Zum Inhalt springen

Dynamic Selector (ARCH9132)

Dieser Inhalt ist noch nicht in deiner Sprache verfügbar.

Key swift.security.dynamic-selector · Severity warning · Category security · CWE CWE-470

Flags NSSelectorFromString / perform(Selector(...)) driven by untrusted data.

perform(NSSelectorFromString(request.action))
let handlers: [String: () -> Void] = [...]
handlers[request.action]?()

Look the name up in an explicit allow-list.