cognium-dev 3.186.0 → 3.187.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/cli.js +47 -1
  2. package/package.json +2 -2
package/dist/cli.js CHANGED
@@ -11884,9 +11884,36 @@ var DEFAULT_SINKS = [
11884
11884
  ];
11885
11885
  var DEFAULT_SANITIZERS = [
11886
11886
  { method: "setString", class: "PreparedStatement", removes: ["sql_injection"] },
11887
+ { method: "setNString", class: "PreparedStatement", removes: ["sql_injection"] },
11887
11888
  { method: "setInt", class: "PreparedStatement", removes: ["sql_injection"] },
11888
11889
  { method: "setLong", class: "PreparedStatement", removes: ["sql_injection"] },
11890
+ { method: "setShort", class: "PreparedStatement", removes: ["sql_injection"] },
11891
+ { method: "setByte", class: "PreparedStatement", removes: ["sql_injection"] },
11892
+ { method: "setBoolean", class: "PreparedStatement", removes: ["sql_injection"] },
11893
+ { method: "setDouble", class: "PreparedStatement", removes: ["sql_injection"] },
11894
+ { method: "setFloat", class: "PreparedStatement", removes: ["sql_injection"] },
11895
+ { method: "setBigDecimal", class: "PreparedStatement", removes: ["sql_injection"] },
11896
+ { method: "setBytes", class: "PreparedStatement", removes: ["sql_injection"] },
11897
+ { method: "setDate", class: "PreparedStatement", removes: ["sql_injection"] },
11898
+ { method: "setTime", class: "PreparedStatement", removes: ["sql_injection"] },
11899
+ { method: "setTimestamp", class: "PreparedStatement", removes: ["sql_injection"] },
11900
+ { method: "setObject", class: "PreparedStatement", removes: ["sql_injection"] },
11901
+ { method: "setNull", class: "PreparedStatement", removes: ["sql_injection"] },
11902
+ { method: "setArray", class: "PreparedStatement", removes: ["sql_injection"] },
11903
+ { method: "setBlob", class: "PreparedStatement", removes: ["sql_injection"] },
11904
+ { method: "setClob", class: "PreparedStatement", removes: ["sql_injection"] },
11905
+ { method: "setNClob", class: "PreparedStatement", removes: ["sql_injection"] },
11906
+ { method: "setRef", class: "PreparedStatement", removes: ["sql_injection"] },
11907
+ { method: "setRowId", class: "PreparedStatement", removes: ["sql_injection"] },
11908
+ { method: "setSQLXML", class: "PreparedStatement", removes: ["sql_injection"] },
11909
+ { method: "setURL", class: "PreparedStatement", removes: ["sql_injection"] },
11910
+ { method: "setBinaryStream", class: "PreparedStatement", removes: ["sql_injection"] },
11911
+ { method: "setCharacterStream", class: "PreparedStatement", removes: ["sql_injection"] },
11912
+ { method: "setAsciiStream", class: "PreparedStatement", removes: ["sql_injection"] },
11913
+ { method: "setNCharacterStream", class: "PreparedStatement", removes: ["sql_injection"] },
11889
11914
  { method: "setParameter", class: "Query", removes: ["sql_injection"] },
11915
+ { method: "setParameter", class: "TypedQuery", removes: ["sql_injection"] },
11916
+ { method: "addValue", class: "MapSqlParameterSource", removes: ["sql_injection"] },
11890
11917
  { annotation: "Param", removes: ["sql_injection"] },
11891
11918
  { method: "escapeHtml", removes: ["xss"] },
11892
11919
  { method: "encodeForHTML", removes: ["xss"] },
@@ -11904,6 +11931,25 @@ var DEFAULT_SANITIZERS = [
11904
11931
  { method: "render", class: "Template", removes: ["xss"] },
11905
11932
  { method: "encodeForJavaScript", removes: ["xss"] },
11906
11933
  { method: "encodeForCSS", removes: ["xss"] },
11934
+ { method: "escape", class: "Escaper", removes: ["xss"] },
11935
+ { method: "escape", class: "HtmlEscapers", removes: ["xss"] },
11936
+ { method: "escapeJson", class: "StringEscapeUtils", removes: ["xss"] },
11937
+ { method: "escapeEcmaScript", class: "StringEscapeUtils", removes: ["xss"] },
11938
+ { method: "escapeXml11", class: "StringEscapeUtils", removes: ["xss"] },
11939
+ { method: "escapeXml10", class: "StringEscapeUtils", removes: ["xss"] },
11940
+ { method: "escapeCsv", class: "StringEscapeUtils", removes: ["xss"] },
11941
+ { method: "escapeXsi", class: "StringEscapeUtils", removes: ["xss"] },
11942
+ { method: "escapeJava", class: "StringEscapeUtils", removes: ["xss"] },
11943
+ { method: "escapeJson", removes: ["xss"] },
11944
+ { method: "escapeEcmaScript", removes: ["xss"] },
11945
+ { method: "escapeCsv", removes: ["xss"] },
11946
+ { method: "sanitize", class: "PolicyFactory", removes: ["xss"] },
11947
+ { method: "encodeToString", class: "Encoder", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
11948
+ { method: "encode", class: "Encoder", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
11949
+ { method: "encodeHexString", class: "Hex", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
11950
+ { method: "digest", class: "MessageDigest", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
11951
+ { method: "encodeToString", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
11952
+ { method: "encodeHexString", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
11907
11953
  { method: "encodeForURL", removes: ["xss", "ssrf", "open_redirect"] },
11908
11954
  { method: "encodeURL", removes: ["xss", "ssrf", "open_redirect"] },
11909
11955
  { method: "urlEncode", removes: ["xss", "ssrf", "open_redirect"] },
@@ -45846,7 +45892,7 @@ var colors = {
45846
45892
  };
45847
45893
 
45848
45894
  // src/version.ts
45849
- var version = "3.186.0";
45895
+ var version = "3.187.0";
45850
45896
 
45851
45897
  // src/formatters.ts
45852
45898
  var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "cognium-dev",
3
- "version": "3.186.0",
3
+ "version": "3.187.0",
4
4
  "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
66
66
  },
67
67
  "dependencies": {
68
68
  "@cognium/project-profile-detect": "^1.1.0",
69
- "circle-ir": "^3.186.0"
69
+ "circle-ir": "^3.187.0"
70
70
  },
71
71
  "devDependencies": {
72
72
  "@types/node": "^25.5.0",