circle-ir 3.187.0 → 3.188.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/analysis/config-loader.d.ts.map +1 -1
  2. package/dist/analysis/config-loader.js +23 -0
  3. package/dist/analysis/config-loader.js.map +1 -1
  4. package/dist/browser/circle-ir.js +23 -0
  5. package/dist/core/circle-ir-core.cjs +23 -0
  6. package/dist/core/circle-ir-core.js +23 -0
  7. package/package.json +1 -1
package/dist/browser/circle-ir.js CHANGED
@@ -11210,6 +11210,29 @@ var DEFAULT_SOURCES = [
11210
11210
  { annotation: "Cookie", type: "http_cookie", severity: "high", param_tainted: true },
11211
11211
  { annotation: "Form", type: "http_param", severity: "high", param_tainted: true },
11212
11212
  { annotation: "File", type: "file_input", severity: "high", param_tainted: true },
11213
+ // NestJS controller param decorators (cognium-dev #213 eighth slice).
11214
+ //
11215
+ // NestJS shares @Body/@Query/@Headers/@Body decorator names with FastAPI
11216
+ // and Spring (covered above) but adds a few unique ones:
11217
+ // @Param('id') id: string — route path parameter
11218
+ // @Req() / @Request() req: Request — the whole request object
11219
+ // @Session() session: Session — session data
11220
+ // @Ip() ip: string — client IP
11221
+ // @HostParam('subdomain') sub: string — subdomain of `host` config
11222
+ // @UploadedFile() file: any — multer-uploaded file
11223
+ // @UploadedFiles() files: any[] — multer multi-file
11224
+ // @Next() — not a source (Express next-fn)
11225
+ // Registered without a `languages:` filter so they also credit the shared
11226
+ // decorator names in TypeScript (nestjs is TS-first) and any JS project
11227
+ // adopting the convention.
11228
+ { annotation: "Param", type: "http_path", severity: "high", param_tainted: true },
11229
+ { annotation: "Req", type: "http_body", severity: "high", param_tainted: true },
11230
+ { annotation: "Request", type: "http_body", severity: "high", param_tainted: true },
11231
+ { annotation: "Session", type: "http_cookie", severity: "high", param_tainted: true },
11232
+ { annotation: "Ip", type: "network_input", severity: "high", param_tainted: true },
11233
+ { annotation: "HostParam", type: "http_path", severity: "high", param_tainted: true },
11234
+ { annotation: "UploadedFile", type: "file_input", severity: "high", param_tainted: true },
11235
+ { annotation: "UploadedFiles", type: "file_input", severity: "high", param_tainted: true },
11213
11236
  // FastAPI Request object
11214
11237
  { method: "json", class: "Request", type: "http_body", severity: "high", return_tainted: true },
11215
11238
  { method: "form", class: "Request", type: "http_param", severity: "high", return_tainted: true },
package/dist/core/circle-ir-core.cjs CHANGED
@@ -10605,6 +10605,29 @@ var DEFAULT_SOURCES = [
10605
10605
  { annotation: "Cookie", type: "http_cookie", severity: "high", param_tainted: true },
10606
10606
  { annotation: "Form", type: "http_param", severity: "high", param_tainted: true },
10607
10607
  { annotation: "File", type: "file_input", severity: "high", param_tainted: true },
10608
+ // NestJS controller param decorators (cognium-dev #213 eighth slice).
10609
+ //
10610
+ // NestJS shares @Body/@Query/@Headers/@Body decorator names with FastAPI
10611
+ // and Spring (covered above) but adds a few unique ones:
10612
+ // @Param('id') id: string — route path parameter
10613
+ // @Req() / @Request() req: Request — the whole request object
10614
+ // @Session() session: Session — session data
10615
+ // @Ip() ip: string — client IP
10616
+ // @HostParam('subdomain') sub: string — subdomain of `host` config
10617
+ // @UploadedFile() file: any — multer-uploaded file
10618
+ // @UploadedFiles() files: any[] — multer multi-file
10619
+ // @Next() — not a source (Express next-fn)
10620
+ // Registered without a `languages:` filter so they also credit the shared
10621
+ // decorator names in TypeScript (nestjs is TS-first) and any JS project
10622
+ // adopting the convention.
10623
+ { annotation: "Param", type: "http_path", severity: "high", param_tainted: true },
10624
+ { annotation: "Req", type: "http_body", severity: "high", param_tainted: true },
10625
+ { annotation: "Request", type: "http_body", severity: "high", param_tainted: true },
10626
+ { annotation: "Session", type: "http_cookie", severity: "high", param_tainted: true },
10627
+ { annotation: "Ip", type: "network_input", severity: "high", param_tainted: true },
10628
+ { annotation: "HostParam", type: "http_path", severity: "high", param_tainted: true },
10629
+ { annotation: "UploadedFile", type: "file_input", severity: "high", param_tainted: true },
10630
+ { annotation: "UploadedFiles", type: "file_input", severity: "high", param_tainted: true },
10608
10631
  // FastAPI Request object
10609
10632
  { method: "json", class: "Request", type: "http_body", severity: "high", return_tainted: true },
10610
10633
  { method: "form", class: "Request", type: "http_param", severity: "high", return_tainted: true },
package/dist/core/circle-ir-core.js CHANGED
@@ -10539,6 +10539,29 @@ var DEFAULT_SOURCES = [
10539
10539
  { annotation: "Cookie", type: "http_cookie", severity: "high", param_tainted: true },
10540
10540
  { annotation: "Form", type: "http_param", severity: "high", param_tainted: true },
10541
10541
  { annotation: "File", type: "file_input", severity: "high", param_tainted: true },
10542
+ // NestJS controller param decorators (cognium-dev #213 eighth slice).
10543
+ //
10544
+ // NestJS shares @Body/@Query/@Headers/@Body decorator names with FastAPI
10545
+ // and Spring (covered above) but adds a few unique ones:
10546
+ // @Param('id') id: string — route path parameter
10547
+ // @Req() / @Request() req: Request — the whole request object
10548
+ // @Session() session: Session — session data
10549
+ // @Ip() ip: string — client IP
10550
+ // @HostParam('subdomain') sub: string — subdomain of `host` config
10551
+ // @UploadedFile() file: any — multer-uploaded file
10552
+ // @UploadedFiles() files: any[] — multer multi-file
10553
+ // @Next() — not a source (Express next-fn)
10554
+ // Registered without a `languages:` filter so they also credit the shared
10555
+ // decorator names in TypeScript (nestjs is TS-first) and any JS project
10556
+ // adopting the convention.
10557
+ { annotation: "Param", type: "http_path", severity: "high", param_tainted: true },
10558
+ { annotation: "Req", type: "http_body", severity: "high", param_tainted: true },
10559
+ { annotation: "Request", type: "http_body", severity: "high", param_tainted: true },
10560
+ { annotation: "Session", type: "http_cookie", severity: "high", param_tainted: true },
10561
+ { annotation: "Ip", type: "network_input", severity: "high", param_tainted: true },
10562
+ { annotation: "HostParam", type: "http_path", severity: "high", param_tainted: true },
10563
+ { annotation: "UploadedFile", type: "file_input", severity: "high", param_tainted: true },
10564
+ { annotation: "UploadedFiles", type: "file_input", severity: "high", param_tainted: true },
10542
10565
  // FastAPI Request object
10543
10566
  { method: "json", class: "Request", type: "http_body", severity: "high", return_tainted: true },
10544
10567
  { method: "form", class: "Request", type: "http_param", severity: "high", return_tainted: true },
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "circle-ir",
3
- "version": "3.187.0",
3
+ "version": "3.188.0",
4
4
  "description": "High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis",
5
5
  "main": "dist/index.js",
6
6
  "module": "dist/index.js",