SNayak155825 (Community Member) asked a question.
In the below attached screenshot we observed lot of JS file are skiping .
1.general war ----25 ui issues
2.only his zip file ----48 ui issues
3.war file, replacing dist folder with his folder ------49 ui issues (1 increased compared to scan2 as in scan Ui only his.zip is uploaded but not the help folder)
4.war file, delete dist folder and adding his folder in resources folder -----same as scan3
5. war file, with deleting dist folder(his-web-ui) and upload ui code of mha in zip format as other file ---------200 DT issues increased, 1 increased in CWE ID 312, 1 decreased in CWE ID 80 compared to scan 2,3,4
6. war file, with deleting dist folder(his-web-ui) and upload ui code of mha in zip format as other file (deleting node modules, bower components, gulp, nbproject, e2e) -------49 ui issues
.png){kind=logo}
Hi @SNayak155825 (Community Member) ,
Veracode Static Analysis detects and suppresses flaws in what it believes are concatenated and/or minified JavaScript files. We strongly recommend you provide us only with the original JavaScript / TypeScript source code. Typically, this is done either by producing a separate artifact where the concatenation and minification is skipped or by separately uploading the source code JavaScript / TypeScript and only selecting that for analysis, not the JavaScript in the production binary. I think this matches option 6? I'm not sure though.
To properly understand the best configuration for your application I would need more contextual information and I would recommend you schedule a consultation call to discuss.
You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.
Thank you,
Boy Baukema