@appland/scanner 1.46.3 → 1.49.0

package/doc/labels/system.exec.sanitize.md

@@ -0,0 +1,22 @@
+---
+name: system.exec.sanitize
+rules:
+  - exec-of-untrusted-command
+---
+
+Ensures that data is safe and trusted for use as a system command, transforming it if necessary, and
+returning `falsey` or raising an exception if it's impossible to make the data safe.
+
+A function with this label can be used to convert untrusted data such as direct user input or HTTP
+request parameters into trusted data.
+
+Note that this is not the same as ensuring that a parameter satisfies business logic constraints -
+such as presence or max length. It's a security check that ensures the data cannot cause harm when
+used as a system command.
+
+To be considered successful, a `system.exec.sanitize` function must return a `truthy` value.
+
+## Examples
+
+- Ensuring that a user-provided file path is a subdirectory of a known allowed directory.
+- Ensuring that a system command string does not have any potential injection or side-effects.

package/doc/rules/circularDependency.md

@@ -5,7 +5,6 @@ title: Circular package dependency
 references:
   CWE-1047: https://cwe.mitre.org/data/definitions/1047.html
 impactDomain: Maintainability
-scope: command
 ---
 
 Finds cycles in the package dependency graph. Cyclic dependencies make code hard to maintain,

package/doc/rules/deserializationOfUntrustedData.md

@@ -9,7 +9,7 @@ impactDomain: Security
 labels:
   - deserialize.unsafe
   - deserialize.safe
-  - sanitize
+  - deserialize.sanitize
 ---
 
 Finds occurrances of deserialization in which the mechanism employed is known to be unsafe, and the

package/doc/rules/execOfUntrustedCommand.md

@@ -0,0 +1,16 @@
+---
+rule: exec-of-untrusted-command
+name: Exec of untrusted command
+title: Execution of untrusted system command
+references:
+  CWE-78: https://cwe.mitre.org/data/definitions/78.html
+impactDomain: Security
+labels:
+  - system.exec
+  - system.exec.safe
+  - system.exec.sanitize
+---
+
+Find occurrances of system command execution in which the command string is not guaranteed to be
+safe.
+

package/doc/rules/missingAuthentication.md

@@ -6,7 +6,7 @@ references:
   CWE-306: https://cwe.mitre.org/data/definitions/306.html
 impactDomain: Security
 labels:
-  - public
+  - access.public
   - security.authentication
 scope: http_server_request
 ---

package/doc/rules/tooManyJoins.md

@@ -5,7 +5,6 @@ title: Too many joins
 references:
   CWE-1049: https://cwe.mitre.org/data/definitions/1049.html
 impactDomain: Performance
-scope: command
 ---
 
 Verifies that the number of joins in SQL queries does not exceed a threshold.

package/doc/rules/unbatchedMaterializedQuery.md

@@ -7,7 +7,6 @@ references:
 impactDomain: Performance
 labels:
   - dao.materialize
-scope: command
 ---
 
 Finds large data sets that are queried from the database and loaded into memory.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appland/scanner",
-  "version": "1.46.3",
+  "version": "1.49.0",
   "description": "",
   "bin": "built/cli.js",
   "files": [

package/doc/labels/sanitize.md

@@ -1,29 +0,0 @@
----
-name: sanitize
-rules:
-  - deserialization-of-untrusted-data
----
-
-Ensures that data is safe and trusted, transforming it if necessary, and returning `falsey` or
-raising an exception if it's impossible to make the data safe.
-
-A function with this label can be used to convert untrusted data such as direct user input or HTTP
-request parameters into trusted data.
-
-Note that this is not the same as ensuring that a parameter satisfies business logic constraints -
-such as presence or max length. It's a security check that ensures the data cannot cause downstream
-harm.
-
-To be considered successful, a `sanitize` function must return a `truthy` value.
-
-## Examples
-
-- Sanitizing HTML by removing all potentially harmful elements, such as script tags.
-- Ensuring that SQL queries are properly escaped.
-- Running user-provided YAML through a "safe loader" which discards unsafe syntax such as object
-  class names.
-- Ensuring that a user-provided file path is a subdirectory of a known allowed directory.
-- Ensuring that a system command string does not have any potential injection or side-effects.
-- Ruby -
-  [sanitize_filename](https://github.com/technoweenie/attachment_fu/blob/fa08cb03914b02b66853b4615cd3eca768291ca7/lib/technoweenie/attachment_fu.rb#L410)
-  in `attachment_fu`.