circle-ir 3.200.0 → 3.201.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -25727,6 +25727,14 @@ var JS_TAINTED_PATTERNS = [
|
|
|
25727
25727
|
{ pattern: /\blocation\.href\b/, type: "http_path" },
|
|
25728
25728
|
{ pattern: /\bdocument\.getElementById\b/, type: "dom_input" },
|
|
25729
25729
|
{ pattern: /\bdocument\.querySelector\b/, type: "dom_input" },
|
|
25730
|
+
// Remaining DOM element-accessor siblings — a `.value` read off any of these
|
|
25731
|
+
// (`document.getElementsByName('q')[0].value`) is the same DOM-input source as
|
|
25732
|
+
// getElementById/querySelector above. Kept narrow by requiring the `document.`
|
|
25733
|
+
// receiver so they cannot match unrelated `.getElementsByTagName`-named helpers.
|
|
25734
|
+
{ pattern: /\bdocument\.getElementsByName\b/, type: "dom_input" },
|
|
25735
|
+
{ pattern: /\bdocument\.getElementsByClassName\b/, type: "dom_input" },
|
|
25736
|
+
{ pattern: /\bdocument\.getElementsByTagName\b/, type: "dom_input" },
|
|
25737
|
+
{ pattern: /\bdocument\.querySelectorAll\b/, type: "dom_input" },
|
|
25730
25738
|
// Narrow to event-based DOM input reads: `e.target.value`, `event.target.value`.
|
|
25731
25739
|
// The formerly broad `/\.value\b/` matched any `.value` property (e.g. `result.value`,
|
|
25732
25740
|
// `node.value` in TypeScript) generating false positives in non-browser code.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "circle-ir",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.201.0",
|
|
4
4
|
"description": "High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"module": "dist/index.js",
|