cognium-dev 3.185.0 → 3.187.0

package/dist/cli.js

@@ -11884,9 +11884,36 @@ var DEFAULT_SINKS = [
 ];
 var DEFAULT_SANITIZERS = [
   { method: "setString", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNString", class: "PreparedStatement", removes: ["sql_injection"] },
   { method: "setInt", class: "PreparedStatement", removes: ["sql_injection"] },
   { method: "setLong", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setShort", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setByte", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBoolean", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setDouble", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setFloat", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBigDecimal", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBytes", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setDate", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setTime", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setTimestamp", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setObject", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNull", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setArray", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBlob", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setClob", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNClob", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setRef", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setRowId", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setSQLXML", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setURL", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBinaryStream", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setCharacterStream", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setAsciiStream", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNCharacterStream", class: "PreparedStatement", removes: ["sql_injection"] },
   { method: "setParameter", class: "Query", removes: ["sql_injection"] },
+  { method: "setParameter", class: "TypedQuery", removes: ["sql_injection"] },
+  { method: "addValue", class: "MapSqlParameterSource", removes: ["sql_injection"] },
   { annotation: "Param", removes: ["sql_injection"] },
   { method: "escapeHtml", removes: ["xss"] },
   { method: "encodeForHTML", removes: ["xss"] },
@@ -11904,6 +11931,25 @@ var DEFAULT_SANITIZERS = [
   { method: "render", class: "Template", removes: ["xss"] },
   { method: "encodeForJavaScript", removes: ["xss"] },
   { method: "encodeForCSS", removes: ["xss"] },
+  { method: "escape", class: "Escaper", removes: ["xss"] },
+  { method: "escape", class: "HtmlEscapers", removes: ["xss"] },
+  { method: "escapeJson", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeEcmaScript", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeXml11", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeXml10", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeCsv", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeXsi", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeJava", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeJson", removes: ["xss"] },
+  { method: "escapeEcmaScript", removes: ["xss"] },
+  { method: "escapeCsv", removes: ["xss"] },
+  { method: "sanitize", class: "PolicyFactory", removes: ["xss"] },
+  { method: "encodeToString", class: "Encoder", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encode", class: "Encoder", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encodeHexString", class: "Hex", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "digest", class: "MessageDigest", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encodeToString", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encodeHexString", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
   { method: "encodeForURL", removes: ["xss", "ssrf", "open_redirect"] },
   { method: "encodeURL", removes: ["xss", "ssrf", "open_redirect"] },
   { method: "urlEncode", removes: ["xss", "ssrf", "open_redirect"] },
@@ -11968,6 +12014,36 @@ var DEFAULT_SANITIZERS = [
   { method: "escape", class: "mongo", removes: ["nosql_injection"] },
   { method: "quote", class: "shell", removes: ["command_injection"] },
   { method: "escape", class: "shell-escape", removes: ["command_injection"] },
+  { method: "encode", class: "he", removes: ["xss", "external_taint_escape"] },
+  { method: "escape", class: "he", removes: ["xss", "external_taint_escape"] },
+  { method: "sanitizeHtml", removes: ["xss", "external_taint_escape"] },
+  { method: "xss", removes: ["xss", "external_taint_escape"] },
+  { method: "filterXSS", removes: ["xss", "external_taint_escape"] },
+  { method: "escapeHtml", removes: ["xss", "external_taint_escape"] },
+  { method: "escapeHTML", removes: ["xss", "external_taint_escape"] },
+  { method: "encode", class: "entities", removes: ["xss", "external_taint_escape"] },
+  { method: "escape", class: "entities", removes: ["xss", "external_taint_escape"] },
+  { method: "inHTMLData", class: "xssFilters", removes: ["xss", "external_taint_escape"] },
+  { method: "inHTMLComment", class: "xssFilters", removes: ["xss", "external_taint_escape"] },
+  { method: "uriInHTMLData", class: "xssFilters", removes: ["xss", "external_taint_escape"] },
+  { method: "escape", class: "SqlString", removes: ["sql_injection", "external_taint_escape"] },
+  { method: "escapeId", class: "SqlString", removes: ["sql_injection", "external_taint_escape"] },
+  { method: "format", class: "SqlString", removes: ["sql_injection", "external_taint_escape"] },
+  { method: "format", class: "pgFormat", removes: ["sql_injection", "external_taint_escape"] },
+  { method: "ident", class: "pgFormat", removes: ["sql_injection", "external_taint_escape"] },
+  { method: "literal", class: "pgFormat", removes: ["sql_injection", "external_taint_escape"] },
+  { method: "randomUUID", class: "crypto", removes: ["sql_injection", "nosql_injection", "command_injection", "path_traversal", "code_injection", "xss"] },
+  { method: "randomUUID", removes: ["sql_injection", "nosql_injection", "command_injection", "path_traversal", "code_injection", "xss"] },
+  { method: "toString", class: "URLSearchParams", removes: ["ssrf", "open_redirect", "xss"] },
+  { method: "QuoteMeta", class: "regexp", removes: ["redos", "code_injection", "external_taint_escape"] },
+  { method: "Sanitize", class: "bluemonday", removes: ["xss", "external_taint_escape"] },
+  { method: "Sanitize", class: "Policy", removes: ["xss", "external_taint_escape"] },
+  { method: "Sanitize", removes: ["xss", "external_taint_escape"] },
+  { method: "SanitizeBytes", class: "bluemonday", removes: ["xss", "external_taint_escape"] },
+  { method: "SanitizeBytes", class: "Policy", removes: ["xss", "external_taint_escape"] },
+  { method: "SanitizeBytes", removes: ["xss", "external_taint_escape"] },
+  { method: "ParseIP", class: "net", removes: ["ssrf", "command_injection", "path_traversal", "external_taint_escape"] },
+  { method: "Named", class: "sql", removes: ["sql_injection", "external_taint_escape"] },
   { method: "escape", class: "markupsafe", removes: ["xss"] },
   { method: "escape", class: "html", removes: ["xss"] },
   { method: "escape", class: "cgi", removes: ["xss"] },
@@ -45816,7 +45892,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.185.0";
+var version = "3.187.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.185.0",
+  "version": "3.187.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.185.0"
+    "circle-ir": "^3.187.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",