@codacy/tools-opengrep-1 0.19.0 → 0.21.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +1027 -517
- package/package.json +2 -2
package/dist/index.js
CHANGED
|
@@ -1122,7 +1122,16 @@ var patterns_default = [
|
|
|
1122
1122
|
enabled: false,
|
|
1123
1123
|
languages: ["CPP"],
|
|
1124
1124
|
parameters: [],
|
|
1125
|
-
tags: [
|
|
1125
|
+
tags: [
|
|
1126
|
+
"lib:flask-babel",
|
|
1127
|
+
"lib:i18next",
|
|
1128
|
+
"lib:lingui",
|
|
1129
|
+
"lib:vue-i18n",
|
|
1130
|
+
"localization",
|
|
1131
|
+
"i18n",
|
|
1132
|
+
"lib:formatjs",
|
|
1133
|
+
"lib:next-intl"
|
|
1134
|
+
]
|
|
1126
1135
|
},
|
|
1127
1136
|
{
|
|
1128
1137
|
id: "Semgrep_codacy.cpp.i18n.no-hardcoded-number-format",
|
|
@@ -1132,7 +1141,15 @@ var patterns_default = [
|
|
|
1132
1141
|
enabled: false,
|
|
1133
1142
|
languages: ["CPP"],
|
|
1134
1143
|
parameters: [],
|
|
1135
|
-
tags: [
|
|
1144
|
+
tags: [
|
|
1145
|
+
"i18n",
|
|
1146
|
+
"lib:flask-babel",
|
|
1147
|
+
"lib:i18next",
|
|
1148
|
+
"lib:lingui",
|
|
1149
|
+
"lib:vue-i18n",
|
|
1150
|
+
"lib:formatjs",
|
|
1151
|
+
"lib:next-intl"
|
|
1152
|
+
]
|
|
1136
1153
|
},
|
|
1137
1154
|
{
|
|
1138
1155
|
id: "Semgrep_codacy.cpp.i18n.no-hardcoded-strftime",
|
|
@@ -1142,7 +1159,15 @@ var patterns_default = [
|
|
|
1142
1159
|
enabled: true,
|
|
1143
1160
|
languages: ["CPP"],
|
|
1144
1161
|
parameters: [],
|
|
1145
|
-
tags: [
|
|
1162
|
+
tags: [
|
|
1163
|
+
"i18n",
|
|
1164
|
+
"lib:flask-babel",
|
|
1165
|
+
"lib:i18next",
|
|
1166
|
+
"lib:lingui",
|
|
1167
|
+
"lib:vue-i18n",
|
|
1168
|
+
"lib:formatjs",
|
|
1169
|
+
"lib:next-intl"
|
|
1170
|
+
]
|
|
1146
1171
|
},
|
|
1147
1172
|
{
|
|
1148
1173
|
id: "Semgrep_codacy.csharp.ai.insecure-llm-model-usage",
|
|
@@ -1336,7 +1361,15 @@ var patterns_default = [
|
|
|
1336
1361
|
enabled: false,
|
|
1337
1362
|
languages: ["Java"],
|
|
1338
1363
|
parameters: [],
|
|
1339
|
-
tags: [
|
|
1364
|
+
tags: [
|
|
1365
|
+
"i18n",
|
|
1366
|
+
"lib:flask-babel",
|
|
1367
|
+
"lib:i18next",
|
|
1368
|
+
"lib:lingui",
|
|
1369
|
+
"lib:vue-i18n",
|
|
1370
|
+
"lib:formatjs",
|
|
1371
|
+
"lib:next-intl"
|
|
1372
|
+
]
|
|
1340
1373
|
},
|
|
1341
1374
|
{
|
|
1342
1375
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-date-format",
|
|
@@ -1346,7 +1379,15 @@ var patterns_default = [
|
|
|
1346
1379
|
enabled: true,
|
|
1347
1380
|
languages: ["Java"],
|
|
1348
1381
|
parameters: [],
|
|
1349
|
-
tags: [
|
|
1382
|
+
tags: [
|
|
1383
|
+
"i18n",
|
|
1384
|
+
"lib:flask-babel",
|
|
1385
|
+
"lib:i18next",
|
|
1386
|
+
"lib:lingui",
|
|
1387
|
+
"lib:vue-i18n",
|
|
1388
|
+
"lib:formatjs",
|
|
1389
|
+
"lib:next-intl"
|
|
1390
|
+
]
|
|
1350
1391
|
},
|
|
1351
1392
|
{
|
|
1352
1393
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-decimal-format",
|
|
@@ -1356,7 +1397,15 @@ var patterns_default = [
|
|
|
1356
1397
|
enabled: true,
|
|
1357
1398
|
languages: ["Java"],
|
|
1358
1399
|
parameters: [],
|
|
1359
|
-
tags: [
|
|
1400
|
+
tags: [
|
|
1401
|
+
"i18n",
|
|
1402
|
+
"lib:flask-babel",
|
|
1403
|
+
"lib:i18next",
|
|
1404
|
+
"lib:lingui",
|
|
1405
|
+
"lib:vue-i18n",
|
|
1406
|
+
"lib:formatjs",
|
|
1407
|
+
"lib:next-intl"
|
|
1408
|
+
]
|
|
1360
1409
|
},
|
|
1361
1410
|
{
|
|
1362
1411
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-exception-message",
|
|
@@ -1366,7 +1415,15 @@ var patterns_default = [
|
|
|
1366
1415
|
enabled: false,
|
|
1367
1416
|
languages: ["Java"],
|
|
1368
1417
|
parameters: [],
|
|
1369
|
-
tags: [
|
|
1418
|
+
tags: [
|
|
1419
|
+
"i18n",
|
|
1420
|
+
"lib:flask-babel",
|
|
1421
|
+
"lib:i18next",
|
|
1422
|
+
"lib:lingui",
|
|
1423
|
+
"lib:vue-i18n",
|
|
1424
|
+
"lib:formatjs",
|
|
1425
|
+
"lib:next-intl"
|
|
1426
|
+
]
|
|
1370
1427
|
},
|
|
1371
1428
|
{
|
|
1372
1429
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-map-of",
|
|
@@ -1376,7 +1433,15 @@ var patterns_default = [
|
|
|
1376
1433
|
enabled: false,
|
|
1377
1434
|
languages: ["Java"],
|
|
1378
1435
|
parameters: [],
|
|
1379
|
-
tags: [
|
|
1436
|
+
tags: [
|
|
1437
|
+
"i18n",
|
|
1438
|
+
"lib:flask-babel",
|
|
1439
|
+
"lib:i18next",
|
|
1440
|
+
"lib:lingui",
|
|
1441
|
+
"lib:vue-i18n",
|
|
1442
|
+
"lib:formatjs",
|
|
1443
|
+
"lib:next-intl"
|
|
1444
|
+
]
|
|
1380
1445
|
},
|
|
1381
1446
|
{
|
|
1382
1447
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-map-put",
|
|
@@ -1386,7 +1451,15 @@ var patterns_default = [
|
|
|
1386
1451
|
enabled: false,
|
|
1387
1452
|
languages: ["Java"],
|
|
1388
1453
|
parameters: [],
|
|
1389
|
-
tags: [
|
|
1454
|
+
tags: [
|
|
1455
|
+
"i18n",
|
|
1456
|
+
"lib:flask-babel",
|
|
1457
|
+
"lib:i18next",
|
|
1458
|
+
"lib:lingui",
|
|
1459
|
+
"lib:vue-i18n",
|
|
1460
|
+
"lib:formatjs",
|
|
1461
|
+
"lib:next-intl"
|
|
1462
|
+
]
|
|
1390
1463
|
},
|
|
1391
1464
|
{
|
|
1392
1465
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-response-body",
|
|
@@ -1396,7 +1469,15 @@ var patterns_default = [
|
|
|
1396
1469
|
enabled: false,
|
|
1397
1470
|
languages: ["Java"],
|
|
1398
1471
|
parameters: [],
|
|
1399
|
-
tags: [
|
|
1472
|
+
tags: [
|
|
1473
|
+
"i18n",
|
|
1474
|
+
"lib:flask-babel",
|
|
1475
|
+
"lib:i18next",
|
|
1476
|
+
"lib:lingui",
|
|
1477
|
+
"lib:vue-i18n",
|
|
1478
|
+
"lib:formatjs",
|
|
1479
|
+
"lib:next-intl"
|
|
1480
|
+
]
|
|
1400
1481
|
},
|
|
1401
1482
|
{
|
|
1402
1483
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-return-string",
|
|
@@ -1406,7 +1487,15 @@ var patterns_default = [
|
|
|
1406
1487
|
enabled: false,
|
|
1407
1488
|
languages: ["Java"],
|
|
1408
1489
|
parameters: [],
|
|
1409
|
-
tags: [
|
|
1490
|
+
tags: [
|
|
1491
|
+
"i18n",
|
|
1492
|
+
"lib:flask-babel",
|
|
1493
|
+
"lib:i18next",
|
|
1494
|
+
"lib:lingui",
|
|
1495
|
+
"lib:vue-i18n",
|
|
1496
|
+
"lib:formatjs",
|
|
1497
|
+
"lib:next-intl"
|
|
1498
|
+
]
|
|
1410
1499
|
},
|
|
1411
1500
|
{
|
|
1412
1501
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-stringbuilder-append",
|
|
@@ -1416,7 +1505,15 @@ var patterns_default = [
|
|
|
1416
1505
|
enabled: false,
|
|
1417
1506
|
languages: ["Java"],
|
|
1418
1507
|
parameters: [],
|
|
1419
|
-
tags: [
|
|
1508
|
+
tags: [
|
|
1509
|
+
"i18n",
|
|
1510
|
+
"lib:flask-babel",
|
|
1511
|
+
"lib:i18next",
|
|
1512
|
+
"lib:lingui",
|
|
1513
|
+
"lib:vue-i18n",
|
|
1514
|
+
"lib:formatjs",
|
|
1515
|
+
"lib:next-intl"
|
|
1516
|
+
]
|
|
1420
1517
|
},
|
|
1421
1518
|
{
|
|
1422
1519
|
id: "Semgrep_codacy.java.i18n.no-hardcoded-string-concat",
|
|
@@ -1426,7 +1523,15 @@ var patterns_default = [
|
|
|
1426
1523
|
enabled: false,
|
|
1427
1524
|
languages: ["Java"],
|
|
1428
1525
|
parameters: [],
|
|
1429
|
-
tags: [
|
|
1526
|
+
tags: [
|
|
1527
|
+
"i18n",
|
|
1528
|
+
"lib:flask-babel",
|
|
1529
|
+
"lib:i18next",
|
|
1530
|
+
"lib:lingui",
|
|
1531
|
+
"lib:vue-i18n",
|
|
1532
|
+
"lib:formatjs",
|
|
1533
|
+
"lib:next-intl"
|
|
1534
|
+
]
|
|
1430
1535
|
},
|
|
1431
1536
|
{
|
|
1432
1537
|
id: "Semgrep_codacy.javascript.security.hard-coded-password",
|
|
@@ -1464,7 +1569,15 @@ var patterns_default = [
|
|
|
1464
1569
|
enabled: false,
|
|
1465
1570
|
languages: ["Javascript", "TypeScript"],
|
|
1466
1571
|
parameters: [],
|
|
1467
|
-
tags: [
|
|
1572
|
+
tags: [
|
|
1573
|
+
"i18n",
|
|
1574
|
+
"lib:flask-babel",
|
|
1575
|
+
"lib:i18next",
|
|
1576
|
+
"lib:lingui",
|
|
1577
|
+
"lib:vue-i18n",
|
|
1578
|
+
"lib:formatjs",
|
|
1579
|
+
"lib:next-intl"
|
|
1580
|
+
]
|
|
1468
1581
|
},
|
|
1469
1582
|
{
|
|
1470
1583
|
id: "Semgrep_codacy.js.i18n.no-hardcoded-confirm-prompt",
|
|
@@ -1474,7 +1587,15 @@ var patterns_default = [
|
|
|
1474
1587
|
enabled: false,
|
|
1475
1588
|
languages: ["Javascript", "TypeScript"],
|
|
1476
1589
|
parameters: [],
|
|
1477
|
-
tags: [
|
|
1590
|
+
tags: [
|
|
1591
|
+
"i18n",
|
|
1592
|
+
"lib:flask-babel",
|
|
1593
|
+
"lib:i18next",
|
|
1594
|
+
"lib:lingui",
|
|
1595
|
+
"lib:vue-i18n",
|
|
1596
|
+
"lib:formatjs",
|
|
1597
|
+
"lib:next-intl"
|
|
1598
|
+
]
|
|
1478
1599
|
},
|
|
1479
1600
|
{
|
|
1480
1601
|
id: "Semgrep_codacy.js.i18n.no-hardcoded-console-error",
|
|
@@ -1484,7 +1605,15 @@ var patterns_default = [
|
|
|
1484
1605
|
enabled: false,
|
|
1485
1606
|
languages: ["Javascript", "TypeScript"],
|
|
1486
1607
|
parameters: [],
|
|
1487
|
-
tags: [
|
|
1608
|
+
tags: [
|
|
1609
|
+
"i18n",
|
|
1610
|
+
"lib:flask-babel",
|
|
1611
|
+
"lib:i18next",
|
|
1612
|
+
"lib:lingui",
|
|
1613
|
+
"lib:vue-i18n",
|
|
1614
|
+
"lib:formatjs",
|
|
1615
|
+
"lib:next-intl"
|
|
1616
|
+
]
|
|
1488
1617
|
},
|
|
1489
1618
|
{
|
|
1490
1619
|
id: "Semgrep_codacy.js.i18n.no-hardcoded-jsx-user-props",
|
|
@@ -1494,7 +1623,15 @@ var patterns_default = [
|
|
|
1494
1623
|
enabled: false,
|
|
1495
1624
|
languages: ["Javascript", "TypeScript"],
|
|
1496
1625
|
parameters: [],
|
|
1497
|
-
tags: [
|
|
1626
|
+
tags: [
|
|
1627
|
+
"i18n",
|
|
1628
|
+
"lib:flask-babel",
|
|
1629
|
+
"lib:i18next",
|
|
1630
|
+
"lib:lingui",
|
|
1631
|
+
"lib:vue-i18n",
|
|
1632
|
+
"lib:formatjs",
|
|
1633
|
+
"lib:next-intl"
|
|
1634
|
+
]
|
|
1498
1635
|
},
|
|
1499
1636
|
{
|
|
1500
1637
|
id: "Semgrep_codacy.js.i18n.no-hardcoded-locale-date",
|
|
@@ -1504,7 +1641,15 @@ var patterns_default = [
|
|
|
1504
1641
|
enabled: false,
|
|
1505
1642
|
languages: ["Javascript", "TypeScript"],
|
|
1506
1643
|
parameters: [],
|
|
1507
|
-
tags: [
|
|
1644
|
+
tags: [
|
|
1645
|
+
"i18n",
|
|
1646
|
+
"lib:flask-babel",
|
|
1647
|
+
"lib:i18next",
|
|
1648
|
+
"lib:lingui",
|
|
1649
|
+
"lib:vue-i18n",
|
|
1650
|
+
"lib:formatjs",
|
|
1651
|
+
"lib:next-intl"
|
|
1652
|
+
]
|
|
1508
1653
|
},
|
|
1509
1654
|
{
|
|
1510
1655
|
id: "Semgrep_codacy.js.i18n.no-hardcoded-number-format",
|
|
@@ -1514,7 +1659,15 @@ var patterns_default = [
|
|
|
1514
1659
|
enabled: false,
|
|
1515
1660
|
languages: ["Javascript", "TypeScript"],
|
|
1516
1661
|
parameters: [],
|
|
1517
|
-
tags: [
|
|
1662
|
+
tags: [
|
|
1663
|
+
"i18n",
|
|
1664
|
+
"lib:flask-babel",
|
|
1665
|
+
"lib:i18next",
|
|
1666
|
+
"lib:lingui",
|
|
1667
|
+
"lib:vue-i18n",
|
|
1668
|
+
"lib:formatjs",
|
|
1669
|
+
"lib:next-intl"
|
|
1670
|
+
]
|
|
1518
1671
|
},
|
|
1519
1672
|
{
|
|
1520
1673
|
id: "Semgrep_codacy.js.i18n.no-hardcoded-throw-error",
|
|
@@ -1524,7 +1677,15 @@ var patterns_default = [
|
|
|
1524
1677
|
enabled: false,
|
|
1525
1678
|
languages: ["Javascript", "TypeScript"],
|
|
1526
1679
|
parameters: [],
|
|
1527
|
-
tags: [
|
|
1680
|
+
tags: [
|
|
1681
|
+
"i18n",
|
|
1682
|
+
"lib:flask-babel",
|
|
1683
|
+
"lib:i18next",
|
|
1684
|
+
"lib:lingui",
|
|
1685
|
+
"lib:vue-i18n",
|
|
1686
|
+
"lib:formatjs",
|
|
1687
|
+
"lib:next-intl"
|
|
1688
|
+
]
|
|
1528
1689
|
},
|
|
1529
1690
|
{
|
|
1530
1691
|
id: "Semgrep_codacy.js.i18n.no-raw-jsx-text",
|
|
@@ -1534,7 +1695,15 @@ var patterns_default = [
|
|
|
1534
1695
|
enabled: false,
|
|
1535
1696
|
languages: ["Javascript", "TypeScript"],
|
|
1536
1697
|
parameters: [],
|
|
1537
|
-
tags: [
|
|
1698
|
+
tags: [
|
|
1699
|
+
"i18n",
|
|
1700
|
+
"lib:flask-babel",
|
|
1701
|
+
"lib:i18next",
|
|
1702
|
+
"lib:lingui",
|
|
1703
|
+
"lib:vue-i18n",
|
|
1704
|
+
"lib:formatjs",
|
|
1705
|
+
"lib:next-intl"
|
|
1706
|
+
]
|
|
1538
1707
|
},
|
|
1539
1708
|
{
|
|
1540
1709
|
id: "Semgrep_codacy.k8s.ingress.nginx.retirement.ingress-class",
|
|
@@ -1544,7 +1713,7 @@ var patterns_default = [
|
|
|
1544
1713
|
enabled: true,
|
|
1545
1714
|
languages: ["YAML"],
|
|
1546
1715
|
parameters: [],
|
|
1547
|
-
tags: ["ai", "ai-risk", "ai
|
|
1716
|
+
tags: ["plt:kubernetes", "ai-safety", "ai-risk", "ai", "tool:helm"]
|
|
1548
1717
|
},
|
|
1549
1718
|
{
|
|
1550
1719
|
id: "Semgrep_codacy.k8s.ingress.nginx.retirement.ingress-resource",
|
|
@@ -1554,7 +1723,7 @@ var patterns_default = [
|
|
|
1554
1723
|
enabled: true,
|
|
1555
1724
|
languages: ["YAML"],
|
|
1556
1725
|
parameters: [],
|
|
1557
|
-
tags: ["ai", "ai-risk", "ai
|
|
1726
|
+
tags: ["plt:kubernetes", "ai-safety", "ai-risk", "ai", "tool:helm"]
|
|
1558
1727
|
},
|
|
1559
1728
|
{
|
|
1560
1729
|
id: "Semgrep_codacy.k8s.ingress.nginx.retirement.workload",
|
|
@@ -1564,7 +1733,7 @@ var patterns_default = [
|
|
|
1564
1733
|
enabled: true,
|
|
1565
1734
|
languages: ["YAML"],
|
|
1566
1735
|
parameters: [],
|
|
1567
|
-
tags: ["ai", "ai-risk", "ai
|
|
1736
|
+
tags: ["plt:kubernetes", "ai-safety", "ai-risk", "ai", "tool:helm"]
|
|
1568
1737
|
},
|
|
1569
1738
|
{
|
|
1570
1739
|
id: "Semgrep_codacy.python.i18n.no-hardcoded-number-format",
|
|
@@ -1574,7 +1743,15 @@ var patterns_default = [
|
|
|
1574
1743
|
enabled: false,
|
|
1575
1744
|
languages: ["Python"],
|
|
1576
1745
|
parameters: [],
|
|
1577
|
-
tags: [
|
|
1746
|
+
tags: [
|
|
1747
|
+
"i18n",
|
|
1748
|
+
"lib:flask-babel",
|
|
1749
|
+
"lib:i18next",
|
|
1750
|
+
"lib:lingui",
|
|
1751
|
+
"lib:vue-i18n",
|
|
1752
|
+
"lib:formatjs",
|
|
1753
|
+
"lib:next-intl"
|
|
1754
|
+
]
|
|
1578
1755
|
},
|
|
1579
1756
|
{
|
|
1580
1757
|
id: "Semgrep_codacy.python.i18n.no-hardcoded-print-concat",
|
|
@@ -1584,7 +1761,15 @@ var patterns_default = [
|
|
|
1584
1761
|
enabled: false,
|
|
1585
1762
|
languages: ["Python"],
|
|
1586
1763
|
parameters: [],
|
|
1587
|
-
tags: [
|
|
1764
|
+
tags: [
|
|
1765
|
+
"i18n",
|
|
1766
|
+
"lib:flask-babel",
|
|
1767
|
+
"lib:i18next",
|
|
1768
|
+
"lib:lingui",
|
|
1769
|
+
"lib:vue-i18n",
|
|
1770
|
+
"lib:formatjs",
|
|
1771
|
+
"lib:next-intl"
|
|
1772
|
+
]
|
|
1588
1773
|
},
|
|
1589
1774
|
{
|
|
1590
1775
|
id: "Semgrep_codacy.python.i18n.no-hardcoded-strftime",
|
|
@@ -1594,7 +1779,15 @@ var patterns_default = [
|
|
|
1594
1779
|
enabled: true,
|
|
1595
1780
|
languages: ["Python"],
|
|
1596
1781
|
parameters: [],
|
|
1597
|
-
tags: [
|
|
1782
|
+
tags: [
|
|
1783
|
+
"i18n",
|
|
1784
|
+
"lib:flask-babel",
|
|
1785
|
+
"lib:i18next",
|
|
1786
|
+
"lib:lingui",
|
|
1787
|
+
"lib:vue-i18n",
|
|
1788
|
+
"lib:formatjs",
|
|
1789
|
+
"lib:next-intl"
|
|
1790
|
+
]
|
|
1598
1791
|
},
|
|
1599
1792
|
{
|
|
1600
1793
|
id: "Semgrep_codacy.python.openai.import-without-guardrails",
|
|
@@ -2176,7 +2369,7 @@ var patterns_default = [
|
|
|
2176
2369
|
enabled: false,
|
|
2177
2370
|
languages: ["CSharp"],
|
|
2178
2371
|
parameters: [],
|
|
2179
|
-
tags: ["security", "insecuredeserialization", "
|
|
2372
|
+
tags: ["security", "insecuredeserialization", "lib:json-net"]
|
|
2180
2373
|
},
|
|
2181
2374
|
{
|
|
2182
2375
|
id: "Semgrep_csharp.lang.security.insecure-deserialization.soap-formatter.insecure-soapformatter-deserialization",
|
|
@@ -10873,7 +11066,17 @@ var patterns_default = [
|
|
|
10873
11066
|
enabled: true,
|
|
10874
11067
|
languages: ["Go"],
|
|
10875
11068
|
parameters: [],
|
|
10876
|
-
tags: [
|
|
11069
|
+
tags: [
|
|
11070
|
+
"lib:aws-sdk",
|
|
11071
|
+
"fwk:cloudformation",
|
|
11072
|
+
"security",
|
|
11073
|
+
"lib:boto3",
|
|
11074
|
+
"fwk:serverless-framework",
|
|
11075
|
+
"fwk:aws-cdk",
|
|
11076
|
+
"lib:aws-sdk-go",
|
|
11077
|
+
"databasesqli",
|
|
11078
|
+
"awslambda"
|
|
11079
|
+
]
|
|
10877
11080
|
},
|
|
10878
11081
|
{
|
|
10879
11082
|
id: "Semgrep_go.aws-lambda.security.tainted-sql-string.tainted-sql-string",
|
|
@@ -10883,7 +11086,16 @@ var patterns_default = [
|
|
|
10883
11086
|
enabled: true,
|
|
10884
11087
|
languages: ["Go"],
|
|
10885
11088
|
parameters: [],
|
|
10886
|
-
tags: [
|
|
11089
|
+
tags: [
|
|
11090
|
+
"lib:aws-sdk",
|
|
11091
|
+
"fwk:cloudformation",
|
|
11092
|
+
"security",
|
|
11093
|
+
"lib:boto3",
|
|
11094
|
+
"fwk:serverless-framework",
|
|
11095
|
+
"fwk:aws-cdk",
|
|
11096
|
+
"lib:aws-sdk-go",
|
|
11097
|
+
"awslambda"
|
|
11098
|
+
]
|
|
10887
11099
|
},
|
|
10888
11100
|
{
|
|
10889
11101
|
id: "Semgrep_go_blocklist_rule-blocklist-des",
|
|
@@ -11046,7 +11258,7 @@ var patterns_default = [
|
|
|
11046
11258
|
enabled: true,
|
|
11047
11259
|
languages: ["Go"],
|
|
11048
11260
|
parameters: [],
|
|
11049
|
-
tags: ["gorilla"]
|
|
11261
|
+
tags: ["fwk:gorilla-mux"]
|
|
11050
11262
|
},
|
|
11051
11263
|
{
|
|
11052
11264
|
id: "Semgrep_go.gorilla.security.audit.session-cookie-missing-httponly.session-cookie-missing-httponly",
|
|
@@ -11056,7 +11268,7 @@ var patterns_default = [
|
|
|
11056
11268
|
enabled: true,
|
|
11057
11269
|
languages: ["Go"],
|
|
11058
11270
|
parameters: [],
|
|
11059
|
-
tags: ["
|
|
11271
|
+
tags: ["security", "sessioncookie", "fwk:gorilla-mux"]
|
|
11060
11272
|
},
|
|
11061
11273
|
{
|
|
11062
11274
|
id: "Semgrep_go.gorilla.security.audit.session-cookie-missing-secure.session-cookie-missing-secure",
|
|
@@ -11066,7 +11278,7 @@ var patterns_default = [
|
|
|
11066
11278
|
enabled: true,
|
|
11067
11279
|
languages: ["Go"],
|
|
11068
11280
|
parameters: [],
|
|
11069
|
-
tags: ["
|
|
11281
|
+
tags: ["security", "fwk:gorilla-mux"]
|
|
11070
11282
|
},
|
|
11071
11283
|
{
|
|
11072
11284
|
id: "Semgrep_go.gorilla.security.audit.session-cookie-samesitenone.session-cookie-samesitenone",
|
|
@@ -11076,7 +11288,7 @@ var patterns_default = [
|
|
|
11076
11288
|
enabled: true,
|
|
11077
11289
|
languages: ["Go"],
|
|
11078
11290
|
parameters: [],
|
|
11079
|
-
tags: ["
|
|
11291
|
+
tags: ["sessioncookie", "security", "fwk:gorilla-mux"]
|
|
11080
11292
|
},
|
|
11081
11293
|
{
|
|
11082
11294
|
id: "Semgrep_go.gorilla.security.audit.websocket-missing-origin-check.websocket-missing-origin-check",
|
|
@@ -11086,7 +11298,7 @@ var patterns_default = [
|
|
|
11086
11298
|
enabled: true,
|
|
11087
11299
|
languages: ["Go"],
|
|
11088
11300
|
parameters: [],
|
|
11089
|
-
tags: ["gorilla"]
|
|
11301
|
+
tags: ["fwk:gorilla-mux"]
|
|
11090
11302
|
},
|
|
11091
11303
|
{
|
|
11092
11304
|
id: "Semgrep_go.gorm.security.audit.gorm-dangerous-methods-usage.gorm-dangerous-method-usage",
|
|
@@ -11096,7 +11308,7 @@ var patterns_default = [
|
|
|
11096
11308
|
enabled: true,
|
|
11097
11309
|
languages: ["Go"],
|
|
11098
11310
|
parameters: [],
|
|
11099
|
-
tags: ["
|
|
11311
|
+
tags: ["security", "lib:go-gorm"]
|
|
11100
11312
|
},
|
|
11101
11313
|
{
|
|
11102
11314
|
id: "Semgrep_go.grpc.security.grpc-client-insecure-connection.grpc-client-insecure-connection",
|
|
@@ -11106,7 +11318,7 @@ var patterns_default = [
|
|
|
11106
11318
|
enabled: true,
|
|
11107
11319
|
languages: ["Go"],
|
|
11108
11320
|
parameters: [],
|
|
11109
|
-
tags: ["grpc"]
|
|
11321
|
+
tags: ["lib:grpc"]
|
|
11110
11322
|
},
|
|
11111
11323
|
{
|
|
11112
11324
|
id: "Semgrep_go.grpc.security.grpc-server-insecure-connection.grpc-server-insecure-connection",
|
|
@@ -11116,7 +11328,7 @@ var patterns_default = [
|
|
|
11116
11328
|
enabled: true,
|
|
11117
11329
|
languages: ["Go"],
|
|
11118
11330
|
parameters: [],
|
|
11119
|
-
tags: ["
|
|
11331
|
+
tags: ["security", "lib:grpc"]
|
|
11120
11332
|
},
|
|
11121
11333
|
{
|
|
11122
11334
|
id: "Semgrep_go_http_rule-http-serve",
|
|
@@ -11913,7 +12125,7 @@ var patterns_default = [
|
|
|
11913
12125
|
enabled: false,
|
|
11914
12126
|
languages: ["Java"],
|
|
11915
12127
|
parameters: [],
|
|
11916
|
-
tags: ["android"]
|
|
12128
|
+
tags: ["fwk:android-sdk"]
|
|
11917
12129
|
},
|
|
11918
12130
|
{
|
|
11919
12131
|
id: "Semgrep_java.android.best-practice.manifest-security-features.manifest-usescleartexttraffic-true",
|
|
@@ -11923,7 +12135,7 @@ var patterns_default = [
|
|
|
11923
12135
|
enabled: false,
|
|
11924
12136
|
languages: ["Java"],
|
|
11925
12137
|
parameters: [],
|
|
11926
|
-
tags: ["android"]
|
|
12138
|
+
tags: ["fwk:android-sdk"]
|
|
11927
12139
|
},
|
|
11928
12140
|
{
|
|
11929
12141
|
id: "Semgrep_java.android.best-practice.network-security-config.nsc-allows-plaintext-traffic",
|
|
@@ -11933,7 +12145,7 @@ var patterns_default = [
|
|
|
11933
12145
|
enabled: false,
|
|
11934
12146
|
languages: ["Java"],
|
|
11935
12147
|
parameters: [],
|
|
11936
|
-
tags: ["android"]
|
|
12148
|
+
tags: ["fwk:android-sdk"]
|
|
11937
12149
|
},
|
|
11938
12150
|
{
|
|
11939
12151
|
id: "Semgrep_java.android.best-practice.network-security-config.nsc-allows-user-ca-certs",
|
|
@@ -11943,7 +12155,7 @@ var patterns_default = [
|
|
|
11943
12155
|
enabled: false,
|
|
11944
12156
|
languages: ["Java"],
|
|
11945
12157
|
parameters: [],
|
|
11946
|
-
tags: ["
|
|
12158
|
+
tags: ["networksecurityconfig", "bestpractice", "fwk:android-sdk"]
|
|
11947
12159
|
},
|
|
11948
12160
|
{
|
|
11949
12161
|
id: "Semgrep_java.android.best-practice.network-security-config.nsc-allows-user-ca-certs-for-domain",
|
|
@@ -11953,7 +12165,7 @@ var patterns_default = [
|
|
|
11953
12165
|
enabled: false,
|
|
11954
12166
|
languages: ["Java"],
|
|
11955
12167
|
parameters: [],
|
|
11956
|
-
tags: ["
|
|
12168
|
+
tags: ["networksecurityconfig", "bestpractice", "fwk:android-sdk"]
|
|
11957
12169
|
},
|
|
11958
12170
|
{
|
|
11959
12171
|
id: "Semgrep_java.android.best-practice.network-security-config.nsc-pinning-without-backup",
|
|
@@ -11963,7 +12175,7 @@ var patterns_default = [
|
|
|
11963
12175
|
enabled: false,
|
|
11964
12176
|
languages: ["Java"],
|
|
11965
12177
|
parameters: [],
|
|
11966
|
-
tags: ["android"]
|
|
12178
|
+
tags: ["fwk:android-sdk"]
|
|
11967
12179
|
},
|
|
11968
12180
|
{
|
|
11969
12181
|
id: "Semgrep_java.android.best-practice.network-security-config.nsc-pinning-without-expiration",
|
|
@@ -11973,7 +12185,7 @@ var patterns_default = [
|
|
|
11973
12185
|
enabled: false,
|
|
11974
12186
|
languages: ["Java"],
|
|
11975
12187
|
parameters: [],
|
|
11976
|
-
tags: ["
|
|
12188
|
+
tags: ["networksecurityconfig", "bestpractice", "fwk:android-sdk"]
|
|
11977
12189
|
},
|
|
11978
12190
|
{
|
|
11979
12191
|
id: "Semgrep_java.android.security.exported_activity.exported_activity",
|
|
@@ -11983,7 +12195,7 @@ var patterns_default = [
|
|
|
11983
12195
|
enabled: true,
|
|
11984
12196
|
languages: ["Java"],
|
|
11985
12197
|
parameters: [],
|
|
11986
|
-
tags: ["
|
|
12198
|
+
tags: ["security", "fwk:android-sdk"]
|
|
11987
12199
|
},
|
|
11988
12200
|
{
|
|
11989
12201
|
id: "Semgrep_java.aws-lambda.security.tainted-sqli.tainted-sqli",
|
|
@@ -13533,7 +13745,7 @@ var patterns_default = [
|
|
|
13533
13745
|
enabled: false,
|
|
13534
13746
|
languages: ["Java"],
|
|
13535
13747
|
parameters: [],
|
|
13536
|
-
tags: ["
|
|
13748
|
+
tags: ["nosqli", "injection", "security", "lib:mongodb"]
|
|
13537
13749
|
},
|
|
13538
13750
|
{
|
|
13539
13751
|
id: "Semgrep_java_password_rule-ConstantDBPassword",
|
|
@@ -13618,7 +13830,7 @@ var patterns_default = [
|
|
|
13618
13830
|
enabled: false,
|
|
13619
13831
|
languages: ["Javascript", "TypeScript"],
|
|
13620
13832
|
parameters: [],
|
|
13621
|
-
tags: ["
|
|
13833
|
+
tags: ["security", "fwk:angular"]
|
|
13622
13834
|
},
|
|
13623
13835
|
{
|
|
13624
13836
|
id: "Semgrep_javascript.angular.security.detect-angular-element-taint.detect-angular-element-taint",
|
|
@@ -13628,7 +13840,7 @@ var patterns_default = [
|
|
|
13628
13840
|
enabled: true,
|
|
13629
13841
|
languages: ["Javascript", "TypeScript"],
|
|
13630
13842
|
parameters: [],
|
|
13631
|
-
tags: ["
|
|
13843
|
+
tags: ["security", "fwk:angular"]
|
|
13632
13844
|
},
|
|
13633
13845
|
{
|
|
13634
13846
|
id: "Semgrep_javascript.angular.security.detect-angular-open-redirect.detect-angular-open-redirect",
|
|
@@ -13638,7 +13850,7 @@ var patterns_default = [
|
|
|
13638
13850
|
enabled: false,
|
|
13639
13851
|
languages: ["Javascript", "TypeScript"],
|
|
13640
13852
|
parameters: [],
|
|
13641
|
-
tags: ["
|
|
13853
|
+
tags: ["security", "fwk:angular"]
|
|
13642
13854
|
},
|
|
13643
13855
|
{
|
|
13644
13856
|
id: "Semgrep_javascript.angular.security.detect-angular-resource-loading.detect-angular-resource-loading",
|
|
@@ -13648,7 +13860,7 @@ var patterns_default = [
|
|
|
13648
13860
|
enabled: false,
|
|
13649
13861
|
languages: ["Javascript", "TypeScript"],
|
|
13650
13862
|
parameters: [],
|
|
13651
|
-
tags: ["
|
|
13863
|
+
tags: ["security", "fwk:angular"]
|
|
13652
13864
|
},
|
|
13653
13865
|
{
|
|
13654
13866
|
id: "Semgrep_javascript.angular.security.detect-angular-sce-disabled.detect-angular-sce-disabled",
|
|
@@ -13658,7 +13870,7 @@ var patterns_default = [
|
|
|
13658
13870
|
enabled: true,
|
|
13659
13871
|
languages: ["Javascript", "TypeScript"],
|
|
13660
13872
|
parameters: [],
|
|
13661
|
-
tags: ["
|
|
13873
|
+
tags: ["security", "fwk:angular"]
|
|
13662
13874
|
},
|
|
13663
13875
|
{
|
|
13664
13876
|
id: "Semgrep_javascript.angular.security.detect-angular-trust-as-css.detect-angular-trust-as-css-method",
|
|
@@ -13668,7 +13880,7 @@ var patterns_default = [
|
|
|
13668
13880
|
enabled: false,
|
|
13669
13881
|
languages: ["Javascript", "TypeScript"],
|
|
13670
13882
|
parameters: [],
|
|
13671
|
-
tags: ["angular"]
|
|
13883
|
+
tags: ["fwk:angular"]
|
|
13672
13884
|
},
|
|
13673
13885
|
{
|
|
13674
13886
|
id: "Semgrep_javascript.angular.security.detect-angular-trust-as-html-method.detect-angular-trust-as-html-method",
|
|
@@ -13678,7 +13890,7 @@ var patterns_default = [
|
|
|
13678
13890
|
enabled: false,
|
|
13679
13891
|
languages: ["Javascript", "TypeScript"],
|
|
13680
13892
|
parameters: [],
|
|
13681
|
-
tags: ["
|
|
13893
|
+
tags: ["security", "fwk:angular"]
|
|
13682
13894
|
},
|
|
13683
13895
|
{
|
|
13684
13896
|
id: "Semgrep_javascript.angular.security.detect-angular-trust-as-js-method.detect-angular-trust-as-js-method",
|
|
@@ -13688,7 +13900,7 @@ var patterns_default = [
|
|
|
13688
13900
|
enabled: false,
|
|
13689
13901
|
languages: ["Javascript", "TypeScript"],
|
|
13690
13902
|
parameters: [],
|
|
13691
|
-
tags: ["
|
|
13903
|
+
tags: ["security", "fwk:angular"]
|
|
13692
13904
|
},
|
|
13693
13905
|
{
|
|
13694
13906
|
id: "Semgrep_javascript.angular.security.detect-angular-trust-as-method.detect-angular-trust-as-method",
|
|
@@ -13698,7 +13910,7 @@ var patterns_default = [
|
|
|
13698
13910
|
enabled: true,
|
|
13699
13911
|
languages: ["Javascript", "TypeScript"],
|
|
13700
13912
|
parameters: [],
|
|
13701
|
-
tags: ["
|
|
13913
|
+
tags: ["security", "fwk:angular"]
|
|
13702
13914
|
},
|
|
13703
13915
|
{
|
|
13704
13916
|
id: "Semgrep_javascript.angular.security.detect-angular-trust-as-resourceurl-method.detect-angular-trust-as-resourceurl-method",
|
|
@@ -13708,7 +13920,7 @@ var patterns_default = [
|
|
|
13708
13920
|
enabled: false,
|
|
13709
13921
|
languages: ["Javascript", "TypeScript"],
|
|
13710
13922
|
parameters: [],
|
|
13711
|
-
tags: ["angular"]
|
|
13923
|
+
tags: ["fwk:angular"]
|
|
13712
13924
|
},
|
|
13713
13925
|
{
|
|
13714
13926
|
id: "Semgrep_javascript.angular.security.detect-angular-trust-as-url-method.detect-angular-trust-as-url-method",
|
|
@@ -13718,7 +13930,7 @@ var patterns_default = [
|
|
|
13718
13930
|
enabled: false,
|
|
13719
13931
|
languages: ["Javascript", "TypeScript"],
|
|
13720
13932
|
parameters: [],
|
|
13721
|
-
tags: ["
|
|
13933
|
+
tags: ["security", "fwk:angular"]
|
|
13722
13934
|
},
|
|
13723
13935
|
{
|
|
13724
13936
|
id: "Semgrep_javascript.angular.security.detect-third-party-angular-translate.detect-angular-translateprovider-translations-method",
|
|
@@ -13728,7 +13940,7 @@ var patterns_default = [
|
|
|
13728
13940
|
enabled: false,
|
|
13729
13941
|
languages: ["Javascript"],
|
|
13730
13942
|
parameters: [],
|
|
13731
|
-
tags: ["angular"]
|
|
13943
|
+
tags: ["fwk:angular"]
|
|
13732
13944
|
},
|
|
13733
13945
|
{
|
|
13734
13946
|
id: "Semgrep_javascript.apollo.security.apollo-axios-ssrf.apollo-axios-ssrf",
|
|
@@ -13738,7 +13950,7 @@ var patterns_default = [
|
|
|
13738
13950
|
enabled: false,
|
|
13739
13951
|
languages: ["Javascript"],
|
|
13740
13952
|
parameters: [],
|
|
13741
|
-
tags: ["
|
|
13953
|
+
tags: ["security", "lib:apollo"]
|
|
13742
13954
|
},
|
|
13743
13955
|
{
|
|
13744
13956
|
id: "Semgrep_javascript.argon2.security.unsafe-argon2-config.unsafe-argon2-config",
|
|
@@ -13767,7 +13979,16 @@ var patterns_default = [
|
|
|
13767
13979
|
enabled: true,
|
|
13768
13980
|
languages: ["Javascript", "TypeScript"],
|
|
13769
13981
|
parameters: [],
|
|
13770
|
-
tags: [
|
|
13982
|
+
tags: [
|
|
13983
|
+
"lib:aws-sdk",
|
|
13984
|
+
"fwk:cloudformation",
|
|
13985
|
+
"security",
|
|
13986
|
+
"lib:boto3",
|
|
13987
|
+
"fwk:serverless-framework",
|
|
13988
|
+
"fwk:aws-cdk",
|
|
13989
|
+
"lib:aws-sdk-go",
|
|
13990
|
+
"awslambda"
|
|
13991
|
+
]
|
|
13771
13992
|
},
|
|
13772
13993
|
{
|
|
13773
13994
|
id: "Semgrep_javascript.aws-lambda.security.dynamodb-request-object.dynamodb-request-object",
|
|
@@ -13777,7 +13998,17 @@ var patterns_default = [
|
|
|
13777
13998
|
enabled: true,
|
|
13778
13999
|
languages: ["Javascript", "TypeScript"],
|
|
13779
14000
|
parameters: [],
|
|
13780
|
-
tags: [
|
|
14001
|
+
tags: [
|
|
14002
|
+
"lib:aws-sdk",
|
|
14003
|
+
"fwk:cloudformation",
|
|
14004
|
+
"security",
|
|
14005
|
+
"lib:boto3",
|
|
14006
|
+
"dynamodb",
|
|
14007
|
+
"fwk:serverless-framework",
|
|
14008
|
+
"fwk:aws-cdk",
|
|
14009
|
+
"lib:aws-sdk-go",
|
|
14010
|
+
"awslambda"
|
|
14011
|
+
]
|
|
13781
14012
|
},
|
|
13782
14013
|
{
|
|
13783
14014
|
id: "Semgrep_javascript.aws-lambda.security.knex-sqli.knex-sqli",
|
|
@@ -13787,7 +14018,15 @@ var patterns_default = [
|
|
|
13787
14018
|
enabled: true,
|
|
13788
14019
|
languages: ["Javascript", "TypeScript"],
|
|
13789
14020
|
parameters: [],
|
|
13790
|
-
tags: [
|
|
14021
|
+
tags: [
|
|
14022
|
+
"lib:aws-sdk",
|
|
14023
|
+
"fwk:cloudformation",
|
|
14024
|
+
"lib:boto3",
|
|
14025
|
+
"fwk:serverless-framework",
|
|
14026
|
+
"fwk:aws-cdk",
|
|
14027
|
+
"lib:aws-sdk-go",
|
|
14028
|
+
"awslambda"
|
|
14029
|
+
]
|
|
13791
14030
|
},
|
|
13792
14031
|
{
|
|
13793
14032
|
id: "Semgrep_javascript.aws-lambda.security.mysql-sqli.mysql-sqli",
|
|
@@ -13797,7 +14036,15 @@ var patterns_default = [
|
|
|
13797
14036
|
enabled: true,
|
|
13798
14037
|
languages: ["Javascript", "TypeScript"],
|
|
13799
14038
|
parameters: [],
|
|
13800
|
-
tags: [
|
|
14039
|
+
tags: [
|
|
14040
|
+
"lib:aws-sdk",
|
|
14041
|
+
"fwk:cloudformation",
|
|
14042
|
+
"lib:boto3",
|
|
14043
|
+
"fwk:serverless-framework",
|
|
14044
|
+
"fwk:aws-cdk",
|
|
14045
|
+
"lib:aws-sdk-go",
|
|
14046
|
+
"awslambda"
|
|
14047
|
+
]
|
|
13801
14048
|
},
|
|
13802
14049
|
{
|
|
13803
14050
|
id: "Semgrep_javascript.aws-lambda.security.pg-sqli.pg-sqli",
|
|
@@ -13807,7 +14054,16 @@ var patterns_default = [
|
|
|
13807
14054
|
enabled: true,
|
|
13808
14055
|
languages: ["Javascript", "TypeScript"],
|
|
13809
14056
|
parameters: [],
|
|
13810
|
-
tags: [
|
|
14057
|
+
tags: [
|
|
14058
|
+
"lib:aws-sdk",
|
|
14059
|
+
"fwk:cloudformation",
|
|
14060
|
+
"security",
|
|
14061
|
+
"lib:boto3",
|
|
14062
|
+
"fwk:serverless-framework",
|
|
14063
|
+
"fwk:aws-cdk",
|
|
14064
|
+
"lib:aws-sdk-go",
|
|
14065
|
+
"awslambda"
|
|
14066
|
+
]
|
|
13811
14067
|
},
|
|
13812
14068
|
{
|
|
13813
14069
|
id: "Semgrep_javascript.aws-lambda.security.sequelize-sqli.sequelize-sqli",
|
|
@@ -13817,7 +14073,15 @@ var patterns_default = [
|
|
|
13817
14073
|
enabled: true,
|
|
13818
14074
|
languages: ["Javascript", "TypeScript"],
|
|
13819
14075
|
parameters: [],
|
|
13820
|
-
tags: [
|
|
14076
|
+
tags: [
|
|
14077
|
+
"lib:aws-sdk",
|
|
14078
|
+
"fwk:cloudformation",
|
|
14079
|
+
"lib:boto3",
|
|
14080
|
+
"fwk:serverless-framework",
|
|
14081
|
+
"fwk:aws-cdk",
|
|
14082
|
+
"lib:aws-sdk-go",
|
|
14083
|
+
"awslambda"
|
|
14084
|
+
]
|
|
13821
14085
|
},
|
|
13822
14086
|
{
|
|
13823
14087
|
id: "Semgrep_javascript.aws-lambda.security.tainted-eval.tainted-eval",
|
|
@@ -13827,7 +14091,16 @@ var patterns_default = [
|
|
|
13827
14091
|
enabled: false,
|
|
13828
14092
|
languages: ["Javascript", "TypeScript"],
|
|
13829
14093
|
parameters: [],
|
|
13830
|
-
tags: [
|
|
14094
|
+
tags: [
|
|
14095
|
+
"lib:aws-sdk",
|
|
14096
|
+
"fwk:cloudformation",
|
|
14097
|
+
"security",
|
|
14098
|
+
"lib:boto3",
|
|
14099
|
+
"fwk:serverless-framework",
|
|
14100
|
+
"fwk:aws-cdk",
|
|
14101
|
+
"lib:aws-sdk-go",
|
|
14102
|
+
"awslambda"
|
|
14103
|
+
]
|
|
13831
14104
|
},
|
|
13832
14105
|
{
|
|
13833
14106
|
id: "Semgrep_javascript.aws-lambda.security.tainted-html-response.tainted-html-response",
|
|
@@ -13837,7 +14110,16 @@ var patterns_default = [
|
|
|
13837
14110
|
enabled: true,
|
|
13838
14111
|
languages: ["Javascript", "TypeScript"],
|
|
13839
14112
|
parameters: [],
|
|
13840
|
-
tags: [
|
|
14113
|
+
tags: [
|
|
14114
|
+
"lib:aws-sdk",
|
|
14115
|
+
"fwk:cloudformation",
|
|
14116
|
+
"security",
|
|
14117
|
+
"lib:boto3",
|
|
14118
|
+
"fwk:serverless-framework",
|
|
14119
|
+
"fwk:aws-cdk",
|
|
14120
|
+
"lib:aws-sdk-go",
|
|
14121
|
+
"awslambda"
|
|
14122
|
+
]
|
|
13841
14123
|
},
|
|
13842
14124
|
{
|
|
13843
14125
|
id: "Semgrep_javascript.aws-lambda.security.tainted-html-string.tainted-html-string",
|
|
@@ -13847,7 +14129,16 @@ var patterns_default = [
|
|
|
13847
14129
|
enabled: true,
|
|
13848
14130
|
languages: ["Javascript", "TypeScript"],
|
|
13849
14131
|
parameters: [],
|
|
13850
|
-
tags: [
|
|
14132
|
+
tags: [
|
|
14133
|
+
"lib:aws-sdk",
|
|
14134
|
+
"fwk:cloudformation",
|
|
14135
|
+
"security",
|
|
14136
|
+
"lib:boto3",
|
|
14137
|
+
"fwk:serverless-framework",
|
|
14138
|
+
"fwk:aws-cdk",
|
|
14139
|
+
"lib:aws-sdk-go",
|
|
14140
|
+
"awslambda"
|
|
14141
|
+
]
|
|
13851
14142
|
},
|
|
13852
14143
|
{
|
|
13853
14144
|
id: "Semgrep_javascript.aws-lambda.security.tainted-sql-string.tainted-sql-string",
|
|
@@ -13857,7 +14148,16 @@ var patterns_default = [
|
|
|
13857
14148
|
enabled: false,
|
|
13858
14149
|
languages: ["Javascript", "TypeScript"],
|
|
13859
14150
|
parameters: [],
|
|
13860
|
-
tags: [
|
|
14151
|
+
tags: [
|
|
14152
|
+
"lib:aws-sdk",
|
|
14153
|
+
"fwk:cloudformation",
|
|
14154
|
+
"security",
|
|
14155
|
+
"lib:boto3",
|
|
14156
|
+
"fwk:serverless-framework",
|
|
14157
|
+
"fwk:aws-cdk",
|
|
14158
|
+
"lib:aws-sdk-go",
|
|
14159
|
+
"awslambda"
|
|
14160
|
+
]
|
|
13861
14161
|
},
|
|
13862
14162
|
{
|
|
13863
14163
|
id: "Semgrep_javascript.aws-lambda.security.vm-runincontext-injection.vm-runincontext-injection",
|
|
@@ -13867,7 +14167,15 @@ var patterns_default = [
|
|
|
13867
14167
|
enabled: true,
|
|
13868
14168
|
languages: ["Javascript", "TypeScript"],
|
|
13869
14169
|
parameters: [],
|
|
13870
|
-
tags: [
|
|
14170
|
+
tags: [
|
|
14171
|
+
"lib:aws-sdk",
|
|
14172
|
+
"fwk:cloudformation",
|
|
14173
|
+
"lib:boto3",
|
|
14174
|
+
"fwk:serverless-framework",
|
|
14175
|
+
"fwk:aws-cdk",
|
|
14176
|
+
"lib:aws-sdk-go",
|
|
14177
|
+
"awslambda"
|
|
14178
|
+
]
|
|
13871
14179
|
},
|
|
13872
14180
|
{
|
|
13873
14181
|
id: "Semgrep_javascript.bluebird.security.audit.tofastproperties-code-execution.tofastproperties-code-execution",
|
|
@@ -14070,7 +14378,7 @@ var patterns_default = [
|
|
|
14070
14378
|
enabled: false,
|
|
14071
14379
|
languages: ["Javascript", "TypeScript"],
|
|
14072
14380
|
parameters: [],
|
|
14073
|
-
tags: ["express"]
|
|
14381
|
+
tags: ["fwk:express"]
|
|
14074
14382
|
},
|
|
14075
14383
|
{
|
|
14076
14384
|
id: "Semgrep_javascript.express.security.audit.express-check-directory-listing.express-check-directory-listing",
|
|
@@ -14080,7 +14388,7 @@ var patterns_default = [
|
|
|
14080
14388
|
enabled: true,
|
|
14081
14389
|
languages: ["Javascript", "TypeScript"],
|
|
14082
14390
|
parameters: [],
|
|
14083
|
-
tags: ["
|
|
14391
|
+
tags: ["security", "fwk:express"]
|
|
14084
14392
|
},
|
|
14085
14393
|
{
|
|
14086
14394
|
id: "Semgrep_javascript.express.security.audit.express-cookie-settings.express-cookie-session-default-name",
|
|
@@ -14090,7 +14398,7 @@ var patterns_default = [
|
|
|
14090
14398
|
enabled: true,
|
|
14091
14399
|
languages: ["Javascript", "TypeScript"],
|
|
14092
14400
|
parameters: [],
|
|
14093
|
-
tags: ["express"]
|
|
14401
|
+
tags: ["fwk:express"]
|
|
14094
14402
|
},
|
|
14095
14403
|
{
|
|
14096
14404
|
id: "Semgrep_javascript.express.security.audit.express-cookie-settings.express-cookie-session-no-domain",
|
|
@@ -14100,7 +14408,7 @@ var patterns_default = [
|
|
|
14100
14408
|
enabled: true,
|
|
14101
14409
|
languages: ["Javascript", "TypeScript"],
|
|
14102
14410
|
parameters: [],
|
|
14103
|
-
tags: ["
|
|
14411
|
+
tags: ["security", "audit", "fwk:express"]
|
|
14104
14412
|
},
|
|
14105
14413
|
{
|
|
14106
14414
|
id: "Semgrep_javascript.express.security.audit.express-cookie-settings.express-cookie-session-no-expires",
|
|
@@ -14110,7 +14418,7 @@ var patterns_default = [
|
|
|
14110
14418
|
enabled: true,
|
|
14111
14419
|
languages: ["Javascript", "TypeScript"],
|
|
14112
14420
|
parameters: [],
|
|
14113
|
-
tags: ["express"
|
|
14421
|
+
tags: ["fwk:express"]
|
|
14114
14422
|
},
|
|
14115
14423
|
{
|
|
14116
14424
|
id: "Semgrep_javascript.express.security.audit.express-cookie-settings.express-cookie-session-no-httponly",
|
|
@@ -14120,7 +14428,7 @@ var patterns_default = [
|
|
|
14120
14428
|
enabled: true,
|
|
14121
14429
|
languages: ["Javascript", "TypeScript"],
|
|
14122
14430
|
parameters: [],
|
|
14123
|
-
tags: ["
|
|
14431
|
+
tags: ["security", "fwk:express"]
|
|
14124
14432
|
},
|
|
14125
14433
|
{
|
|
14126
14434
|
id: "Semgrep_javascript.express.security.audit.express-cookie-settings.express-cookie-session-no-path",
|
|
@@ -14130,7 +14438,7 @@ var patterns_default = [
|
|
|
14130
14438
|
enabled: true,
|
|
14131
14439
|
languages: ["Javascript", "TypeScript"],
|
|
14132
14440
|
parameters: [],
|
|
14133
|
-
tags: ["express"
|
|
14441
|
+
tags: ["fwk:express"]
|
|
14134
14442
|
},
|
|
14135
14443
|
{
|
|
14136
14444
|
id: "Semgrep_javascript.express.security.audit.express-cookie-settings.express-cookie-session-no-secure",
|
|
@@ -14140,7 +14448,7 @@ var patterns_default = [
|
|
|
14140
14448
|
enabled: true,
|
|
14141
14449
|
languages: ["Javascript", "TypeScript"],
|
|
14142
14450
|
parameters: [],
|
|
14143
|
-
tags: ["
|
|
14451
|
+
tags: ["security", "fwk:express"]
|
|
14144
14452
|
},
|
|
14145
14453
|
{
|
|
14146
14454
|
id: "Semgrep_javascript.express.security.audit.express-detect-notevil-usage.express-detect-notevil-usage",
|
|
@@ -14150,7 +14458,7 @@ var patterns_default = [
|
|
|
14150
14458
|
enabled: false,
|
|
14151
14459
|
languages: ["Javascript", "TypeScript"],
|
|
14152
14460
|
parameters: [],
|
|
14153
|
-
tags: ["express"]
|
|
14461
|
+
tags: ["fwk:express"]
|
|
14154
14462
|
},
|
|
14155
14463
|
{
|
|
14156
14464
|
id: "Semgrep_javascript.express.security.audit.express-jwt-not-revoked.express-jwt-not-revoked",
|
|
@@ -14160,7 +14468,7 @@ var patterns_default = [
|
|
|
14160
14468
|
enabled: true,
|
|
14161
14469
|
languages: ["Javascript", "TypeScript"],
|
|
14162
14470
|
parameters: [],
|
|
14163
|
-
tags: ["
|
|
14471
|
+
tags: ["fwk:express"]
|
|
14164
14472
|
},
|
|
14165
14473
|
{
|
|
14166
14474
|
id: "Semgrep_javascript.express.security.audit.express-libxml-noent.express-libxml-noent",
|
|
@@ -14170,7 +14478,7 @@ var patterns_default = [
|
|
|
14170
14478
|
enabled: true,
|
|
14171
14479
|
languages: ["Javascript", "TypeScript"],
|
|
14172
14480
|
parameters: [],
|
|
14173
|
-
tags: ["
|
|
14481
|
+
tags: ["audit", "security", "fwk:express"]
|
|
14174
14482
|
},
|
|
14175
14483
|
{
|
|
14176
14484
|
id: "Semgrep_javascript.express.security.audit.express-libxml-vm-noent.express-libxml-vm-noent",
|
|
@@ -14180,7 +14488,7 @@ var patterns_default = [
|
|
|
14180
14488
|
enabled: false,
|
|
14181
14489
|
languages: ["Javascript", "TypeScript"],
|
|
14182
14490
|
parameters: [],
|
|
14183
|
-
tags: ["express"]
|
|
14491
|
+
tags: ["fwk:express"]
|
|
14184
14492
|
},
|
|
14185
14493
|
{
|
|
14186
14494
|
id: "Semgrep_javascript.express.security.audit.express-open-redirect.express-open-redirect",
|
|
@@ -14190,7 +14498,7 @@ var patterns_default = [
|
|
|
14190
14498
|
enabled: true,
|
|
14191
14499
|
languages: ["Javascript", "TypeScript"],
|
|
14192
14500
|
parameters: [],
|
|
14193
|
-
tags: ["express"]
|
|
14501
|
+
tags: ["fwk:express"]
|
|
14194
14502
|
},
|
|
14195
14503
|
{
|
|
14196
14504
|
id: "Semgrep_javascript.express.security.audit.express-path-join-resolve-traversal.express-path-join-resolve-traversal",
|
|
@@ -14200,7 +14508,7 @@ var patterns_default = [
|
|
|
14200
14508
|
enabled: true,
|
|
14201
14509
|
languages: ["Javascript", "TypeScript"],
|
|
14202
14510
|
parameters: [],
|
|
14203
|
-
tags: ["express"]
|
|
14511
|
+
tags: ["fwk:express"]
|
|
14204
14512
|
},
|
|
14205
14513
|
{
|
|
14206
14514
|
id: "Semgrep_javascript.express.security.audit.express-res-sendfile.express-res-sendfile",
|
|
@@ -14210,7 +14518,7 @@ var patterns_default = [
|
|
|
14210
14518
|
enabled: true,
|
|
14211
14519
|
languages: ["Javascript", "TypeScript"],
|
|
14212
14520
|
parameters: [],
|
|
14213
|
-
tags: ["express"]
|
|
14521
|
+
tags: ["fwk:express"]
|
|
14214
14522
|
},
|
|
14215
14523
|
{
|
|
14216
14524
|
id: "Semgrep_javascript.express.security.audit.express-session-hardcoded-secret.express-session-hardcoded-secret",
|
|
@@ -14220,7 +14528,7 @@ var patterns_default = [
|
|
|
14220
14528
|
enabled: true,
|
|
14221
14529
|
languages: ["Javascript", "TypeScript"],
|
|
14222
14530
|
parameters: [],
|
|
14223
|
-
tags: ["
|
|
14531
|
+
tags: ["security", "fwk:express"]
|
|
14224
14532
|
},
|
|
14225
14533
|
{
|
|
14226
14534
|
id: "Semgrep_javascript.express.security.audit.express-ssrf.express-ssrf",
|
|
@@ -14230,7 +14538,7 @@ var patterns_default = [
|
|
|
14230
14538
|
enabled: true,
|
|
14231
14539
|
languages: ["Javascript", "TypeScript"],
|
|
14232
14540
|
parameters: [],
|
|
14233
|
-
tags: ["
|
|
14541
|
+
tags: ["security", "ssrf", "fwk:express"]
|
|
14234
14542
|
},
|
|
14235
14543
|
{
|
|
14236
14544
|
id: "Semgrep_javascript.express.security.audit.express-third-party-object-deserialization.express-third-party-object-deserialization",
|
|
@@ -14240,7 +14548,7 @@ var patterns_default = [
|
|
|
14240
14548
|
enabled: true,
|
|
14241
14549
|
languages: ["Javascript", "TypeScript"],
|
|
14242
14550
|
parameters: [],
|
|
14243
|
-
tags: ["
|
|
14551
|
+
tags: ["security", "audit", "fwk:express"]
|
|
14244
14552
|
},
|
|
14245
14553
|
{
|
|
14246
14554
|
id: "Semgrep_javascript.express.security.audit.express-xml2json-xxe-event.express-xml2json-xxe-event",
|
|
@@ -14250,7 +14558,7 @@ var patterns_default = [
|
|
|
14250
14558
|
enabled: true,
|
|
14251
14559
|
languages: ["Javascript", "TypeScript"],
|
|
14252
14560
|
parameters: [],
|
|
14253
|
-
tags: ["
|
|
14561
|
+
tags: ["security", "audit", "fwk:express"]
|
|
14254
14562
|
},
|
|
14255
14563
|
{
|
|
14256
14564
|
id: "Semgrep_javascript.express.security.audit.possible-user-input-redirect.unknown-value-in-redirect",
|
|
@@ -14260,7 +14568,7 @@ var patterns_default = [
|
|
|
14260
14568
|
enabled: false,
|
|
14261
14569
|
languages: ["Javascript", "TypeScript"],
|
|
14262
14570
|
parameters: [],
|
|
14263
|
-
tags: ["
|
|
14571
|
+
tags: ["security", "fwk:express"]
|
|
14264
14572
|
},
|
|
14265
14573
|
{
|
|
14266
14574
|
id: "Semgrep_javascript.express.security.audit.remote-property-injection.remote-property-injection",
|
|
@@ -14270,7 +14578,7 @@ var patterns_default = [
|
|
|
14270
14578
|
enabled: false,
|
|
14271
14579
|
languages: ["Javascript", "TypeScript"],
|
|
14272
14580
|
parameters: [],
|
|
14273
|
-
tags: ["
|
|
14581
|
+
tags: ["security", "fwk:express"]
|
|
14274
14582
|
},
|
|
14275
14583
|
{
|
|
14276
14584
|
id: "Semgrep_javascript.express.security.audit.res-render-injection.res-render-injection",
|
|
@@ -14280,7 +14588,7 @@ var patterns_default = [
|
|
|
14280
14588
|
enabled: true,
|
|
14281
14589
|
languages: ["Javascript", "TypeScript"],
|
|
14282
14590
|
parameters: [],
|
|
14283
|
-
tags: ["express"]
|
|
14591
|
+
tags: ["fwk:express"]
|
|
14284
14592
|
},
|
|
14285
14593
|
{
|
|
14286
14594
|
id: "Semgrep_javascript.express.security.audit.xss.direct-response-write.direct-response-write",
|
|
@@ -14290,7 +14598,7 @@ var patterns_default = [
|
|
|
14290
14598
|
enabled: true,
|
|
14291
14599
|
languages: ["Javascript", "TypeScript"],
|
|
14292
14600
|
parameters: [],
|
|
14293
|
-
tags: ["express"]
|
|
14601
|
+
tags: ["fwk:express"]
|
|
14294
14602
|
},
|
|
14295
14603
|
{
|
|
14296
14604
|
id: "Semgrep_javascript.express.security.audit.xss.ejs.explicit-unescape.template-explicit-unescape",
|
|
@@ -14300,7 +14608,7 @@ var patterns_default = [
|
|
|
14300
14608
|
enabled: false,
|
|
14301
14609
|
languages: ["Javascript"],
|
|
14302
14610
|
parameters: [],
|
|
14303
|
-
tags: ["ejs", "
|
|
14611
|
+
tags: ["ejs", "security", "xss", "fwk:express"]
|
|
14304
14612
|
},
|
|
14305
14613
|
{
|
|
14306
14614
|
id: "Semgrep_javascript.express.security.audit.xss.ejs.var-in-href.var-in-href",
|
|
@@ -14310,7 +14618,7 @@ var patterns_default = [
|
|
|
14310
14618
|
enabled: false,
|
|
14311
14619
|
languages: ["Javascript"],
|
|
14312
14620
|
parameters: [],
|
|
14313
|
-
tags: ["
|
|
14621
|
+
tags: ["ejs", "security", "fwk:express"]
|
|
14314
14622
|
},
|
|
14315
14623
|
{
|
|
14316
14624
|
id: "Semgrep_javascript.express.security.audit.xss.ejs.var-in-script-src.var-in-script-src",
|
|
@@ -14320,7 +14628,7 @@ var patterns_default = [
|
|
|
14320
14628
|
enabled: false,
|
|
14321
14629
|
languages: ["Javascript"],
|
|
14322
14630
|
parameters: [],
|
|
14323
|
-
tags: ["
|
|
14631
|
+
tags: ["ejs", "security", "xss", "fwk:express"]
|
|
14324
14632
|
},
|
|
14325
14633
|
{
|
|
14326
14634
|
id: "Semgrep_javascript.express.security.audit.xss.ejs.var-in-script-tag.var-in-script-tag",
|
|
@@ -14330,7 +14638,7 @@ var patterns_default = [
|
|
|
14330
14638
|
enabled: false,
|
|
14331
14639
|
languages: ["Javascript"],
|
|
14332
14640
|
parameters: [],
|
|
14333
|
-
tags: ["ejs", "
|
|
14641
|
+
tags: ["ejs", "security", "xss", "fwk:express"]
|
|
14334
14642
|
},
|
|
14335
14643
|
{
|
|
14336
14644
|
id: "Semgrep_javascript.express.security.audit.xss.mustache.escape-function-overwrite.escape-function-overwrite",
|
|
@@ -14340,7 +14648,7 @@ var patterns_default = [
|
|
|
14340
14648
|
enabled: false,
|
|
14341
14649
|
languages: ["Javascript", "TypeScript"],
|
|
14342
14650
|
parameters: [],
|
|
14343
|
-
tags: ["mustache", "
|
|
14651
|
+
tags: ["mustache", "security", "xss", "fwk:express"]
|
|
14344
14652
|
},
|
|
14345
14653
|
{
|
|
14346
14654
|
id: "Semgrep_javascript.express.security.audit.xss.mustache.explicit-unescape.template-explicit-unescape",
|
|
@@ -14350,7 +14658,7 @@ var patterns_default = [
|
|
|
14350
14658
|
enabled: false,
|
|
14351
14659
|
languages: ["Javascript"],
|
|
14352
14660
|
parameters: [],
|
|
14353
|
-
tags: ["mustache", "
|
|
14661
|
+
tags: ["mustache", "security", "fwk:express"]
|
|
14354
14662
|
},
|
|
14355
14663
|
{
|
|
14356
14664
|
id: "Semgrep_javascript.express.security.audit.xss.mustache.var-in-script-tag.var-in-script-tag",
|
|
@@ -14360,7 +14668,7 @@ var patterns_default = [
|
|
|
14360
14668
|
enabled: false,
|
|
14361
14669
|
languages: ["Javascript"],
|
|
14362
14670
|
parameters: [],
|
|
14363
|
-
tags: ["mustache", "
|
|
14671
|
+
tags: ["mustache", "security", "xss", "fwk:express"]
|
|
14364
14672
|
},
|
|
14365
14673
|
{
|
|
14366
14674
|
id: "Semgrep_javascript.express.security.audit.xss.pug.and-attributes.template-and-attributes",
|
|
@@ -14370,7 +14678,7 @@ var patterns_default = [
|
|
|
14370
14678
|
enabled: false,
|
|
14371
14679
|
languages: ["Javascript"],
|
|
14372
14680
|
parameters: [],
|
|
14373
|
-
tags: ["pug", "
|
|
14681
|
+
tags: ["pug", "security", "fwk:express"]
|
|
14374
14682
|
},
|
|
14375
14683
|
{
|
|
14376
14684
|
id: "Semgrep_javascript.express.security.audit.xss.pug.explicit-unescape.template-explicit-unescape",
|
|
@@ -14380,7 +14688,7 @@ var patterns_default = [
|
|
|
14380
14688
|
enabled: false,
|
|
14381
14689
|
languages: ["Javascript"],
|
|
14382
14690
|
parameters: [],
|
|
14383
|
-
tags: ["
|
|
14691
|
+
tags: ["pug", "security", "xss", "fwk:express"]
|
|
14384
14692
|
},
|
|
14385
14693
|
{
|
|
14386
14694
|
id: "Semgrep_javascript.express.security.audit.xss.pug.var-in-href.var-in-href",
|
|
@@ -14390,7 +14698,7 @@ var patterns_default = [
|
|
|
14390
14698
|
enabled: false,
|
|
14391
14699
|
languages: ["Javascript"],
|
|
14392
14700
|
parameters: [],
|
|
14393
|
-
tags: ["
|
|
14701
|
+
tags: ["pug", "security", "xss", "fwk:express"]
|
|
14394
14702
|
},
|
|
14395
14703
|
{
|
|
14396
14704
|
id: "Semgrep_javascript.express.security.audit.xss.pug.var-in-script-tag.var-in-script-tag",
|
|
@@ -14400,7 +14708,7 @@ var patterns_default = [
|
|
|
14400
14708
|
enabled: false,
|
|
14401
14709
|
languages: ["Javascript"],
|
|
14402
14710
|
parameters: [],
|
|
14403
|
-
tags: ["security", "pug", "
|
|
14711
|
+
tags: ["security", "pug", "xss", "fwk:express"]
|
|
14404
14712
|
},
|
|
14405
14713
|
{
|
|
14406
14714
|
id: "Semgrep_javascript.express.security.cors-misconfiguration.cors-misconfiguration",
|
|
@@ -14410,7 +14718,7 @@ var patterns_default = [
|
|
|
14410
14718
|
enabled: true,
|
|
14411
14719
|
languages: ["Javascript", "TypeScript"],
|
|
14412
14720
|
parameters: [],
|
|
14413
|
-
tags: ["express"]
|
|
14721
|
+
tags: ["fwk:express"]
|
|
14414
14722
|
},
|
|
14415
14723
|
{
|
|
14416
14724
|
id: "Semgrep_javascript.express.security.express-data-exfiltration.express-data-exfiltration",
|
|
@@ -14420,7 +14728,7 @@ var patterns_default = [
|
|
|
14420
14728
|
enabled: false,
|
|
14421
14729
|
languages: ["Javascript", "TypeScript"],
|
|
14422
14730
|
parameters: [],
|
|
14423
|
-
tags: ["
|
|
14731
|
+
tags: ["security", "fwk:express"]
|
|
14424
14732
|
},
|
|
14425
14733
|
{
|
|
14426
14734
|
id: "Semgrep_javascript.express.security.express-expat-xxe.express-expat-xxe",
|
|
@@ -14430,7 +14738,7 @@ var patterns_default = [
|
|
|
14430
14738
|
enabled: true,
|
|
14431
14739
|
languages: ["Javascript", "TypeScript"],
|
|
14432
14740
|
parameters: [],
|
|
14433
|
-
tags: ["
|
|
14741
|
+
tags: ["security", "fwk:express"]
|
|
14434
14742
|
},
|
|
14435
14743
|
{
|
|
14436
14744
|
id: "Semgrep_javascript.express.security.express-insecure-template-usage.express-insecure-template-usage",
|
|
@@ -14440,7 +14748,7 @@ var patterns_default = [
|
|
|
14440
14748
|
enabled: true,
|
|
14441
14749
|
languages: ["Javascript", "TypeScript"],
|
|
14442
14750
|
parameters: [],
|
|
14443
|
-
tags: ["express"]
|
|
14751
|
+
tags: ["fwk:express"]
|
|
14444
14752
|
},
|
|
14445
14753
|
{
|
|
14446
14754
|
id: "Semgrep_javascript.express.security.express-jwt-hardcoded-secret.express-jwt-hardcoded-secret",
|
|
@@ -14450,7 +14758,7 @@ var patterns_default = [
|
|
|
14450
14758
|
enabled: true,
|
|
14451
14759
|
languages: ["Javascript", "TypeScript"],
|
|
14452
14760
|
parameters: [],
|
|
14453
|
-
tags: ["
|
|
14761
|
+
tags: ["security", "fwk:express"]
|
|
14454
14762
|
},
|
|
14455
14763
|
{
|
|
14456
14764
|
id: "Semgrep_javascript.express.security.express-phantom-injection.express-phantom-injection",
|
|
@@ -14460,7 +14768,7 @@ var patterns_default = [
|
|
|
14460
14768
|
enabled: true,
|
|
14461
14769
|
languages: ["Javascript", "TypeScript"],
|
|
14462
14770
|
parameters: [],
|
|
14463
|
-
tags: ["
|
|
14771
|
+
tags: ["security", "fwk:express"]
|
|
14464
14772
|
},
|
|
14465
14773
|
{
|
|
14466
14774
|
id: "Semgrep_javascript.express.security.express-puppeteer-injection.express-puppeteer-injection",
|
|
@@ -14470,7 +14778,7 @@ var patterns_default = [
|
|
|
14470
14778
|
enabled: true,
|
|
14471
14779
|
languages: ["Javascript", "TypeScript"],
|
|
14472
14780
|
parameters: [],
|
|
14473
|
-
tags: ["
|
|
14781
|
+
tags: ["security", "fwk:express"]
|
|
14474
14782
|
},
|
|
14475
14783
|
{
|
|
14476
14784
|
id: "Semgrep_javascript.express.security.express-sandbox-injection.express-sandbox-code-injection",
|
|
@@ -14480,7 +14788,7 @@ var patterns_default = [
|
|
|
14480
14788
|
enabled: true,
|
|
14481
14789
|
languages: ["Javascript", "TypeScript"],
|
|
14482
14790
|
parameters: [],
|
|
14483
|
-
tags: ["express"]
|
|
14791
|
+
tags: ["fwk:express"]
|
|
14484
14792
|
},
|
|
14485
14793
|
{
|
|
14486
14794
|
id: "Semgrep_javascript.express.security.express-vm2-injection.express-vm2-injection",
|
|
@@ -14490,7 +14798,7 @@ var patterns_default = [
|
|
|
14490
14798
|
enabled: true,
|
|
14491
14799
|
languages: ["Javascript", "TypeScript"],
|
|
14492
14800
|
parameters: [],
|
|
14493
|
-
tags: ["express"]
|
|
14801
|
+
tags: ["fwk:express"]
|
|
14494
14802
|
},
|
|
14495
14803
|
{
|
|
14496
14804
|
id: "Semgrep_javascript.express.security.express-vm-injection.express-vm-injection",
|
|
@@ -14500,7 +14808,7 @@ var patterns_default = [
|
|
|
14500
14808
|
enabled: true,
|
|
14501
14809
|
languages: ["Javascript", "TypeScript"],
|
|
14502
14810
|
parameters: [],
|
|
14503
|
-
tags: ["express"]
|
|
14811
|
+
tags: ["fwk:express"]
|
|
14504
14812
|
},
|
|
14505
14813
|
{
|
|
14506
14814
|
id: "Semgrep_javascript.express.security.express-wkhtml-injection.express-wkhtmltoimage-injection",
|
|
@@ -14510,7 +14818,7 @@ var patterns_default = [
|
|
|
14510
14818
|
enabled: false,
|
|
14511
14819
|
languages: ["Javascript", "TypeScript"],
|
|
14512
14820
|
parameters: [],
|
|
14513
|
-
tags: ["express"]
|
|
14821
|
+
tags: ["fwk:express"]
|
|
14514
14822
|
},
|
|
14515
14823
|
{
|
|
14516
14824
|
id: "Semgrep_javascript.express.security.express-wkhtml-injection.express-wkhtmltopdf-injection",
|
|
@@ -14520,7 +14828,7 @@ var patterns_default = [
|
|
|
14520
14828
|
enabled: false,
|
|
14521
14829
|
languages: ["Javascript", "TypeScript"],
|
|
14522
14830
|
parameters: [],
|
|
14523
|
-
tags: ["
|
|
14831
|
+
tags: ["security", "fwk:express"]
|
|
14524
14832
|
},
|
|
14525
14833
|
{
|
|
14526
14834
|
id: "Semgrep_javascript.express.security.express-xml2json-xxe.express-xml2json-xxe",
|
|
@@ -14530,7 +14838,7 @@ var patterns_default = [
|
|
|
14530
14838
|
enabled: true,
|
|
14531
14839
|
languages: ["Javascript", "TypeScript"],
|
|
14532
14840
|
parameters: [],
|
|
14533
|
-
tags: ["express"]
|
|
14841
|
+
tags: ["fwk:express"]
|
|
14534
14842
|
},
|
|
14535
14843
|
{
|
|
14536
14844
|
id: "Semgrep_javascript.express.security.injection.raw-html-format.raw-html-format",
|
|
@@ -14540,7 +14848,7 @@ var patterns_default = [
|
|
|
14540
14848
|
enabled: true,
|
|
14541
14849
|
languages: ["Javascript", "TypeScript"],
|
|
14542
14850
|
parameters: [],
|
|
14543
|
-
tags: ["express"]
|
|
14851
|
+
tags: ["fwk:express"]
|
|
14544
14852
|
},
|
|
14545
14853
|
{
|
|
14546
14854
|
id: "Semgrep_javascript.express.security.injection.tainted-sql-string.tainted-sql-string",
|
|
@@ -14550,7 +14858,7 @@ var patterns_default = [
|
|
|
14550
14858
|
enabled: true,
|
|
14551
14859
|
languages: ["Javascript", "TypeScript"],
|
|
14552
14860
|
parameters: [],
|
|
14553
|
-
tags: ["express"]
|
|
14861
|
+
tags: ["fwk:express"]
|
|
14554
14862
|
},
|
|
14555
14863
|
{
|
|
14556
14864
|
id: "Semgrep_javascript.express.security.require-request.require-request",
|
|
@@ -14560,7 +14868,7 @@ var patterns_default = [
|
|
|
14560
14868
|
enabled: true,
|
|
14561
14869
|
languages: ["Javascript", "TypeScript"],
|
|
14562
14870
|
parameters: [],
|
|
14563
|
-
tags: ["express"]
|
|
14871
|
+
tags: ["fwk:express"]
|
|
14564
14872
|
},
|
|
14565
14873
|
{
|
|
14566
14874
|
id: "Semgrep_javascript.express.security.x-frame-options-misconfiguration.x-frame-options-misconfiguration",
|
|
@@ -14570,7 +14878,7 @@ var patterns_default = [
|
|
|
14570
14878
|
enabled: true,
|
|
14571
14879
|
languages: ["Javascript", "TypeScript"],
|
|
14572
14880
|
parameters: [],
|
|
14573
|
-
tags: ["
|
|
14881
|
+
tags: ["security", "fwk:express"]
|
|
14574
14882
|
},
|
|
14575
14883
|
{
|
|
14576
14884
|
id: "Semgrep_javascript.fbjs.security.audit.insecure-createnodesfrommarkup.insecure-createnodesfrommarkup",
|
|
@@ -14590,7 +14898,7 @@ var patterns_default = [
|
|
|
14590
14898
|
enabled: false,
|
|
14591
14899
|
languages: ["Javascript", "TypeScript"],
|
|
14592
14900
|
parameters: [],
|
|
14593
|
-
tags: ["grpc"]
|
|
14901
|
+
tags: ["lib:grpc"]
|
|
14594
14902
|
},
|
|
14595
14903
|
{
|
|
14596
14904
|
id: "Semgrep_javascript.intercom.security.audit.intercom-settings-user-identifier-without-user-hash.intercom-settings-user-identifier-without-user-hash",
|
|
@@ -14640,7 +14948,7 @@ var patterns_default = [
|
|
|
14640
14948
|
enabled: false,
|
|
14641
14949
|
languages: ["Javascript", "TypeScript"],
|
|
14642
14950
|
parameters: [],
|
|
14643
|
-
tags: ["
|
|
14951
|
+
tags: ["security", "lib:jquery"]
|
|
14644
14952
|
},
|
|
14645
14953
|
{
|
|
14646
14954
|
id: "Semgrep_javascript.jquery.security.audit.jquery-insecure-selector.jquery-insecure-selector",
|
|
@@ -14650,7 +14958,7 @@ var patterns_default = [
|
|
|
14650
14958
|
enabled: false,
|
|
14651
14959
|
languages: ["Javascript", "TypeScript"],
|
|
14652
14960
|
parameters: [],
|
|
14653
|
-
tags: ["
|
|
14961
|
+
tags: ["security", "lib:jquery"]
|
|
14654
14962
|
},
|
|
14655
14963
|
{
|
|
14656
14964
|
id: "Semgrep_javascript.jquery.security.audit.prohibit-jquery-html.prohibit-jquery-html",
|
|
@@ -14660,7 +14968,7 @@ var patterns_default = [
|
|
|
14660
14968
|
enabled: false,
|
|
14661
14969
|
languages: ["Javascript", "TypeScript"],
|
|
14662
14970
|
parameters: [],
|
|
14663
|
-
tags: ["
|
|
14971
|
+
tags: ["security", "audit", "lib:jquery"]
|
|
14664
14972
|
},
|
|
14665
14973
|
{
|
|
14666
14974
|
id: "Semgrep_javascript.jsonwebtoken.security.audit.jwt-decode-without-verify.jwt-decode-without-verify",
|
|
@@ -15194,7 +15502,7 @@ var patterns_default = [
|
|
|
15194
15502
|
enabled: false,
|
|
15195
15503
|
languages: ["Javascript", "TypeScript"],
|
|
15196
15504
|
parameters: [],
|
|
15197
|
-
tags: ["
|
|
15505
|
+
tags: ["security", "audit", "lib:playwright"]
|
|
15198
15506
|
},
|
|
15199
15507
|
{
|
|
15200
15508
|
id: "Semgrep_javascript.playwright.security.audit.playwright-evaluate-arg-injection.playwright-evaluate-arg-injection",
|
|
@@ -15204,7 +15512,7 @@ var patterns_default = [
|
|
|
15204
15512
|
enabled: false,
|
|
15205
15513
|
languages: ["Javascript", "TypeScript"],
|
|
15206
15514
|
parameters: [],
|
|
15207
|
-
tags: ["
|
|
15515
|
+
tags: ["security", "audit", "lib:playwright"]
|
|
15208
15516
|
},
|
|
15209
15517
|
{
|
|
15210
15518
|
id: "Semgrep_javascript.playwright.security.audit.playwright-evaluate-code-injection.playwright-evaluate-code-injection",
|
|
@@ -15214,7 +15522,7 @@ var patterns_default = [
|
|
|
15214
15522
|
enabled: false,
|
|
15215
15523
|
languages: ["Javascript", "TypeScript"],
|
|
15216
15524
|
parameters: [],
|
|
15217
|
-
tags: ["
|
|
15525
|
+
tags: ["security", "audit", "lib:playwright"]
|
|
15218
15526
|
},
|
|
15219
15527
|
{
|
|
15220
15528
|
id: "Semgrep_javascript.playwright.security.audit.playwright-exposed-chrome-devtools.playwright-exposed-chrome-devtools",
|
|
@@ -15224,7 +15532,7 @@ var patterns_default = [
|
|
|
15224
15532
|
enabled: false,
|
|
15225
15533
|
languages: ["Javascript", "TypeScript"],
|
|
15226
15534
|
parameters: [],
|
|
15227
|
-
tags: ["
|
|
15535
|
+
tags: ["security", "lib:playwright"]
|
|
15228
15536
|
},
|
|
15229
15537
|
{
|
|
15230
15538
|
id: "Semgrep_javascript.playwright.security.audit.playwright-goto-injection.playwright-goto-injection",
|
|
@@ -15234,7 +15542,7 @@ var patterns_default = [
|
|
|
15234
15542
|
enabled: false,
|
|
15235
15543
|
languages: ["Javascript", "TypeScript"],
|
|
15236
15544
|
parameters: [],
|
|
15237
|
-
tags: ["
|
|
15545
|
+
tags: ["security", "lib:playwright"]
|
|
15238
15546
|
},
|
|
15239
15547
|
{
|
|
15240
15548
|
id: "Semgrep_javascript.playwright.security.audit.playwright-setcontent-injection.playwright-setcontent-injection",
|
|
@@ -15244,7 +15552,7 @@ var patterns_default = [
|
|
|
15244
15552
|
enabled: false,
|
|
15245
15553
|
languages: ["Javascript", "TypeScript"],
|
|
15246
15554
|
parameters: [],
|
|
15247
|
-
tags: ["
|
|
15555
|
+
tags: ["audit", "security", "lib:playwright"]
|
|
15248
15556
|
},
|
|
15249
15557
|
{
|
|
15250
15558
|
id: "Semgrep_javascript.puppeteer.security.audit.puppeteer-evaluate-arg-injection.puppeteer-evaluate-arg-injection",
|
|
@@ -15254,7 +15562,7 @@ var patterns_default = [
|
|
|
15254
15562
|
enabled: false,
|
|
15255
15563
|
languages: ["Javascript", "TypeScript"],
|
|
15256
15564
|
parameters: [],
|
|
15257
|
-
tags: ["
|
|
15565
|
+
tags: ["security", "lib:puppeteer"]
|
|
15258
15566
|
},
|
|
15259
15567
|
{
|
|
15260
15568
|
id: "Semgrep_javascript.puppeteer.security.audit.puppeteer-evaluate-code-injection.puppeteer-evaluate-code-injection",
|
|
@@ -15264,7 +15572,7 @@ var patterns_default = [
|
|
|
15264
15572
|
enabled: false,
|
|
15265
15573
|
languages: ["Javascript", "TypeScript"],
|
|
15266
15574
|
parameters: [],
|
|
15267
|
-
tags: ["
|
|
15575
|
+
tags: ["security", "lib:puppeteer"]
|
|
15268
15576
|
},
|
|
15269
15577
|
{
|
|
15270
15578
|
id: "Semgrep_javascript.puppeteer.security.audit.puppeteer-exposed-chrome-devtools.puppeteer-exposed-chrome-devtools",
|
|
@@ -15274,7 +15582,7 @@ var patterns_default = [
|
|
|
15274
15582
|
enabled: false,
|
|
15275
15583
|
languages: ["Javascript", "TypeScript"],
|
|
15276
15584
|
parameters: [],
|
|
15277
|
-
tags: ["
|
|
15585
|
+
tags: ["security", "audit", "lib:puppeteer"]
|
|
15278
15586
|
},
|
|
15279
15587
|
{
|
|
15280
15588
|
id: "Semgrep_javascript.puppeteer.security.audit.puppeteer-goto-injection.puppeteer-goto-injection",
|
|
@@ -15284,7 +15592,7 @@ var patterns_default = [
|
|
|
15284
15592
|
enabled: false,
|
|
15285
15593
|
languages: ["Javascript", "TypeScript"],
|
|
15286
15594
|
parameters: [],
|
|
15287
|
-
tags: ["
|
|
15595
|
+
tags: ["security", "audit", "lib:puppeteer"]
|
|
15288
15596
|
},
|
|
15289
15597
|
{
|
|
15290
15598
|
id: "Semgrep_javascript.puppeteer.security.audit.puppeteer-setcontent-injection.puppeteer-setcontent-injection",
|
|
@@ -15294,7 +15602,7 @@ var patterns_default = [
|
|
|
15294
15602
|
enabled: false,
|
|
15295
15603
|
languages: ["Javascript", "TypeScript"],
|
|
15296
15604
|
parameters: [],
|
|
15297
|
-
tags: ["
|
|
15605
|
+
tags: ["security", "audit", "lib:puppeteer"]
|
|
15298
15606
|
},
|
|
15299
15607
|
{
|
|
15300
15608
|
id: "Semgrep_javascript_random_rule-pseudo-random-bytes",
|
|
@@ -15313,7 +15621,7 @@ var patterns_default = [
|
|
|
15313
15621
|
enabled: false,
|
|
15314
15622
|
languages: ["Javascript", "TypeScript"],
|
|
15315
15623
|
parameters: [],
|
|
15316
|
-
tags: ["
|
|
15624
|
+
tags: ["fwk:react"]
|
|
15317
15625
|
},
|
|
15318
15626
|
{
|
|
15319
15627
|
id: "Semgrep_javascript_react_rule-dangerouslysetinnerhtml",
|
|
@@ -15379,7 +15687,7 @@ var patterns_default = [
|
|
|
15379
15687
|
enabled: false,
|
|
15380
15688
|
languages: ["Javascript", "TypeScript"],
|
|
15381
15689
|
parameters: [],
|
|
15382
|
-
tags: ["
|
|
15690
|
+
tags: ["security", "lib:sequelize"]
|
|
15383
15691
|
},
|
|
15384
15692
|
{
|
|
15385
15693
|
id: "Semgrep_javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection",
|
|
@@ -15389,7 +15697,7 @@ var patterns_default = [
|
|
|
15389
15697
|
enabled: true,
|
|
15390
15698
|
languages: ["Javascript", "TypeScript"],
|
|
15391
15699
|
parameters: [],
|
|
15392
|
-
tags: ["
|
|
15700
|
+
tags: ["security", "fwk:express", "lib:sequelize"]
|
|
15393
15701
|
},
|
|
15394
15702
|
{
|
|
15395
15703
|
id: "Semgrep_javascript.sequelize.security.audit.sequelize-raw-query.sequelize-raw-query",
|
|
@@ -15399,7 +15707,7 @@ var patterns_default = [
|
|
|
15399
15707
|
enabled: false,
|
|
15400
15708
|
languages: ["Javascript", "TypeScript"],
|
|
15401
15709
|
parameters: [],
|
|
15402
|
-
tags: ["
|
|
15710
|
+
tags: ["security", "audit", "lib:sequelize"]
|
|
15403
15711
|
},
|
|
15404
15712
|
{
|
|
15405
15713
|
id: "Semgrep_javascript.sequelize.security.audit.sequelize-tls-disabled-cert-validation.sequelize-tls-disabled-cert-validation",
|
|
@@ -15409,7 +15717,7 @@ var patterns_default = [
|
|
|
15409
15717
|
enabled: false,
|
|
15410
15718
|
languages: ["Javascript", "TypeScript"],
|
|
15411
15719
|
parameters: [],
|
|
15412
|
-
tags: ["
|
|
15720
|
+
tags: ["security", "lib:sequelize"]
|
|
15413
15721
|
},
|
|
15414
15722
|
{
|
|
15415
15723
|
id: "Semgrep_javascript.sequelize.security.audit.sequelize-weak-tls-version.sequelize-weak-tls-version",
|
|
@@ -15419,7 +15727,7 @@ var patterns_default = [
|
|
|
15419
15727
|
enabled: false,
|
|
15420
15728
|
languages: ["Javascript", "TypeScript"],
|
|
15421
15729
|
parameters: [],
|
|
15422
|
-
tags: ["
|
|
15730
|
+
tags: ["security", "lib:sequelize"]
|
|
15423
15731
|
},
|
|
15424
15732
|
{
|
|
15425
15733
|
id: "Semgrep_javascript.serialize-javascript.security.audit.unsafe-serialize-javascript.unsafe-serialize-javascript",
|
|
@@ -15488,7 +15796,7 @@ var patterns_default = [
|
|
|
15488
15796
|
enabled: false,
|
|
15489
15797
|
languages: ["Javascript"],
|
|
15490
15798
|
parameters: [],
|
|
15491
|
-
tags: ["
|
|
15799
|
+
tags: ["security", "xss", "fwk:vue"]
|
|
15492
15800
|
},
|
|
15493
15801
|
{
|
|
15494
15802
|
id: "Semgrep_javascript.wkhtmltoimage.security.audit.wkhtmltoimage-injection.wkhtmltoimage-injection",
|
|
@@ -15575,7 +15883,7 @@ var patterns_default = [
|
|
|
15575
15883
|
enabled: false,
|
|
15576
15884
|
languages: ["Java"],
|
|
15577
15885
|
parameters: [],
|
|
15578
|
-
tags: ["spring", "
|
|
15886
|
+
tags: ["fwk:spring-boot", "fwk:spring-framework", "audit", "spelinjection", "security"]
|
|
15579
15887
|
},
|
|
15580
15888
|
{
|
|
15581
15889
|
id: "Semgrep_java.spring.security.audit.spring-actuator-fully-enabled.spring-actuator-fully-enabled",
|
|
@@ -15585,7 +15893,7 @@ var patterns_default = [
|
|
|
15585
15893
|
enabled: true,
|
|
15586
15894
|
languages: ["Java"],
|
|
15587
15895
|
parameters: [],
|
|
15588
|
-
tags: ["
|
|
15896
|
+
tags: ["security", "audit", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15589
15897
|
},
|
|
15590
15898
|
{
|
|
15591
15899
|
id: "Semgrep_java.spring.security.audit.spring-actuator-fully-enabled-yaml.spring-actuator-fully-enabled-yaml",
|
|
@@ -15595,7 +15903,7 @@ var patterns_default = [
|
|
|
15595
15903
|
enabled: true,
|
|
15596
15904
|
languages: ["YAML"],
|
|
15597
15905
|
parameters: [],
|
|
15598
|
-
tags: ["spring", "
|
|
15906
|
+
tags: ["security", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15599
15907
|
},
|
|
15600
15908
|
{
|
|
15601
15909
|
id: "Semgrep_java.spring.security.audit.spring-actuator-non-health-enabled.spring-actuator-dangerous-endpoints-enabled",
|
|
@@ -15605,7 +15913,7 @@ var patterns_default = [
|
|
|
15605
15913
|
enabled: true,
|
|
15606
15914
|
languages: ["Java"],
|
|
15607
15915
|
parameters: [],
|
|
15608
|
-
tags: ["spring", "
|
|
15916
|
+
tags: ["security", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15609
15917
|
},
|
|
15610
15918
|
{
|
|
15611
15919
|
id: "Semgrep_java.spring.security.audit.spring-actuator-non-health-enabled-yaml.spring-actuator-dangerous-endpoints-enabled-yaml",
|
|
@@ -15615,7 +15923,7 @@ var patterns_default = [
|
|
|
15615
15923
|
enabled: true,
|
|
15616
15924
|
languages: ["YAML"],
|
|
15617
15925
|
parameters: [],
|
|
15618
|
-
tags: ["
|
|
15926
|
+
tags: ["security", "audit", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15619
15927
|
},
|
|
15620
15928
|
{
|
|
15621
15929
|
id: "Semgrep_java.spring.security.audit.spring-csrf-disabled.spring-csrf-disabled",
|
|
@@ -15625,7 +15933,7 @@ var patterns_default = [
|
|
|
15625
15933
|
enabled: false,
|
|
15626
15934
|
languages: ["Java"],
|
|
15627
15935
|
parameters: [],
|
|
15628
|
-
tags: ["spring", "
|
|
15936
|
+
tags: ["security", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15629
15937
|
},
|
|
15630
15938
|
{
|
|
15631
15939
|
id: "Semgrep_java.spring.security.audit.spring-jsp-eval.spring-jsp-eval",
|
|
@@ -15635,7 +15943,7 @@ var patterns_default = [
|
|
|
15635
15943
|
enabled: false,
|
|
15636
15944
|
languages: ["Java"],
|
|
15637
15945
|
parameters: [],
|
|
15638
|
-
tags: ["
|
|
15946
|
+
tags: ["security", "audit", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15639
15947
|
},
|
|
15640
15948
|
{
|
|
15641
15949
|
id: "Semgrep_java.spring.security.audit.spring-sqli.spring-sqli",
|
|
@@ -15645,7 +15953,7 @@ var patterns_default = [
|
|
|
15645
15953
|
enabled: true,
|
|
15646
15954
|
languages: ["Java"],
|
|
15647
15955
|
parameters: [],
|
|
15648
|
-
tags: ["
|
|
15956
|
+
tags: ["security", "audit", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15649
15957
|
},
|
|
15650
15958
|
{
|
|
15651
15959
|
id: "Semgrep_java.spring.security.audit.spring-unvalidated-redirect.spring-unvalidated-redirect",
|
|
@@ -15655,7 +15963,7 @@ var patterns_default = [
|
|
|
15655
15963
|
enabled: true,
|
|
15656
15964
|
languages: ["Java"],
|
|
15657
15965
|
parameters: [],
|
|
15658
|
-
tags: ["
|
|
15966
|
+
tags: ["security", "audit", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15659
15967
|
},
|
|
15660
15968
|
{
|
|
15661
15969
|
id: "Semgrep_java.spring.security.injection.tainted-file-path.tainted-file-path",
|
|
@@ -15665,7 +15973,7 @@ var patterns_default = [
|
|
|
15665
15973
|
enabled: true,
|
|
15666
15974
|
languages: ["Java"],
|
|
15667
15975
|
parameters: [],
|
|
15668
|
-
tags: ["
|
|
15976
|
+
tags: ["security", "injection", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15669
15977
|
},
|
|
15670
15978
|
{
|
|
15671
15979
|
id: "Semgrep_java.spring.security.injection.tainted-html-string.tainted-html-string",
|
|
@@ -15675,7 +15983,7 @@ var patterns_default = [
|
|
|
15675
15983
|
enabled: true,
|
|
15676
15984
|
languages: ["Java"],
|
|
15677
15985
|
parameters: [],
|
|
15678
|
-
tags: ["
|
|
15986
|
+
tags: ["security", "injection", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15679
15987
|
},
|
|
15680
15988
|
{
|
|
15681
15989
|
id: "Semgrep_java.spring.security.injection.tainted-sql-string.tainted-sql-string",
|
|
@@ -15685,7 +15993,7 @@ var patterns_default = [
|
|
|
15685
15993
|
enabled: true,
|
|
15686
15994
|
languages: ["Java"],
|
|
15687
15995
|
parameters: [],
|
|
15688
|
-
tags: ["spring"]
|
|
15996
|
+
tags: ["fwk:spring-boot", "fwk:spring-framework"]
|
|
15689
15997
|
},
|
|
15690
15998
|
{
|
|
15691
15999
|
id: "Semgrep_java.spring.security.injection.tainted-system-command.tainted-system-command",
|
|
@@ -15695,7 +16003,7 @@ var patterns_default = [
|
|
|
15695
16003
|
enabled: true,
|
|
15696
16004
|
languages: ["Java"],
|
|
15697
16005
|
parameters: [],
|
|
15698
|
-
tags: ["spring", "
|
|
16006
|
+
tags: ["injection", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15699
16007
|
},
|
|
15700
16008
|
{
|
|
15701
16009
|
id: "Semgrep_java.spring.security.injection.tainted-url-host.tainted-url-host",
|
|
@@ -15705,7 +16013,7 @@ var patterns_default = [
|
|
|
15705
16013
|
enabled: true,
|
|
15706
16014
|
languages: ["Java"],
|
|
15707
16015
|
parameters: [],
|
|
15708
|
-
tags: ["spring"]
|
|
16016
|
+
tags: ["fwk:spring-boot", "fwk:spring-framework"]
|
|
15709
16017
|
},
|
|
15710
16018
|
{
|
|
15711
16019
|
id: "Semgrep_java.spring.security.unrestricted-request-mapping.unrestricted-request-mapping",
|
|
@@ -15715,7 +16023,7 @@ var patterns_default = [
|
|
|
15715
16023
|
enabled: false,
|
|
15716
16024
|
languages: ["Java"],
|
|
15717
16025
|
parameters: [],
|
|
15718
|
-
tags: ["spring", "
|
|
16026
|
+
tags: ["security", "fwk:spring-boot", "fwk:spring-framework"]
|
|
15719
16027
|
},
|
|
15720
16028
|
{
|
|
15721
16029
|
id: "Semgrep_java_ssrf_rule-SSRF",
|
|
@@ -16641,7 +16949,7 @@ var patterns_default = [
|
|
|
16641
16949
|
enabled: false,
|
|
16642
16950
|
languages: ["PHP"],
|
|
16643
16951
|
parameters: [],
|
|
16644
|
-
tags: ["
|
|
16952
|
+
tags: ["security", "audit", "lib:doctrine-dbal", "lib:doctrine-orm"]
|
|
16645
16953
|
},
|
|
16646
16954
|
{
|
|
16647
16955
|
id: "Semgrep_php.doctrine.security.audit.doctrine-orm-dangerous-query.doctrine-orm-dangerous-query",
|
|
@@ -16651,7 +16959,7 @@ var patterns_default = [
|
|
|
16651
16959
|
enabled: true,
|
|
16652
16960
|
languages: ["PHP"],
|
|
16653
16961
|
parameters: [],
|
|
16654
|
-
tags: ["
|
|
16962
|
+
tags: ["security", "audit", "lib:doctrine-dbal", "lib:doctrine-orm"]
|
|
16655
16963
|
},
|
|
16656
16964
|
{
|
|
16657
16965
|
id: "Semgrep_php_eval_rule-eval-use",
|
|
@@ -17014,7 +17322,7 @@ var patterns_default = [
|
|
|
17014
17322
|
enabled: false,
|
|
17015
17323
|
languages: ["PHP"],
|
|
17016
17324
|
parameters: [],
|
|
17017
|
-
tags: ["
|
|
17325
|
+
tags: ["security", "fwk:laravel"]
|
|
17018
17326
|
},
|
|
17019
17327
|
{
|
|
17020
17328
|
id: "Semgrep_php.laravel.security.laravel-api-route-sql-injection.laravel-api-route-sql-injection",
|
|
@@ -17024,7 +17332,7 @@ var patterns_default = [
|
|
|
17024
17332
|
enabled: true,
|
|
17025
17333
|
languages: ["PHP"],
|
|
17026
17334
|
parameters: [],
|
|
17027
|
-
tags: ["
|
|
17335
|
+
tags: ["security", "fwk:laravel"]
|
|
17028
17336
|
},
|
|
17029
17337
|
{
|
|
17030
17338
|
id: "Semgrep_php.laravel.security.laravel-blade-form-missing-csrf.laravel-blade-form-missing-csrf",
|
|
@@ -17034,7 +17342,7 @@ var patterns_default = [
|
|
|
17034
17342
|
enabled: false,
|
|
17035
17343
|
languages: ["PHP"],
|
|
17036
17344
|
parameters: [],
|
|
17037
|
-
tags: ["
|
|
17345
|
+
tags: ["security", "fwk:laravel"]
|
|
17038
17346
|
},
|
|
17039
17347
|
{
|
|
17040
17348
|
id: "Semgrep_php.laravel.security.laravel-cookie-http-only.laravel-cookie-http-only",
|
|
@@ -17044,7 +17352,7 @@ var patterns_default = [
|
|
|
17044
17352
|
enabled: false,
|
|
17045
17353
|
languages: ["PHP"],
|
|
17046
17354
|
parameters: [],
|
|
17047
|
-
tags: ["
|
|
17355
|
+
tags: ["security", "fwk:laravel"]
|
|
17048
17356
|
},
|
|
17049
17357
|
{
|
|
17050
17358
|
id: "Semgrep_php.laravel.security.laravel-cookie-long-timeout.laravel-cookie-long-timeout",
|
|
@@ -17054,7 +17362,7 @@ var patterns_default = [
|
|
|
17054
17362
|
enabled: false,
|
|
17055
17363
|
languages: ["PHP"],
|
|
17056
17364
|
parameters: [],
|
|
17057
|
-
tags: ["
|
|
17365
|
+
tags: ["security", "fwk:laravel"]
|
|
17058
17366
|
},
|
|
17059
17367
|
{
|
|
17060
17368
|
id: "Semgrep_php.laravel.security.laravel-cookie-null-domain.laravel-cookie-null-domain",
|
|
@@ -17064,7 +17372,7 @@ var patterns_default = [
|
|
|
17064
17372
|
enabled: false,
|
|
17065
17373
|
languages: ["PHP"],
|
|
17066
17374
|
parameters: [],
|
|
17067
|
-
tags: ["
|
|
17375
|
+
tags: ["security", "fwk:laravel"]
|
|
17068
17376
|
},
|
|
17069
17377
|
{
|
|
17070
17378
|
id: "Semgrep_php.laravel.security.laravel-cookie-same-site.laravel-cookie-same-site",
|
|
@@ -17074,7 +17382,7 @@ var patterns_default = [
|
|
|
17074
17382
|
enabled: false,
|
|
17075
17383
|
languages: ["PHP"],
|
|
17076
17384
|
parameters: [],
|
|
17077
|
-
tags: ["
|
|
17385
|
+
tags: ["security", "fwk:laravel"]
|
|
17078
17386
|
},
|
|
17079
17387
|
{
|
|
17080
17388
|
id: "Semgrep_php.laravel.security.laravel-cookie-secure-set.laravel-cookie-secure-set",
|
|
@@ -17084,7 +17392,7 @@ var patterns_default = [
|
|
|
17084
17392
|
enabled: false,
|
|
17085
17393
|
languages: ["PHP"],
|
|
17086
17394
|
parameters: [],
|
|
17087
|
-
tags: ["
|
|
17395
|
+
tags: ["security", "fwk:laravel"]
|
|
17088
17396
|
},
|
|
17089
17397
|
{
|
|
17090
17398
|
id: "Semgrep_php.laravel.security.laravel-dangerous-model-construction.laravel-dangerous-model-construction",
|
|
@@ -17094,7 +17402,7 @@ var patterns_default = [
|
|
|
17094
17402
|
enabled: false,
|
|
17095
17403
|
languages: ["PHP"],
|
|
17096
17404
|
parameters: [],
|
|
17097
|
-
tags: ["
|
|
17405
|
+
tags: ["security", "fwk:laravel"]
|
|
17098
17406
|
},
|
|
17099
17407
|
{
|
|
17100
17408
|
id: "Semgrep_php.laravel.security.laravel-sql-injection.laravel-sql-injection",
|
|
@@ -17104,7 +17412,7 @@ var patterns_default = [
|
|
|
17104
17412
|
enabled: true,
|
|
17105
17413
|
languages: ["PHP"],
|
|
17106
17414
|
parameters: [],
|
|
17107
|
-
tags: ["
|
|
17415
|
+
tags: ["security", "fwk:laravel"]
|
|
17108
17416
|
},
|
|
17109
17417
|
{
|
|
17110
17418
|
id: "Semgrep_php.laravel.security.laravel-unsafe-validator.laravel-unsafe-validator",
|
|
@@ -17114,7 +17422,7 @@ var patterns_default = [
|
|
|
17114
17422
|
enabled: true,
|
|
17115
17423
|
languages: ["PHP"],
|
|
17116
17424
|
parameters: [],
|
|
17117
|
-
tags: ["
|
|
17425
|
+
tags: ["security", "fwk:laravel"]
|
|
17118
17426
|
},
|
|
17119
17427
|
{
|
|
17120
17428
|
id: "Semgrep_php_mcrypt_rule-mcrypt-use",
|
|
@@ -17142,7 +17450,7 @@ var patterns_default = [
|
|
|
17142
17450
|
enabled: false,
|
|
17143
17451
|
languages: ["PHP"],
|
|
17144
17452
|
parameters: [],
|
|
17145
|
-
tags: ["
|
|
17453
|
+
tags: ["security", "fwk:symfony"]
|
|
17146
17454
|
},
|
|
17147
17455
|
{
|
|
17148
17456
|
id: "Semgrep_php.symfony.security.audit.symfony-non-literal-redirect.symfony-non-literal-redirect",
|
|
@@ -17152,7 +17460,7 @@ var patterns_default = [
|
|
|
17152
17460
|
enabled: false,
|
|
17153
17461
|
languages: ["PHP"],
|
|
17154
17462
|
parameters: [],
|
|
17155
|
-
tags: ["
|
|
17463
|
+
tags: ["security", "fwk:symfony"]
|
|
17156
17464
|
},
|
|
17157
17465
|
{
|
|
17158
17466
|
id: "Semgrep_php.symfony.security.audit.symfony-permissive-cors.symfony-permissive-cors",
|
|
@@ -17162,7 +17470,7 @@ var patterns_default = [
|
|
|
17162
17470
|
enabled: false,
|
|
17163
17471
|
languages: ["PHP"],
|
|
17164
17472
|
parameters: [],
|
|
17165
|
-
tags: ["
|
|
17473
|
+
tags: ["security", "fwk:symfony"]
|
|
17166
17474
|
},
|
|
17167
17475
|
{
|
|
17168
17476
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-ajax-no-auth-and-auth-hooks-audit.wp-ajax-no-auth-and-auth-hooks-audit",
|
|
@@ -17172,7 +17480,7 @@ var patterns_default = [
|
|
|
17172
17480
|
enabled: false,
|
|
17173
17481
|
languages: ["PHP"],
|
|
17174
17482
|
parameters: [],
|
|
17175
|
-
tags: ["
|
|
17483
|
+
tags: ["security", "audit", "fwk:wordpress"]
|
|
17176
17484
|
},
|
|
17177
17485
|
{
|
|
17178
17486
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-authorisation-checks-audit.wp-authorisation-checks-audit",
|
|
@@ -17182,7 +17490,7 @@ var patterns_default = [
|
|
|
17182
17490
|
enabled: false,
|
|
17183
17491
|
languages: ["PHP"],
|
|
17184
17492
|
parameters: [],
|
|
17185
|
-
tags: ["
|
|
17493
|
+
tags: ["security", "fwk:wordpress"]
|
|
17186
17494
|
},
|
|
17187
17495
|
{
|
|
17188
17496
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-code-execution-audit.wp-code-execution-audit",
|
|
@@ -17192,7 +17500,7 @@ var patterns_default = [
|
|
|
17192
17500
|
enabled: false,
|
|
17193
17501
|
languages: ["PHP"],
|
|
17194
17502
|
parameters: [],
|
|
17195
|
-
tags: ["
|
|
17503
|
+
tags: ["security", "audit", "fwk:wordpress"]
|
|
17196
17504
|
},
|
|
17197
17505
|
{
|
|
17198
17506
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-command-execution-audit.wp-command-execution-audit",
|
|
@@ -17202,7 +17510,7 @@ var patterns_default = [
|
|
|
17202
17510
|
enabled: false,
|
|
17203
17511
|
languages: ["PHP"],
|
|
17204
17512
|
parameters: [],
|
|
17205
|
-
tags: ["
|
|
17513
|
+
tags: ["security", "fwk:wordpress"]
|
|
17206
17514
|
},
|
|
17207
17515
|
{
|
|
17208
17516
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-csrf-audit.wp-csrf-audit",
|
|
@@ -17212,7 +17520,7 @@ var patterns_default = [
|
|
|
17212
17520
|
enabled: false,
|
|
17213
17521
|
languages: ["PHP"],
|
|
17214
17522
|
parameters: [],
|
|
17215
|
-
tags: ["
|
|
17523
|
+
tags: ["wpcsrfaudit", "fwk:wordpress"]
|
|
17216
17524
|
},
|
|
17217
17525
|
{
|
|
17218
17526
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-file-download-audit.wp-file-download-audit",
|
|
@@ -17222,7 +17530,7 @@ var patterns_default = [
|
|
|
17222
17530
|
enabled: false,
|
|
17223
17531
|
languages: ["PHP"],
|
|
17224
17532
|
parameters: [],
|
|
17225
|
-
tags: ["
|
|
17533
|
+
tags: ["security", "wpfiledownloadaudit", "audit", "fwk:wordpress"]
|
|
17226
17534
|
},
|
|
17227
17535
|
{
|
|
17228
17536
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-file-inclusion-audit.wp-file-inclusion-audit",
|
|
@@ -17232,7 +17540,7 @@ var patterns_default = [
|
|
|
17232
17540
|
enabled: false,
|
|
17233
17541
|
languages: ["PHP"],
|
|
17234
17542
|
parameters: [],
|
|
17235
|
-
tags: ["
|
|
17543
|
+
tags: ["security", "fwk:wordpress"]
|
|
17236
17544
|
},
|
|
17237
17545
|
{
|
|
17238
17546
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-file-manipulation-audit.wp-file-manipulation-audit",
|
|
@@ -17242,7 +17550,7 @@ var patterns_default = [
|
|
|
17242
17550
|
enabled: false,
|
|
17243
17551
|
languages: ["PHP"],
|
|
17244
17552
|
parameters: [],
|
|
17245
|
-
tags: ["
|
|
17553
|
+
tags: ["security", "audit", "fwk:wordpress"]
|
|
17246
17554
|
},
|
|
17247
17555
|
{
|
|
17248
17556
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-open-redirect-audit.wp-open-redirect-audit",
|
|
@@ -17252,7 +17560,7 @@ var patterns_default = [
|
|
|
17252
17560
|
enabled: false,
|
|
17253
17561
|
languages: ["PHP"],
|
|
17254
17562
|
parameters: [],
|
|
17255
|
-
tags: ["
|
|
17563
|
+
tags: ["security", "fwk:wordpress"]
|
|
17256
17564
|
},
|
|
17257
17565
|
{
|
|
17258
17566
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-php-object-injection-audit.wp-php-object-injection-audit",
|
|
@@ -17262,7 +17570,7 @@ var patterns_default = [
|
|
|
17262
17570
|
enabled: false,
|
|
17263
17571
|
languages: ["PHP"],
|
|
17264
17572
|
parameters: [],
|
|
17265
|
-
tags: ["
|
|
17573
|
+
tags: ["security", "fwk:wordpress"]
|
|
17266
17574
|
},
|
|
17267
17575
|
{
|
|
17268
17576
|
id: "Semgrep_php.wordpress-plugins.security.audit.wp-sql-injection-audit.wp-sql-injection-audit",
|
|
@@ -17272,7 +17580,7 @@ var patterns_default = [
|
|
|
17272
17580
|
enabled: false,
|
|
17273
17581
|
languages: ["PHP"],
|
|
17274
17582
|
parameters: [],
|
|
17275
|
-
tags: ["
|
|
17583
|
+
tags: ["security", "fwk:wordpress"]
|
|
17276
17584
|
},
|
|
17277
17585
|
{
|
|
17278
17586
|
id: "Semgrep_problem-based-packs.insecure-transport.go-stdlib.bypass-tls-verification.bypass-tls-verification",
|
|
@@ -17626,7 +17934,7 @@ var patterns_default = [
|
|
|
17626
17934
|
enabled: false,
|
|
17627
17935
|
languages: ["Python"],
|
|
17628
17936
|
parameters: [],
|
|
17629
|
-
tags: ["
|
|
17937
|
+
tags: ["security", "fwk:airflow"]
|
|
17630
17938
|
},
|
|
17631
17939
|
{
|
|
17632
17940
|
id: "Semgrep_python_assert_rule-assert-used",
|
|
@@ -17655,7 +17963,15 @@ var patterns_default = [
|
|
|
17655
17963
|
enabled: true,
|
|
17656
17964
|
languages: ["Python"],
|
|
17657
17965
|
parameters: [],
|
|
17658
|
-
tags: [
|
|
17966
|
+
tags: [
|
|
17967
|
+
"lib:aws-sdk",
|
|
17968
|
+
"fwk:cloudformation",
|
|
17969
|
+
"lib:boto3",
|
|
17970
|
+
"fwk:serverless-framework",
|
|
17971
|
+
"fwk:aws-cdk",
|
|
17972
|
+
"lib:aws-sdk-go",
|
|
17973
|
+
"awslambda"
|
|
17974
|
+
]
|
|
17659
17975
|
},
|
|
17660
17976
|
{
|
|
17661
17977
|
id: "Semgrep_python.aws-lambda.security.dangerous-asyncio-exec.dangerous-asyncio-exec",
|
|
@@ -17665,7 +17981,15 @@ var patterns_default = [
|
|
|
17665
17981
|
enabled: true,
|
|
17666
17982
|
languages: ["Python"],
|
|
17667
17983
|
parameters: [],
|
|
17668
|
-
tags: [
|
|
17984
|
+
tags: [
|
|
17985
|
+
"lib:aws-sdk",
|
|
17986
|
+
"fwk:cloudformation",
|
|
17987
|
+
"lib:boto3",
|
|
17988
|
+
"fwk:serverless-framework",
|
|
17989
|
+
"fwk:aws-cdk",
|
|
17990
|
+
"lib:aws-sdk-go",
|
|
17991
|
+
"awslambda"
|
|
17992
|
+
]
|
|
17669
17993
|
},
|
|
17670
17994
|
{
|
|
17671
17995
|
id: "Semgrep_python.aws-lambda.security.dangerous-asyncio-shell.dangerous-asyncio-shell",
|
|
@@ -17675,7 +17999,16 @@ var patterns_default = [
|
|
|
17675
17999
|
enabled: true,
|
|
17676
18000
|
languages: ["Python"],
|
|
17677
18001
|
parameters: [],
|
|
17678
|
-
tags: [
|
|
18002
|
+
tags: [
|
|
18003
|
+
"lib:aws-sdk",
|
|
18004
|
+
"fwk:cloudformation",
|
|
18005
|
+
"security",
|
|
18006
|
+
"lib:boto3",
|
|
18007
|
+
"fwk:serverless-framework",
|
|
18008
|
+
"fwk:aws-cdk",
|
|
18009
|
+
"lib:aws-sdk-go",
|
|
18010
|
+
"awslambda"
|
|
18011
|
+
]
|
|
17679
18012
|
},
|
|
17680
18013
|
{
|
|
17681
18014
|
id: "Semgrep_python.aws-lambda.security.dangerous-spawn-process.dangerous-spawn-process",
|
|
@@ -17685,7 +18018,15 @@ var patterns_default = [
|
|
|
17685
18018
|
enabled: true,
|
|
17686
18019
|
languages: ["Python"],
|
|
17687
18020
|
parameters: [],
|
|
17688
|
-
tags: [
|
|
18021
|
+
tags: [
|
|
18022
|
+
"lib:aws-sdk",
|
|
18023
|
+
"fwk:cloudformation",
|
|
18024
|
+
"lib:boto3",
|
|
18025
|
+
"fwk:serverless-framework",
|
|
18026
|
+
"fwk:aws-cdk",
|
|
18027
|
+
"lib:aws-sdk-go",
|
|
18028
|
+
"awslambda"
|
|
18029
|
+
]
|
|
17689
18030
|
},
|
|
17690
18031
|
{
|
|
17691
18032
|
id: "Semgrep_python.aws-lambda.security.dangerous-subprocess-use.dangerous-subprocess-use",
|
|
@@ -17695,7 +18036,16 @@ var patterns_default = [
|
|
|
17695
18036
|
enabled: true,
|
|
17696
18037
|
languages: ["Python"],
|
|
17697
18038
|
parameters: [],
|
|
17698
|
-
tags: [
|
|
18039
|
+
tags: [
|
|
18040
|
+
"lib:aws-sdk",
|
|
18041
|
+
"fwk:cloudformation",
|
|
18042
|
+
"security",
|
|
18043
|
+
"lib:boto3",
|
|
18044
|
+
"fwk:serverless-framework",
|
|
18045
|
+
"fwk:aws-cdk",
|
|
18046
|
+
"lib:aws-sdk-go",
|
|
18047
|
+
"awslambda"
|
|
18048
|
+
]
|
|
17699
18049
|
},
|
|
17700
18050
|
{
|
|
17701
18051
|
id: "Semgrep_python.aws-lambda.security.dangerous-system-call.dangerous-system-call",
|
|
@@ -17705,7 +18055,16 @@ var patterns_default = [
|
|
|
17705
18055
|
enabled: true,
|
|
17706
18056
|
languages: ["Python"],
|
|
17707
18057
|
parameters: [],
|
|
17708
|
-
tags: [
|
|
18058
|
+
tags: [
|
|
18059
|
+
"lib:aws-sdk",
|
|
18060
|
+
"fwk:cloudformation",
|
|
18061
|
+
"security",
|
|
18062
|
+
"lib:boto3",
|
|
18063
|
+
"fwk:serverless-framework",
|
|
18064
|
+
"fwk:aws-cdk",
|
|
18065
|
+
"lib:aws-sdk-go",
|
|
18066
|
+
"awslambda"
|
|
18067
|
+
]
|
|
17709
18068
|
},
|
|
17710
18069
|
{
|
|
17711
18070
|
id: "Semgrep_python.aws-lambda.security.dynamodb-filter-injection.dynamodb-filter-injection",
|
|
@@ -17715,7 +18074,17 @@ var patterns_default = [
|
|
|
17715
18074
|
enabled: true,
|
|
17716
18075
|
languages: ["Python"],
|
|
17717
18076
|
parameters: [],
|
|
17718
|
-
tags: [
|
|
18077
|
+
tags: [
|
|
18078
|
+
"lib:aws-sdk",
|
|
18079
|
+
"fwk:cloudformation",
|
|
18080
|
+
"security",
|
|
18081
|
+
"lib:boto3",
|
|
18082
|
+
"fwk:serverless-framework",
|
|
18083
|
+
"fwk:aws-cdk",
|
|
18084
|
+
"lib:aws-sdk-go",
|
|
18085
|
+
"dynamodbfilterinjection",
|
|
18086
|
+
"awslambda"
|
|
18087
|
+
]
|
|
17719
18088
|
},
|
|
17720
18089
|
{
|
|
17721
18090
|
id: "Semgrep_python.aws-lambda.security.mysql-sqli.mysql-sqli",
|
|
@@ -17725,7 +18094,15 @@ var patterns_default = [
|
|
|
17725
18094
|
enabled: true,
|
|
17726
18095
|
languages: ["Python"],
|
|
17727
18096
|
parameters: [],
|
|
17728
|
-
tags: [
|
|
18097
|
+
tags: [
|
|
18098
|
+
"lib:aws-sdk",
|
|
18099
|
+
"fwk:cloudformation",
|
|
18100
|
+
"lib:boto3",
|
|
18101
|
+
"fwk:serverless-framework",
|
|
18102
|
+
"fwk:aws-cdk",
|
|
18103
|
+
"lib:aws-sdk-go",
|
|
18104
|
+
"awslambda"
|
|
18105
|
+
]
|
|
17729
18106
|
},
|
|
17730
18107
|
{
|
|
17731
18108
|
id: "Semgrep_python.aws-lambda.security.psycopg-sqli.psycopg-sqli",
|
|
@@ -17735,7 +18112,15 @@ var patterns_default = [
|
|
|
17735
18112
|
enabled: true,
|
|
17736
18113
|
languages: ["Python"],
|
|
17737
18114
|
parameters: [],
|
|
17738
|
-
tags: [
|
|
18115
|
+
tags: [
|
|
18116
|
+
"lib:aws-sdk",
|
|
18117
|
+
"fwk:cloudformation",
|
|
18118
|
+
"lib:boto3",
|
|
18119
|
+
"fwk:serverless-framework",
|
|
18120
|
+
"fwk:aws-cdk",
|
|
18121
|
+
"lib:aws-sdk-go",
|
|
18122
|
+
"awslambda"
|
|
18123
|
+
]
|
|
17739
18124
|
},
|
|
17740
18125
|
{
|
|
17741
18126
|
id: "Semgrep_python.aws-lambda.security.pymssql-sqli.pymssql-sqli",
|
|
@@ -17745,7 +18130,15 @@ var patterns_default = [
|
|
|
17745
18130
|
enabled: true,
|
|
17746
18131
|
languages: ["Python"],
|
|
17747
18132
|
parameters: [],
|
|
17748
|
-
tags: [
|
|
18133
|
+
tags: [
|
|
18134
|
+
"lib:aws-sdk",
|
|
18135
|
+
"fwk:cloudformation",
|
|
18136
|
+
"lib:boto3",
|
|
18137
|
+
"fwk:serverless-framework",
|
|
18138
|
+
"fwk:aws-cdk",
|
|
18139
|
+
"lib:aws-sdk-go",
|
|
18140
|
+
"awslambda"
|
|
18141
|
+
]
|
|
17749
18142
|
},
|
|
17750
18143
|
{
|
|
17751
18144
|
id: "Semgrep_python.aws-lambda.security.pymysql-sqli.pymysql-sqli",
|
|
@@ -17755,7 +18148,15 @@ var patterns_default = [
|
|
|
17755
18148
|
enabled: true,
|
|
17756
18149
|
languages: ["Python"],
|
|
17757
18150
|
parameters: [],
|
|
17758
|
-
tags: [
|
|
18151
|
+
tags: [
|
|
18152
|
+
"lib:aws-sdk",
|
|
18153
|
+
"fwk:cloudformation",
|
|
18154
|
+
"lib:boto3",
|
|
18155
|
+
"fwk:serverless-framework",
|
|
18156
|
+
"fwk:aws-cdk",
|
|
18157
|
+
"lib:aws-sdk-go",
|
|
18158
|
+
"awslambda"
|
|
18159
|
+
]
|
|
17759
18160
|
},
|
|
17760
18161
|
{
|
|
17761
18162
|
id: "Semgrep_python.aws-lambda.security.sqlalchemy-sqli.sqlalchemy-sqli",
|
|
@@ -17765,7 +18166,15 @@ var patterns_default = [
|
|
|
17765
18166
|
enabled: true,
|
|
17766
18167
|
languages: ["Python"],
|
|
17767
18168
|
parameters: [],
|
|
17768
|
-
tags: [
|
|
18169
|
+
tags: [
|
|
18170
|
+
"lib:aws-sdk",
|
|
18171
|
+
"fwk:cloudformation",
|
|
18172
|
+
"lib:boto3",
|
|
18173
|
+
"fwk:serverless-framework",
|
|
18174
|
+
"fwk:aws-cdk",
|
|
18175
|
+
"lib:aws-sdk-go",
|
|
18176
|
+
"awslambda"
|
|
18177
|
+
]
|
|
17769
18178
|
},
|
|
17770
18179
|
{
|
|
17771
18180
|
id: "Semgrep_python.aws-lambda.security.tainted-code-exec.tainted-code-exec",
|
|
@@ -17775,7 +18184,15 @@ var patterns_default = [
|
|
|
17775
18184
|
enabled: true,
|
|
17776
18185
|
languages: ["Python"],
|
|
17777
18186
|
parameters: [],
|
|
17778
|
-
tags: [
|
|
18187
|
+
tags: [
|
|
18188
|
+
"lib:aws-sdk",
|
|
18189
|
+
"fwk:cloudformation",
|
|
18190
|
+
"lib:boto3",
|
|
18191
|
+
"fwk:serverless-framework",
|
|
18192
|
+
"fwk:aws-cdk",
|
|
18193
|
+
"lib:aws-sdk-go",
|
|
18194
|
+
"awslambda"
|
|
18195
|
+
]
|
|
17779
18196
|
},
|
|
17780
18197
|
{
|
|
17781
18198
|
id: "Semgrep_python.aws-lambda.security.tainted-html-response.tainted-html-response",
|
|
@@ -17785,7 +18202,16 @@ var patterns_default = [
|
|
|
17785
18202
|
enabled: true,
|
|
17786
18203
|
languages: ["Python"],
|
|
17787
18204
|
parameters: [],
|
|
17788
|
-
tags: [
|
|
18205
|
+
tags: [
|
|
18206
|
+
"lib:aws-sdk",
|
|
18207
|
+
"fwk:cloudformation",
|
|
18208
|
+
"security",
|
|
18209
|
+
"lib:boto3",
|
|
18210
|
+
"fwk:serverless-framework",
|
|
18211
|
+
"fwk:aws-cdk",
|
|
18212
|
+
"lib:aws-sdk-go",
|
|
18213
|
+
"awslambda"
|
|
18214
|
+
]
|
|
17789
18215
|
},
|
|
17790
18216
|
{
|
|
17791
18217
|
id: "Semgrep_python.aws-lambda.security.tainted-html-string.tainted-html-string",
|
|
@@ -17795,7 +18221,16 @@ var patterns_default = [
|
|
|
17795
18221
|
enabled: true,
|
|
17796
18222
|
languages: ["Python"],
|
|
17797
18223
|
parameters: [],
|
|
17798
|
-
tags: [
|
|
18224
|
+
tags: [
|
|
18225
|
+
"lib:aws-sdk",
|
|
18226
|
+
"fwk:cloudformation",
|
|
18227
|
+
"security",
|
|
18228
|
+
"lib:boto3",
|
|
18229
|
+
"fwk:serverless-framework",
|
|
18230
|
+
"fwk:aws-cdk",
|
|
18231
|
+
"lib:aws-sdk-go",
|
|
18232
|
+
"awslambda"
|
|
18233
|
+
]
|
|
17799
18234
|
},
|
|
17800
18235
|
{
|
|
17801
18236
|
id: "Semgrep_python.aws-lambda.security.tainted-pickle-deserialization.tainted-pickle-deserialization",
|
|
@@ -17805,7 +18240,15 @@ var patterns_default = [
|
|
|
17805
18240
|
enabled: true,
|
|
17806
18241
|
languages: ["Python"],
|
|
17807
18242
|
parameters: [],
|
|
17808
|
-
tags: [
|
|
18243
|
+
tags: [
|
|
18244
|
+
"lib:aws-sdk",
|
|
18245
|
+
"fwk:cloudformation",
|
|
18246
|
+
"lib:boto3",
|
|
18247
|
+
"fwk:serverless-framework",
|
|
18248
|
+
"fwk:aws-cdk",
|
|
18249
|
+
"lib:aws-sdk-go",
|
|
18250
|
+
"awslambda"
|
|
18251
|
+
]
|
|
17809
18252
|
},
|
|
17810
18253
|
{
|
|
17811
18254
|
id: "Semgrep_python.aws-lambda.security.tainted-sql-string.tainted-sql-string",
|
|
@@ -17815,7 +18258,16 @@ var patterns_default = [
|
|
|
17815
18258
|
enabled: true,
|
|
17816
18259
|
languages: ["Python"],
|
|
17817
18260
|
parameters: [],
|
|
17818
|
-
tags: [
|
|
18261
|
+
tags: [
|
|
18262
|
+
"lib:aws-sdk",
|
|
18263
|
+
"fwk:cloudformation",
|
|
18264
|
+
"security",
|
|
18265
|
+
"lib:boto3",
|
|
18266
|
+
"fwk:serverless-framework",
|
|
18267
|
+
"fwk:aws-cdk",
|
|
18268
|
+
"lib:aws-sdk-go",
|
|
18269
|
+
"awslambda"
|
|
18270
|
+
]
|
|
17819
18271
|
},
|
|
17820
18272
|
{
|
|
17821
18273
|
id: "Semgrep_python_bind-all-interfaces_rule-general-bindall-interfaces",
|
|
@@ -17844,7 +18296,7 @@ var patterns_default = [
|
|
|
17844
18296
|
enabled: true,
|
|
17845
18297
|
languages: ["Python"],
|
|
17846
18298
|
parameters: [],
|
|
17847
|
-
tags: ["
|
|
18299
|
+
tags: ["security", "lib:boto3"]
|
|
17848
18300
|
},
|
|
17849
18301
|
{
|
|
17850
18302
|
id: "Semgrep_python.click.best-practice.echo-style.use-click-secho",
|
|
@@ -17854,7 +18306,7 @@ var patterns_default = [
|
|
|
17854
18306
|
enabled: false,
|
|
17855
18307
|
languages: ["Python"],
|
|
17856
18308
|
parameters: [],
|
|
17857
|
-
tags: ["click"]
|
|
18309
|
+
tags: ["lib:click"]
|
|
17858
18310
|
},
|
|
17859
18311
|
{
|
|
17860
18312
|
id: "Semgrep_python.correctness.check-is-none-explicitly.check-is-none-explicitly",
|
|
@@ -18263,7 +18715,7 @@ var patterns_default = [
|
|
|
18263
18715
|
enabled: false,
|
|
18264
18716
|
languages: ["Python"],
|
|
18265
18717
|
parameters: [],
|
|
18266
|
-
tags: ["django"]
|
|
18718
|
+
tags: ["fwk:django"]
|
|
18267
18719
|
},
|
|
18268
18720
|
{
|
|
18269
18721
|
id: "Semgrep_python.django.best-practice.upsell_django_environ.use-django-environ",
|
|
@@ -18273,7 +18725,7 @@ var patterns_default = [
|
|
|
18273
18725
|
enabled: false,
|
|
18274
18726
|
languages: ["Python"],
|
|
18275
18727
|
parameters: [],
|
|
18276
|
-
tags: ["django"]
|
|
18728
|
+
tags: ["fwk:django"]
|
|
18277
18729
|
},
|
|
18278
18730
|
{
|
|
18279
18731
|
id: "Semgrep_python.django.best-practice.use-onetoonefield.use-onetoonefield",
|
|
@@ -18283,7 +18735,7 @@ var patterns_default = [
|
|
|
18283
18735
|
enabled: false,
|
|
18284
18736
|
languages: ["Python"],
|
|
18285
18737
|
parameters: [],
|
|
18286
|
-
tags: ["django"]
|
|
18738
|
+
tags: ["fwk:django"]
|
|
18287
18739
|
},
|
|
18288
18740
|
{
|
|
18289
18741
|
id: "Semgrep_python.django.compatibility.django-2_0-compat.django-compat-2_0-assert-redirects-helper",
|
|
@@ -18293,7 +18745,7 @@ var patterns_default = [
|
|
|
18293
18745
|
enabled: false,
|
|
18294
18746
|
languages: ["Python"],
|
|
18295
18747
|
parameters: [],
|
|
18296
|
-
tags: ["django"]
|
|
18748
|
+
tags: ["fwk:django"]
|
|
18297
18749
|
},
|
|
18298
18750
|
{
|
|
18299
18751
|
id: "Semgrep_python.django.compatibility.django-2_0-compat.django-compat-2_0-assignment-tag",
|
|
@@ -18303,7 +18755,7 @@ var patterns_default = [
|
|
|
18303
18755
|
enabled: false,
|
|
18304
18756
|
languages: ["Python"],
|
|
18305
18757
|
parameters: [],
|
|
18306
|
-
tags: ["django"]
|
|
18758
|
+
tags: ["fwk:django"]
|
|
18307
18759
|
},
|
|
18308
18760
|
{
|
|
18309
18761
|
id: "Semgrep_python.django.compatibility.django-2_0-compat.django-compat-2_0-check-aggregate-support",
|
|
@@ -18313,7 +18765,7 @@ var patterns_default = [
|
|
|
18313
18765
|
enabled: false,
|
|
18314
18766
|
languages: ["Python"],
|
|
18315
18767
|
parameters: [],
|
|
18316
|
-
tags: ["django"]
|
|
18768
|
+
tags: ["fwk:django"]
|
|
18317
18769
|
},
|
|
18318
18770
|
{
|
|
18319
18771
|
id: "Semgrep_python.django.compatibility.django-2_0-compat.django-compat-2_0-extra-forms",
|
|
@@ -18323,7 +18775,7 @@ var patterns_default = [
|
|
|
18323
18775
|
enabled: false,
|
|
18324
18776
|
languages: ["Python"],
|
|
18325
18777
|
parameters: [],
|
|
18326
|
-
tags: ["django"]
|
|
18778
|
+
tags: ["fwk:django"]
|
|
18327
18779
|
},
|
|
18328
18780
|
{
|
|
18329
18781
|
id: "Semgrep_python.django.compatibility.django-2_0-compat.django-compat-2_0-signals-weak",
|
|
@@ -18333,7 +18785,7 @@ var patterns_default = [
|
|
|
18333
18785
|
enabled: false,
|
|
18334
18786
|
languages: ["Python"],
|
|
18335
18787
|
parameters: [],
|
|
18336
|
-
tags: ["django"]
|
|
18788
|
+
tags: ["fwk:django"]
|
|
18337
18789
|
},
|
|
18338
18790
|
{
|
|
18339
18791
|
id: "Semgrep_python.django.correctness.model-save.django-db-model-save-super",
|
|
@@ -18343,7 +18795,7 @@ var patterns_default = [
|
|
|
18343
18795
|
enabled: false,
|
|
18344
18796
|
languages: ["Python"],
|
|
18345
18797
|
parameters: [],
|
|
18346
|
-
tags: ["django"]
|
|
18798
|
+
tags: ["fwk:django"]
|
|
18347
18799
|
},
|
|
18348
18800
|
{
|
|
18349
18801
|
id: "Semgrep_python.django.correctness.nontext-field-must-set-null-true.nontext-field-must-set-null-true",
|
|
@@ -18353,7 +18805,7 @@ var patterns_default = [
|
|
|
18353
18805
|
enabled: false,
|
|
18354
18806
|
languages: ["Python"],
|
|
18355
18807
|
parameters: [],
|
|
18356
|
-
tags: ["django"]
|
|
18808
|
+
tags: ["fwk:django"]
|
|
18357
18809
|
},
|
|
18358
18810
|
{
|
|
18359
18811
|
id: "Semgrep_python.django.correctness.string-field-null-checks.no-null-string-field",
|
|
@@ -18363,7 +18815,7 @@ var patterns_default = [
|
|
|
18363
18815
|
enabled: false,
|
|
18364
18816
|
languages: ["Python"],
|
|
18365
18817
|
parameters: [],
|
|
18366
|
-
tags: ["django"]
|
|
18818
|
+
tags: ["fwk:django"]
|
|
18367
18819
|
},
|
|
18368
18820
|
{
|
|
18369
18821
|
id: "Semgrep_python.django.correctness.string-field-null-checks.string-field-must-set-null-true",
|
|
@@ -18373,7 +18825,7 @@ var patterns_default = [
|
|
|
18373
18825
|
enabled: false,
|
|
18374
18826
|
languages: ["Python"],
|
|
18375
18827
|
parameters: [],
|
|
18376
|
-
tags: ["django"]
|
|
18828
|
+
tags: ["fwk:django"]
|
|
18377
18829
|
},
|
|
18378
18830
|
{
|
|
18379
18831
|
id: "Semgrep_python.django.correctness.use-decimalfield-for-money.use-decimalfield-for-money",
|
|
@@ -18382,7 +18834,8 @@ var patterns_default = [
|
|
|
18382
18834
|
title: "Use DecimalField for Currency Fields",
|
|
18383
18835
|
enabled: false,
|
|
18384
18836
|
languages: ["Python"],
|
|
18385
|
-
parameters: []
|
|
18837
|
+
parameters: [],
|
|
18838
|
+
tags: ["fwk:django"]
|
|
18386
18839
|
},
|
|
18387
18840
|
{
|
|
18388
18841
|
id: "Semgrep_python.django.maintainability.duplicate-path-assignment.conflicting-path-assignment",
|
|
@@ -18392,7 +18845,7 @@ var patterns_default = [
|
|
|
18392
18845
|
enabled: false,
|
|
18393
18846
|
languages: ["Python"],
|
|
18394
18847
|
parameters: [],
|
|
18395
|
-
tags: ["django"]
|
|
18848
|
+
tags: ["fwk:django"]
|
|
18396
18849
|
},
|
|
18397
18850
|
{
|
|
18398
18851
|
id: "Semgrep_python.django.maintainability.duplicate-path-assignment.duplicate-name-assignment",
|
|
@@ -18402,7 +18855,7 @@ var patterns_default = [
|
|
|
18402
18855
|
enabled: false,
|
|
18403
18856
|
languages: ["Python"],
|
|
18404
18857
|
parameters: [],
|
|
18405
|
-
tags: ["django"]
|
|
18858
|
+
tags: ["fwk:django"]
|
|
18406
18859
|
},
|
|
18407
18860
|
{
|
|
18408
18861
|
id: "Semgrep_python.django.maintainability.duplicate-path-assignment.duplicate-path-assignment",
|
|
@@ -18411,7 +18864,8 @@ var patterns_default = [
|
|
|
18411
18864
|
title: "Avoid Duplicate Path Assignment",
|
|
18412
18865
|
enabled: false,
|
|
18413
18866
|
languages: ["Python"],
|
|
18414
|
-
parameters: []
|
|
18867
|
+
parameters: [],
|
|
18868
|
+
tags: ["fwk:django"]
|
|
18415
18869
|
},
|
|
18416
18870
|
{
|
|
18417
18871
|
id: "Semgrep_python.django.maintainability.duplicate-path-assignment.duplicate-path-assignment-different-names",
|
|
@@ -18421,7 +18875,7 @@ var patterns_default = [
|
|
|
18421
18875
|
enabled: false,
|
|
18422
18876
|
languages: ["Python"],
|
|
18423
18877
|
parameters: [],
|
|
18424
|
-
tags: ["django"]
|
|
18878
|
+
tags: ["fwk:django"]
|
|
18425
18879
|
},
|
|
18426
18880
|
{
|
|
18427
18881
|
id: "Semgrep_python.django.performance.access-foreign-keys.access-foreign-keys",
|
|
@@ -18431,7 +18885,7 @@ var patterns_default = [
|
|
|
18431
18885
|
enabled: false,
|
|
18432
18886
|
languages: ["Python"],
|
|
18433
18887
|
parameters: [],
|
|
18434
|
-
tags: ["django"]
|
|
18888
|
+
tags: ["fwk:django"]
|
|
18435
18889
|
},
|
|
18436
18890
|
{
|
|
18437
18891
|
id: "Semgrep_python.django.performance.upsell-count.use-count-method",
|
|
@@ -18441,7 +18895,7 @@ var patterns_default = [
|
|
|
18441
18895
|
enabled: false,
|
|
18442
18896
|
languages: ["Python"],
|
|
18443
18897
|
parameters: [],
|
|
18444
|
-
tags: ["django"]
|
|
18898
|
+
tags: ["fwk:django"]
|
|
18445
18899
|
},
|
|
18446
18900
|
{
|
|
18447
18901
|
id: "Semgrep_python.django.performance.upsell_earliest_latest.use-earliest-or-latest",
|
|
@@ -18451,7 +18905,7 @@ var patterns_default = [
|
|
|
18451
18905
|
enabled: false,
|
|
18452
18906
|
languages: ["Python"],
|
|
18453
18907
|
parameters: [],
|
|
18454
|
-
tags: ["django"]
|
|
18908
|
+
tags: ["fwk:django"]
|
|
18455
18909
|
},
|
|
18456
18910
|
{
|
|
18457
18911
|
id: "Semgrep_python_django_rule-django-extra-used",
|
|
@@ -18488,7 +18942,7 @@ var patterns_default = [
|
|
|
18488
18942
|
enabled: true,
|
|
18489
18943
|
languages: ["Python"],
|
|
18490
18944
|
parameters: [],
|
|
18491
|
-
tags: ["
|
|
18945
|
+
tags: ["security", "fwk:django"]
|
|
18492
18946
|
},
|
|
18493
18947
|
{
|
|
18494
18948
|
id: "Semgrep_python.django.security.audit.avoid-mark-safe.avoid-mark-safe",
|
|
@@ -18498,7 +18952,7 @@ var patterns_default = [
|
|
|
18498
18952
|
enabled: false,
|
|
18499
18953
|
languages: ["Python"],
|
|
18500
18954
|
parameters: [],
|
|
18501
|
-
tags: ["django"]
|
|
18955
|
+
tags: ["fwk:django"]
|
|
18502
18956
|
},
|
|
18503
18957
|
{
|
|
18504
18958
|
id: "Semgrep_python.django.security.audit.csrf-exempt.no-csrf-exempt",
|
|
@@ -18508,7 +18962,7 @@ var patterns_default = [
|
|
|
18508
18962
|
enabled: false,
|
|
18509
18963
|
languages: ["Python"],
|
|
18510
18964
|
parameters: [],
|
|
18511
|
-
tags: ["django"]
|
|
18965
|
+
tags: ["fwk:django"]
|
|
18512
18966
|
},
|
|
18513
18967
|
{
|
|
18514
18968
|
id: "Semgrep_python.django.security.audit.custom-expression-as-sql.custom-expression-as-sql",
|
|
@@ -18518,7 +18972,7 @@ var patterns_default = [
|
|
|
18518
18972
|
enabled: false,
|
|
18519
18973
|
languages: ["Python"],
|
|
18520
18974
|
parameters: [],
|
|
18521
|
-
tags: ["
|
|
18975
|
+
tags: ["security", "fwk:django"]
|
|
18522
18976
|
},
|
|
18523
18977
|
{
|
|
18524
18978
|
id: "Semgrep_python.django.security.audit.django-rest-framework.missing-throttle-config.missing-throttle-config",
|
|
@@ -18528,7 +18982,7 @@ var patterns_default = [
|
|
|
18528
18982
|
enabled: false,
|
|
18529
18983
|
languages: ["Python"],
|
|
18530
18984
|
parameters: [],
|
|
18531
|
-
tags: ["
|
|
18985
|
+
tags: ["security", "fwk:django"]
|
|
18532
18986
|
},
|
|
18533
18987
|
{
|
|
18534
18988
|
id: "Semgrep_python.django.security.audit.extends-custom-expression.extends-custom-expression",
|
|
@@ -18538,7 +18992,7 @@ var patterns_default = [
|
|
|
18538
18992
|
enabled: false,
|
|
18539
18993
|
languages: ["Python"],
|
|
18540
18994
|
parameters: [],
|
|
18541
|
-
tags: ["
|
|
18995
|
+
tags: ["security", "fwk:django"]
|
|
18542
18996
|
},
|
|
18543
18997
|
{
|
|
18544
18998
|
id: "Semgrep_python.django.security.audit.query-set-extra.avoid-query-set-extra",
|
|
@@ -18548,7 +19002,7 @@ var patterns_default = [
|
|
|
18548
19002
|
enabled: false,
|
|
18549
19003
|
languages: ["Python"],
|
|
18550
19004
|
parameters: [],
|
|
18551
|
-
tags: ["
|
|
19005
|
+
tags: ["security", "fwk:django"]
|
|
18552
19006
|
},
|
|
18553
19007
|
{
|
|
18554
19008
|
id: "Semgrep_python.django.security.audit.raw-query.avoid-raw-sql",
|
|
@@ -18558,7 +19012,7 @@ var patterns_default = [
|
|
|
18558
19012
|
enabled: false,
|
|
18559
19013
|
languages: ["Python"],
|
|
18560
19014
|
parameters: [],
|
|
18561
|
-
tags: ["
|
|
19015
|
+
tags: ["security", "fwk:django"]
|
|
18562
19016
|
},
|
|
18563
19017
|
{
|
|
18564
19018
|
id: "Semgrep_python.django.security.audit.secure-cookies.django-secure-set-cookie",
|
|
@@ -18568,7 +19022,7 @@ var patterns_default = [
|
|
|
18568
19022
|
enabled: false,
|
|
18569
19023
|
languages: ["Python"],
|
|
18570
19024
|
parameters: [],
|
|
18571
|
-
tags: ["
|
|
19025
|
+
tags: ["securecookies", "fwk:django"]
|
|
18572
19026
|
},
|
|
18573
19027
|
{
|
|
18574
19028
|
id: "Semgrep_python.django.security.audit.templates.debug-template-tag.debug-template-tag",
|
|
@@ -18578,7 +19032,7 @@ var patterns_default = [
|
|
|
18578
19032
|
enabled: false,
|
|
18579
19033
|
languages: ["Python"],
|
|
18580
19034
|
parameters: [],
|
|
18581
|
-
tags: ["
|
|
19035
|
+
tags: ["security", "fwk:django"]
|
|
18582
19036
|
},
|
|
18583
19037
|
{
|
|
18584
19038
|
id: "Semgrep_python.django.security.audit.unvalidated-password.unvalidated-password",
|
|
@@ -18588,7 +19042,7 @@ var patterns_default = [
|
|
|
18588
19042
|
enabled: false,
|
|
18589
19043
|
languages: ["Python"],
|
|
18590
19044
|
parameters: [],
|
|
18591
|
-
tags: ["
|
|
19045
|
+
tags: ["security", "fwk:django"]
|
|
18592
19046
|
},
|
|
18593
19047
|
{
|
|
18594
19048
|
id: "Semgrep_python.django.security.audit.xss.class-extends-safestring.class-extends-safestring",
|
|
@@ -18598,7 +19052,7 @@ var patterns_default = [
|
|
|
18598
19052
|
enabled: false,
|
|
18599
19053
|
languages: ["Python"],
|
|
18600
19054
|
parameters: [],
|
|
18601
|
-
tags: ["
|
|
19055
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18602
19056
|
},
|
|
18603
19057
|
{
|
|
18604
19058
|
id: "Semgrep_python.django.security.audit.xss.context-autoescape-off.context-autoescape-off",
|
|
@@ -18608,7 +19062,7 @@ var patterns_default = [
|
|
|
18608
19062
|
enabled: false,
|
|
18609
19063
|
languages: ["Python"],
|
|
18610
19064
|
parameters: [],
|
|
18611
|
-
tags: ["
|
|
19065
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18612
19066
|
},
|
|
18613
19067
|
{
|
|
18614
19068
|
id: "Semgrep_python.django.security.audit.xss.direct-use-of-httpresponse.direct-use-of-httpresponse",
|
|
@@ -18618,7 +19072,7 @@ var patterns_default = [
|
|
|
18618
19072
|
enabled: false,
|
|
18619
19073
|
languages: ["Python"],
|
|
18620
19074
|
parameters: [],
|
|
18621
|
-
tags: ["
|
|
19075
|
+
tags: ["security", "fwk:django"]
|
|
18622
19076
|
},
|
|
18623
19077
|
{
|
|
18624
19078
|
id: "Semgrep_python.django.security.audit.xss.filter-with-is-safe.filter-with-is-safe",
|
|
@@ -18628,7 +19082,7 @@ var patterns_default = [
|
|
|
18628
19082
|
enabled: false,
|
|
18629
19083
|
languages: ["Python"],
|
|
18630
19084
|
parameters: [],
|
|
18631
|
-
tags: ["
|
|
19085
|
+
tags: ["security", "fwk:django"]
|
|
18632
19086
|
},
|
|
18633
19087
|
{
|
|
18634
19088
|
id: "Semgrep_python.django.security.audit.xss.formathtml-fstring-parameter.formathtml-fstring-parameter",
|
|
@@ -18638,7 +19092,7 @@ var patterns_default = [
|
|
|
18638
19092
|
enabled: false,
|
|
18639
19093
|
languages: ["Python"],
|
|
18640
19094
|
parameters: [],
|
|
18641
|
-
tags: ["
|
|
19095
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18642
19096
|
},
|
|
18643
19097
|
{
|
|
18644
19098
|
id: "Semgrep_python.django.security.audit.xss.global-autoescape-off.global-autoescape-off",
|
|
@@ -18648,7 +19102,7 @@ var patterns_default = [
|
|
|
18648
19102
|
enabled: false,
|
|
18649
19103
|
languages: ["Python"],
|
|
18650
19104
|
parameters: [],
|
|
18651
|
-
tags: ["
|
|
19105
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18652
19106
|
},
|
|
18653
19107
|
{
|
|
18654
19108
|
id: "Semgrep_python.django.security.audit.xss.html-magic-method.html-magic-method",
|
|
@@ -18658,7 +19112,7 @@ var patterns_default = [
|
|
|
18658
19112
|
enabled: false,
|
|
18659
19113
|
languages: ["Python"],
|
|
18660
19114
|
parameters: [],
|
|
18661
|
-
tags: ["
|
|
19115
|
+
tags: ["security", "fwk:django"]
|
|
18662
19116
|
},
|
|
18663
19117
|
{
|
|
18664
19118
|
id: "Semgrep_python.django.security.audit.xss.html-safe.html-safe",
|
|
@@ -18668,7 +19122,7 @@ var patterns_default = [
|
|
|
18668
19122
|
enabled: false,
|
|
18669
19123
|
languages: ["Python"],
|
|
18670
19124
|
parameters: [],
|
|
18671
|
-
tags: ["django"]
|
|
19125
|
+
tags: ["fwk:django"]
|
|
18672
19126
|
},
|
|
18673
19127
|
{
|
|
18674
19128
|
id: "Semgrep_python.django.security.audit.xss.template-autoescape-off.template-autoescape-off",
|
|
@@ -18678,7 +19132,7 @@ var patterns_default = [
|
|
|
18678
19132
|
enabled: false,
|
|
18679
19133
|
languages: ["Python"],
|
|
18680
19134
|
parameters: [],
|
|
18681
|
-
tags: ["
|
|
19135
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18682
19136
|
},
|
|
18683
19137
|
{
|
|
18684
19138
|
id: "Semgrep_python.django.security.audit.xss.template-blocktranslate-no-escape.template-blocktranslate-no-escape",
|
|
@@ -18688,7 +19142,7 @@ var patterns_default = [
|
|
|
18688
19142
|
enabled: false,
|
|
18689
19143
|
languages: ["Python"],
|
|
18690
19144
|
parameters: [],
|
|
18691
|
-
tags: ["django"]
|
|
19145
|
+
tags: ["fwk:django"]
|
|
18692
19146
|
},
|
|
18693
19147
|
{
|
|
18694
19148
|
id: "Semgrep_python.django.security.audit.xss.template-translate-as-no-escape.template-translate-as-no-escape",
|
|
@@ -18698,7 +19152,7 @@ var patterns_default = [
|
|
|
18698
19152
|
enabled: false,
|
|
18699
19153
|
languages: ["Python"],
|
|
18700
19154
|
parameters: [],
|
|
18701
|
-
tags: ["
|
|
19155
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18702
19156
|
},
|
|
18703
19157
|
{
|
|
18704
19158
|
id: "Semgrep_python.django.security.audit.xss.template-var-unescaped-with-safeseq.template-var-unescaped-with-safeseq",
|
|
@@ -18708,7 +19162,7 @@ var patterns_default = [
|
|
|
18708
19162
|
enabled: false,
|
|
18709
19163
|
languages: ["Python"],
|
|
18710
19164
|
parameters: [],
|
|
18711
|
-
tags: ["
|
|
19165
|
+
tags: ["security", "xss", "fwk:django"]
|
|
18712
19166
|
},
|
|
18713
19167
|
{
|
|
18714
19168
|
id: "Semgrep_python.django.security.django-no-csrf-token.django-no-csrf-token",
|
|
@@ -18718,7 +19172,7 @@ var patterns_default = [
|
|
|
18718
19172
|
enabled: true,
|
|
18719
19173
|
languages: ["Python"],
|
|
18720
19174
|
parameters: [],
|
|
18721
|
-
tags: ["
|
|
19175
|
+
tags: ["security", "fwk:django"]
|
|
18722
19176
|
},
|
|
18723
19177
|
{
|
|
18724
19178
|
id: "Semgrep_python.django.security.django-using-request-post-after-is-valid.django-using-request-post-after-is-valid",
|
|
@@ -18728,7 +19182,7 @@ var patterns_default = [
|
|
|
18728
19182
|
enabled: true,
|
|
18729
19183
|
languages: ["Python"],
|
|
18730
19184
|
parameters: [],
|
|
18731
|
-
tags: ["
|
|
19185
|
+
tags: ["security", "fwk:django"]
|
|
18732
19186
|
},
|
|
18733
19187
|
{
|
|
18734
19188
|
id: "Semgrep_python.django.security.globals-as-template-context.globals-as-template-context",
|
|
@@ -18738,7 +19192,7 @@ var patterns_default = [
|
|
|
18738
19192
|
enabled: false,
|
|
18739
19193
|
languages: ["Python"],
|
|
18740
19194
|
parameters: [],
|
|
18741
|
-
tags: ["django"]
|
|
19195
|
+
tags: ["fwk:django"]
|
|
18742
19196
|
},
|
|
18743
19197
|
{
|
|
18744
19198
|
id: "Semgrep_python.django.security.hashids-with-django-secret.hashids-with-django-secret",
|
|
@@ -18748,7 +19202,7 @@ var patterns_default = [
|
|
|
18748
19202
|
enabled: true,
|
|
18749
19203
|
languages: ["Python"],
|
|
18750
19204
|
parameters: [],
|
|
18751
|
-
tags: ["
|
|
19205
|
+
tags: ["security", "fwk:django"]
|
|
18752
19206
|
},
|
|
18753
19207
|
{
|
|
18754
19208
|
id: "Semgrep_python.django.security.injection.code.globals-misuse-code-execution.globals-misuse-code-execution",
|
|
@@ -18758,7 +19212,7 @@ var patterns_default = [
|
|
|
18758
19212
|
enabled: false,
|
|
18759
19213
|
languages: ["Python"],
|
|
18760
19214
|
parameters: [],
|
|
18761
|
-
tags: ["django"]
|
|
19215
|
+
tags: ["fwk:django"]
|
|
18762
19216
|
},
|
|
18763
19217
|
{
|
|
18764
19218
|
id: "Semgrep_python.django.security.injection.code.user-eval-format-string.user-eval-format-string",
|
|
@@ -18768,7 +19222,7 @@ var patterns_default = [
|
|
|
18768
19222
|
enabled: true,
|
|
18769
19223
|
languages: ["Python"],
|
|
18770
19224
|
parameters: [],
|
|
18771
|
-
tags: ["django"]
|
|
19225
|
+
tags: ["fwk:django"]
|
|
18772
19226
|
},
|
|
18773
19227
|
{
|
|
18774
19228
|
id: "Semgrep_python.django.security.injection.code.user-eval.user-eval",
|
|
@@ -18778,7 +19232,7 @@ var patterns_default = [
|
|
|
18778
19232
|
enabled: true,
|
|
18779
19233
|
languages: ["Python"],
|
|
18780
19234
|
parameters: [],
|
|
18781
|
-
tags: ["
|
|
19235
|
+
tags: ["security", "fwk:django"]
|
|
18782
19236
|
},
|
|
18783
19237
|
{
|
|
18784
19238
|
id: "Semgrep_python.django.security.injection.code.user-exec-format-string.user-exec-format-string",
|
|
@@ -18788,7 +19242,7 @@ var patterns_default = [
|
|
|
18788
19242
|
enabled: true,
|
|
18789
19243
|
languages: ["Python"],
|
|
18790
19244
|
parameters: [],
|
|
18791
|
-
tags: ["
|
|
19245
|
+
tags: ["security", "fwk:django"]
|
|
18792
19246
|
},
|
|
18793
19247
|
{
|
|
18794
19248
|
id: "Semgrep_python.django.security.injection.code.user-exec.user-exec",
|
|
@@ -18798,7 +19252,7 @@ var patterns_default = [
|
|
|
18798
19252
|
enabled: true,
|
|
18799
19253
|
languages: ["Python"],
|
|
18800
19254
|
parameters: [],
|
|
18801
|
-
tags: ["django"]
|
|
19255
|
+
tags: ["fwk:django"]
|
|
18802
19256
|
},
|
|
18803
19257
|
{
|
|
18804
19258
|
id: "Semgrep_python.django.security.injection.command.command-injection-os-system.command-injection-os-system",
|
|
@@ -18808,7 +19262,7 @@ var patterns_default = [
|
|
|
18808
19262
|
enabled: true,
|
|
18809
19263
|
languages: ["Python"],
|
|
18810
19264
|
parameters: [],
|
|
18811
|
-
tags: ["
|
|
19265
|
+
tags: ["security", "fwk:django"]
|
|
18812
19266
|
},
|
|
18813
19267
|
{
|
|
18814
19268
|
id: "Semgrep_python.django.security.injection.command.subprocess-injection.subprocess-injection",
|
|
@@ -18818,7 +19272,7 @@ var patterns_default = [
|
|
|
18818
19272
|
enabled: true,
|
|
18819
19273
|
languages: ["Python"],
|
|
18820
19274
|
parameters: [],
|
|
18821
|
-
tags: ["django"]
|
|
19275
|
+
tags: ["fwk:django"]
|
|
18822
19276
|
},
|
|
18823
19277
|
{
|
|
18824
19278
|
id: "Semgrep_python.django.security.injection.csv-writer-injection.csv-writer-injection",
|
|
@@ -18828,7 +19282,7 @@ var patterns_default = [
|
|
|
18828
19282
|
enabled: true,
|
|
18829
19283
|
languages: ["Python"],
|
|
18830
19284
|
parameters: [],
|
|
18831
|
-
tags: ["django"]
|
|
19285
|
+
tags: ["fwk:django"]
|
|
18832
19286
|
},
|
|
18833
19287
|
{
|
|
18834
19288
|
id: "Semgrep_python.django.security.injection.email.xss-html-email-body.xss-html-email-body",
|
|
@@ -18838,7 +19292,7 @@ var patterns_default = [
|
|
|
18838
19292
|
enabled: true,
|
|
18839
19293
|
languages: ["Python"],
|
|
18840
19294
|
parameters: [],
|
|
18841
|
-
tags: ["django"]
|
|
19295
|
+
tags: ["fwk:django"]
|
|
18842
19296
|
},
|
|
18843
19297
|
{
|
|
18844
19298
|
id: "Semgrep_python.django.security.injection.email.xss-send-mail-html-message.xss-send-mail-html-message",
|
|
@@ -18848,7 +19302,7 @@ var patterns_default = [
|
|
|
18848
19302
|
enabled: true,
|
|
18849
19303
|
languages: ["Python"],
|
|
18850
19304
|
parameters: [],
|
|
18851
|
-
tags: ["django"]
|
|
19305
|
+
tags: ["fwk:django"]
|
|
18852
19306
|
},
|
|
18853
19307
|
{
|
|
18854
19308
|
id: "Semgrep_python.django.security.injection.mass-assignment.mass-assignment",
|
|
@@ -18858,7 +19312,7 @@ var patterns_default = [
|
|
|
18858
19312
|
enabled: false,
|
|
18859
19313
|
languages: ["Python"],
|
|
18860
19314
|
parameters: [],
|
|
18861
|
-
tags: ["
|
|
19315
|
+
tags: ["security", "massassignment", "injection", "fwk:django"]
|
|
18862
19316
|
},
|
|
18863
19317
|
{
|
|
18864
19318
|
id: "Semgrep_python.django.security.injection.open-redirect.open-redirect",
|
|
@@ -18868,7 +19322,7 @@ var patterns_default = [
|
|
|
18868
19322
|
enabled: true,
|
|
18869
19323
|
languages: ["Python"],
|
|
18870
19324
|
parameters: [],
|
|
18871
|
-
tags: ["
|
|
19325
|
+
tags: ["security", "fwk:django"]
|
|
18872
19326
|
},
|
|
18873
19327
|
{
|
|
18874
19328
|
id: "Semgrep_python.django.security.injection.path-traversal.path-traversal-file-name.path-traversal-file-name",
|
|
@@ -18878,7 +19332,7 @@ var patterns_default = [
|
|
|
18878
19332
|
enabled: false,
|
|
18879
19333
|
languages: ["Python"],
|
|
18880
19334
|
parameters: [],
|
|
18881
|
-
tags: ["
|
|
19335
|
+
tags: ["security", "injection", "pathtraversal", "fwk:django"]
|
|
18882
19336
|
},
|
|
18883
19337
|
{
|
|
18884
19338
|
id: "Semgrep_python.django.security.injection.path-traversal.path-traversal-join.path-traversal-join",
|
|
@@ -18888,7 +19342,7 @@ var patterns_default = [
|
|
|
18888
19342
|
enabled: false,
|
|
18889
19343
|
languages: ["Python"],
|
|
18890
19344
|
parameters: [],
|
|
18891
|
-
tags: ["
|
|
19345
|
+
tags: ["injection", "pathtraversal", "fwk:django"]
|
|
18892
19346
|
},
|
|
18893
19347
|
{
|
|
18894
19348
|
id: "Semgrep_python.django.security.injection.path-traversal.path-traversal-open.path-traversal-open",
|
|
@@ -18898,7 +19352,7 @@ var patterns_default = [
|
|
|
18898
19352
|
enabled: true,
|
|
18899
19353
|
languages: ["Python"],
|
|
18900
19354
|
parameters: [],
|
|
18901
|
-
tags: ["
|
|
19355
|
+
tags: ["security", "injection", "pathtraversal", "fwk:django"]
|
|
18902
19356
|
},
|
|
18903
19357
|
{
|
|
18904
19358
|
id: "Semgrep_python.django.security.injection.raw-html-format.raw-html-format",
|
|
@@ -18908,7 +19362,7 @@ var patterns_default = [
|
|
|
18908
19362
|
enabled: true,
|
|
18909
19363
|
languages: ["Python"],
|
|
18910
19364
|
parameters: [],
|
|
18911
|
-
tags: ["django"]
|
|
19365
|
+
tags: ["fwk:django"]
|
|
18912
19366
|
},
|
|
18913
19367
|
{
|
|
18914
19368
|
id: "Semgrep_python.django.security.injection.reflected-data-httpresponsebadrequest.reflected-data-httpresponsebadrequest",
|
|
@@ -18918,7 +19372,7 @@ var patterns_default = [
|
|
|
18918
19372
|
enabled: true,
|
|
18919
19373
|
languages: ["Python"],
|
|
18920
19374
|
parameters: [],
|
|
18921
|
-
tags: ["
|
|
19375
|
+
tags: ["security", "fwk:django"]
|
|
18922
19376
|
},
|
|
18923
19377
|
{
|
|
18924
19378
|
id: "Semgrep_python.django.security.injection.reflected-data-httpresponse.reflected-data-httpresponse",
|
|
@@ -18928,7 +19382,7 @@ var patterns_default = [
|
|
|
18928
19382
|
enabled: true,
|
|
18929
19383
|
languages: ["Python"],
|
|
18930
19384
|
parameters: [],
|
|
18931
|
-
tags: ["
|
|
19385
|
+
tags: ["security", "fwk:django"]
|
|
18932
19386
|
},
|
|
18933
19387
|
{
|
|
18934
19388
|
id: "Semgrep_python.django.security.injection.request-data-fileresponse.request-data-fileresponse",
|
|
@@ -18938,7 +19392,7 @@ var patterns_default = [
|
|
|
18938
19392
|
enabled: true,
|
|
18939
19393
|
languages: ["Python"],
|
|
18940
19394
|
parameters: [],
|
|
18941
|
-
tags: ["
|
|
19395
|
+
tags: ["security", "injection", "fwk:django"]
|
|
18942
19396
|
},
|
|
18943
19397
|
{
|
|
18944
19398
|
id: "Semgrep_python.django.security.injection.request-data-write.request-data-write",
|
|
@@ -18948,7 +19402,7 @@ var patterns_default = [
|
|
|
18948
19402
|
enabled: true,
|
|
18949
19403
|
languages: ["Python"],
|
|
18950
19404
|
parameters: [],
|
|
18951
|
-
tags: ["
|
|
19405
|
+
tags: ["security", "injection", "fwk:django"]
|
|
18952
19406
|
},
|
|
18953
19407
|
{
|
|
18954
19408
|
id: "Semgrep_python.django.security.injection.sql.sql-injection-extra.sql-injection-using-extra-where",
|
|
@@ -18958,7 +19412,7 @@ var patterns_default = [
|
|
|
18958
19412
|
enabled: true,
|
|
18959
19413
|
languages: ["Python"],
|
|
18960
19414
|
parameters: [],
|
|
18961
|
-
tags: ["
|
|
19415
|
+
tags: ["sql", "security", "fwk:django"]
|
|
18962
19416
|
},
|
|
18963
19417
|
{
|
|
18964
19418
|
id: "Semgrep_python.django.security.injection.sql.sql-injection-rawsql.sql-injection-using-rawsql",
|
|
@@ -18968,7 +19422,7 @@ var patterns_default = [
|
|
|
18968
19422
|
enabled: true,
|
|
18969
19423
|
languages: ["Python"],
|
|
18970
19424
|
parameters: [],
|
|
18971
|
-
tags: ["django"]
|
|
19425
|
+
tags: ["fwk:django"]
|
|
18972
19426
|
},
|
|
18973
19427
|
{
|
|
18974
19428
|
id: "Semgrep_python.django.security.injection.sql.sql-injection-using-db-cursor-execute.sql-injection-db-cursor-execute",
|
|
@@ -18978,7 +19432,7 @@ var patterns_default = [
|
|
|
18978
19432
|
enabled: true,
|
|
18979
19433
|
languages: ["Python"],
|
|
18980
19434
|
parameters: [],
|
|
18981
|
-
tags: ["django"]
|
|
19435
|
+
tags: ["fwk:django"]
|
|
18982
19436
|
},
|
|
18983
19437
|
{
|
|
18984
19438
|
id: "Semgrep_python.django.security.injection.sql.sql-injection-using-raw.sql-injection-using-raw",
|
|
@@ -18988,7 +19442,7 @@ var patterns_default = [
|
|
|
18988
19442
|
enabled: true,
|
|
18989
19443
|
languages: ["Python"],
|
|
18990
19444
|
parameters: [],
|
|
18991
|
-
tags: ["django"]
|
|
19445
|
+
tags: ["fwk:django"]
|
|
18992
19446
|
},
|
|
18993
19447
|
{
|
|
18994
19448
|
id: "Semgrep_python.django.security.injection.ssrf.ssrf-injection-requests.ssrf-injection-requests",
|
|
@@ -18998,7 +19452,7 @@ var patterns_default = [
|
|
|
18998
19452
|
enabled: true,
|
|
18999
19453
|
languages: ["Python"],
|
|
19000
19454
|
parameters: [],
|
|
19001
|
-
tags: ["
|
|
19455
|
+
tags: ["ssrf", "fwk:django"]
|
|
19002
19456
|
},
|
|
19003
19457
|
{
|
|
19004
19458
|
id: "Semgrep_python.django.security.injection.ssrf.ssrf-injection-urllib.ssrf-injection-urllib",
|
|
@@ -19008,7 +19462,7 @@ var patterns_default = [
|
|
|
19008
19462
|
enabled: true,
|
|
19009
19463
|
languages: ["Python"],
|
|
19010
19464
|
parameters: [],
|
|
19011
|
-
tags: ["
|
|
19465
|
+
tags: ["ssrf", "fwk:django"]
|
|
19012
19466
|
},
|
|
19013
19467
|
{
|
|
19014
19468
|
id: "Semgrep_python.django.security.injection.tainted-sql-string.tainted-sql-string",
|
|
@@ -19018,7 +19472,7 @@ var patterns_default = [
|
|
|
19018
19472
|
enabled: false,
|
|
19019
19473
|
languages: ["Python"],
|
|
19020
19474
|
parameters: [],
|
|
19021
|
-
tags: ["
|
|
19475
|
+
tags: ["security", "fwk:django"]
|
|
19022
19476
|
},
|
|
19023
19477
|
{
|
|
19024
19478
|
id: "Semgrep_python.django.security.injection.tainted-url-host.tainted-url-host",
|
|
@@ -19028,7 +19482,7 @@ var patterns_default = [
|
|
|
19028
19482
|
enabled: false,
|
|
19029
19483
|
languages: ["Python"],
|
|
19030
19484
|
parameters: [],
|
|
19031
|
-
tags: ["django"]
|
|
19485
|
+
tags: ["fwk:django"]
|
|
19032
19486
|
},
|
|
19033
19487
|
{
|
|
19034
19488
|
id: "Semgrep_python.django.security.locals-as-template-context.locals-as-template-context",
|
|
@@ -19038,7 +19492,7 @@ var patterns_default = [
|
|
|
19038
19492
|
enabled: false,
|
|
19039
19493
|
languages: ["Python"],
|
|
19040
19494
|
parameters: [],
|
|
19041
|
-
tags: ["
|
|
19495
|
+
tags: ["security", "fwk:django"]
|
|
19042
19496
|
},
|
|
19043
19497
|
{
|
|
19044
19498
|
id: "Semgrep_python.django.security.nan-injection.nan-injection",
|
|
@@ -19048,7 +19502,7 @@ var patterns_default = [
|
|
|
19048
19502
|
enabled: true,
|
|
19049
19503
|
languages: ["Python"],
|
|
19050
19504
|
parameters: [],
|
|
19051
|
-
tags: ["
|
|
19505
|
+
tags: ["security", "fwk:django"]
|
|
19052
19506
|
},
|
|
19053
19507
|
{
|
|
19054
19508
|
id: "Semgrep_python.django.security.passwords.password-empty-string.password-empty-string",
|
|
@@ -19058,7 +19512,7 @@ var patterns_default = [
|
|
|
19058
19512
|
enabled: true,
|
|
19059
19513
|
languages: ["Python"],
|
|
19060
19514
|
parameters: [],
|
|
19061
|
-
tags: ["
|
|
19515
|
+
tags: ["security", "passwords", "fwk:django"]
|
|
19062
19516
|
},
|
|
19063
19517
|
{
|
|
19064
19518
|
id: "Semgrep_python.django.security.passwords.use-none-for-password-default.use-none-for-password-default",
|
|
@@ -19068,7 +19522,7 @@ var patterns_default = [
|
|
|
19068
19522
|
enabled: true,
|
|
19069
19523
|
languages: ["Python"],
|
|
19070
19524
|
parameters: [],
|
|
19071
|
-
tags: ["
|
|
19525
|
+
tags: ["security", "passwords", "fwk:django"]
|
|
19072
19526
|
},
|
|
19073
19527
|
{
|
|
19074
19528
|
id: "Semgrep_python.docker.security.audit.docker-arbitrary-container-run.docker-arbitrary-container-run",
|
|
@@ -19214,7 +19668,7 @@ var patterns_default = [
|
|
|
19214
19668
|
enabled: true,
|
|
19215
19669
|
languages: ["Python"],
|
|
19216
19670
|
parameters: [],
|
|
19217
|
-
tags: ["
|
|
19671
|
+
tags: ["security", "fwk:fastapi"]
|
|
19218
19672
|
},
|
|
19219
19673
|
{
|
|
19220
19674
|
id: "Semgrep_python_file-permissions_rule-general-bad-permission",
|
|
@@ -19242,7 +19696,7 @@ var patterns_default = [
|
|
|
19242
19696
|
enabled: false,
|
|
19243
19697
|
languages: ["Python"],
|
|
19244
19698
|
parameters: [],
|
|
19245
|
-
tags: ["flask"]
|
|
19699
|
+
tags: ["fwk:flask"]
|
|
19246
19700
|
},
|
|
19247
19701
|
{
|
|
19248
19702
|
id: "Semgrep_python.flask.best-practice.use-jsonify.use-jsonify",
|
|
@@ -19252,7 +19706,7 @@ var patterns_default = [
|
|
|
19252
19706
|
enabled: false,
|
|
19253
19707
|
languages: ["Python"],
|
|
19254
19708
|
parameters: [],
|
|
19255
|
-
tags: ["flask"]
|
|
19709
|
+
tags: ["fwk:flask"]
|
|
19256
19710
|
},
|
|
19257
19711
|
{
|
|
19258
19712
|
id: "Semgrep_python.flask.caching.query-string.flask-cache-query-string",
|
|
@@ -19262,7 +19716,7 @@ var patterns_default = [
|
|
|
19262
19716
|
enabled: false,
|
|
19263
19717
|
languages: ["Python"],
|
|
19264
19718
|
parameters: [],
|
|
19265
|
-
tags: ["flask"]
|
|
19719
|
+
tags: ["fwk:flask"]
|
|
19266
19720
|
},
|
|
19267
19721
|
{
|
|
19268
19722
|
id: "Semgrep_python.flask.correctness.access-request-in-wrong-handler.avoid-accessing-request-in-wrong-handler",
|
|
@@ -19272,7 +19726,7 @@ var patterns_default = [
|
|
|
19272
19726
|
enabled: false,
|
|
19273
19727
|
languages: ["Python"],
|
|
19274
19728
|
parameters: [],
|
|
19275
|
-
tags: ["flask"]
|
|
19729
|
+
tags: ["fwk:flask"]
|
|
19276
19730
|
},
|
|
19277
19731
|
{
|
|
19278
19732
|
id: "Semgrep_python.flask.correctness.same-handler-name.flask-duplicate-handler-name",
|
|
@@ -19282,7 +19736,7 @@ var patterns_default = [
|
|
|
19282
19736
|
enabled: false,
|
|
19283
19737
|
languages: ["Python"],
|
|
19284
19738
|
parameters: [],
|
|
19285
|
-
tags: ["flask"]
|
|
19739
|
+
tags: ["fwk:flask"]
|
|
19286
19740
|
},
|
|
19287
19741
|
{
|
|
19288
19742
|
id: "Semgrep_python.flask.maintainability.deprecated.deprecated-apis.flask-deprecated-apis",
|
|
@@ -19292,7 +19746,7 @@ var patterns_default = [
|
|
|
19292
19746
|
enabled: false,
|
|
19293
19747
|
languages: ["Python"],
|
|
19294
19748
|
parameters: [],
|
|
19295
|
-
tags: ["flask"]
|
|
19749
|
+
tags: ["fwk:flask"]
|
|
19296
19750
|
},
|
|
19297
19751
|
{
|
|
19298
19752
|
id: "Semgrep_python_flask_rule-app-debug",
|
|
@@ -19338,7 +19792,7 @@ var patterns_default = [
|
|
|
19338
19792
|
enabled: true,
|
|
19339
19793
|
languages: ["Python"],
|
|
19340
19794
|
parameters: [],
|
|
19341
|
-
tags: ["
|
|
19795
|
+
tags: ["security", "fwk:flask"]
|
|
19342
19796
|
},
|
|
19343
19797
|
{
|
|
19344
19798
|
id: "Semgrep_python.flask.security.audit.app-run-security-config.avoid_using_app_run_directly",
|
|
@@ -19348,7 +19802,7 @@ var patterns_default = [
|
|
|
19348
19802
|
enabled: true,
|
|
19349
19803
|
languages: ["Python"],
|
|
19350
19804
|
parameters: [],
|
|
19351
|
-
tags: ["
|
|
19805
|
+
tags: ["security", "fwk:flask"]
|
|
19352
19806
|
},
|
|
19353
19807
|
{
|
|
19354
19808
|
id: "Semgrep_python.flask.security.audit.debug-enabled.debug-enabled",
|
|
@@ -19358,7 +19812,7 @@ var patterns_default = [
|
|
|
19358
19812
|
enabled: true,
|
|
19359
19813
|
languages: ["Python"],
|
|
19360
19814
|
parameters: [],
|
|
19361
|
-
tags: ["
|
|
19815
|
+
tags: ["security", "fwk:flask"]
|
|
19362
19816
|
},
|
|
19363
19817
|
{
|
|
19364
19818
|
id: "Semgrep_python.flask.security.audit.directly-returned-format-string.directly-returned-format-string",
|
|
@@ -19368,7 +19822,7 @@ var patterns_default = [
|
|
|
19368
19822
|
enabled: true,
|
|
19369
19823
|
languages: ["Python"],
|
|
19370
19824
|
parameters: [],
|
|
19371
|
-
tags: ["
|
|
19825
|
+
tags: ["security", "fwk:flask"]
|
|
19372
19826
|
},
|
|
19373
19827
|
{
|
|
19374
19828
|
id: "Semgrep_python.flask.security.audit.flask-cors-misconfiguration.flask-cors-misconfiguration",
|
|
@@ -19378,7 +19832,7 @@ var patterns_default = [
|
|
|
19378
19832
|
enabled: false,
|
|
19379
19833
|
languages: ["Python"],
|
|
19380
19834
|
parameters: [],
|
|
19381
|
-
tags: ["flask"
|
|
19835
|
+
tags: ["fwk:flask"]
|
|
19382
19836
|
},
|
|
19383
19837
|
{
|
|
19384
19838
|
id: "Semgrep_python.flask.security.audit.hardcoded-config.avoid_hardcoded_config_debug",
|
|
@@ -19388,7 +19842,7 @@ var patterns_default = [
|
|
|
19388
19842
|
enabled: false,
|
|
19389
19843
|
languages: ["Python"],
|
|
19390
19844
|
parameters: [],
|
|
19391
|
-
tags: ["
|
|
19845
|
+
tags: ["security", "hardcodedconfig", "fwk:flask"]
|
|
19392
19846
|
},
|
|
19393
19847
|
{
|
|
19394
19848
|
id: "Semgrep_python.flask.security.audit.hardcoded-config.avoid_hardcoded_config_env",
|
|
@@ -19398,7 +19852,7 @@ var patterns_default = [
|
|
|
19398
19852
|
enabled: false,
|
|
19399
19853
|
languages: ["Python"],
|
|
19400
19854
|
parameters: [],
|
|
19401
|
-
tags: ["
|
|
19855
|
+
tags: ["security", "hardcodedconfig", "fwk:flask"]
|
|
19402
19856
|
},
|
|
19403
19857
|
{
|
|
19404
19858
|
id: "Semgrep_python.flask.security.audit.hardcoded-config.avoid_hardcoded_config_secret_key",
|
|
@@ -19408,7 +19862,7 @@ var patterns_default = [
|
|
|
19408
19862
|
enabled: false,
|
|
19409
19863
|
languages: ["Python"],
|
|
19410
19864
|
parameters: [],
|
|
19411
|
-
tags: ["
|
|
19865
|
+
tags: ["security", "hardcodedconfig", "fwk:flask"]
|
|
19412
19866
|
},
|
|
19413
19867
|
{
|
|
19414
19868
|
id: "Semgrep_python.flask.security.audit.hardcoded-config.avoid_hardcoded_config_testing",
|
|
@@ -19418,7 +19872,7 @@ var patterns_default = [
|
|
|
19418
19872
|
enabled: false,
|
|
19419
19873
|
languages: ["Python"],
|
|
19420
19874
|
parameters: [],
|
|
19421
|
-
tags: ["
|
|
19875
|
+
tags: ["security", "hardcodedconfig", "fwk:flask"]
|
|
19422
19876
|
},
|
|
19423
19877
|
{
|
|
19424
19878
|
id: "Semgrep_python.flask.security.audit.host-header-injection-python.host-header-injection-python",
|
|
@@ -19428,7 +19882,7 @@ var patterns_default = [
|
|
|
19428
19882
|
enabled: false,
|
|
19429
19883
|
languages: ["Python"],
|
|
19430
19884
|
parameters: [],
|
|
19431
|
-
tags: ["
|
|
19885
|
+
tags: ["security", "fwk:flask"]
|
|
19432
19886
|
},
|
|
19433
19887
|
{
|
|
19434
19888
|
id: "Semgrep_python.flask.security.audit.render-template-string.render-template-string",
|
|
@@ -19438,7 +19892,7 @@ var patterns_default = [
|
|
|
19438
19892
|
enabled: false,
|
|
19439
19893
|
languages: ["Python"],
|
|
19440
19894
|
parameters: [],
|
|
19441
|
-
tags: ["
|
|
19895
|
+
tags: ["security", "fwk:flask"]
|
|
19442
19896
|
},
|
|
19443
19897
|
{
|
|
19444
19898
|
id: "Semgrep_python.flask.security.audit.secure-set-cookie.secure-set-cookie",
|
|
@@ -19448,7 +19902,7 @@ var patterns_default = [
|
|
|
19448
19902
|
enabled: false,
|
|
19449
19903
|
languages: ["Python"],
|
|
19450
19904
|
parameters: [],
|
|
19451
|
-
tags: ["
|
|
19905
|
+
tags: ["security", "fwk:flask"]
|
|
19452
19906
|
},
|
|
19453
19907
|
{
|
|
19454
19908
|
id: "Semgrep_python.flask.security.audit.wtf-csrf-disabled.flask-wtf-csrf-disabled",
|
|
@@ -19458,7 +19912,7 @@ var patterns_default = [
|
|
|
19458
19912
|
enabled: false,
|
|
19459
19913
|
languages: ["Python"],
|
|
19460
19914
|
parameters: [],
|
|
19461
|
-
tags: ["
|
|
19915
|
+
tags: ["wtfcsrf", "fwk:flask"]
|
|
19462
19916
|
},
|
|
19463
19917
|
{
|
|
19464
19918
|
id: "Semgrep_python.flask.security.audit.xss.make-response-with-unknown-content.make-response-with-unknown-content",
|
|
@@ -19468,7 +19922,7 @@ var patterns_default = [
|
|
|
19468
19922
|
enabled: false,
|
|
19469
19923
|
languages: ["Python"],
|
|
19470
19924
|
parameters: [],
|
|
19471
|
-
tags: ["flask"]
|
|
19925
|
+
tags: ["fwk:flask"]
|
|
19472
19926
|
},
|
|
19473
19927
|
{
|
|
19474
19928
|
id: "Semgrep_python.flask.security.dangerous-template-string.dangerous-template-string",
|
|
@@ -19478,7 +19932,7 @@ var patterns_default = [
|
|
|
19478
19932
|
enabled: false,
|
|
19479
19933
|
languages: ["Python"],
|
|
19480
19934
|
parameters: [],
|
|
19481
|
-
tags: ["
|
|
19935
|
+
tags: ["security", "fwk:flask"]
|
|
19482
19936
|
},
|
|
19483
19937
|
{
|
|
19484
19938
|
id: "Semgrep_python.flask.security.flask-api-method-string-format.flask-api-method-string-format",
|
|
@@ -19488,7 +19942,7 @@ var patterns_default = [
|
|
|
19488
19942
|
enabled: false,
|
|
19489
19943
|
languages: ["Python"],
|
|
19490
19944
|
parameters: [],
|
|
19491
|
-
tags: ["
|
|
19945
|
+
tags: ["security", "fwk:flask"]
|
|
19492
19946
|
},
|
|
19493
19947
|
{
|
|
19494
19948
|
id: "Semgrep_python.flask.security.hashids-with-flask-secret.hashids-with-flask-secret",
|
|
@@ -19498,7 +19952,7 @@ var patterns_default = [
|
|
|
19498
19952
|
enabled: true,
|
|
19499
19953
|
languages: ["Python"],
|
|
19500
19954
|
parameters: [],
|
|
19501
|
-
tags: ["
|
|
19955
|
+
tags: ["security", "fwk:flask"]
|
|
19502
19956
|
},
|
|
19503
19957
|
{
|
|
19504
19958
|
id: "Semgrep_python.flask.security.injection.csv-writer-injection.csv-writer-injection",
|
|
@@ -19508,7 +19962,7 @@ var patterns_default = [
|
|
|
19508
19962
|
enabled: true,
|
|
19509
19963
|
languages: ["Python"],
|
|
19510
19964
|
parameters: [],
|
|
19511
|
-
tags: ["
|
|
19965
|
+
tags: ["security", "injection", "fwk:flask"]
|
|
19512
19966
|
},
|
|
19513
19967
|
{
|
|
19514
19968
|
id: "Semgrep_python.flask.security.injection.nan-injection.nan-injection",
|
|
@@ -19518,7 +19972,7 @@ var patterns_default = [
|
|
|
19518
19972
|
enabled: true,
|
|
19519
19973
|
languages: ["Python"],
|
|
19520
19974
|
parameters: [],
|
|
19521
|
-
tags: ["
|
|
19975
|
+
tags: ["security", "naninjection", "injection", "fwk:flask"]
|
|
19522
19976
|
},
|
|
19523
19977
|
{
|
|
19524
19978
|
id: "Semgrep_python.flask.security.injection.os-system-injection.os-system-injection",
|
|
@@ -19528,7 +19982,7 @@ var patterns_default = [
|
|
|
19528
19982
|
enabled: true,
|
|
19529
19983
|
languages: ["Python"],
|
|
19530
19984
|
parameters: [],
|
|
19531
|
-
tags: ["
|
|
19985
|
+
tags: ["injection", "fwk:flask"]
|
|
19532
19986
|
},
|
|
19533
19987
|
{
|
|
19534
19988
|
id: "Semgrep_python.flask.security.injection.path-traversal-open.path-traversal-open",
|
|
@@ -19538,7 +19992,7 @@ var patterns_default = [
|
|
|
19538
19992
|
enabled: true,
|
|
19539
19993
|
languages: ["Python"],
|
|
19540
19994
|
parameters: [],
|
|
19541
|
-
tags: ["
|
|
19995
|
+
tags: ["security", "injection", "pathtraversal", "fwk:flask"]
|
|
19542
19996
|
},
|
|
19543
19997
|
{
|
|
19544
19998
|
id: "Semgrep_python.flask.security.injection.raw-html-concat.raw-html-format",
|
|
@@ -19548,7 +20002,7 @@ var patterns_default = [
|
|
|
19548
20002
|
enabled: true,
|
|
19549
20003
|
languages: ["Python"],
|
|
19550
20004
|
parameters: [],
|
|
19551
|
-
tags: ["security", "rawhtmlformat", "injection", "flask", "rawhtmlconcat"]
|
|
20005
|
+
tags: ["security", "rawhtmlformat", "injection", "fwk:flask", "rawhtmlconcat"]
|
|
19552
20006
|
},
|
|
19553
20007
|
{
|
|
19554
20008
|
id: "Semgrep_python.flask.security.injection.ssrf-requests.ssrf-requests",
|
|
@@ -19558,7 +20012,7 @@ var patterns_default = [
|
|
|
19558
20012
|
enabled: true,
|
|
19559
20013
|
languages: ["Python"],
|
|
19560
20014
|
parameters: [],
|
|
19561
|
-
tags: ["
|
|
20015
|
+
tags: ["ssrf", "security", "injection", "fwk:flask"]
|
|
19562
20016
|
},
|
|
19563
20017
|
{
|
|
19564
20018
|
id: "Semgrep_python.flask.security.injection.subprocess-injection.subprocess-injection",
|
|
@@ -19568,7 +20022,7 @@ var patterns_default = [
|
|
|
19568
20022
|
enabled: true,
|
|
19569
20023
|
languages: ["Python"],
|
|
19570
20024
|
parameters: [],
|
|
19571
|
-
tags: ["
|
|
20025
|
+
tags: ["security", "subprocessinjection", "injection", "fwk:flask"]
|
|
19572
20026
|
},
|
|
19573
20027
|
{
|
|
19574
20028
|
id: "Semgrep_python.flask.security.injection.tainted-sql-string.tainted-sql-string",
|
|
@@ -19578,7 +20032,7 @@ var patterns_default = [
|
|
|
19578
20032
|
enabled: true,
|
|
19579
20033
|
languages: ["Python"],
|
|
19580
20034
|
parameters: [],
|
|
19581
|
-
tags: ["
|
|
20035
|
+
tags: ["security", "taintedsqlstring", "injection", "fwk:flask"]
|
|
19582
20036
|
},
|
|
19583
20037
|
{
|
|
19584
20038
|
id: "Semgrep_python.flask.security.injection.tainted-url-host.tainted-url-host",
|
|
@@ -19588,7 +20042,7 @@ var patterns_default = [
|
|
|
19588
20042
|
enabled: true,
|
|
19589
20043
|
languages: ["Python"],
|
|
19590
20044
|
parameters: [],
|
|
19591
|
-
tags: ["
|
|
20045
|
+
tags: ["security", "injection", "fwk:flask"]
|
|
19592
20046
|
},
|
|
19593
20047
|
{
|
|
19594
20048
|
id: "Semgrep_python.flask.security.injection.user-eval.eval-injection",
|
|
@@ -19598,7 +20052,7 @@ var patterns_default = [
|
|
|
19598
20052
|
enabled: true,
|
|
19599
20053
|
languages: ["Python"],
|
|
19600
20054
|
parameters: [],
|
|
19601
|
-
tags: ["security", "usereval", "injection", "flask", "evalinjection"]
|
|
20055
|
+
tags: ["security", "usereval", "injection", "fwk:flask", "evalinjection"]
|
|
19602
20056
|
},
|
|
19603
20057
|
{
|
|
19604
20058
|
id: "Semgrep_python.flask.security.injection.user-exec.exec-injection",
|
|
@@ -19608,7 +20062,7 @@ var patterns_default = [
|
|
|
19608
20062
|
enabled: true,
|
|
19609
20063
|
languages: ["Python"],
|
|
19610
20064
|
parameters: [],
|
|
19611
|
-
tags: ["
|
|
20065
|
+
tags: ["execinjection", "fwk:flask"]
|
|
19612
20066
|
},
|
|
19613
20067
|
{
|
|
19614
20068
|
id: "Semgrep_python.flask.security.insecure-deserialization.insecure-deserialization",
|
|
@@ -19618,7 +20072,7 @@ var patterns_default = [
|
|
|
19618
20072
|
enabled: false,
|
|
19619
20073
|
languages: ["Python"],
|
|
19620
20074
|
parameters: [],
|
|
19621
|
-
tags: ["
|
|
20075
|
+
tags: ["security", "fwk:flask"]
|
|
19622
20076
|
},
|
|
19623
20077
|
{
|
|
19624
20078
|
id: "Semgrep_python.flask.security.open-redirect.open-redirect",
|
|
@@ -19628,7 +20082,7 @@ var patterns_default = [
|
|
|
19628
20082
|
enabled: false,
|
|
19629
20083
|
languages: ["Python"],
|
|
19630
20084
|
parameters: [],
|
|
19631
|
-
tags: ["
|
|
20085
|
+
tags: ["security", "fwk:flask"]
|
|
19632
20086
|
},
|
|
19633
20087
|
{
|
|
19634
20088
|
id: "Semgrep_python.flask.security.secure-static-file-serve.avoid_send_file_without_path_sanitization",
|
|
@@ -19638,7 +20092,7 @@ var patterns_default = [
|
|
|
19638
20092
|
enabled: false,
|
|
19639
20093
|
languages: ["Python"],
|
|
19640
20094
|
parameters: [],
|
|
19641
|
-
tags: ["
|
|
20095
|
+
tags: ["security", "fwk:flask"]
|
|
19642
20096
|
},
|
|
19643
20097
|
{
|
|
19644
20098
|
id: "Semgrep_python.flask.security.unescaped-template-extension.unescaped-template-extension",
|
|
@@ -19648,7 +20102,7 @@ var patterns_default = [
|
|
|
19648
20102
|
enabled: false,
|
|
19649
20103
|
languages: ["Python"],
|
|
19650
20104
|
parameters: [],
|
|
19651
|
-
tags: ["
|
|
20105
|
+
tags: ["security", "fwk:flask"]
|
|
19652
20106
|
},
|
|
19653
20107
|
{
|
|
19654
20108
|
id: "Semgrep_python.flask.security.unsanitized-input.response-contains-unsanitized-input",
|
|
@@ -19658,7 +20112,7 @@ var patterns_default = [
|
|
|
19658
20112
|
enabled: false,
|
|
19659
20113
|
languages: ["Python"],
|
|
19660
20114
|
parameters: [],
|
|
19661
|
-
tags: ["
|
|
20115
|
+
tags: ["security", "responsecontainsunsanitizedinput", "unsanitizedinput", "fwk:flask"]
|
|
19662
20116
|
},
|
|
19663
20117
|
{
|
|
19664
20118
|
id: "Semgrep_python.flask.security.xss.audit.direct-use-of-jinja2.direct-use-of-jinja2",
|
|
@@ -19668,7 +20122,7 @@ var patterns_default = [
|
|
|
19668
20122
|
enabled: false,
|
|
19669
20123
|
languages: ["Python"],
|
|
19670
20124
|
parameters: [],
|
|
19671
|
-
tags: ["flask"]
|
|
20125
|
+
tags: ["fwk:flask"]
|
|
19672
20126
|
},
|
|
19673
20127
|
{
|
|
19674
20128
|
id: "Semgrep_python.flask.security.xss.audit.explicit-unescape-with-markup.explicit-unescape-with-markup",
|
|
@@ -19678,7 +20132,7 @@ var patterns_default = [
|
|
|
19678
20132
|
enabled: false,
|
|
19679
20133
|
languages: ["Python"],
|
|
19680
20134
|
parameters: [],
|
|
19681
|
-
tags: ["
|
|
20135
|
+
tags: ["security", "xss", "fwk:flask"]
|
|
19682
20136
|
},
|
|
19683
20137
|
{
|
|
19684
20138
|
id: "Semgrep_python.flask.security.xss.audit.template-autoescape-off.template-autoescape-off",
|
|
@@ -19688,7 +20142,7 @@ var patterns_default = [
|
|
|
19688
20142
|
enabled: false,
|
|
19689
20143
|
languages: ["Python"],
|
|
19690
20144
|
parameters: [],
|
|
19691
|
-
tags: ["
|
|
20145
|
+
tags: ["security", "xss", "fwk:flask"]
|
|
19692
20146
|
},
|
|
19693
20147
|
{
|
|
19694
20148
|
id: "Semgrep_python.flask.security.xss.audit.template-unescaped-with-safe.template-unescaped-with-safe",
|
|
@@ -19698,7 +20152,7 @@ var patterns_default = [
|
|
|
19698
20152
|
enabled: false,
|
|
19699
20153
|
languages: ["Python"],
|
|
19700
20154
|
parameters: [],
|
|
19701
|
-
tags: ["
|
|
20155
|
+
tags: ["security", "xss", "fwk:flask"]
|
|
19702
20156
|
},
|
|
19703
20157
|
{
|
|
19704
20158
|
id: "Semgrep_python.flask.security.xss.audit.template-unquoted-attribute-var.template-unquoted-attribute-var",
|
|
@@ -19708,7 +20162,7 @@ var patterns_default = [
|
|
|
19708
20162
|
enabled: false,
|
|
19709
20163
|
languages: ["Python"],
|
|
19710
20164
|
parameters: [],
|
|
19711
|
-
tags: ["security", "xss", "flask"]
|
|
20165
|
+
tags: ["security", "xss", "fwk:flask"]
|
|
19712
20166
|
},
|
|
19713
20167
|
{
|
|
19714
20168
|
id: "Semgrep_python_ftp_rule-ftplib",
|
|
@@ -19727,7 +20181,7 @@ var patterns_default = [
|
|
|
19727
20181
|
enabled: true,
|
|
19728
20182
|
languages: ["Python"],
|
|
19729
20183
|
parameters: [],
|
|
19730
|
-
tags: ["jinja2"]
|
|
20184
|
+
tags: ["fwk:flask", "lib:jinja2"]
|
|
19731
20185
|
},
|
|
19732
20186
|
{
|
|
19733
20187
|
id: "Semgrep_python.jinja2.security.audit.missing-autoescape-disabled.missing-autoescape-disabled",
|
|
@@ -19737,7 +20191,7 @@ var patterns_default = [
|
|
|
19737
20191
|
enabled: true,
|
|
19738
20192
|
languages: ["Python"],
|
|
19739
20193
|
parameters: [],
|
|
19740
|
-
tags: ["jinja2"]
|
|
20194
|
+
tags: ["fwk:flask", "lib:jinja2"]
|
|
19741
20195
|
},
|
|
19742
20196
|
{
|
|
19743
20197
|
id: "Semgrep_python_jwt_rule-jwt-none-alg",
|
|
@@ -20711,7 +21165,7 @@ var patterns_default = [
|
|
|
20711
21165
|
enabled: true,
|
|
20712
21166
|
languages: ["Python"],
|
|
20713
21167
|
parameters: [],
|
|
20714
|
-
tags: ["requests"]
|
|
21168
|
+
tags: ["lib:requests"]
|
|
20715
21169
|
},
|
|
20716
21170
|
{
|
|
20717
21171
|
id: "Semgrep_python.lang.security.audit.insecure-transport.requests.request-session-with-http.request-session-with-http",
|
|
@@ -20721,7 +21175,7 @@ var patterns_default = [
|
|
|
20721
21175
|
enabled: true,
|
|
20722
21176
|
languages: ["Python"],
|
|
20723
21177
|
parameters: [],
|
|
20724
|
-
tags: ["security", "insecuretransport", "requests"]
|
|
21178
|
+
tags: ["security", "insecuretransport", "lib:requests"]
|
|
20725
21179
|
},
|
|
20726
21180
|
{
|
|
20727
21181
|
id: "Semgrep_python.lang.security.audit.insecure-transport.requests.request-with-http.request-with-http",
|
|
@@ -20955,7 +21409,7 @@ var patterns_default = [
|
|
|
20955
21409
|
enabled: false,
|
|
20956
21410
|
languages: ["Python"],
|
|
20957
21411
|
parameters: [],
|
|
20958
|
-
tags: ["
|
|
21412
|
+
tags: ["security", "lib:paramiko"]
|
|
20959
21413
|
},
|
|
20960
21414
|
{
|
|
20961
21415
|
id: "Semgrep_python.lang.security.audit.paramiko.paramiko-exec-command.paramiko-exec-command",
|
|
@@ -20965,7 +21419,7 @@ var patterns_default = [
|
|
|
20965
21419
|
enabled: false,
|
|
20966
21420
|
languages: ["Python"],
|
|
20967
21421
|
parameters: [],
|
|
20968
|
-
tags: ["security", "paramiko"]
|
|
21422
|
+
tags: ["security", "lib:paramiko"]
|
|
20969
21423
|
},
|
|
20970
21424
|
{
|
|
20971
21425
|
id: "Semgrep_python.lang.security.audit.python-reverse-shell.python-reverse-shell",
|
|
@@ -21313,7 +21767,7 @@ var patterns_default = [
|
|
|
21313
21767
|
enabled: true,
|
|
21314
21768
|
languages: ["Python"],
|
|
21315
21769
|
parameters: [],
|
|
21316
|
-
tags: ["
|
|
21770
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21317
21771
|
},
|
|
21318
21772
|
{
|
|
21319
21773
|
id: "Semgrep_python.pycryptodome.security.insecure-cipher-algorithm-des.insecure-cipher-algorithm-des",
|
|
@@ -21323,7 +21777,7 @@ var patterns_default = [
|
|
|
21323
21777
|
enabled: true,
|
|
21324
21778
|
languages: ["Python"],
|
|
21325
21779
|
parameters: [],
|
|
21326
|
-
tags: ["
|
|
21780
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21327
21781
|
},
|
|
21328
21782
|
{
|
|
21329
21783
|
id: "Semgrep_python.pycryptodome.security.insecure-cipher-algorithm.insecure-cipher-algorithm-xor",
|
|
@@ -21333,7 +21787,7 @@ var patterns_default = [
|
|
|
21333
21787
|
enabled: true,
|
|
21334
21788
|
languages: ["Python"],
|
|
21335
21789
|
parameters: [],
|
|
21336
|
-
tags: ["
|
|
21790
|
+
tags: ["security", "insecurecipheralgorithm", "lib:pycryptodome"]
|
|
21337
21791
|
},
|
|
21338
21792
|
{
|
|
21339
21793
|
id: "Semgrep_python.pycryptodome.security.insecure-cipher-algorithm-rc2.insecure-cipher-algorithm-rc2",
|
|
@@ -21343,7 +21797,7 @@ var patterns_default = [
|
|
|
21343
21797
|
enabled: true,
|
|
21344
21798
|
languages: ["Python"],
|
|
21345
21799
|
parameters: [],
|
|
21346
|
-
tags: ["
|
|
21800
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21347
21801
|
},
|
|
21348
21802
|
{
|
|
21349
21803
|
id: "Semgrep_python.pycryptodome.security.insecure-cipher-algorithm-rc4.insecure-cipher-algorithm-rc4",
|
|
@@ -21353,7 +21807,7 @@ var patterns_default = [
|
|
|
21353
21807
|
enabled: true,
|
|
21354
21808
|
languages: ["Python"],
|
|
21355
21809
|
parameters: [],
|
|
21356
|
-
tags: ["
|
|
21810
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21357
21811
|
},
|
|
21358
21812
|
{
|
|
21359
21813
|
id: "Semgrep_python.pycryptodome.security.insecure-hash-algorithm.insecure-hash-algorithm-sha1",
|
|
@@ -21363,7 +21817,7 @@ var patterns_default = [
|
|
|
21363
21817
|
enabled: true,
|
|
21364
21818
|
languages: ["Python"],
|
|
21365
21819
|
parameters: [],
|
|
21366
|
-
tags: ["
|
|
21820
|
+
tags: ["security", "insecurehashalgorithm", "lib:pycryptodome"]
|
|
21367
21821
|
},
|
|
21368
21822
|
{
|
|
21369
21823
|
id: "Semgrep_python.pycryptodome.security.insecure-hash-algorithm-md2.insecure-hash-algorithm-md2",
|
|
@@ -21373,7 +21827,7 @@ var patterns_default = [
|
|
|
21373
21827
|
enabled: true,
|
|
21374
21828
|
languages: ["Python"],
|
|
21375
21829
|
parameters: [],
|
|
21376
|
-
tags: ["
|
|
21830
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21377
21831
|
},
|
|
21378
21832
|
{
|
|
21379
21833
|
id: "Semgrep_python.pycryptodome.security.insecure-hash-algorithm-md4.insecure-hash-algorithm-md4",
|
|
@@ -21383,7 +21837,7 @@ var patterns_default = [
|
|
|
21383
21837
|
enabled: true,
|
|
21384
21838
|
languages: ["Python"],
|
|
21385
21839
|
parameters: [],
|
|
21386
|
-
tags: ["
|
|
21840
|
+
tags: ["security", "insecurehashalgorithmmd4", "lib:pycryptodome"]
|
|
21387
21841
|
},
|
|
21388
21842
|
{
|
|
21389
21843
|
id: "Semgrep_python.pycryptodome.security.insecure-hash-algorithm-md5.insecure-hash-algorithm-md5",
|
|
@@ -21393,7 +21847,7 @@ var patterns_default = [
|
|
|
21393
21847
|
enabled: true,
|
|
21394
21848
|
languages: ["Python"],
|
|
21395
21849
|
parameters: [],
|
|
21396
|
-
tags: ["
|
|
21850
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21397
21851
|
},
|
|
21398
21852
|
{
|
|
21399
21853
|
id: "Semgrep_python.pycryptodome.security.insufficient-dsa-key-size.insufficient-dsa-key-size",
|
|
@@ -21403,7 +21857,7 @@ var patterns_default = [
|
|
|
21403
21857
|
enabled: true,
|
|
21404
21858
|
languages: ["Python"],
|
|
21405
21859
|
parameters: [],
|
|
21406
|
-
tags: ["
|
|
21860
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21407
21861
|
},
|
|
21408
21862
|
{
|
|
21409
21863
|
id: "Semgrep_python.pycryptodome.security.insufficient-rsa-key-size.insufficient-rsa-key-size",
|
|
@@ -21413,7 +21867,7 @@ var patterns_default = [
|
|
|
21413
21867
|
enabled: true,
|
|
21414
21868
|
languages: ["Python"],
|
|
21415
21869
|
parameters: [],
|
|
21416
|
-
tags: ["
|
|
21870
|
+
tags: ["security", "lib:pycryptodome"]
|
|
21417
21871
|
},
|
|
21418
21872
|
{
|
|
21419
21873
|
id: "Semgrep_python.pycryptodome.security.mode-without-authentication.crypto-mode-without-authentication",
|
|
@@ -21423,7 +21877,7 @@ var patterns_default = [
|
|
|
21423
21877
|
enabled: true,
|
|
21424
21878
|
languages: ["Python"],
|
|
21425
21879
|
parameters: [],
|
|
21426
|
-
tags: ["pycryptodome"]
|
|
21880
|
+
tags: ["lib:pycryptodome"]
|
|
21427
21881
|
},
|
|
21428
21882
|
{
|
|
21429
21883
|
id: "Semgrep_python.pymongo.security.mongodb.mongo-client-bad-auth",
|
|
@@ -21433,7 +21887,7 @@ var patterns_default = [
|
|
|
21433
21887
|
enabled: true,
|
|
21434
21888
|
languages: ["Python"],
|
|
21435
21889
|
parameters: [],
|
|
21436
|
-
tags: ["pymongo"]
|
|
21890
|
+
tags: ["pymongo", "lib:mongodb", "lib:mongoose"]
|
|
21437
21891
|
},
|
|
21438
21892
|
{
|
|
21439
21893
|
id: "Semgrep_python.pyramid.audit.authtkt-cookie-httponly-unsafe-default.pyramid-authtkt-cookie-httponly-unsafe-default",
|
|
@@ -21443,7 +21897,7 @@ var patterns_default = [
|
|
|
21443
21897
|
enabled: true,
|
|
21444
21898
|
languages: ["Python"],
|
|
21445
21899
|
parameters: [],
|
|
21446
|
-
tags: ["pyramid"]
|
|
21900
|
+
tags: ["fwk:pyramid"]
|
|
21447
21901
|
},
|
|
21448
21902
|
{
|
|
21449
21903
|
id: "Semgrep_python.pyramid.audit.authtkt-cookie-httponly-unsafe-value.pyramid-authtkt-cookie-httponly-unsafe-value",
|
|
@@ -21453,7 +21907,7 @@ var patterns_default = [
|
|
|
21453
21907
|
enabled: true,
|
|
21454
21908
|
languages: ["Python"],
|
|
21455
21909
|
parameters: [],
|
|
21456
|
-
tags: ["pyramid"]
|
|
21910
|
+
tags: ["fwk:pyramid"]
|
|
21457
21911
|
},
|
|
21458
21912
|
{
|
|
21459
21913
|
id: "Semgrep_python.pyramid.audit.authtkt-cookie-samesite.pyramid-authtkt-cookie-samesite",
|
|
@@ -21463,7 +21917,7 @@ var patterns_default = [
|
|
|
21463
21917
|
enabled: true,
|
|
21464
21918
|
languages: ["Python"],
|
|
21465
21919
|
parameters: [],
|
|
21466
|
-
tags: ["
|
|
21920
|
+
tags: ["audit", "authtktcookiesamesite", "fwk:pyramid"]
|
|
21467
21921
|
},
|
|
21468
21922
|
{
|
|
21469
21923
|
id: "Semgrep_python.pyramid.audit.authtkt-cookie-secure-unsafe-default.pyramid-authtkt-cookie-secure-unsafe-default",
|
|
@@ -21473,7 +21927,7 @@ var patterns_default = [
|
|
|
21473
21927
|
enabled: true,
|
|
21474
21928
|
languages: ["Python"],
|
|
21475
21929
|
parameters: [],
|
|
21476
|
-
tags: ["pyramid"]
|
|
21930
|
+
tags: ["fwk:pyramid"]
|
|
21477
21931
|
},
|
|
21478
21932
|
{
|
|
21479
21933
|
id: "Semgrep_python.pyramid.audit.authtkt-cookie-secure-unsafe-value.pyramid-authtkt-cookie-secure-unsafe-value",
|
|
@@ -21483,7 +21937,7 @@ var patterns_default = [
|
|
|
21483
21937
|
enabled: true,
|
|
21484
21938
|
languages: ["Python"],
|
|
21485
21939
|
parameters: [],
|
|
21486
|
-
tags: ["pyramid"]
|
|
21940
|
+
tags: ["fwk:pyramid"]
|
|
21487
21941
|
},
|
|
21488
21942
|
{
|
|
21489
21943
|
id: "Semgrep_python.pyramid.audit.csrf-check-disabled.pyramid-csrf-check-disabled",
|
|
@@ -21493,7 +21947,7 @@ var patterns_default = [
|
|
|
21493
21947
|
enabled: false,
|
|
21494
21948
|
languages: ["Python"],
|
|
21495
21949
|
parameters: [],
|
|
21496
|
-
tags: ["pyramid"]
|
|
21950
|
+
tags: ["fwk:pyramid"]
|
|
21497
21951
|
},
|
|
21498
21952
|
{
|
|
21499
21953
|
id: "Semgrep_python.pyramid.audit.csrf-origin-check-disabled-globally.pyramid-csrf-origin-check-disabled-globally",
|
|
@@ -21503,7 +21957,7 @@ var patterns_default = [
|
|
|
21503
21957
|
enabled: true,
|
|
21504
21958
|
languages: ["Python"],
|
|
21505
21959
|
parameters: [],
|
|
21506
|
-
tags: ["pyramid"]
|
|
21960
|
+
tags: ["fwk:pyramid"]
|
|
21507
21961
|
},
|
|
21508
21962
|
{
|
|
21509
21963
|
id: "Semgrep_python.pyramid.audit.csrf-origin-check-disabled.pyramid-csrf-origin-check-disabled",
|
|
@@ -21513,7 +21967,7 @@ var patterns_default = [
|
|
|
21513
21967
|
enabled: true,
|
|
21514
21968
|
languages: ["Python"],
|
|
21515
21969
|
parameters: [],
|
|
21516
|
-
tags: ["
|
|
21970
|
+
tags: ["csrf", "fwk:pyramid"]
|
|
21517
21971
|
},
|
|
21518
21972
|
{
|
|
21519
21973
|
id: "Semgrep_python.pyramid.audit.set-cookie-httponly-unsafe-default.pyramid-set-cookie-httponly-unsafe-default",
|
|
@@ -21523,7 +21977,7 @@ var patterns_default = [
|
|
|
21523
21977
|
enabled: true,
|
|
21524
21978
|
languages: ["Python"],
|
|
21525
21979
|
parameters: [],
|
|
21526
|
-
tags: ["pyramid"]
|
|
21980
|
+
tags: ["fwk:pyramid"]
|
|
21527
21981
|
},
|
|
21528
21982
|
{
|
|
21529
21983
|
id: "Semgrep_python.pyramid.audit.set-cookie-httponly-unsafe-value.pyramid-set-cookie-httponly-unsafe-value",
|
|
@@ -21533,7 +21987,7 @@ var patterns_default = [
|
|
|
21533
21987
|
enabled: true,
|
|
21534
21988
|
languages: ["Python"],
|
|
21535
21989
|
parameters: [],
|
|
21536
|
-
tags: ["pyramid"]
|
|
21990
|
+
tags: ["fwk:pyramid"]
|
|
21537
21991
|
},
|
|
21538
21992
|
{
|
|
21539
21993
|
id: "Semgrep_python.pyramid.audit.set-cookie-samesite-unsafe-default.pyramid-set-cookie-samesite-unsafe-default",
|
|
@@ -21543,7 +21997,7 @@ var patterns_default = [
|
|
|
21543
21997
|
enabled: true,
|
|
21544
21998
|
languages: ["Python"],
|
|
21545
21999
|
parameters: [],
|
|
21546
|
-
tags: ["pyramid"]
|
|
22000
|
+
tags: ["fwk:pyramid"]
|
|
21547
22001
|
},
|
|
21548
22002
|
{
|
|
21549
22003
|
id: "Semgrep_python.pyramid.audit.set-cookie-samesite-unsafe-value.pyramid-set-cookie-samesite-unsafe-value",
|
|
@@ -21553,7 +22007,7 @@ var patterns_default = [
|
|
|
21553
22007
|
enabled: true,
|
|
21554
22008
|
languages: ["Python"],
|
|
21555
22009
|
parameters: [],
|
|
21556
|
-
tags: ["
|
|
22010
|
+
tags: ["audit", "fwk:pyramid"]
|
|
21557
22011
|
},
|
|
21558
22012
|
{
|
|
21559
22013
|
id: "Semgrep_python.pyramid.audit.set-cookie-secure-unsafe-default.pyramid-set-cookie-secure-unsafe-default",
|
|
@@ -21563,7 +22017,7 @@ var patterns_default = [
|
|
|
21563
22017
|
enabled: true,
|
|
21564
22018
|
languages: ["Python"],
|
|
21565
22019
|
parameters: [],
|
|
21566
|
-
tags: ["pyramid"]
|
|
22020
|
+
tags: ["fwk:pyramid"]
|
|
21567
22021
|
},
|
|
21568
22022
|
{
|
|
21569
22023
|
id: "Semgrep_python.pyramid.audit.set-cookie-secure-unsafe-value.pyramid-set-cookie-secure-unsafe-value",
|
|
@@ -21573,7 +22027,7 @@ var patterns_default = [
|
|
|
21573
22027
|
enabled: true,
|
|
21574
22028
|
languages: ["Python"],
|
|
21575
22029
|
parameters: [],
|
|
21576
|
-
tags: ["
|
|
22030
|
+
tags: ["audit", "fwk:pyramid"]
|
|
21577
22031
|
},
|
|
21578
22032
|
{
|
|
21579
22033
|
id: "Semgrep_python_pyramid_rule-pyramid-csrf-origin-check",
|
|
@@ -21592,7 +22046,7 @@ var patterns_default = [
|
|
|
21592
22046
|
enabled: true,
|
|
21593
22047
|
languages: ["Python"],
|
|
21594
22048
|
parameters: [],
|
|
21595
|
-
tags: ["
|
|
22049
|
+
tags: ["csrf", "fwk:pyramid"]
|
|
21596
22050
|
},
|
|
21597
22051
|
{
|
|
21598
22052
|
id: "Semgrep_python.pyramid.security.direct-use-of-response.pyramid-direct-use-of-response",
|
|
@@ -21602,7 +22056,7 @@ var patterns_default = [
|
|
|
21602
22056
|
enabled: true,
|
|
21603
22057
|
languages: ["Python"],
|
|
21604
22058
|
parameters: [],
|
|
21605
|
-
tags: ["
|
|
22059
|
+
tags: ["security", "directuseofresponse", "fwk:pyramid"]
|
|
21606
22060
|
},
|
|
21607
22061
|
{
|
|
21608
22062
|
id: "Semgrep_python.pyramid.security.sqlalchemy-sql-injection.pyramid-sqlalchemy-sql-injection",
|
|
@@ -21612,7 +22066,7 @@ var patterns_default = [
|
|
|
21612
22066
|
enabled: true,
|
|
21613
22067
|
languages: ["Python"],
|
|
21614
22068
|
parameters: [],
|
|
21615
|
-
tags: ["
|
|
22069
|
+
tags: ["security", "fwk:pyramid", "lib:sqlalchemy"]
|
|
21616
22070
|
},
|
|
21617
22071
|
{
|
|
21618
22072
|
id: "Semgrep_python_random_rule-random",
|
|
@@ -21631,7 +22085,7 @@ var patterns_default = [
|
|
|
21631
22085
|
enabled: false,
|
|
21632
22086
|
languages: ["Python"],
|
|
21633
22087
|
parameters: [],
|
|
21634
|
-
tags: ["requests"]
|
|
22088
|
+
tags: ["lib:requests"]
|
|
21635
22089
|
},
|
|
21636
22090
|
{
|
|
21637
22091
|
id: "Semgrep_python.requests.best-practice.use-request-json-shortcut.python.requests.best-practice.use-request-json-shortcut",
|
|
@@ -21641,7 +22095,7 @@ var patterns_default = [
|
|
|
21641
22095
|
enabled: false,
|
|
21642
22096
|
languages: ["Python"],
|
|
21643
22097
|
parameters: [],
|
|
21644
|
-
tags: ["requests"]
|
|
22098
|
+
tags: ["lib:requests"]
|
|
21645
22099
|
},
|
|
21646
22100
|
{
|
|
21647
22101
|
id: "Semgrep_python.requests.best-practice.use-response-json-shortcut.python.requests.best-practice.use-response-json-shortcut",
|
|
@@ -21651,7 +22105,7 @@ var patterns_default = [
|
|
|
21651
22105
|
enabled: false,
|
|
21652
22106
|
languages: ["Python"],
|
|
21653
22107
|
parameters: [],
|
|
21654
|
-
tags: ["requests"]
|
|
22108
|
+
tags: ["lib:requests"]
|
|
21655
22109
|
},
|
|
21656
22110
|
{
|
|
21657
22111
|
id: "Semgrep_python.requests.best-practice.use-timeout.use-timeout",
|
|
@@ -21661,7 +22115,7 @@ var patterns_default = [
|
|
|
21661
22115
|
enabled: false,
|
|
21662
22116
|
languages: ["Python"],
|
|
21663
22117
|
parameters: [],
|
|
21664
|
-
tags: ["requests"]
|
|
22118
|
+
tags: ["lib:requests"]
|
|
21665
22119
|
},
|
|
21666
22120
|
{
|
|
21667
22121
|
id: "Semgrep_python_requests_rule-request-without-timeout",
|
|
@@ -21680,7 +22134,7 @@ var patterns_default = [
|
|
|
21680
22134
|
enabled: false,
|
|
21681
22135
|
languages: ["Python"],
|
|
21682
22136
|
parameters: [],
|
|
21683
|
-
tags: ["requests"]
|
|
22137
|
+
tags: ["lib:requests"]
|
|
21684
22138
|
},
|
|
21685
22139
|
{
|
|
21686
22140
|
id: "Semgrep_python.requests.security.no-auth-over-http.no-auth-over-http",
|
|
@@ -21690,7 +22144,7 @@ var patterns_default = [
|
|
|
21690
22144
|
enabled: false,
|
|
21691
22145
|
languages: ["Python"],
|
|
21692
22146
|
parameters: [],
|
|
21693
|
-
tags: ["
|
|
22147
|
+
tags: ["security", "lib:requests"]
|
|
21694
22148
|
},
|
|
21695
22149
|
{
|
|
21696
22150
|
id: "Semgrep_python.sh.security.string-concat.string-concat",
|
|
@@ -21728,7 +22182,7 @@ var patterns_default = [
|
|
|
21728
22182
|
enabled: false,
|
|
21729
22183
|
languages: ["Python"],
|
|
21730
22184
|
parameters: [],
|
|
21731
|
-
tags: ["sqlalchemy"]
|
|
22185
|
+
tags: ["lib:sqlalchemy"]
|
|
21732
22186
|
},
|
|
21733
22187
|
{
|
|
21734
22188
|
id: "Semgrep_python.sqlalchemy.correctness.delete-where.delete-where-no-execute",
|
|
@@ -21737,7 +22191,8 @@ var patterns_default = [
|
|
|
21737
22191
|
title: "Avoid .delete().where(...) without execution in SQLAlchemy",
|
|
21738
22192
|
enabled: false,
|
|
21739
22193
|
languages: ["Python"],
|
|
21740
|
-
parameters: []
|
|
22194
|
+
parameters: [],
|
|
22195
|
+
tags: ["lib:sqlalchemy"]
|
|
21741
22196
|
},
|
|
21742
22197
|
{
|
|
21743
22198
|
id: "Semgrep_python.sqlalchemy.performance.performance-improvements.batch-import",
|
|
@@ -21746,7 +22201,8 @@ var patterns_default = [
|
|
|
21746
22201
|
title: "Enforce Batch Import for Performance Improvements",
|
|
21747
22202
|
enabled: false,
|
|
21748
22203
|
languages: ["Python"],
|
|
21749
|
-
parameters: []
|
|
22204
|
+
parameters: [],
|
|
22205
|
+
tags: ["lib:sqlalchemy"]
|
|
21750
22206
|
},
|
|
21751
22207
|
{
|
|
21752
22208
|
id: "Semgrep_python.sqlalchemy.performance.performance-improvements.len-all-count",
|
|
@@ -21756,7 +22212,7 @@ var patterns_default = [
|
|
|
21756
22212
|
enabled: false,
|
|
21757
22213
|
languages: ["Python"],
|
|
21758
22214
|
parameters: [],
|
|
21759
|
-
tags: ["sqlalchemy"]
|
|
22215
|
+
tags: ["lib:sqlalchemy"]
|
|
21760
22216
|
},
|
|
21761
22217
|
{
|
|
21762
22218
|
id: "Semgrep_python.sqlalchemy.security.audit.avoid-sqlalchemy-text.avoid-sqlalchemy-text",
|
|
@@ -21766,7 +22222,7 @@ var patterns_default = [
|
|
|
21766
22222
|
enabled: true,
|
|
21767
22223
|
languages: ["Python"],
|
|
21768
22224
|
parameters: [],
|
|
21769
|
-
tags: ["
|
|
22225
|
+
tags: ["security", "lib:sqlalchemy"]
|
|
21770
22226
|
},
|
|
21771
22227
|
{
|
|
21772
22228
|
id: "Semgrep_python.sqlalchemy.security.sqlalchemy-execute-raw-query.sqlalchemy-execute-raw-query",
|
|
@@ -21776,7 +22232,7 @@ var patterns_default = [
|
|
|
21776
22232
|
enabled: false,
|
|
21777
22233
|
languages: ["Python"],
|
|
21778
22234
|
parameters: [],
|
|
21779
|
-
tags: ["
|
|
22235
|
+
tags: ["security", "lib:sqlalchemy"]
|
|
21780
22236
|
},
|
|
21781
22237
|
{
|
|
21782
22238
|
id: "Semgrep_python.sqlalchemy.security.sqlalchemy-sql-injection.sqlalchemy-sql-injection",
|
|
@@ -21786,7 +22242,7 @@ var patterns_default = [
|
|
|
21786
22242
|
enabled: true,
|
|
21787
22243
|
languages: ["Python"],
|
|
21788
22244
|
parameters: [],
|
|
21789
|
-
tags: ["
|
|
22245
|
+
tags: ["security", "lib:sqlalchemy"]
|
|
21790
22246
|
},
|
|
21791
22247
|
{
|
|
21792
22248
|
id: "Semgrep_python_sql_rule-hardcoded-sql-expression",
|
|
@@ -21877,7 +22333,7 @@ var patterns_default = [
|
|
|
21877
22333
|
enabled: true,
|
|
21878
22334
|
languages: ["Python"],
|
|
21879
22335
|
parameters: [],
|
|
21880
|
-
tags: ["
|
|
22336
|
+
tags: ["security", "lib:twilio"]
|
|
21881
22337
|
},
|
|
21882
22338
|
{
|
|
21883
22339
|
id: "Semgrep_python_urlopen_rule-urllib-urlopen",
|
|
@@ -21968,7 +22424,15 @@ var patterns_default = [
|
|
|
21968
22424
|
enabled: true,
|
|
21969
22425
|
languages: ["Ruby"],
|
|
21970
22426
|
parameters: [],
|
|
21971
|
-
tags: [
|
|
22427
|
+
tags: [
|
|
22428
|
+
"lib:aws-sdk",
|
|
22429
|
+
"fwk:cloudformation",
|
|
22430
|
+
"lib:boto3",
|
|
22431
|
+
"fwk:serverless-framework",
|
|
22432
|
+
"fwk:aws-cdk",
|
|
22433
|
+
"lib:aws-sdk-go",
|
|
22434
|
+
"awslambda"
|
|
22435
|
+
]
|
|
21972
22436
|
},
|
|
21973
22437
|
{
|
|
21974
22438
|
id: "Semgrep_ruby.aws-lambda.security.mysql2-sqli.mysql2-sqli",
|
|
@@ -21978,7 +22442,15 @@ var patterns_default = [
|
|
|
21978
22442
|
enabled: true,
|
|
21979
22443
|
languages: ["Ruby"],
|
|
21980
22444
|
parameters: [],
|
|
21981
|
-
tags: [
|
|
22445
|
+
tags: [
|
|
22446
|
+
"lib:aws-sdk",
|
|
22447
|
+
"fwk:cloudformation",
|
|
22448
|
+
"lib:boto3",
|
|
22449
|
+
"fwk:serverless-framework",
|
|
22450
|
+
"fwk:aws-cdk",
|
|
22451
|
+
"lib:aws-sdk-go",
|
|
22452
|
+
"awslambda"
|
|
22453
|
+
]
|
|
21982
22454
|
},
|
|
21983
22455
|
{
|
|
21984
22456
|
id: "Semgrep_ruby.aws-lambda.security.pg-sqli.pg-sqli",
|
|
@@ -21988,7 +22460,15 @@ var patterns_default = [
|
|
|
21988
22460
|
enabled: true,
|
|
21989
22461
|
languages: ["Ruby"],
|
|
21990
22462
|
parameters: [],
|
|
21991
|
-
tags: [
|
|
22463
|
+
tags: [
|
|
22464
|
+
"lib:aws-sdk",
|
|
22465
|
+
"fwk:cloudformation",
|
|
22466
|
+
"lib:boto3",
|
|
22467
|
+
"fwk:serverless-framework",
|
|
22468
|
+
"fwk:aws-cdk",
|
|
22469
|
+
"lib:aws-sdk-go",
|
|
22470
|
+
"awslambda"
|
|
22471
|
+
]
|
|
21992
22472
|
},
|
|
21993
22473
|
{
|
|
21994
22474
|
id: "Semgrep_ruby.aws-lambda.security.sequel-sqli.sequel-sqli",
|
|
@@ -21998,7 +22478,15 @@ var patterns_default = [
|
|
|
21998
22478
|
enabled: true,
|
|
21999
22479
|
languages: ["Ruby"],
|
|
22000
22480
|
parameters: [],
|
|
22001
|
-
tags: [
|
|
22481
|
+
tags: [
|
|
22482
|
+
"lib:aws-sdk",
|
|
22483
|
+
"fwk:cloudformation",
|
|
22484
|
+
"lib:boto3",
|
|
22485
|
+
"fwk:serverless-framework",
|
|
22486
|
+
"fwk:aws-cdk",
|
|
22487
|
+
"lib:aws-sdk-go",
|
|
22488
|
+
"awslambda"
|
|
22489
|
+
]
|
|
22002
22490
|
},
|
|
22003
22491
|
{
|
|
22004
22492
|
id: "Semgrep_ruby.aws-lambda.security.tainted-deserialization.tainted-deserialization",
|
|
@@ -22008,7 +22496,17 @@ var patterns_default = [
|
|
|
22008
22496
|
enabled: true,
|
|
22009
22497
|
languages: ["Ruby"],
|
|
22010
22498
|
parameters: [],
|
|
22011
|
-
tags: [
|
|
22499
|
+
tags: [
|
|
22500
|
+
"lib:aws-sdk",
|
|
22501
|
+
"fwk:cloudformation",
|
|
22502
|
+
"security",
|
|
22503
|
+
"lib:boto3",
|
|
22504
|
+
"fwk:serverless-framework",
|
|
22505
|
+
"tainteddeserialization",
|
|
22506
|
+
"fwk:aws-cdk",
|
|
22507
|
+
"lib:aws-sdk-go",
|
|
22508
|
+
"awslambda"
|
|
22509
|
+
]
|
|
22012
22510
|
},
|
|
22013
22511
|
{
|
|
22014
22512
|
id: "Semgrep_ruby.aws-lambda.security.tainted-sql-string.tainted-sql-string",
|
|
@@ -22018,7 +22516,16 @@ var patterns_default = [
|
|
|
22018
22516
|
enabled: true,
|
|
22019
22517
|
languages: ["Ruby"],
|
|
22020
22518
|
parameters: [],
|
|
22021
|
-
tags: [
|
|
22519
|
+
tags: [
|
|
22520
|
+
"lib:aws-sdk",
|
|
22521
|
+
"fwk:cloudformation",
|
|
22522
|
+
"security",
|
|
22523
|
+
"lib:boto3",
|
|
22524
|
+
"fwk:serverless-framework",
|
|
22525
|
+
"fwk:aws-cdk",
|
|
22526
|
+
"lib:aws-sdk-go",
|
|
22527
|
+
"awslambda"
|
|
22528
|
+
]
|
|
22022
22529
|
},
|
|
22023
22530
|
{
|
|
22024
22531
|
id: "Semgrep_ruby_cookie_rule-CheckCookieStoreSessionSecurityAttributes",
|
|
@@ -22574,7 +23081,7 @@ var patterns_default = [
|
|
|
22574
23081
|
enabled: false,
|
|
22575
23082
|
languages: ["Ruby"],
|
|
22576
23083
|
parameters: [],
|
|
22577
|
-
tags: ["rails"]
|
|
23084
|
+
tags: ["fwk:ruby-on-rails"]
|
|
22578
23085
|
},
|
|
22579
23086
|
{
|
|
22580
23087
|
id: "Semgrep_ruby.rails.performance.ruby-rails-performance-indexes-are-really-beneficial.ruby-rails-performance-indexes-are-beneficial",
|
|
@@ -22584,7 +23091,7 @@ var patterns_default = [
|
|
|
22584
23091
|
enabled: false,
|
|
22585
23092
|
languages: ["Ruby"],
|
|
22586
23093
|
parameters: [],
|
|
22587
|
-
tags: ["rails"]
|
|
23094
|
+
tags: ["fwk:ruby-on-rails"]
|
|
22588
23095
|
},
|
|
22589
23096
|
{
|
|
22590
23097
|
id: "Semgrep_ruby.rails.security.audit.avoid-session-manipulation.avoid-session-manipulation",
|
|
@@ -22594,7 +23101,7 @@ var patterns_default = [
|
|
|
22594
23101
|
enabled: true,
|
|
22595
23102
|
languages: ["Ruby"],
|
|
22596
23103
|
parameters: [],
|
|
22597
|
-
tags: ["
|
|
23104
|
+
tags: ["security", "fwk:ruby-on-rails"]
|
|
22598
23105
|
},
|
|
22599
23106
|
{
|
|
22600
23107
|
id: "Semgrep_ruby.rails.security.audit.avoid-tainted-file-access.avoid-tainted-file-access",
|
|
@@ -22604,7 +23111,7 @@ var patterns_default = [
|
|
|
22604
23111
|
enabled: true,
|
|
22605
23112
|
languages: ["Ruby"],
|
|
22606
23113
|
parameters: [],
|
|
22607
|
-
tags: ["
|
|
23114
|
+
tags: ["audit", "fwk:ruby-on-rails"]
|
|
22608
23115
|
},
|
|
22609
23116
|
{
|
|
22610
23117
|
id: "Semgrep_ruby.rails.security.audit.avoid-tainted-ftp-call.avoid-tainted-ftp-call",
|
|
@@ -22614,7 +23121,7 @@ var patterns_default = [
|
|
|
22614
23121
|
enabled: true,
|
|
22615
23122
|
languages: ["Ruby"],
|
|
22616
23123
|
parameters: [],
|
|
22617
|
-
tags: ["
|
|
23124
|
+
tags: ["security", "fwk:ruby-on-rails"]
|
|
22618
23125
|
},
|
|
22619
23126
|
{
|
|
22620
23127
|
id: "Semgrep_ruby.rails.security.audit.avoid-tainted-http-request.avoid-tainted-http-request",
|
|
@@ -22624,7 +23131,7 @@ var patterns_default = [
|
|
|
22624
23131
|
enabled: true,
|
|
22625
23132
|
languages: ["Ruby"],
|
|
22626
23133
|
parameters: [],
|
|
22627
|
-
tags: ["
|
|
23134
|
+
tags: ["security", "audit", "fwk:ruby-on-rails"]
|
|
22628
23135
|
},
|
|
22629
23136
|
{
|
|
22630
23137
|
id: "Semgrep_ruby.rails.security.audit.avoid-tainted-shell-call.avoid-tainted-shell-call",
|
|
@@ -22634,7 +23141,7 @@ var patterns_default = [
|
|
|
22634
23141
|
enabled: true,
|
|
22635
23142
|
languages: ["Ruby"],
|
|
22636
23143
|
parameters: [],
|
|
22637
|
-
tags: ["
|
|
23144
|
+
tags: ["security", "audit", "fwk:ruby-on-rails"]
|
|
22638
23145
|
},
|
|
22639
23146
|
{
|
|
22640
23147
|
id: "Semgrep_ruby.rails.security.audit.detailed-exceptions.detailed-exceptions",
|
|
@@ -22644,7 +23151,7 @@ var patterns_default = [
|
|
|
22644
23151
|
enabled: false,
|
|
22645
23152
|
languages: ["Ruby"],
|
|
22646
23153
|
parameters: [],
|
|
22647
|
-
tags: ["
|
|
23154
|
+
tags: ["security", "audit", "fwk:ruby-on-rails"]
|
|
22648
23155
|
},
|
|
22649
23156
|
{
|
|
22650
23157
|
id: "Semgrep_ruby.rails.security.audit.rails-skip-forgery-protection.rails-skip-forgery-protection",
|
|
@@ -22654,7 +23161,7 @@ var patterns_default = [
|
|
|
22654
23161
|
enabled: false,
|
|
22655
23162
|
languages: ["Ruby"],
|
|
22656
23163
|
parameters: [],
|
|
22657
|
-
tags: ["
|
|
23164
|
+
tags: ["security", "fwk:ruby-on-rails"]
|
|
22658
23165
|
},
|
|
22659
23166
|
{
|
|
22660
23167
|
id: "Semgrep_ruby.rails.security.audit.sqli.ruby-pg-sqli.ruby-pg-sqli",
|
|
@@ -22664,7 +23171,7 @@ var patterns_default = [
|
|
|
22664
23171
|
enabled: true,
|
|
22665
23172
|
languages: ["Ruby"],
|
|
22666
23173
|
parameters: [],
|
|
22667
|
-
tags: ["
|
|
23174
|
+
tags: ["security", "sqli", "fwk:ruby-on-rails"]
|
|
22668
23175
|
},
|
|
22669
23176
|
{
|
|
22670
23177
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-content-tag.avoid-content-tag",
|
|
@@ -22674,7 +23181,7 @@ var patterns_default = [
|
|
|
22674
23181
|
enabled: false,
|
|
22675
23182
|
languages: ["Ruby"],
|
|
22676
23183
|
parameters: [],
|
|
22677
|
-
tags: ["
|
|
23184
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22678
23185
|
},
|
|
22679
23186
|
{
|
|
22680
23187
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-default-routes.avoid-default-routes",
|
|
@@ -22684,7 +23191,7 @@ var patterns_default = [
|
|
|
22684
23191
|
enabled: false,
|
|
22685
23192
|
languages: ["Ruby"],
|
|
22686
23193
|
parameters: [],
|
|
22687
|
-
tags: ["
|
|
23194
|
+
tags: ["security", "audit", "xss", "fwk:ruby-on-rails"]
|
|
22688
23195
|
},
|
|
22689
23196
|
{
|
|
22690
23197
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-html-safe.avoid-html-safe",
|
|
@@ -22694,7 +23201,7 @@ var patterns_default = [
|
|
|
22694
23201
|
enabled: false,
|
|
22695
23202
|
languages: ["Ruby"],
|
|
22696
23203
|
parameters: [],
|
|
22697
|
-
tags: ["
|
|
23204
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22698
23205
|
},
|
|
22699
23206
|
{
|
|
22700
23207
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-link-to.avoid-link-to",
|
|
@@ -22704,7 +23211,7 @@ var patterns_default = [
|
|
|
22704
23211
|
enabled: true,
|
|
22705
23212
|
languages: ["Ruby"],
|
|
22706
23213
|
parameters: [],
|
|
22707
|
-
tags: ["
|
|
23214
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22708
23215
|
},
|
|
22709
23216
|
{
|
|
22710
23217
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-raw.avoid-raw",
|
|
@@ -22714,7 +23221,7 @@ var patterns_default = [
|
|
|
22714
23221
|
enabled: false,
|
|
22715
23222
|
languages: ["Ruby"],
|
|
22716
23223
|
parameters: [],
|
|
22717
|
-
tags: ["
|
|
23224
|
+
tags: ["security", "fwk:ruby-on-rails"]
|
|
22718
23225
|
},
|
|
22719
23226
|
{
|
|
22720
23227
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-redirect.avoid-redirect",
|
|
@@ -22724,7 +23231,7 @@ var patterns_default = [
|
|
|
22724
23231
|
enabled: true,
|
|
22725
23232
|
languages: ["Ruby"],
|
|
22726
23233
|
parameters: [],
|
|
22727
|
-
tags: ["audit", "
|
|
23234
|
+
tags: ["audit", "avoidredirect", "security", "xss", "fwk:ruby-on-rails"]
|
|
22728
23235
|
},
|
|
22729
23236
|
{
|
|
22730
23237
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-render-dynamic-path.avoid-render-dynamic-path",
|
|
@@ -22734,7 +23241,7 @@ var patterns_default = [
|
|
|
22734
23241
|
enabled: true,
|
|
22735
23242
|
languages: ["Ruby"],
|
|
22736
23243
|
parameters: [],
|
|
22737
|
-
tags: ["
|
|
23244
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22738
23245
|
},
|
|
22739
23246
|
{
|
|
22740
23247
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-render-inline.avoid-render-inline",
|
|
@@ -22744,7 +23251,7 @@ var patterns_default = [
|
|
|
22744
23251
|
enabled: false,
|
|
22745
23252
|
languages: ["Ruby"],
|
|
22746
23253
|
parameters: [],
|
|
22747
|
-
tags: ["security", "
|
|
23254
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22748
23255
|
},
|
|
22749
23256
|
{
|
|
22750
23257
|
id: "Semgrep_ruby.rails.security.audit.xss.avoid-render-text.avoid-render-text",
|
|
@@ -22754,7 +23261,7 @@ var patterns_default = [
|
|
|
22754
23261
|
enabled: false,
|
|
22755
23262
|
languages: ["Ruby"],
|
|
22756
23263
|
parameters: [],
|
|
22757
|
-
tags: ["
|
|
23264
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22758
23265
|
},
|
|
22759
23266
|
{
|
|
22760
23267
|
id: "Semgrep_ruby.rails.security.audit.xss.manual-template-creation.manual-template-creation",
|
|
@@ -22764,7 +23271,7 @@ var patterns_default = [
|
|
|
22764
23271
|
enabled: false,
|
|
22765
23272
|
languages: ["Ruby"],
|
|
22766
23273
|
parameters: [],
|
|
22767
|
-
tags: ["
|
|
23274
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22768
23275
|
},
|
|
22769
23276
|
{
|
|
22770
23277
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.alias-for-html-safe.alias-for-html-safe",
|
|
@@ -22774,7 +23281,7 @@ var patterns_default = [
|
|
|
22774
23281
|
enabled: false,
|
|
22775
23282
|
languages: ["Ruby"],
|
|
22776
23283
|
parameters: [],
|
|
22777
|
-
tags: ["
|
|
23284
|
+
tags: ["templates", "xss", "fwk:ruby-on-rails"]
|
|
22778
23285
|
},
|
|
22779
23286
|
{
|
|
22780
23287
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.avoid-content-tag.avoid-content-tag",
|
|
@@ -22784,7 +23291,7 @@ var patterns_default = [
|
|
|
22784
23291
|
enabled: false,
|
|
22785
23292
|
languages: ["Ruby"],
|
|
22786
23293
|
parameters: [],
|
|
22787
|
-
tags: ["
|
|
23294
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22788
23295
|
},
|
|
22789
23296
|
{
|
|
22790
23297
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.avoid-html-safe.avoid-html-safe",
|
|
@@ -22794,7 +23301,7 @@ var patterns_default = [
|
|
|
22794
23301
|
enabled: false,
|
|
22795
23302
|
languages: ["Ruby"],
|
|
22796
23303
|
parameters: [],
|
|
22797
|
-
tags: ["
|
|
23304
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22798
23305
|
},
|
|
22799
23306
|
{
|
|
22800
23307
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.avoid-raw.avoid-raw",
|
|
@@ -22804,7 +23311,7 @@ var patterns_default = [
|
|
|
22804
23311
|
enabled: false,
|
|
22805
23312
|
languages: ["Ruby"],
|
|
22806
23313
|
parameters: [],
|
|
22807
|
-
tags: ["
|
|
23314
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22808
23315
|
},
|
|
22809
23316
|
{
|
|
22810
23317
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.dangerous-link-to.dangerous-link-to",
|
|
@@ -22814,7 +23321,7 @@ var patterns_default = [
|
|
|
22814
23321
|
enabled: false,
|
|
22815
23322
|
languages: ["Ruby"],
|
|
22816
23323
|
parameters: [],
|
|
22817
|
-
tags: ["
|
|
23324
|
+
tags: ["security", "templates", "xss", "fwk:ruby-on-rails"]
|
|
22818
23325
|
},
|
|
22819
23326
|
{
|
|
22820
23327
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.unquoted-attribute.unquoted-attribute",
|
|
@@ -22824,7 +23331,7 @@ var patterns_default = [
|
|
|
22824
23331
|
enabled: false,
|
|
22825
23332
|
languages: ["Ruby"],
|
|
22826
23333
|
parameters: [],
|
|
22827
|
-
tags: ["
|
|
23334
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22828
23335
|
},
|
|
22829
23336
|
{
|
|
22830
23337
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.var-in-href.var-in-href",
|
|
@@ -22834,7 +23341,7 @@ var patterns_default = [
|
|
|
22834
23341
|
enabled: false,
|
|
22835
23342
|
languages: ["Ruby"],
|
|
22836
23343
|
parameters: [],
|
|
22837
|
-
tags: ["
|
|
23344
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22838
23345
|
},
|
|
22839
23346
|
{
|
|
22840
23347
|
id: "Semgrep_ruby.rails.security.audit.xss.templates.var-in-script-tag.var-in-script-tag",
|
|
@@ -22844,7 +23351,7 @@ var patterns_default = [
|
|
|
22844
23351
|
enabled: false,
|
|
22845
23352
|
languages: ["Ruby"],
|
|
22846
23353
|
parameters: [],
|
|
22847
|
-
tags: ["
|
|
23354
|
+
tags: ["security", "xss", "fwk:ruby-on-rails"]
|
|
22848
23355
|
},
|
|
22849
23356
|
{
|
|
22850
23357
|
id: "Semgrep_ruby.rails.security.audit.xxe.libxml-backend.libxml-backend",
|
|
@@ -22854,7 +23361,7 @@ var patterns_default = [
|
|
|
22854
23361
|
enabled: false,
|
|
22855
23362
|
languages: ["Ruby"],
|
|
22856
23363
|
parameters: [],
|
|
22857
|
-
tags: ["
|
|
23364
|
+
tags: ["xxe", "fwk:ruby-on-rails"]
|
|
22858
23365
|
},
|
|
22859
23366
|
{
|
|
22860
23367
|
id: "Semgrep_ruby.rails.security.audit.xxe.xml-external-entities-enabled.xml-external-entities-enabled",
|
|
@@ -22864,7 +23371,7 @@ var patterns_default = [
|
|
|
22864
23371
|
enabled: false,
|
|
22865
23372
|
languages: ["Ruby"],
|
|
22866
23373
|
parameters: [],
|
|
22867
|
-
tags: ["
|
|
23374
|
+
tags: ["xxe", "fwk:ruby-on-rails"]
|
|
22868
23375
|
},
|
|
22869
23376
|
{
|
|
22870
23377
|
id: "Semgrep_ruby.rails.security.brakeman.check-before-filter.check-before-filter",
|
|
@@ -22874,7 +23381,7 @@ var patterns_default = [
|
|
|
22874
23381
|
enabled: true,
|
|
22875
23382
|
languages: ["Ruby"],
|
|
22876
23383
|
parameters: [],
|
|
22877
|
-
tags: ["brakeman", "rails"]
|
|
23384
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22878
23385
|
},
|
|
22879
23386
|
{
|
|
22880
23387
|
id: "Semgrep_ruby.rails.security.brakeman.check-cookie-store-session-security-attributes.check-cookie-store-session-security-attributes",
|
|
@@ -22884,7 +23391,7 @@ var patterns_default = [
|
|
|
22884
23391
|
enabled: false,
|
|
22885
23392
|
languages: ["Ruby"],
|
|
22886
23393
|
parameters: [],
|
|
22887
|
-
tags: ["brakeman", "rails"]
|
|
23394
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22888
23395
|
},
|
|
22889
23396
|
{
|
|
22890
23397
|
id: "Semgrep_ruby.rails.security.brakeman.check-dynamic-render-local-file-include.check-dynamic-render-local-file-include",
|
|
@@ -22894,7 +23401,7 @@ var patterns_default = [
|
|
|
22894
23401
|
enabled: true,
|
|
22895
23402
|
languages: ["Ruby"],
|
|
22896
23403
|
parameters: [],
|
|
22897
|
-
tags: ["brakeman", "rails"]
|
|
23404
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22898
23405
|
},
|
|
22899
23406
|
{
|
|
22900
23407
|
id: "Semgrep_ruby.rails.security.brakeman.check-http-verb-confusion.check-http-verb-confusion",
|
|
@@ -22904,7 +23411,7 @@ var patterns_default = [
|
|
|
22904
23411
|
enabled: true,
|
|
22905
23412
|
languages: ["Ruby"],
|
|
22906
23413
|
parameters: [],
|
|
22907
|
-
tags: ["brakeman", "
|
|
23414
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
22908
23415
|
},
|
|
22909
23416
|
{
|
|
22910
23417
|
id: "Semgrep_ruby.rails.security.brakeman.check-permit-attributes-high.check-permit-attributes-high",
|
|
@@ -22914,7 +23421,7 @@ var patterns_default = [
|
|
|
22914
23421
|
enabled: false,
|
|
22915
23422
|
languages: ["Ruby"],
|
|
22916
23423
|
parameters: [],
|
|
22917
|
-
tags: ["brakeman", "
|
|
23424
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
22918
23425
|
},
|
|
22919
23426
|
{
|
|
22920
23427
|
id: "Semgrep_ruby.rails.security.brakeman.check-permit-attributes-medium.check-permit-attributes-medium",
|
|
@@ -22924,7 +23431,7 @@ var patterns_default = [
|
|
|
22924
23431
|
enabled: false,
|
|
22925
23432
|
languages: ["Ruby"],
|
|
22926
23433
|
parameters: [],
|
|
22927
|
-
tags: ["brakeman", "rails"]
|
|
23434
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22928
23435
|
},
|
|
22929
23436
|
{
|
|
22930
23437
|
id: "Semgrep_ruby.rails.security.brakeman.check-rails-secret-yaml.check-rails-secret-yaml",
|
|
@@ -22934,7 +23441,7 @@ var patterns_default = [
|
|
|
22934
23441
|
enabled: false,
|
|
22935
23442
|
languages: ["YAML"],
|
|
22936
23443
|
parameters: [],
|
|
22937
|
-
tags: ["brakeman", "
|
|
23444
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
22938
23445
|
},
|
|
22939
23446
|
{
|
|
22940
23447
|
id: "Semgrep_ruby.rails.security.brakeman.check-rails-session-secret-handling.check-rails-session-secret-handling",
|
|
@@ -22944,7 +23451,7 @@ var patterns_default = [
|
|
|
22944
23451
|
enabled: true,
|
|
22945
23452
|
languages: ["Ruby"],
|
|
22946
23453
|
parameters: [],
|
|
22947
|
-
tags: ["brakeman", "rails"]
|
|
23454
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22948
23455
|
},
|
|
22949
23456
|
{
|
|
22950
23457
|
id: "Semgrep_ruby.rails.security.brakeman.check-redirect-to.check-redirect-to",
|
|
@@ -22954,7 +23461,7 @@ var patterns_default = [
|
|
|
22954
23461
|
enabled: true,
|
|
22955
23462
|
languages: ["Ruby"],
|
|
22956
23463
|
parameters: [],
|
|
22957
|
-
tags: ["brakeman", "rails"]
|
|
23464
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22958
23465
|
},
|
|
22959
23466
|
{
|
|
22960
23467
|
id: "Semgrep_ruby.rails.security.brakeman.check-regex-dos.check-regex-dos",
|
|
@@ -22964,7 +23471,7 @@ var patterns_default = [
|
|
|
22964
23471
|
enabled: true,
|
|
22965
23472
|
languages: ["Ruby"],
|
|
22966
23473
|
parameters: [],
|
|
22967
|
-
tags: ["brakeman", "rails"]
|
|
23474
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22968
23475
|
},
|
|
22969
23476
|
{
|
|
22970
23477
|
id: "Semgrep_ruby.rails.security.brakeman.check-render-local-file-include.check-render-local-file-include",
|
|
@@ -22974,7 +23481,7 @@ var patterns_default = [
|
|
|
22974
23481
|
enabled: true,
|
|
22975
23482
|
languages: ["Ruby"],
|
|
22976
23483
|
parameters: [],
|
|
22977
|
-
tags: ["
|
|
23484
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
22978
23485
|
},
|
|
22979
23486
|
{
|
|
22980
23487
|
id: "Semgrep_ruby.rails.security.brakeman.check-reverse-tabnabbing.check-reverse-tabnabbing",
|
|
@@ -22984,7 +23491,7 @@ var patterns_default = [
|
|
|
22984
23491
|
enabled: true,
|
|
22985
23492
|
languages: ["Ruby"],
|
|
22986
23493
|
parameters: [],
|
|
22987
|
-
tags: ["brakeman", "rails"]
|
|
23494
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
22988
23495
|
},
|
|
22989
23496
|
{
|
|
22990
23497
|
id: "Semgrep_ruby.rails.security.brakeman.check-secrets.check-secrets",
|
|
@@ -22994,7 +23501,7 @@ var patterns_default = [
|
|
|
22994
23501
|
enabled: true,
|
|
22995
23502
|
languages: ["Ruby"],
|
|
22996
23503
|
parameters: [],
|
|
22997
|
-
tags: ["brakeman", "
|
|
23504
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
22998
23505
|
},
|
|
22999
23506
|
{
|
|
23000
23507
|
id: "Semgrep_ruby.rails.security.brakeman.check-send-file.check-send-file",
|
|
@@ -23004,7 +23511,7 @@ var patterns_default = [
|
|
|
23004
23511
|
enabled: true,
|
|
23005
23512
|
languages: ["Ruby"],
|
|
23006
23513
|
parameters: [],
|
|
23007
|
-
tags: ["brakeman", "
|
|
23514
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
23008
23515
|
},
|
|
23009
23516
|
{
|
|
23010
23517
|
id: "Semgrep_ruby.rails.security.brakeman.check-sql.check-sql",
|
|
@@ -23014,7 +23521,7 @@ var patterns_default = [
|
|
|
23014
23521
|
enabled: true,
|
|
23015
23522
|
languages: ["Ruby"],
|
|
23016
23523
|
parameters: [],
|
|
23017
|
-
tags: ["brakeman", "rails"]
|
|
23524
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
23018
23525
|
},
|
|
23019
23526
|
{
|
|
23020
23527
|
id: "Semgrep_ruby.rails.security.brakeman.check-unsafe-reflection.check-unsafe-reflection",
|
|
@@ -23024,7 +23531,7 @@ var patterns_default = [
|
|
|
23024
23531
|
enabled: true,
|
|
23025
23532
|
languages: ["Ruby"],
|
|
23026
23533
|
parameters: [],
|
|
23027
|
-
tags: ["brakeman", "
|
|
23534
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
23028
23535
|
},
|
|
23029
23536
|
{
|
|
23030
23537
|
id: "Semgrep_ruby.rails.security.brakeman.check-unsafe-reflection-methods.check-unsafe-reflection-methods",
|
|
@@ -23034,7 +23541,7 @@ var patterns_default = [
|
|
|
23034
23541
|
enabled: true,
|
|
23035
23542
|
languages: ["Ruby"],
|
|
23036
23543
|
parameters: [],
|
|
23037
|
-
tags: ["brakeman", "
|
|
23544
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
23038
23545
|
},
|
|
23039
23546
|
{
|
|
23040
23547
|
id: "Semgrep_ruby.rails.security.brakeman.check-unscoped-find.check-unscoped-find",
|
|
@@ -23044,7 +23551,7 @@ var patterns_default = [
|
|
|
23044
23551
|
enabled: true,
|
|
23045
23552
|
languages: ["Ruby"],
|
|
23046
23553
|
parameters: [],
|
|
23047
|
-
tags: ["brakeman", "
|
|
23554
|
+
tags: ["brakeman", "security", "fwk:ruby-on-rails"]
|
|
23048
23555
|
},
|
|
23049
23556
|
{
|
|
23050
23557
|
id: "Semgrep_ruby.rails.security.brakeman.check-validation-regex.check-validation-regex",
|
|
@@ -23054,7 +23561,7 @@ var patterns_default = [
|
|
|
23054
23561
|
enabled: true,
|
|
23055
23562
|
languages: ["Ruby"],
|
|
23056
23563
|
parameters: [],
|
|
23057
|
-
tags: ["brakeman", "rails"]
|
|
23564
|
+
tags: ["brakeman", "fwk:ruby-on-rails"]
|
|
23058
23565
|
},
|
|
23059
23566
|
{
|
|
23060
23567
|
id: "Semgrep_ruby.rails.security.injection.raw-html-format.raw-html-format",
|
|
@@ -23064,7 +23571,7 @@ var patterns_default = [
|
|
|
23064
23571
|
enabled: true,
|
|
23065
23572
|
languages: ["Ruby"],
|
|
23066
23573
|
parameters: [],
|
|
23067
|
-
tags: ["
|
|
23574
|
+
tags: ["security", "injection", "fwk:ruby-on-rails"]
|
|
23068
23575
|
},
|
|
23069
23576
|
{
|
|
23070
23577
|
id: "Semgrep_ruby.rails.security.injection.tainted-sql-string.tainted-sql-string",
|
|
@@ -23074,7 +23581,7 @@ var patterns_default = [
|
|
|
23074
23581
|
enabled: true,
|
|
23075
23582
|
languages: ["Ruby"],
|
|
23076
23583
|
parameters: [],
|
|
23077
|
-
tags: ["rails"]
|
|
23584
|
+
tags: ["fwk:ruby-on-rails"]
|
|
23078
23585
|
},
|
|
23079
23586
|
{
|
|
23080
23587
|
id: "Semgrep_ruby.rails.security.injection.tainted-url-host.tainted-url-host",
|
|
@@ -23084,7 +23591,7 @@ var patterns_default = [
|
|
|
23084
23591
|
enabled: true,
|
|
23085
23592
|
languages: ["Ruby"],
|
|
23086
23593
|
parameters: [],
|
|
23087
|
-
tags: ["
|
|
23594
|
+
tags: ["security", "injection", "ssrf", "fwk:ruby-on-rails"]
|
|
23088
23595
|
},
|
|
23089
23596
|
{
|
|
23090
23597
|
id: "Semgrep_ruby_redirect_rule-CheckRedirectTo",
|
|
@@ -23372,7 +23879,8 @@ var patterns_default = [
|
|
|
23372
23879
|
title: "Disallow Loading Content Over HTTP in Electron",
|
|
23373
23880
|
enabled: false,
|
|
23374
23881
|
languages: ["Javascript"],
|
|
23375
|
-
parameters: []
|
|
23882
|
+
parameters: [],
|
|
23883
|
+
tags: ["fwk:electron"]
|
|
23376
23884
|
},
|
|
23377
23885
|
{
|
|
23378
23886
|
id: "Semgrep_rules_lgpl_javascript_electronjs_rule-electron-blink-integration",
|
|
@@ -23382,7 +23890,7 @@ var patterns_default = [
|
|
|
23382
23890
|
enabled: false,
|
|
23383
23891
|
languages: ["Javascript"],
|
|
23384
23892
|
parameters: [],
|
|
23385
|
-
tags: ["
|
|
23893
|
+
tags: ["fwk:electron"]
|
|
23386
23894
|
},
|
|
23387
23895
|
{
|
|
23388
23896
|
id: "Semgrep_rules_lgpl_javascript_electronjs_rule-electron-context-isolation",
|
|
@@ -23392,7 +23900,7 @@ var patterns_default = [
|
|
|
23392
23900
|
enabled: false,
|
|
23393
23901
|
languages: ["Javascript"],
|
|
23394
23902
|
parameters: [],
|
|
23395
|
-
tags: ["electron"]
|
|
23903
|
+
tags: ["fwk:electron"]
|
|
23396
23904
|
},
|
|
23397
23905
|
{
|
|
23398
23906
|
id: "Semgrep_rules_lgpl_javascript_electronjs_rule-electron-disable-websecurity",
|
|
@@ -23402,7 +23910,7 @@ var patterns_default = [
|
|
|
23402
23910
|
enabled: false,
|
|
23403
23911
|
languages: ["Javascript"],
|
|
23404
23912
|
parameters: [],
|
|
23405
|
-
tags: ["
|
|
23913
|
+
tags: ["fwk:electron"]
|
|
23406
23914
|
},
|
|
23407
23915
|
{
|
|
23408
23916
|
id: "Semgrep_rules_lgpl_javascript_electronjs_rule-electron-experimental-features",
|
|
@@ -23412,7 +23920,7 @@ var patterns_default = [
|
|
|
23412
23920
|
enabled: false,
|
|
23413
23921
|
languages: ["Javascript"],
|
|
23414
23922
|
parameters: [],
|
|
23415
|
-
tags: ["electron"]
|
|
23923
|
+
tags: ["fwk:electron"]
|
|
23416
23924
|
},
|
|
23417
23925
|
{
|
|
23418
23926
|
id: "Semgrep_rules_lgpl_javascript_electronjs_rule-electron-nodejs-integration",
|
|
@@ -23422,7 +23930,7 @@ var patterns_default = [
|
|
|
23422
23930
|
enabled: false,
|
|
23423
23931
|
languages: ["Javascript"],
|
|
23424
23932
|
parameters: [],
|
|
23425
|
-
tags: ["
|
|
23933
|
+
tags: ["fwk:electron"]
|
|
23426
23934
|
},
|
|
23427
23935
|
{
|
|
23428
23936
|
id: "Semgrep_rules_lgpl_javascript_eval_rule-eval-nodejs",
|
|
@@ -24583,7 +25091,8 @@ var patterns_default = [
|
|
|
24583
25091
|
title: "Avoid Hardcoding JWT Secrets or Private Keys",
|
|
24584
25092
|
enabled: true,
|
|
24585
25093
|
languages: ["Scala"],
|
|
24586
|
-
parameters: []
|
|
25094
|
+
parameters: [],
|
|
25095
|
+
tags: ["lib:jwt-scala"]
|
|
24587
25096
|
},
|
|
24588
25097
|
{
|
|
24589
25098
|
id: "Semgrep_scala.lang.correctness.positive-number-index-of.positive-number-index-of",
|
|
@@ -24823,7 +25332,7 @@ var patterns_default = [
|
|
|
24823
25332
|
enabled: true,
|
|
24824
25333
|
languages: ["Scala"],
|
|
24825
25334
|
parameters: [],
|
|
24826
|
-
tags: ["
|
|
25335
|
+
tags: ["security", "fwk:play-framework"]
|
|
24827
25336
|
},
|
|
24828
25337
|
{
|
|
24829
25338
|
id: "Semgrep_scala.play.security.conf-insecure-cookie-settings.conf-insecure-cookie-settings",
|
|
@@ -24833,7 +25342,7 @@ var patterns_default = [
|
|
|
24833
25342
|
enabled: true,
|
|
24834
25343
|
languages: ["Scala"],
|
|
24835
25344
|
parameters: [],
|
|
24836
|
-
tags: ["
|
|
25345
|
+
tags: ["security", "fwk:play-framework"]
|
|
24837
25346
|
},
|
|
24838
25347
|
{
|
|
24839
25348
|
id: "Semgrep_scala.play.security.tainted-html-response.tainted-html-response",
|
|
@@ -24843,7 +25352,7 @@ var patterns_default = [
|
|
|
24843
25352
|
enabled: true,
|
|
24844
25353
|
languages: ["Scala"],
|
|
24845
25354
|
parameters: [],
|
|
24846
|
-
tags: ["
|
|
25355
|
+
tags: ["security", "fwk:play-framework"]
|
|
24847
25356
|
},
|
|
24848
25357
|
{
|
|
24849
25358
|
id: "Semgrep_scala.play.security.tainted-slick-sqli.tainted-slick-sqli",
|
|
@@ -24853,7 +25362,7 @@ var patterns_default = [
|
|
|
24853
25362
|
enabled: true,
|
|
24854
25363
|
languages: ["Scala"],
|
|
24855
25364
|
parameters: [],
|
|
24856
|
-
tags: ["play"]
|
|
25365
|
+
tags: ["fwk:play-framework"]
|
|
24857
25366
|
},
|
|
24858
25367
|
{
|
|
24859
25368
|
id: "Semgrep_scala.play.security.tainted-sql-from-http-request.tainted-sql-from-http-request",
|
|
@@ -24863,7 +25372,7 @@ var patterns_default = [
|
|
|
24863
25372
|
enabled: true,
|
|
24864
25373
|
languages: ["Scala"],
|
|
24865
25374
|
parameters: [],
|
|
24866
|
-
tags: ["
|
|
25375
|
+
tags: ["security", "fwk:play-framework"]
|
|
24867
25376
|
},
|
|
24868
25377
|
{
|
|
24869
25378
|
id: "Semgrep_scala.play.security.twirl-html-var.twirl-html-var",
|
|
@@ -24873,7 +25382,7 @@ var patterns_default = [
|
|
|
24873
25382
|
enabled: false,
|
|
24874
25383
|
languages: ["Scala"],
|
|
24875
25384
|
parameters: [],
|
|
24876
|
-
tags: ["
|
|
25385
|
+
tags: ["security", "fwk:play-framework"]
|
|
24877
25386
|
},
|
|
24878
25387
|
{
|
|
24879
25388
|
id: "Semgrep_scala.play.security.webservice-ssrf.webservice-ssrf",
|
|
@@ -24883,7 +25392,7 @@ var patterns_default = [
|
|
|
24883
25392
|
enabled: false,
|
|
24884
25393
|
languages: ["Scala"],
|
|
24885
25394
|
parameters: [],
|
|
24886
|
-
tags: ["
|
|
25395
|
+
tags: ["security", "fwk:play-framework"]
|
|
24887
25396
|
},
|
|
24888
25397
|
{
|
|
24889
25398
|
id: "Semgrep_scala.scala-jwt.security.jwt-hardcode.scala-jwt-hardcoded-secret",
|
|
@@ -24893,7 +25402,7 @@ var patterns_default = [
|
|
|
24893
25402
|
enabled: true,
|
|
24894
25403
|
languages: ["Scala"],
|
|
24895
25404
|
parameters: [],
|
|
24896
|
-
tags: ["scalajwt", "security"]
|
|
25405
|
+
tags: ["scalajwt", "security", "lib:jwt-scala"]
|
|
24897
25406
|
},
|
|
24898
25407
|
{
|
|
24899
25408
|
id: "Semgrep_scala_script_rule-ScriptInjection",
|
|
@@ -24921,7 +25430,7 @@ var patterns_default = [
|
|
|
24921
25430
|
enabled: false,
|
|
24922
25431
|
languages: ["Scala"],
|
|
24923
25432
|
parameters: [],
|
|
24924
|
-
tags: ["
|
|
25433
|
+
tags: ["security", "lib:slick"]
|
|
24925
25434
|
},
|
|
24926
25435
|
{
|
|
24927
25436
|
id: "Semgrep_scala.slick.security.scala-slick-sql-non-literal.scala-slick-sql-non-literal",
|
|
@@ -24931,7 +25440,7 @@ var patterns_default = [
|
|
|
24931
25440
|
enabled: false,
|
|
24932
25441
|
languages: ["Scala"],
|
|
24933
25442
|
parameters: [],
|
|
24934
|
-
tags: ["slick"]
|
|
25443
|
+
tags: ["lib:slick"]
|
|
24935
25444
|
},
|
|
24936
25445
|
{
|
|
24937
25446
|
id: "Semgrep_scala_smtp_rule-InsecureSmtp",
|
|
@@ -24958,7 +25467,8 @@ var patterns_default = [
|
|
|
24958
25467
|
title: "Detect Server-Side Request Forgery (SSRF) in Play Framework",
|
|
24959
25468
|
enabled: false,
|
|
24960
25469
|
languages: ["Scala"],
|
|
24961
|
-
parameters: []
|
|
25470
|
+
parameters: [],
|
|
25471
|
+
tags: ["fwk:play-framework"]
|
|
24962
25472
|
},
|
|
24963
25473
|
{
|
|
24964
25474
|
id: "Semgrep_scala_ssrf_rule-SSRF",
|
|
@@ -27634,7 +28144,7 @@ var patterns_default = [
|
|
|
27634
28144
|
enabled: false,
|
|
27635
28145
|
languages: ["Terraform"],
|
|
27636
28146
|
parameters: [],
|
|
27637
|
-
tags: ["gcp", "kubernetes"]
|
|
28147
|
+
tags: ["gcp", "plt:kubernetes"]
|
|
27638
28148
|
},
|
|
27639
28149
|
{
|
|
27640
28150
|
id: "Semgrep_terraform.gcp.best-practice.gcp-gke-metadata-server-enabled.gcp-gke-metadata-server-enabled",
|
|
@@ -27654,7 +28164,7 @@ var patterns_default = [
|
|
|
27654
28164
|
enabled: false,
|
|
27655
28165
|
languages: ["Terraform"],
|
|
27656
28166
|
parameters: [],
|
|
27657
|
-
tags: ["gcp", "kubernetes"]
|
|
28167
|
+
tags: ["gcp", "plt:kubernetes"]
|
|
27658
28168
|
},
|
|
27659
28169
|
{
|
|
27660
28170
|
id: "Semgrep_terraform.gcp.best-practice.gcp-gke-nodepool-auto-upgrade-enabled.gcp-gke-nodepool-auto-upgrade-enabled",
|
|
@@ -27664,7 +28174,7 @@ var patterns_default = [
|
|
|
27664
28174
|
enabled: false,
|
|
27665
28175
|
languages: ["Terraform"],
|
|
27666
28176
|
parameters: [],
|
|
27667
|
-
tags: ["gcp", "kubernetes"]
|
|
28177
|
+
tags: ["gcp", "plt:kubernetes"]
|
|
27668
28178
|
},
|
|
27669
28179
|
{
|
|
27670
28180
|
id: "Semgrep_terraform.gcp.best-practice.gcp-gke-nodepool-metadata-server-enabled.gcp-gke-nodepool-metadata-server-enabled",
|
|
@@ -27704,7 +28214,7 @@ var patterns_default = [
|
|
|
27704
28214
|
enabled: false,
|
|
27705
28215
|
languages: ["Terraform"],
|
|
27706
28216
|
parameters: [],
|
|
27707
|
-
tags: ["gcp", "kubernetes"]
|
|
28217
|
+
tags: ["gcp", "plt:kubernetes"]
|
|
27708
28218
|
},
|
|
27709
28219
|
{
|
|
27710
28220
|
id: "Semgrep_terraform.gcp.best-practice.gcp-ipv6-private-google-enabled.gcp-ipv6-private-google-enabled",
|
|
@@ -28853,7 +29363,7 @@ var patterns_default = [
|
|
|
28853
29363
|
enabled: true,
|
|
28854
29364
|
languages: ["TypeScript"],
|
|
28855
29365
|
parameters: [],
|
|
28856
|
-
tags: ["angular"
|
|
29366
|
+
tags: ["fwk:angular"]
|
|
28857
29367
|
},
|
|
28858
29368
|
{
|
|
28859
29369
|
id: "Semgrep_typescript.aws-cdk.security.audit.awscdk-bucket-encryption.awscdk-bucket-encryption",
|
|
@@ -28863,7 +29373,7 @@ var patterns_default = [
|
|
|
28863
29373
|
enabled: true,
|
|
28864
29374
|
languages: ["TypeScript"],
|
|
28865
29375
|
parameters: [],
|
|
28866
|
-
tags: ["
|
|
29376
|
+
tags: ["security", "audit", "fwk:aws-cdk"]
|
|
28867
29377
|
},
|
|
28868
29378
|
{
|
|
28869
29379
|
id: "Semgrep_typescript.aws-cdk.security.audit.awscdk-bucket-enforcessl.aws-cdk-bucket-enforcessl",
|
|
@@ -28873,7 +29383,7 @@ var patterns_default = [
|
|
|
28873
29383
|
enabled: true,
|
|
28874
29384
|
languages: ["TypeScript"],
|
|
28875
29385
|
parameters: [],
|
|
28876
|
-
tags: ["
|
|
29386
|
+
tags: ["security", "fwk:aws-cdk"]
|
|
28877
29387
|
},
|
|
28878
29388
|
{
|
|
28879
29389
|
id: "Semgrep_typescript.aws-cdk.security.audit.awscdk-sqs-unencryptedqueue.awscdk-sqs-unencryptedqueue",
|
|
@@ -28883,7 +29393,7 @@ var patterns_default = [
|
|
|
28883
29393
|
enabled: true,
|
|
28884
29394
|
languages: ["TypeScript"],
|
|
28885
29395
|
parameters: [],
|
|
28886
|
-
tags: ["
|
|
29396
|
+
tags: ["security", "audit", "fwk:aws-cdk"]
|
|
28887
29397
|
},
|
|
28888
29398
|
{
|
|
28889
29399
|
id: "Semgrep_typescript.aws-cdk.security.awscdk-bucket-grantpublicaccessmethod.awscdk-bucket-grantpublicaccessmethod",
|
|
@@ -28893,7 +29403,7 @@ var patterns_default = [
|
|
|
28893
29403
|
enabled: true,
|
|
28894
29404
|
languages: ["TypeScript"],
|
|
28895
29405
|
parameters: [],
|
|
28896
|
-
tags: ["
|
|
29406
|
+
tags: ["security", "fwk:aws-cdk"]
|
|
28897
29407
|
},
|
|
28898
29408
|
{
|
|
28899
29409
|
id: "Semgrep_typescript.aws-cdk.security.awscdk-codebuild-project-public.awscdk-codebuild-project-public",
|
|
@@ -28903,7 +29413,7 @@ var patterns_default = [
|
|
|
28903
29413
|
enabled: true,
|
|
28904
29414
|
languages: ["TypeScript"],
|
|
28905
29415
|
parameters: [],
|
|
28906
|
-
tags: ["
|
|
29416
|
+
tags: ["security", "fwk:aws-cdk"]
|
|
28907
29417
|
},
|
|
28908
29418
|
{
|
|
28909
29419
|
id: "Semgrep_typescript.lang.best-practice.moment-deprecated.moment-deprecated",
|
|
@@ -28941,7 +29451,7 @@ var patterns_default = [
|
|
|
28941
29451
|
enabled: false,
|
|
28942
29452
|
languages: ["TypeScript"],
|
|
28943
29453
|
parameters: [],
|
|
28944
|
-
tags: ["
|
|
29454
|
+
tags: ["security", "cors", "fwk:nestjs"]
|
|
28945
29455
|
},
|
|
28946
29456
|
{
|
|
28947
29457
|
id: "Semgrep_typescript.nestjs.security.audit.nestjs-header-xss-disabled.nestjs-header-xss-disabled",
|
|
@@ -28951,7 +29461,7 @@ var patterns_default = [
|
|
|
28951
29461
|
enabled: false,
|
|
28952
29462
|
languages: ["TypeScript"],
|
|
28953
29463
|
parameters: [],
|
|
28954
|
-
tags: ["
|
|
29464
|
+
tags: ["security", "audit", "fwk:nestjs"]
|
|
28955
29465
|
},
|
|
28956
29466
|
{
|
|
28957
29467
|
id: "Semgrep_typescript.nestjs.security.audit.nestjs-open-redirect.nestjs-open-redirect",
|
|
@@ -28961,7 +29471,7 @@ var patterns_default = [
|
|
|
28961
29471
|
enabled: false,
|
|
28962
29472
|
languages: ["TypeScript"],
|
|
28963
29473
|
parameters: [],
|
|
28964
|
-
tags: ["
|
|
29474
|
+
tags: ["security", "fwk:nestjs"]
|
|
28965
29475
|
},
|
|
28966
29476
|
{
|
|
28967
29477
|
id: "Semgrep_typescript.react.best-practice.define-styled-components-on-module-level.define-styled-components-on-module-level",
|
|
@@ -28971,7 +29481,7 @@ var patterns_default = [
|
|
|
28971
29481
|
enabled: false,
|
|
28972
29482
|
languages: ["TypeScript", "Javascript"],
|
|
28973
29483
|
parameters: [],
|
|
28974
|
-
tags: ["
|
|
29484
|
+
tags: ["fwk:react"]
|
|
28975
29485
|
},
|
|
28976
29486
|
{
|
|
28977
29487
|
id: "Semgrep_typescript.react.best-practice.react-find-dom.react-find-dom",
|
|
@@ -28981,7 +29491,7 @@ var patterns_default = [
|
|
|
28981
29491
|
enabled: false,
|
|
28982
29492
|
languages: ["TypeScript", "Javascript"],
|
|
28983
29493
|
parameters: [],
|
|
28984
|
-
tags: ["
|
|
29494
|
+
tags: ["fwk:react"]
|
|
28985
29495
|
},
|
|
28986
29496
|
{
|
|
28987
29497
|
id: "Semgrep_typescript.react.best-practice.react-legacy-component.react-legacy-component",
|
|
@@ -28991,7 +29501,7 @@ var patterns_default = [
|
|
|
28991
29501
|
enabled: false,
|
|
28992
29502
|
languages: ["TypeScript", "Javascript"],
|
|
28993
29503
|
parameters: [],
|
|
28994
|
-
tags: ["
|
|
29504
|
+
tags: ["fwk:react"]
|
|
28995
29505
|
},
|
|
28996
29506
|
{
|
|
28997
29507
|
id: "Semgrep_typescript.react.best-practice.react-props-in-state.react-props-in-state",
|
|
@@ -29001,7 +29511,7 @@ var patterns_default = [
|
|
|
29001
29511
|
enabled: false,
|
|
29002
29512
|
languages: ["TypeScript", "Javascript"],
|
|
29003
29513
|
parameters: [],
|
|
29004
|
-
tags: ["
|
|
29514
|
+
tags: ["fwk:react"]
|
|
29005
29515
|
},
|
|
29006
29516
|
{
|
|
29007
29517
|
id: "Semgrep_typescript.react.best-practice.react-props-spreading.react-props-spreading",
|
|
@@ -29011,7 +29521,7 @@ var patterns_default = [
|
|
|
29011
29521
|
enabled: false,
|
|
29012
29522
|
languages: ["TypeScript", "Javascript"],
|
|
29013
29523
|
parameters: [],
|
|
29014
|
-
tags: ["
|
|
29524
|
+
tags: ["fwk:react"]
|
|
29015
29525
|
},
|
|
29016
29526
|
{
|
|
29017
29527
|
id: "Semgrep_typescript.react.portability.i18next.i18next-key-format.i18next-key-format",
|
|
@@ -29021,7 +29531,7 @@ var patterns_default = [
|
|
|
29021
29531
|
enabled: false,
|
|
29022
29532
|
languages: ["TypeScript", "Javascript"],
|
|
29023
29533
|
parameters: [],
|
|
29024
|
-
tags: ["
|
|
29534
|
+
tags: ["fwk:react", "lib:i18next"]
|
|
29025
29535
|
},
|
|
29026
29536
|
{
|
|
29027
29537
|
id: "Semgrep_typescript.react.portability.i18next.jsx-label-not-i18n.jsx-label-not-i18n",
|
|
@@ -29031,7 +29541,7 @@ var patterns_default = [
|
|
|
29031
29541
|
enabled: false,
|
|
29032
29542
|
languages: ["TypeScript", "Javascript"],
|
|
29033
29543
|
parameters: [],
|
|
29034
|
-
tags: ["
|
|
29544
|
+
tags: ["fwk:react", "lib:i18next"]
|
|
29035
29545
|
},
|
|
29036
29546
|
{
|
|
29037
29547
|
id: "Semgrep_typescript.react.portability.i18next.jsx-not-internationalized.jsx-not-internationalized",
|
|
@@ -29041,7 +29551,7 @@ var patterns_default = [
|
|
|
29041
29551
|
enabled: false,
|
|
29042
29552
|
languages: ["TypeScript", "Javascript"],
|
|
29043
29553
|
parameters: [],
|
|
29044
|
-
tags: ["
|
|
29554
|
+
tags: ["fwk:react", "lib:i18next"]
|
|
29045
29555
|
},
|
|
29046
29556
|
{
|
|
29047
29557
|
id: "Semgrep_typescript.react.portability.i18next.mui-snackbar-message.mui-snackbar-message",
|
|
@@ -29051,7 +29561,7 @@ var patterns_default = [
|
|
|
29051
29561
|
enabled: false,
|
|
29052
29562
|
languages: ["TypeScript", "Javascript"],
|
|
29053
29563
|
parameters: [],
|
|
29054
|
-
tags: ["
|
|
29564
|
+
tags: ["fwk:react", "lib:i18next", "lib:material-ui"]
|
|
29055
29565
|
},
|
|
29056
29566
|
{
|
|
29057
29567
|
id: "Semgrep_typescript.react.portability.i18next.useselect-label-not-i18n.useselect-label-not-i18n",
|
|
@@ -29061,7 +29571,7 @@ var patterns_default = [
|
|
|
29061
29571
|
enabled: false,
|
|
29062
29572
|
languages: ["TypeScript", "Javascript"],
|
|
29063
29573
|
parameters: [],
|
|
29064
|
-
tags: ["
|
|
29574
|
+
tags: ["fwk:react", "lib:i18next"]
|
|
29065
29575
|
},
|
|
29066
29576
|
{
|
|
29067
29577
|
id: "Semgrep_typescript.react.security.audit.react-dangerouslysetinnerhtml.react-dangerouslysetinnerhtml",
|
|
@@ -29071,7 +29581,7 @@ var patterns_default = [
|
|
|
29071
29581
|
enabled: true,
|
|
29072
29582
|
languages: ["TypeScript", "Javascript"],
|
|
29073
29583
|
parameters: [],
|
|
29074
|
-
tags: ["
|
|
29584
|
+
tags: ["security", "fwk:react"]
|
|
29075
29585
|
},
|
|
29076
29586
|
{
|
|
29077
29587
|
id: "Semgrep_typescript.react.security.audit.react-href-var.react-href-var",
|
|
@@ -29081,7 +29591,7 @@ var patterns_default = [
|
|
|
29081
29591
|
enabled: false,
|
|
29082
29592
|
languages: ["TypeScript", "Javascript"],
|
|
29083
29593
|
parameters: [],
|
|
29084
|
-
tags: ["
|
|
29594
|
+
tags: ["security", "fwk:react"]
|
|
29085
29595
|
},
|
|
29086
29596
|
{
|
|
29087
29597
|
id: "Semgrep_typescript.react.security.audit.react-jwt-decoded-property.react-jwt-decoded-property",
|
|
@@ -29091,7 +29601,7 @@ var patterns_default = [
|
|
|
29091
29601
|
enabled: false,
|
|
29092
29602
|
languages: ["TypeScript", "Javascript"],
|
|
29093
29603
|
parameters: [],
|
|
29094
|
-
tags: ["
|
|
29604
|
+
tags: ["security", "fwk:react"]
|
|
29095
29605
|
},
|
|
29096
29606
|
{
|
|
29097
29607
|
id: "Semgrep_typescript.react.security.audit.react-jwt-in-localstorage.react-jwt-in-localstorage",
|
|
@@ -29101,7 +29611,7 @@ var patterns_default = [
|
|
|
29101
29611
|
enabled: false,
|
|
29102
29612
|
languages: ["TypeScript", "Javascript"],
|
|
29103
29613
|
parameters: [],
|
|
29104
|
-
tags: ["
|
|
29614
|
+
tags: ["security", "fwk:react"]
|
|
29105
29615
|
},
|
|
29106
29616
|
{
|
|
29107
29617
|
id: "Semgrep_typescript.react.security.audit.react-unsanitized-method.react-unsanitized-method",
|
|
@@ -29111,7 +29621,7 @@ var patterns_default = [
|
|
|
29111
29621
|
enabled: true,
|
|
29112
29622
|
languages: ["TypeScript", "Javascript"],
|
|
29113
29623
|
parameters: [],
|
|
29114
|
-
tags: ["
|
|
29624
|
+
tags: ["security", "fwk:react"]
|
|
29115
29625
|
},
|
|
29116
29626
|
{
|
|
29117
29627
|
id: "Semgrep_typescript.react.security.audit.react-unsanitized-property.react-unsanitized-property",
|
|
@@ -29121,7 +29631,7 @@ var patterns_default = [
|
|
|
29121
29631
|
enabled: true,
|
|
29122
29632
|
languages: ["TypeScript", "Javascript"],
|
|
29123
29633
|
parameters: [],
|
|
29124
|
-
tags: ["
|
|
29634
|
+
tags: ["security", "fwk:react"]
|
|
29125
29635
|
},
|
|
29126
29636
|
{
|
|
29127
29637
|
id: "Semgrep_typescript.react.security.react-insecure-request.react-insecure-request",
|
|
@@ -29131,7 +29641,7 @@ var patterns_default = [
|
|
|
29131
29641
|
enabled: true,
|
|
29132
29642
|
languages: ["TypeScript", "Javascript"],
|
|
29133
29643
|
parameters: [],
|
|
29134
|
-
tags: ["
|
|
29644
|
+
tags: ["security", "fwk:react"]
|
|
29135
29645
|
},
|
|
29136
29646
|
{
|
|
29137
29647
|
id: "Semgrep_typescript.react.security.react-markdown-insecure-html.react-markdown-insecure-html",
|
|
@@ -29141,7 +29651,7 @@ var patterns_default = [
|
|
|
29141
29651
|
enabled: false,
|
|
29142
29652
|
languages: ["TypeScript", "Javascript"],
|
|
29143
29653
|
parameters: [],
|
|
29144
|
-
tags: ["
|
|
29654
|
+
tags: ["security", "fwk:react"]
|
|
29145
29655
|
},
|
|
29146
29656
|
{
|
|
29147
29657
|
id: "Semgrep_yaml.argo.correctness.event-binding-payload-with-hyphen.event-binding-payload-with-hyphen",
|
|
@@ -29231,7 +29741,7 @@ var patterns_default = [
|
|
|
29231
29741
|
enabled: true,
|
|
29232
29742
|
languages: ["YAML"],
|
|
29233
29743
|
parameters: [],
|
|
29234
|
-
tags: ["
|
|
29744
|
+
tags: ["security", "fwk:github-actions"]
|
|
29235
29745
|
},
|
|
29236
29746
|
{
|
|
29237
29747
|
id: "Semgrep_yaml.github-actions.security.audit.unsafe-add-mask-workflow-command.unsafe-add-mask-workflow-command",
|
|
@@ -29241,7 +29751,7 @@ var patterns_default = [
|
|
|
29241
29751
|
enabled: false,
|
|
29242
29752
|
languages: ["YAML"],
|
|
29243
29753
|
parameters: [],
|
|
29244
|
-
tags: ["
|
|
29754
|
+
tags: ["audit", "security", "fwk:github-actions"]
|
|
29245
29755
|
},
|
|
29246
29756
|
{
|
|
29247
29757
|
id: "Semgrep_yaml.github-actions.security.curl-eval.curl-eval",
|
|
@@ -29251,7 +29761,7 @@ var patterns_default = [
|
|
|
29251
29761
|
enabled: false,
|
|
29252
29762
|
languages: ["YAML"],
|
|
29253
29763
|
parameters: [],
|
|
29254
|
-
tags: ["
|
|
29764
|
+
tags: ["security", "fwk:github-actions"]
|
|
29255
29765
|
},
|
|
29256
29766
|
{
|
|
29257
29767
|
id: "Semgrep_yaml.github-actions.security.github-script-injection.github-script-injection",
|
|
@@ -29261,7 +29771,7 @@ var patterns_default = [
|
|
|
29261
29771
|
enabled: true,
|
|
29262
29772
|
languages: ["YAML"],
|
|
29263
29773
|
parameters: [],
|
|
29264
|
-
tags: ["
|
|
29774
|
+
tags: ["fwk:github-actions"]
|
|
29265
29775
|
},
|
|
29266
29776
|
{
|
|
29267
29777
|
id: "Semgrep_yaml.github-actions.security.pull-request-target-code-checkout.pull-request-target-code-checkout",
|
|
@@ -29271,7 +29781,7 @@ var patterns_default = [
|
|
|
29271
29781
|
enabled: false,
|
|
29272
29782
|
languages: ["YAML"],
|
|
29273
29783
|
parameters: [],
|
|
29274
|
-
tags: ["
|
|
29784
|
+
tags: ["security", "fwk:github-actions"]
|
|
29275
29785
|
},
|
|
29276
29786
|
{
|
|
29277
29787
|
id: "Semgrep_yaml.github-actions.security.run-shell-injection.run-shell-injection",
|
|
@@ -29281,7 +29791,7 @@ var patterns_default = [
|
|
|
29281
29791
|
enabled: true,
|
|
29282
29792
|
languages: ["YAML"],
|
|
29283
29793
|
parameters: [],
|
|
29284
|
-
tags: ["
|
|
29794
|
+
tags: ["security", "fwk:github-actions"]
|
|
29285
29795
|
},
|
|
29286
29796
|
{
|
|
29287
29797
|
id: "Semgrep_yaml.github-actions.security.third-party-action-not-pinned-to-commit-sha.third-party-action-not-pinned-to-commit-sha",
|
|
@@ -29291,7 +29801,7 @@ var patterns_default = [
|
|
|
29291
29801
|
enabled: true,
|
|
29292
29802
|
languages: ["YAML"],
|
|
29293
29803
|
parameters: [],
|
|
29294
|
-
tags: ["
|
|
29804
|
+
tags: ["security", "fwk:github-actions"]
|
|
29295
29805
|
},
|
|
29296
29806
|
{
|
|
29297
29807
|
id: "Semgrep_yaml.github-actions.security.workflow-run-target-code-checkout.workflow-run-target-code-checkout",
|
|
@@ -29301,7 +29811,7 @@ var patterns_default = [
|
|
|
29301
29811
|
enabled: true,
|
|
29302
29812
|
languages: ["YAML"],
|
|
29303
29813
|
parameters: [],
|
|
29304
|
-
tags: ["
|
|
29814
|
+
tags: ["security", "fwk:github-actions"]
|
|
29305
29815
|
},
|
|
29306
29816
|
{
|
|
29307
29817
|
id: "Semgrep_yaml.github-actions.semgrep-configuration.semgrep-github-action-push-without-branches.semgrep-github-action-push-without-branches",
|
|
@@ -29311,7 +29821,7 @@ var patterns_default = [
|
|
|
29311
29821
|
enabled: false,
|
|
29312
29822
|
languages: ["YAML"],
|
|
29313
29823
|
parameters: [],
|
|
29314
|
-
tags: ["
|
|
29824
|
+
tags: ["fwk:github-actions"]
|
|
29315
29825
|
},
|
|
29316
29826
|
{
|
|
29317
29827
|
id: "Semgrep_yaml.gitlab.correctness.changes-with-when-never.changes-with-when-never",
|
|
@@ -29331,7 +29841,7 @@ var patterns_default = [
|
|
|
29331
29841
|
enabled: false,
|
|
29332
29842
|
languages: ["YAML"],
|
|
29333
29843
|
parameters: [],
|
|
29334
|
-
tags: ["kubernetes"]
|
|
29844
|
+
tags: ["plt:kubernetes", "tool:helm"]
|
|
29335
29845
|
},
|
|
29336
29846
|
{
|
|
29337
29847
|
id: "Semgrep_yaml.kubernetes.security.allow-privilege-escalation.allow-privilege-escalation",
|
|
@@ -29341,7 +29851,7 @@ var patterns_default = [
|
|
|
29341
29851
|
enabled: true,
|
|
29342
29852
|
languages: ["YAML"],
|
|
29343
29853
|
parameters: [],
|
|
29344
|
-
tags: ["kubernetes", "
|
|
29854
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29345
29855
|
},
|
|
29346
29856
|
{
|
|
29347
29857
|
id: "Semgrep_yaml.kubernetes.security.allow-privilege-escalation-no-securitycontext.allow-privilege-escalation-no-securitycontext",
|
|
@@ -29351,7 +29861,7 @@ var patterns_default = [
|
|
|
29351
29861
|
enabled: true,
|
|
29352
29862
|
languages: ["YAML"],
|
|
29353
29863
|
parameters: [],
|
|
29354
|
-
tags: ["kubernetes", "
|
|
29864
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29355
29865
|
},
|
|
29356
29866
|
{
|
|
29357
29867
|
id: "Semgrep_yaml.kubernetes.security.allow-privilege-escalation-true.allow-privilege-escalation-true",
|
|
@@ -29361,7 +29871,7 @@ var patterns_default = [
|
|
|
29361
29871
|
enabled: true,
|
|
29362
29872
|
languages: ["YAML"],
|
|
29363
29873
|
parameters: [],
|
|
29364
|
-
tags: ["kubernetes", "
|
|
29874
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29365
29875
|
},
|
|
29366
29876
|
{
|
|
29367
29877
|
id: "Semgrep_yaml.kubernetes.security.env.flask-debugging-enabled.flask-debugging-enabled",
|
|
@@ -29371,7 +29881,7 @@ var patterns_default = [
|
|
|
29371
29881
|
enabled: false,
|
|
29372
29882
|
languages: ["YAML"],
|
|
29373
29883
|
parameters: [],
|
|
29374
|
-
tags: ["kubernetes"]
|
|
29884
|
+
tags: ["plt:kubernetes", "tool:helm"]
|
|
29375
29885
|
},
|
|
29376
29886
|
{
|
|
29377
29887
|
id: "Semgrep_yaml.kubernetes.security.exposing-docker-socket-hostpath.exposing-docker-socket-hostpath",
|
|
@@ -29381,7 +29891,7 @@ var patterns_default = [
|
|
|
29381
29891
|
enabled: true,
|
|
29382
29892
|
languages: ["YAML"],
|
|
29383
29893
|
parameters: [],
|
|
29384
|
-
tags: ["kubernetes", "
|
|
29894
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29385
29895
|
},
|
|
29386
29896
|
{
|
|
29387
29897
|
id: "Semgrep_yaml.kubernetes.security.hostipc-pod.hostipc-pod",
|
|
@@ -29391,7 +29901,7 @@ var patterns_default = [
|
|
|
29391
29901
|
enabled: false,
|
|
29392
29902
|
languages: ["YAML"],
|
|
29393
29903
|
parameters: [],
|
|
29394
|
-
tags: ["kubernetes", "
|
|
29904
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29395
29905
|
},
|
|
29396
29906
|
{
|
|
29397
29907
|
id: "Semgrep_yaml.kubernetes.security.hostnetwork-pod.hostnetwork-pod",
|
|
@@ -29401,7 +29911,7 @@ var patterns_default = [
|
|
|
29401
29911
|
enabled: false,
|
|
29402
29912
|
languages: ["YAML"],
|
|
29403
29913
|
parameters: [],
|
|
29404
|
-
tags: ["kubernetes", "
|
|
29914
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29405
29915
|
},
|
|
29406
29916
|
{
|
|
29407
29917
|
id: "Semgrep_yaml.kubernetes.security.hostpid-pod.hostpid-pod",
|
|
@@ -29411,7 +29921,7 @@ var patterns_default = [
|
|
|
29411
29921
|
enabled: false,
|
|
29412
29922
|
languages: ["YAML"],
|
|
29413
29923
|
parameters: [],
|
|
29414
|
-
tags: ["kubernetes", "
|
|
29924
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29415
29925
|
},
|
|
29416
29926
|
{
|
|
29417
29927
|
id: "Semgrep_yaml.kubernetes.security.legacy-api-clusterrole-excessive-permissions.legacy-api-clusterrole-excessive-permissions",
|
|
@@ -29421,7 +29931,7 @@ var patterns_default = [
|
|
|
29421
29931
|
enabled: true,
|
|
29422
29932
|
languages: ["YAML"],
|
|
29423
29933
|
parameters: [],
|
|
29424
|
-
tags: ["kubernetes", "
|
|
29934
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29425
29935
|
},
|
|
29426
29936
|
{
|
|
29427
29937
|
id: "Semgrep_yaml.kubernetes.security.privileged-container.privileged-container",
|
|
@@ -29431,7 +29941,7 @@ var patterns_default = [
|
|
|
29431
29941
|
enabled: true,
|
|
29432
29942
|
languages: ["YAML"],
|
|
29433
29943
|
parameters: [],
|
|
29434
|
-
tags: ["kubernetes", "
|
|
29944
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29435
29945
|
},
|
|
29436
29946
|
{
|
|
29437
29947
|
id: "Semgrep_yaml.kubernetes.security.run-as-non-root-container-level-missing-security-context.run-as-non-root-container-level-missing-security-context",
|
|
@@ -29441,7 +29951,7 @@ var patterns_default = [
|
|
|
29441
29951
|
enabled: false,
|
|
29442
29952
|
languages: ["YAML"],
|
|
29443
29953
|
parameters: [],
|
|
29444
|
-
tags: ["kubernetes", "
|
|
29954
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29445
29955
|
},
|
|
29446
29956
|
{
|
|
29447
29957
|
id: "Semgrep_yaml.kubernetes.security.run-as-non-root-container-level.run-as-non-root-container-level",
|
|
@@ -29451,7 +29961,7 @@ var patterns_default = [
|
|
|
29451
29961
|
enabled: false,
|
|
29452
29962
|
languages: ["YAML"],
|
|
29453
29963
|
parameters: [],
|
|
29454
|
-
tags: ["kubernetes", "
|
|
29964
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29455
29965
|
},
|
|
29456
29966
|
{
|
|
29457
29967
|
id: "Semgrep_yaml.kubernetes.security.run-as-non-root.run-as-non-root",
|
|
@@ -29461,7 +29971,7 @@ var patterns_default = [
|
|
|
29461
29971
|
enabled: false,
|
|
29462
29972
|
languages: ["YAML"],
|
|
29463
29973
|
parameters: [],
|
|
29464
|
-
tags: ["kubernetes", "
|
|
29974
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29465
29975
|
},
|
|
29466
29976
|
{
|
|
29467
29977
|
id: "Semgrep_yaml.kubernetes.security.run-as-non-root-security-context-pod-level.run-as-non-root-security-context-pod-level",
|
|
@@ -29471,7 +29981,7 @@ var patterns_default = [
|
|
|
29471
29981
|
enabled: false,
|
|
29472
29982
|
languages: ["YAML"],
|
|
29473
29983
|
parameters: [],
|
|
29474
|
-
tags: ["kubernetes", "
|
|
29984
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29475
29985
|
},
|
|
29476
29986
|
{
|
|
29477
29987
|
id: "Semgrep_yaml.kubernetes.security.run-as-non-root-unsafe-value.run-as-non-root-unsafe-value",
|
|
@@ -29481,7 +29991,7 @@ var patterns_default = [
|
|
|
29481
29991
|
enabled: true,
|
|
29482
29992
|
languages: ["YAML"],
|
|
29483
29993
|
parameters: [],
|
|
29484
|
-
tags: ["kubernetes", "
|
|
29994
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29485
29995
|
},
|
|
29486
29996
|
{
|
|
29487
29997
|
id: "Semgrep_yaml.kubernetes.security.seccomp-confinement-disabled.seccomp-confinement-disabled",
|
|
@@ -29491,7 +30001,7 @@ var patterns_default = [
|
|
|
29491
30001
|
enabled: true,
|
|
29492
30002
|
languages: ["YAML"],
|
|
29493
30003
|
parameters: [],
|
|
29494
|
-
tags: ["kubernetes", "
|
|
30004
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29495
30005
|
},
|
|
29496
30006
|
{
|
|
29497
30007
|
id: "Semgrep_yaml.kubernetes.security.secrets-in-config-file.secrets-in-config-file",
|
|
@@ -29501,7 +30011,7 @@ var patterns_default = [
|
|
|
29501
30011
|
enabled: true,
|
|
29502
30012
|
languages: ["YAML"],
|
|
29503
30013
|
parameters: [],
|
|
29504
|
-
tags: ["kubernetes", "
|
|
30014
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29505
30015
|
},
|
|
29506
30016
|
{
|
|
29507
30017
|
id: "Semgrep_yaml.kubernetes.security.skip-tls-verify-cluster.skip-tls-verify-cluster",
|
|
@@ -29511,7 +30021,7 @@ var patterns_default = [
|
|
|
29511
30021
|
enabled: true,
|
|
29512
30022
|
languages: ["YAML"],
|
|
29513
30023
|
parameters: [],
|
|
29514
|
-
tags: ["kubernetes", "
|
|
30024
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29515
30025
|
},
|
|
29516
30026
|
{
|
|
29517
30027
|
id: "Semgrep_yaml.kubernetes.security.skip-tls-verify-service.skip-tls-verify-service",
|
|
@@ -29521,7 +30031,7 @@ var patterns_default = [
|
|
|
29521
30031
|
enabled: true,
|
|
29522
30032
|
languages: ["YAML"],
|
|
29523
30033
|
parameters: [],
|
|
29524
|
-
tags: ["kubernetes", "
|
|
30034
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29525
30035
|
},
|
|
29526
30036
|
{
|
|
29527
30037
|
id: "Semgrep_yaml.kubernetes.security.writable-filesystem-container.writable-filesystem-container",
|
|
@@ -29531,7 +30041,7 @@ var patterns_default = [
|
|
|
29531
30041
|
enabled: false,
|
|
29532
30042
|
languages: ["YAML"],
|
|
29533
30043
|
parameters: [],
|
|
29534
|
-
tags: ["kubernetes", "
|
|
30044
|
+
tags: ["security", "plt:kubernetes", "tool:helm"]
|
|
29535
30045
|
},
|
|
29536
30046
|
{
|
|
29537
30047
|
id: "Semgrep_yaml.openapi.security.api-key-in-query-parameter.api-key-in-query-parameter",
|