cognium-dev 3.107.0 → 3.108.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +13 -11
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -24311,18 +24311,20 @@ class SinkFilterPass {
|
|
|
24311
24311
|
if (!callArgs || callArgs.length === 0)
|
|
24312
24312
|
return true;
|
|
24313
24313
|
const sqlVar = callArgs[0]?.trim() ?? "";
|
|
24314
|
-
if (!/^[A-Za-z_]\w*$/.test(sqlVar))
|
|
24315
|
-
return true;
|
|
24316
|
-
const lo = Math.max(0, sink.line - 31);
|
|
24317
|
-
const assignRe = new RegExp(JAVA_SQL_ASSIGN_RE_TEMPLATE.replace("SQLVAR", sqlVar));
|
|
24318
24314
|
let rhs = null;
|
|
24319
|
-
|
|
24320
|
-
const
|
|
24321
|
-
const
|
|
24322
|
-
|
|
24323
|
-
|
|
24324
|
-
|
|
24315
|
+
if (/^[A-Za-z_]\w*$/.test(sqlVar)) {
|
|
24316
|
+
const lo = Math.max(0, sink.line - 31);
|
|
24317
|
+
const assignRe = new RegExp(JAVA_SQL_ASSIGN_RE_TEMPLATE.replace("SQLVAR", sqlVar));
|
|
24318
|
+
for (let i2 = sink.line - 2;i2 >= lo; i2--) {
|
|
24319
|
+
const ln = sourceLines[i2] ?? "";
|
|
24320
|
+
const m = ln.match(assignRe);
|
|
24321
|
+
if (m) {
|
|
24322
|
+
rhs = m[1] ?? null;
|
|
24323
|
+
break;
|
|
24324
|
+
}
|
|
24325
24325
|
}
|
|
24326
|
+
} else if (/"[^"]*"/.test(sqlVar) && sqlVar.includes("+")) {
|
|
24327
|
+
rhs = sqlVar;
|
|
24326
24328
|
}
|
|
24327
24329
|
if (!rhs)
|
|
24328
24330
|
return true;
|
|
@@ -36198,7 +36200,7 @@ var colors = {
|
|
|
36198
36200
|
};
|
|
36199
36201
|
|
|
36200
36202
|
// src/version.ts
|
|
36201
|
-
var version = "3.
|
|
36203
|
+
var version = "3.108.0";
|
|
36202
36204
|
|
|
36203
36205
|
// src/formatters.ts
|
|
36204
36206
|
var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cognium-dev",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.108.0",
|
|
4
4
|
"description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -66,7 +66,7 @@
|
|
|
66
66
|
},
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
69
|
-
"circle-ir": "^3.
|
|
69
|
+
"circle-ir": "^3.108.0"
|
|
70
70
|
},
|
|
71
71
|
"devDependencies": {
|
|
72
72
|
"@types/node": "^25.5.0",
|