Aller au contenu

Dynamic Selector (ARCH9132)

Ce contenu n’est pas encore disponible dans votre langue.

Key swift.security.dynamic-selector · Severity warning · Category security · CWE CWE-470

Flags NSSelectorFromString / perform(Selector(...)) driven by untrusted data.

perform(NSSelectorFromString(request.action))
let handlers: [String: () -> Void] = [...]
handlers[request.action]?()

Look the name up in an explicit allow-list.