circle-ir 3.187.0 → 3.188.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/analysis/config-loader.d.ts.map +1 -1
- package/dist/analysis/config-loader.js +23 -0
- package/dist/analysis/config-loader.js.map +1 -1
- package/dist/browser/circle-ir.js +23 -0
- package/dist/core/circle-ir-core.cjs +23 -0
- package/dist/core/circle-ir-core.js +23 -0
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/analysis/config-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,CAEjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAiB1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG;IACtD,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAcA;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,EAAE,GAC7B,kBAAkB,EAAE,CAQtB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,EAAE,EACtB,qBAAqB,GAAE,MAAM,EAAO,GACnC,WAAW,CAYb;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,
|
|
1
|
+
{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/analysis/config-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,CAEjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAiB1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG;IACtD,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAcA;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,EAAE,GAC7B,kBAAkB,EAAE,CAQtB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,EAAE,EACtB,qBAAqB,GAAE,MAAM,EAAO,GACnC,WAAW,CAYb;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EAgoB1C,CAAC;AA+KF,eAAO,MAAM,aAAa,EAAE,WAAW,EA2wDtC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EA+hBhD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,kBAAkB,EAiDtD,CAAC;AAEF;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CAO9C;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,EA8F5C,CAAC"}
|
|
@@ -406,6 +406,29 @@ export const DEFAULT_SOURCES = [
|
|
|
406
406
|
{ annotation: 'Cookie', type: 'http_cookie', severity: 'high', param_tainted: true },
|
|
407
407
|
{ annotation: 'Form', type: 'http_param', severity: 'high', param_tainted: true },
|
|
408
408
|
{ annotation: 'File', type: 'file_input', severity: 'high', param_tainted: true },
|
|
409
|
+
// NestJS controller param decorators (cognium-dev #213 eighth slice).
|
|
410
|
+
//
|
|
411
|
+
// NestJS shares @Body/@Query/@Headers/@Body decorator names with FastAPI
|
|
412
|
+
// and Spring (covered above) but adds a few unique ones:
|
|
413
|
+
// @Param('id') id: string — route path parameter
|
|
414
|
+
// @Req() / @Request() req: Request — the whole request object
|
|
415
|
+
// @Session() session: Session — session data
|
|
416
|
+
// @Ip() ip: string — client IP
|
|
417
|
+
// @HostParam('subdomain') sub: string — subdomain of `host` config
|
|
418
|
+
// @UploadedFile() file: any — multer-uploaded file
|
|
419
|
+
// @UploadedFiles() files: any[] — multer multi-file
|
|
420
|
+
// @Next() — not a source (Express next-fn)
|
|
421
|
+
// Registered without a `languages:` filter so they also credit the shared
|
|
422
|
+
// decorator names in TypeScript (nestjs is TS-first) and any JS project
|
|
423
|
+
// adopting the convention.
|
|
424
|
+
{ annotation: 'Param', type: 'http_path', severity: 'high', param_tainted: true },
|
|
425
|
+
{ annotation: 'Req', type: 'http_body', severity: 'high', param_tainted: true },
|
|
426
|
+
{ annotation: 'Request', type: 'http_body', severity: 'high', param_tainted: true },
|
|
427
|
+
{ annotation: 'Session', type: 'http_cookie', severity: 'high', param_tainted: true },
|
|
428
|
+
{ annotation: 'Ip', type: 'network_input', severity: 'high', param_tainted: true },
|
|
429
|
+
{ annotation: 'HostParam', type: 'http_path', severity: 'high', param_tainted: true },
|
|
430
|
+
{ annotation: 'UploadedFile', type: 'file_input', severity: 'high', param_tainted: true },
|
|
431
|
+
{ annotation: 'UploadedFiles', type: 'file_input', severity: 'high', param_tainted: true },
|
|
409
432
|
// FastAPI Request object
|
|
410
433
|
{ method: 'json', class: 'Request', type: 'http_body', severity: 'high', return_tainted: true },
|
|
411
434
|
{ method: 'form', class: 'Request', type: 'http_param', severity: 'high', return_tainted: true },
|