circle-ir 3.212.0 → 3.214.0

package/dist/core/circle-ir-core.js

@@ -13725,29 +13725,31 @@ function findSources(calls, types, patterns, sourceLines, language) {
     }
   }
   const RUST_EXTRACTOR_KIND = /(?:^|::)(Json|Form|Query|Path|Extension|Multipart|Body|Bytes)(?:<|$)/;
-  for (const type of types) {
-    for (const method of type.methods) {
-      for (const param of method.parameters) {
-        if (!param.type) continue;
-        const kindMatch = RUST_EXTRACTOR_KIND.exec(param.type);
-        if (!kindMatch) continue;
-        const kind = kindMatch[1];
-        if (kind === "Extension") continue;
-        const sourceType = kind === "Form" || kind === "Query" || kind === "Path" ? "http_param" : "http_body";
-        const paramLine = param.line ?? method.start_line;
-        const alreadyExists = sources.some(
-          (s) => s.line === paramLine && s.variable === param.name
-        );
-        if (alreadyExists) continue;
-        sources.push({
-          type: sourceType,
-          location: `${param.type} ${param.name} in ${method.name}`,
-          severity: "high",
-          line: paramLine,
-          confidence: 1,
-          variable: param.name,
-          in_method: method.name
-        });
+  if (language === "rust") {
+    for (const type of types) {
+      for (const method of type.methods) {
+        for (const param of method.parameters) {
+          if (!param.type) continue;
+          const kindMatch = RUST_EXTRACTOR_KIND.exec(param.type);
+          if (!kindMatch) continue;
+          const kind = kindMatch[1];
+          if (kind === "Extension") continue;
+          const sourceType = kind === "Form" || kind === "Query" || kind === "Path" ? "http_param" : "http_body";
+          const paramLine = param.line ?? method.start_line;
+          const alreadyExists = sources.some(
+            (s) => s.line === paramLine && s.variable === param.name
+          );
+          if (alreadyExists) continue;
+          sources.push({
+            type: sourceType,
+            location: `${param.type} ${param.name} in ${method.name}`,
+            severity: "high",
+            line: paramLine,
+            confidence: 1,
+            variable: param.name,
+            in_method: method.name
+          });
+        }
       }
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circle-ir",
-  "version": "3.212.0",
+  "version": "3.214.0",
   "description": "High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis",
   "main": "dist/index.js",
   "module": "dist/index.js",