it merely wraps the filter output in a div and does not use Django's safe/sanitization features here, so a direct path exists from stored finding text to rendered HTML.

django-DefectDojo/dojo/templates/dojo/test_pdf_report.html

Lines 353 to 356 in e507378

	<div class="report-field">{{ finding.impact|markdown_render }}</div>
	{% endif %}
	{% if finding.steps_to_reproduce %}

We've notified @mtesauro.

---

Comment to provide feedback on these findings.

Report false positive: @dryrunsecurity fp [FINDING ID] [FEEDBACK]
Report low-impact: @dryrunsecurity nit [FINDING ID] [FEEDBACK]

Example: @dryrunsecurity fp drs_90eda195 This code is not user-facing

All finding details can be found in the DryRun Security Dashboard.

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.