cognium-dev 3.139.0 → 3.141.0

package/dist/cli.js

@@ -5678,8 +5678,86 @@ function resolveReceiverType(receiver, context) {
       return resolveFqn(simple, context);
     }
   }
+  const chain = splitChainedReceiver(receiver);
+  if (chain) {
+    const prefixType = resolveReceiverType(chain.prefix, context);
+    if (prefixType.simpleName) {
+      const returnType = JAVA_CHAINED_FACTORY_RETURN_TYPES[prefixType.simpleName]?.[chain.methodName];
+      if (returnType)
+        return resolveFqn(returnType, context);
+    }
+  }
   return { simpleName: null, fqn: null };
 }
+function splitChainedReceiver(receiver) {
+  if (!receiver.endsWith(")"))
+    return null;
+  let depth = 0;
+  let openIdx = -1;
+  for (let i2 = receiver.length - 1;i2 >= 0; i2--) {
+    const c = receiver[i2];
+    if (c === ")")
+      depth++;
+    else if (c === "(") {
+      depth--;
+      if (depth === 0) {
+        openIdx = i2;
+        break;
+      }
+    }
+  }
+  if (openIdx <= 0)
+    return null;
+  const beforeParen = receiver.substring(0, openIdx);
+  const dotIdx = beforeParen.lastIndexOf(".");
+  if (dotIdx <= 0)
+    return null;
+  const methodName = beforeParen.substring(dotIdx + 1).trim();
+  if (!/^[A-Za-z_$][\w$]*$/.test(methodName))
+    return null;
+  const prefix = beforeParen.substring(0, dotIdx).trim();
+  if (!prefix)
+    return null;
+  return { prefix, methodName };
+}
+var JAVA_CHAINED_FACTORY_RETURN_TYPES = {
+  HttpServletRequest: {
+    getSession: "HttpSession",
+    getServletContext: "ServletContext",
+    getRequestDispatcher: "RequestDispatcher"
+  },
+  HttpSession: {
+    getServletContext: "ServletContext"
+  },
+  ServletContext: {
+    getRequestDispatcher: "RequestDispatcher"
+  },
+  DocumentBuilderFactory: {
+    newInstance: "DocumentBuilderFactory",
+    newDocumentBuilder: "DocumentBuilder"
+  },
+  SAXParserFactory: {
+    newInstance: "SAXParserFactory",
+    newSAXParser: "SAXParser"
+  },
+  SAXParser: {
+    getXMLReader: "XMLReader"
+  },
+  XPathFactory: {
+    newInstance: "XPathFactory",
+    newXPath: "XPath"
+  },
+  TransformerFactory: {
+    newInstance: "TransformerFactory",
+    newTransformer: "Transformer"
+  },
+  XMLInputFactory: {
+    newInstance: "XMLInputFactory",
+    newFactory: "XMLInputFactory",
+    createXMLStreamReader: "XMLStreamReader",
+    createXMLEventReader: "XMLEventReader"
+  }
+};
 function resolveFqn(simpleName, context) {
   if (!simpleName)
     return { simpleName: null, fqn: null };
@@ -13400,19 +13478,19 @@ function formatCallCode(call) {
 // ../circle-ir/dist/analysis/findings.js
 function canSourceReachSink(sourceType, sinkType) {
   const sourceToSinkMapping = {
-    http_param: ["sql_injection", "command_injection", "path_traversal", "xss", "xpath_injection", "ldap_injection", "ssrf", "mybatis_mapper_call", "code_injection", "crlf", "mass_assignment", "open_redirect"],
-    http_body: ["sql_injection", "command_injection", "deserialization", "xxe", "xss", "code_injection", "mybatis_mapper_call", "crlf", "mass_assignment", "open_redirect"],
-    http_header: ["sql_injection", "xss", "ssrf", "mybatis_mapper_call", "code_injection", "crlf", "open_redirect"],
-    http_cookie: ["sql_injection", "xss", "mybatis_mapper_call", "code_injection", "crlf", "open_redirect"],
-    http_path: ["path_traversal", "sql_injection", "ssrf", "mybatis_mapper_call", "open_redirect"],
-    http_query: ["sql_injection", "command_injection", "xss", "ssrf", "mybatis_mapper_call", "code_injection", "crlf", "mass_assignment", "open_redirect"],
+    http_param: ["sql_injection", "command_injection", "path_traversal", "xss", "xpath_injection", "ldap_injection", "ssrf", "mybatis_mapper_call", "code_injection", "crlf", "mass_assignment", "open_redirect", "trust_boundary"],
+    http_body: ["sql_injection", "command_injection", "deserialization", "xxe", "xss", "code_injection", "mybatis_mapper_call", "crlf", "mass_assignment", "open_redirect", "trust_boundary"],
+    http_header: ["sql_injection", "xss", "ssrf", "mybatis_mapper_call", "code_injection", "crlf", "open_redirect", "trust_boundary"],
+    http_cookie: ["sql_injection", "xss", "mybatis_mapper_call", "code_injection", "crlf", "open_redirect", "trust_boundary"],
+    http_path: ["path_traversal", "sql_injection", "ssrf", "mybatis_mapper_call", "open_redirect", "trust_boundary"],
+    http_query: ["sql_injection", "command_injection", "xss", "ssrf", "mybatis_mapper_call", "code_injection", "crlf", "mass_assignment", "open_redirect", "trust_boundary"],
     io_input: ["command_injection", "path_traversal", "deserialization", "xxe", "code_injection", "xss", "ssrf"],
     env_input: ["command_injection", "path_traversal"],
     db_input: ["xss", "sql_injection"],
     file_input: ["deserialization", "xxe", "path_traversal", "command_injection", "code_injection"],
     network_input: ["sql_injection", "command_injection", "xss", "ssrf"],
     config_param: ["sql_injection", "command_injection", "path_traversal", "xss", "ssrf"],
-    interprocedural_param: ["sql_injection", "command_injection", "path_traversal", "xss", "xpath_injection", "ldap_injection", "ssrf", "code_injection", "mybatis_mapper_call", "crlf", "mass_assignment", "open_redirect"],
+    interprocedural_param: ["sql_injection", "command_injection", "path_traversal", "xss", "xpath_injection", "ldap_injection", "ssrf", "code_injection", "mybatis_mapper_call", "crlf", "mass_assignment", "open_redirect", "trust_boundary"],
     plugin_param: ["sql_injection", "command_injection", "path_traversal", "xss", "code_injection"]
   };
   const validSinks = sourceToSinkMapping[sourceType];
@@ -41641,7 +41719,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.139.0";
+var version = "3.141.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.139.0",
+  "version": "3.141.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.139.0"
+    "circle-ir": "^3.141.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",