kermitt2 / grobid

41%

master: 41%

LAST BUILD ON BRANCH alert-autofix-41

branch: alert-autofix-41

CHANGE BRANCH

x

Reset

• alert-autofix-41
• 0.5.0
• 0.5.0-fixes
• 0.5.1
• 0.5.1-fixes
• 0.5.2
• 0.5.3
• 0.5.3-ISTEX
• 0.5.3-istex
• 0.5.4
• 0.5.4-fixes
• 0.5.5
• 0.5.6
• 0.5.6-fixes
• 0.6.0
• 0.6.0-fixes
• 0.6.1
• 0.6.2
• 0.7.0-test
• 0.7.1-fixes
• 0.7.3-fixes
• 0.8.0
• 0.8.0-fixes
• 0.8.1-fixes
• 3em-dash-support
• 512_PDF_and_authors_with_ORCID
• AcknowledgmentParser_Desir2ndCodeSprint
• GrobidModelRefactor
• add-developers-guide
• architecture-parameter
• avoid-OOBE-when-truncated-delft-output
• batch-labeling-support
• better-citation-contexts
• biblio-glutton-v0.2
• bugfix/avoid-dehypenisation-formula
• bugfix/correction-features-fulltext
• bugfix/crossref-api
• bugfix/delft-integration-experiments
• bugfix/download_button_for_text
• bugfix/dummy_model_NPE
• bugfix/fix-coord-name-title
• bugfix/fix-date-normalisation
• bugfix/fix-doi-search
• bugfix/fix-dropped-misclassified-text
• bugfix/fix-figure-table-training-data-generation
• bugfix/fix-links-beginning-sent
• bugfix/fix-training-data-header
• bugfix/fix-training-figures-tables-generation
• bugfix/fix-training-generation-naming
• bugfix/fix-wrongly-assigned-day-consolidation
• bugfix/header-layout-tokens-results
• bugfix/improved-doi-clean
• bugfix/move-idno-under-analytics
• bugfix/notes-same-label
• bugfix/paragraph-coords
• bugfix/problem-pr-559
• bugfix/sent-seg-ack-fund
• bugfix/sentence-segm-spaces-end
• bugfix/synchronisation-language-detection
• bugfix/test-build-on-ci
• change-port-server-unittests
• check-evaluation
• citation-contexts
• copyright-stmt
• copyrights-licenses
• cors-configuration
• dataseer-variant
• deactivate-fuzzy-matching-config
• delft-0.3.0
• delft-debugging
• delft-integration
• desirtrack_coords
• docker-evaluation-image
• docu-fix
• document-serialization
• docx-support
• dropwizard-service
• dummy-model-for-test
• duplicated-abstract
• duplicated-body-parts-476
• element_pdf_coordinates_20150603
• elifesciences-enable-travis-docker-build
• elifesciences-workaround-fulltext-npe
• elifesciences/extract-raw-affiliation-string-fork
• elifesciencesfix-fulltext-block-start
• extend-docker
• feature/add-styles-xml
• feature/add-training-data
• feature/add-training-data-remove-caption-fix
• feature/allow-absolute-tmp
• feature/change-base-image-delft-docker
• feature/data-availability-statement
• feature/enable-env-variables
• feature/funding-statement
• feature/github-actions
• feature/identify-urls
• feature/improving-sentence-segmentation
• feature/kotlin
• feature/paragraphs-coordinates
• feature/preserve-urls
• feature/randomise-model-name-during-nfold
• feature/segmentation-light
• feature/segmentation-light_das_training
• feature/support-mac-arm
• feature/timeout_pdfalto_server
• feature/update_jdk_and_gradle
• feature/update_jep
• feature/upgrade-dropwizard
• feature/wapiti-algorithm-selection
• features/footnotes
• fix-#710
• fix-1036
• fix-712
• fix-811
• fix-867
• fix-automatic-full-image
• fix-crossref-plus-token
• fix-doc
• fix-note-page
• fix-url-extraction-regex-shorter
• fix-vector-graphics
• fix-vulnerabilities
• fix_crossref_multi-thread
• fix_crossref_multithread
• fixes-n-fold-evaluation
• flavor
• from05072016
• from05072016-2
• funders-and-funding
• glutton-0.3
• gradle-jep-path
• gradle5
• grobid-0.5.6
• grobid-parent-0.3.4
• grobid-parent-0.3.5
• grobid-parent-0.3.6
• grobid-parent-0.3.7
• grobid-parent-0.3.8
• grobid-parent-0.4.1
• grobid-parent-0.4.2
• grobid-parent-0.4.3
• grobid-parent-0.4.3-fixes
• grobid-parent-0.4.4
• grobid-parent-0.4.4-fixes
• grobid_config_20150825
• header-model-eval
• header_author_layout_tokens
• improved-dehypenisation
• improved-dockerfile-delft
• improvement/add-tests-sentence-segmentation
• improvement/e2e-automatic-lower-nb-threads
• improvement/jep-init-error-display
• improvement/jep-init-error-handling
• improvement/remove-log-on-file-docker
• improvement/strongly-typed-engine-factory
• incremental-training
• jcboyd-pykelet-PR-consortium_collaboration
• jcboyd-pykelet-PR-segmentation
• jcboyd-pykelet-PR-segmentation_referenceSegmenter
• keep_affiliations_after_consolidation
• layout_utils
• lfoppiano_refactor_utilities_Methods-040816
• line_number_support
• lucbouge-patch-1
• martin-citation-annotations
• mastak-feature/docker
• master
• minor-correction-properties
• model-initialisation-fix
• modified-pdf2xml
• monographe-opaline
• multi-arch-docker-image
• names_address_parser
• new-figure-table-models
• new-training-data-das
• option-442
• option-consolidate-with-doi-only
• orcid_author_header_model_annotation
• partial-merge-pr-216
• patrice-23012016
• patrice-24012016
• pdf_md5
• pdfalto_integration
• pdfalto_parser_fixes
• pre-release-0.8.0
• python-envs
• reading-order
• reduce-image-size
• reference_marker_matcher
• release-0.8.1
• research-infrastructures
• revert-624-bugfix/crossref-api
• review-patent
• sentence-segmentation
• sentence-segmentation-detection
• standalone-figure-extraction
• supercript-feature-in-fulltext
• support-cjk-langs
• taggingLabel-issue133
• tensorflow-2.16
• test-jvm-crash
• tokenLayouts20151026
• update-affiliation
• update-doc
• update-regexes-urls
• update_header
• updated-dependencies
• usage-embedded-pdf-metadata-485
• vipulg13-master
• yaml-config
• yaml-config-bis

Build # 12093886876

Build Type

Pull #1205

github

Committed by web-flow

Commit Message

Fix code scanning alert no. 62: Uncontrolled data used in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Pull Request Pull Request #1205: Fix code scanning alert no. 41: Resolving XML external entity in user-controlled data

Run Details

7936 of 23043 branches covered (34.44%)

16607 of 40740 relevant lines covered (40.76%)

1.66 hits per line