fix: env variable rename

[RazenaSaleem]

No description provided.

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
IDOR Analyzer	✅	0 findings
Sensitive Files Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
AppSec Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The code change in the provided patch is related to the registerSPAHandler function in the server/app/app.go file. The key changes are the environment variable being checked has changed from QUALITYTRACE_DEV to TRACETEST_DEV, and the value of the isTracetestDev variable is being passed to the registerSPAHandler function.

From an application security perspective, the change in the environment variable being checked is not inherently a security concern. However, it's important to ensure that the application is not relying on the value of this environment variable for any security-critical functionality. If the isTracetestDev variable is used to enable or disable any security-related features, it's important to carefully review the implementation to ensure that there are no unintended consequences. Additionally, it's generally a good practice to avoid relying on environment variables for security-critical functionality, as they can be easily modified by an attacker. Instead, consider using a more secure method of configuration, such as a configuration file or a secure key-value store.

Files Changed:

• server/app/app.go: The code change in this file is related to the registerSPAHandler function. The environment variable being checked has changed from QUALITYTRACE_DEV to TRACETEST_DEV, and the value of the isTracetestDev variable is being passed to the registerSPAHandler function.

Powered by DryRun Security