rapid7/metasploit-framework

View on GitHub
modules/exploits/multi/browser/firefox_webidl_injection.rb

Summary

Maintainability
B
4 hrs
Test Coverage

Method generate_html has 62 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def generate_html(target_info)
    key = Rex::Text.rand_text_alpha(5 + rand(12))
    frame = Rex::Text.rand_text_alpha(5 + rand(12))
    r = Rex::Text.rand_text_alpha(5 + rand(12))
    opts = { key => run_payload } # defined in FirefoxPrivilegeEscalation mixin
Severity: Major
Found in modules/exploits/multi/browser/firefox_webidl_injection.rb - About 2 hrs to fix

    Method initialize has 41 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info = {})
        super(update_info(info,
          'Name'           => 'Firefox WebIDL Privileged Javascript Injection',
          'Description'    => %q{
            This exploit gains remote code execution on Firefox 22-27 by abusing two
    Severity: Minor
    Found in modules/exploits/multi/browser/firefox_webidl_injection.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status