{"id":95713,"date":"2020-10-02T01:42:44","date_gmt":"2020-10-01T23:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vvyol-v-stroj-servis-dlya-vyyavleniya-uyazvimostej-v-kode"},"modified":"2020-10-02T01:42:44","modified_gmt":"2020-10-01T23:42:44","slug":"github-vvyol-v-stroj-servis-dlya-vyyavleniya-uyazvimostej-v-kode","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/github-vvyol-v-stroj-servis-dlya-vyyavleniya-uyazvimostej-v-kode","title":{"rendered":"GitHub ka aktivizuar sh\u00ebrbimin p\u00ebr identifikimin e dob\u00ebsive n\u00eb kod","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub njoftoi<\/a><\/noindex> p\u00ebr disponueshm\u00ebrin\u00eb p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit e sh\u00ebrbimit Code scanning<\/a><\/noindex>, i cili m\u00eb par\u00eb ofrohej vet\u00ebm pjes\u00ebmarr\u00ebsve t\u00eb nj\u00eb programu t\u00eb kufizuar p\u00ebr testimin e mund\u00ebsive eksperimentale t\u00eb reja. Sh\u00ebrbimi siguron<\/a><\/noindex> skanimi i secil\u00ebs operacioni «git push» p\u00ebr potenciale dob\u00ebsi. Rezultati bashk\u00ebngjitet menj\u00ebher\u00eb n\u00eb k\u00ebrkes\u00ebn p\u00ebr t\u00ebrheqje. Kontrolli kryhet duke p\u00ebrdorur motorin CodeQL<\/a><\/noindex>, i cili analizon modele me shembuj tipik\u00eb t\u00eb kodit t\u00eb cenuesh\u00ebm (CodeQL lejon t\u00eb formohet nj\u00eb model i kodit t\u00eb cenuesh\u00ebm p\u00ebr t\u00eb zbuluar pranin\u00eb e k\u00ebtij lloji dob\u00ebsie n\u00eb kodin e projekteve t\u00eb tjera). <\/p>\n

Gjat\u00eb periudh\u00ebs s\u00eb testimit beta t\u00eb sh\u00ebrbimit, gjat\u00eb skanimit t\u00eb rreth 12,000 repo jan\u00eb zbuluar m\u00eb shum\u00eb se 20,000 probleme me sigurin\u00eb, mes t\u00eb cilave ka pasur edhe probleme serioze q\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit nga distanca dhe n\u00eb injektimin e k\u00ebrkesave SQL. 72% e problemeve t\u00eb gjetur u identifikuan n\u00eb faz\u00ebn e shqyrtimit t\u00eb k\u00ebrkes\u00ebs p\u00ebr t\u00ebrheqje, para mir\u00ebprimit, dhe u rregulluan p\u00ebr m\u00eb pak se 30 dit\u00eb (p\u00ebr krahasim, statistikat e p\u00ebrgjithshme t\u00eb industris\u00eb tregojn\u00eb se vet\u00ebm 30% e dob\u00ebsive riparohen p\u00ebr m\u00eb pak se nj\u00eb muaj pas zbulimit).<\/p>\n

\"GitHub<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Code scanning, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u043b\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439. \u0421\u0435\u0440\u0432\u0438\u0441 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 «git push» \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043a pull-\u0437\u0430\u043f\u0440\u043e\u0441\u0443. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0432\u0438\u0436\u043a\u0430 CodeQL, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0448\u0430\u0431\u043b\u043e\u043d\u044b \u0441 \u0442\u0438\u043f\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CodeQL \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0448\u0430\u0431\u043b\u043e\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95714,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95713","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub u fut n\u00eb funksion sh\u00ebrbimin p\u00ebr identifikimin e dob\u00ebsive n\u00eb kod | ProHoster","description":"GitHub shpalli disponueshm\u00ebrin\u00eb p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit e sh\u00ebrbimit","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/github-vvyol-v-stroj-servis-dlya-vyyavleniya-uyazvimostej-v-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u0432\u0451\u043b \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/github-vvyol-v-stroj-servis-dlya-vyyavleniya-uyazvimostej-v-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T23:42:44+00:00","article:modified_time":"2020-10-01T23:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95713","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:59:41","updated":"2022-10-03 07:45:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95713"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95713\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95714"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95713"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95713"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}