cognium-dev 3.186.0 → 3.188.0

package/dist/cli.js

@@ -10614,6 +10614,14 @@ var DEFAULT_SOURCES = [
   { annotation: "Cookie", type: "http_cookie", severity: "high", param_tainted: true },
   { annotation: "Form", type: "http_param", severity: "high", param_tainted: true },
   { annotation: "File", type: "file_input", severity: "high", param_tainted: true },
+  { annotation: "Param", type: "http_path", severity: "high", param_tainted: true },
+  { annotation: "Req", type: "http_body", severity: "high", param_tainted: true },
+  { annotation: "Request", type: "http_body", severity: "high", param_tainted: true },
+  { annotation: "Session", type: "http_cookie", severity: "high", param_tainted: true },
+  { annotation: "Ip", type: "network_input", severity: "high", param_tainted: true },
+  { annotation: "HostParam", type: "http_path", severity: "high", param_tainted: true },
+  { annotation: "UploadedFile", type: "file_input", severity: "high", param_tainted: true },
+  { annotation: "UploadedFiles", type: "file_input", severity: "high", param_tainted: true },
   { method: "json", class: "Request", type: "http_body", severity: "high", return_tainted: true },
   { method: "form", class: "Request", type: "http_param", severity: "high", return_tainted: true },
   { method: "body", class: "Request", type: "http_body", severity: "high", return_tainted: true },
@@ -11884,9 +11892,36 @@ var DEFAULT_SINKS = [
 ];
 var DEFAULT_SANITIZERS = [
   { method: "setString", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNString", class: "PreparedStatement", removes: ["sql_injection"] },
   { method: "setInt", class: "PreparedStatement", removes: ["sql_injection"] },
   { method: "setLong", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setShort", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setByte", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBoolean", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setDouble", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setFloat", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBigDecimal", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBytes", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setDate", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setTime", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setTimestamp", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setObject", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNull", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setArray", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBlob", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setClob", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNClob", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setRef", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setRowId", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setSQLXML", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setURL", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setBinaryStream", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setCharacterStream", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setAsciiStream", class: "PreparedStatement", removes: ["sql_injection"] },
+  { method: "setNCharacterStream", class: "PreparedStatement", removes: ["sql_injection"] },
   { method: "setParameter", class: "Query", removes: ["sql_injection"] },
+  { method: "setParameter", class: "TypedQuery", removes: ["sql_injection"] },
+  { method: "addValue", class: "MapSqlParameterSource", removes: ["sql_injection"] },
   { annotation: "Param", removes: ["sql_injection"] },
   { method: "escapeHtml", removes: ["xss"] },
   { method: "encodeForHTML", removes: ["xss"] },
@@ -11904,6 +11939,25 @@ var DEFAULT_SANITIZERS = [
   { method: "render", class: "Template", removes: ["xss"] },
   { method: "encodeForJavaScript", removes: ["xss"] },
   { method: "encodeForCSS", removes: ["xss"] },
+  { method: "escape", class: "Escaper", removes: ["xss"] },
+  { method: "escape", class: "HtmlEscapers", removes: ["xss"] },
+  { method: "escapeJson", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeEcmaScript", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeXml11", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeXml10", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeCsv", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeXsi", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeJava", class: "StringEscapeUtils", removes: ["xss"] },
+  { method: "escapeJson", removes: ["xss"] },
+  { method: "escapeEcmaScript", removes: ["xss"] },
+  { method: "escapeCsv", removes: ["xss"] },
+  { method: "sanitize", class: "PolicyFactory", removes: ["xss"] },
+  { method: "encodeToString", class: "Encoder", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encode", class: "Encoder", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encodeHexString", class: "Hex", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "digest", class: "MessageDigest", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encodeToString", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
+  { method: "encodeHexString", removes: ["sql_injection", "command_injection", "xss", "path_traversal", "code_injection"] },
   { method: "encodeForURL", removes: ["xss", "ssrf", "open_redirect"] },
   { method: "encodeURL", removes: ["xss", "ssrf", "open_redirect"] },
   { method: "urlEncode", removes: ["xss", "ssrf", "open_redirect"] },
@@ -45846,7 +45900,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.186.0";
+var version = "3.188.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.186.0",
+  "version": "3.188.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.186.0"
+    "circle-ir": "^3.188.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",