cognium-dev 3.115.0 → 3.116.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +9 -1
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -33354,6 +33354,14 @@ class UnrestrictedFileUploadPass {
|
|
|
33354
33354
|
this.emit(ctx, findings, file, call.location.line, language, "Files.copy(input, Path.of(dir, <original filename>))");
|
|
33355
33355
|
}
|
|
33356
33356
|
}
|
|
33357
|
+
if (m === "write" && callHasUploadName(call)) {
|
|
33358
|
+
const rec = call.receiver ?? "";
|
|
33359
|
+
if (rec === "Files" || rec === "FilePath" || rec.endsWith(".Files"))
|
|
33360
|
+
continue;
|
|
33361
|
+
if (inSafeRange(call.location.line))
|
|
33362
|
+
continue;
|
|
33363
|
+
this.emit(ctx, findings, file, call.location.line, language, "Part.write(<dir> + <original filename>)");
|
|
33364
|
+
}
|
|
33357
33365
|
}
|
|
33358
33366
|
}
|
|
33359
33367
|
if (language === "javascript" || language === "typescript") {
|
|
@@ -36828,7 +36836,7 @@ var colors = {
|
|
|
36828
36836
|
};
|
|
36829
36837
|
|
|
36830
36838
|
// src/version.ts
|
|
36831
|
-
var version = "3.
|
|
36839
|
+
var version = "3.116.0";
|
|
36832
36840
|
|
|
36833
36841
|
// src/formatters.ts
|
|
36834
36842
|
var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cognium-dev",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.116.0",
|
|
4
4
|
"description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -66,7 +66,7 @@
|
|
|
66
66
|
},
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
69
|
-
"circle-ir": "^3.
|
|
69
|
+
"circle-ir": "^3.116.0"
|
|
70
70
|
},
|
|
71
71
|
"devDependencies": {
|
|
72
72
|
"@types/node": "^25.5.0",
|