cognium-dev 3.185.0 → 3.186.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +31 -1
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -11968,6 +11968,36 @@ var DEFAULT_SANITIZERS = [
|
|
|
11968
11968
|
{ method: "escape", class: "mongo", removes: ["nosql_injection"] },
|
|
11969
11969
|
{ method: "quote", class: "shell", removes: ["command_injection"] },
|
|
11970
11970
|
{ method: "escape", class: "shell-escape", removes: ["command_injection"] },
|
|
11971
|
+
{ method: "encode", class: "he", removes: ["xss", "external_taint_escape"] },
|
|
11972
|
+
{ method: "escape", class: "he", removes: ["xss", "external_taint_escape"] },
|
|
11973
|
+
{ method: "sanitizeHtml", removes: ["xss", "external_taint_escape"] },
|
|
11974
|
+
{ method: "xss", removes: ["xss", "external_taint_escape"] },
|
|
11975
|
+
{ method: "filterXSS", removes: ["xss", "external_taint_escape"] },
|
|
11976
|
+
{ method: "escapeHtml", removes: ["xss", "external_taint_escape"] },
|
|
11977
|
+
{ method: "escapeHTML", removes: ["xss", "external_taint_escape"] },
|
|
11978
|
+
{ method: "encode", class: "entities", removes: ["xss", "external_taint_escape"] },
|
|
11979
|
+
{ method: "escape", class: "entities", removes: ["xss", "external_taint_escape"] },
|
|
11980
|
+
{ method: "inHTMLData", class: "xssFilters", removes: ["xss", "external_taint_escape"] },
|
|
11981
|
+
{ method: "inHTMLComment", class: "xssFilters", removes: ["xss", "external_taint_escape"] },
|
|
11982
|
+
{ method: "uriInHTMLData", class: "xssFilters", removes: ["xss", "external_taint_escape"] },
|
|
11983
|
+
{ method: "escape", class: "SqlString", removes: ["sql_injection", "external_taint_escape"] },
|
|
11984
|
+
{ method: "escapeId", class: "SqlString", removes: ["sql_injection", "external_taint_escape"] },
|
|
11985
|
+
{ method: "format", class: "SqlString", removes: ["sql_injection", "external_taint_escape"] },
|
|
11986
|
+
{ method: "format", class: "pgFormat", removes: ["sql_injection", "external_taint_escape"] },
|
|
11987
|
+
{ method: "ident", class: "pgFormat", removes: ["sql_injection", "external_taint_escape"] },
|
|
11988
|
+
{ method: "literal", class: "pgFormat", removes: ["sql_injection", "external_taint_escape"] },
|
|
11989
|
+
{ method: "randomUUID", class: "crypto", removes: ["sql_injection", "nosql_injection", "command_injection", "path_traversal", "code_injection", "xss"] },
|
|
11990
|
+
{ method: "randomUUID", removes: ["sql_injection", "nosql_injection", "command_injection", "path_traversal", "code_injection", "xss"] },
|
|
11991
|
+
{ method: "toString", class: "URLSearchParams", removes: ["ssrf", "open_redirect", "xss"] },
|
|
11992
|
+
{ method: "QuoteMeta", class: "regexp", removes: ["redos", "code_injection", "external_taint_escape"] },
|
|
11993
|
+
{ method: "Sanitize", class: "bluemonday", removes: ["xss", "external_taint_escape"] },
|
|
11994
|
+
{ method: "Sanitize", class: "Policy", removes: ["xss", "external_taint_escape"] },
|
|
11995
|
+
{ method: "Sanitize", removes: ["xss", "external_taint_escape"] },
|
|
11996
|
+
{ method: "SanitizeBytes", class: "bluemonday", removes: ["xss", "external_taint_escape"] },
|
|
11997
|
+
{ method: "SanitizeBytes", class: "Policy", removes: ["xss", "external_taint_escape"] },
|
|
11998
|
+
{ method: "SanitizeBytes", removes: ["xss", "external_taint_escape"] },
|
|
11999
|
+
{ method: "ParseIP", class: "net", removes: ["ssrf", "command_injection", "path_traversal", "external_taint_escape"] },
|
|
12000
|
+
{ method: "Named", class: "sql", removes: ["sql_injection", "external_taint_escape"] },
|
|
11971
12001
|
{ method: "escape", class: "markupsafe", removes: ["xss"] },
|
|
11972
12002
|
{ method: "escape", class: "html", removes: ["xss"] },
|
|
11973
12003
|
{ method: "escape", class: "cgi", removes: ["xss"] },
|
|
@@ -45816,7 +45846,7 @@ var colors = {
|
|
|
45816
45846
|
};
|
|
45817
45847
|
|
|
45818
45848
|
// src/version.ts
|
|
45819
|
-
var version = "3.
|
|
45849
|
+
var version = "3.186.0";
|
|
45820
45850
|
|
|
45821
45851
|
// src/formatters.ts
|
|
45822
45852
|
var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cognium-dev",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.186.0",
|
|
4
4
|
"description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -66,7 +66,7 @@
|
|
|
66
66
|
},
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
69
|
-
"circle-ir": "^3.
|
|
69
|
+
"circle-ir": "^3.186.0"
|
|
70
70
|
},
|
|
71
71
|
"devDependencies": {
|
|
72
72
|
"@types/node": "^25.5.0",
|