cognium-dev 3.190.0 → 3.191.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +15 -2
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -10665,6 +10665,14 @@ var DEFAULT_SOURCES = [
|
|
|
10665
10665
|
{ method: "text", class: "Request", type: "http_body", severity: "high", return_tainted: true },
|
|
10666
10666
|
{ property: "query", object: "request", type: "http_param", severity: "high", property_tainted: true },
|
|
10667
10667
|
{ property: "match_info", object: "request", type: "http_path", severity: "high", property_tainted: true },
|
|
10668
|
+
{ property: "rel_url", object: "request", type: "http_body", severity: "high", property_tainted: true },
|
|
10669
|
+
{ property: "remote", object: "request", type: "network_input", severity: "high", property_tainted: true },
|
|
10670
|
+
{ property: "raw_headers", object: "request", type: "http_header", severity: "high", property_tainted: true },
|
|
10671
|
+
{ property: "transport", object: "request", type: "network_input", severity: "medium", property_tainted: true },
|
|
10672
|
+
{ method: "get_json", class: "Request", type: "http_body", severity: "high", return_tainted: true },
|
|
10673
|
+
{ method: "get_data", class: "Request", type: "http_body", severity: "high", return_tainted: true },
|
|
10674
|
+
{ method: "form", class: "Request", type: "http_param", severity: "high", return_tainted: true },
|
|
10675
|
+
{ method: "files", class: "Request", type: "file_input", severity: "high", return_tainted: true },
|
|
10668
10676
|
{ method: "query_string", class: "HttpRequest", type: "http_param", severity: "high", return_tainted: true },
|
|
10669
10677
|
{ method: "match_info", class: "HttpRequest", type: "http_param", severity: "high", return_tainted: true },
|
|
10670
10678
|
{ method: "into_inner", class: "Path", type: "http_param", severity: "high", return_tainted: true },
|
|
@@ -24881,7 +24889,12 @@ var PYTHON_TAINTED_PATTERNS2 = [
|
|
|
24881
24889
|
{ pattern: /\binput\s*\(/, type: "io_input" },
|
|
24882
24890
|
{ pattern: /\.receive_text\s*\(/, type: "network_input" },
|
|
24883
24891
|
{ pattern: /\.receive_bytes\s*\(/, type: "network_input" },
|
|
24884
|
-
{ pattern: /\.receive_json\s*\(/, type: "http_body" }
|
|
24892
|
+
{ pattern: /\.receive_json\s*\(/, type: "http_body" },
|
|
24893
|
+
{ pattern: /\brequest\.rel_url\b/, type: "http_body" },
|
|
24894
|
+
{ pattern: /\brequest\.remote\b/, type: "network_input" },
|
|
24895
|
+
{ pattern: /\brequest\.match_info\b/, type: "http_path" },
|
|
24896
|
+
{ pattern: /\.get_json\s*\(/, type: "http_body" },
|
|
24897
|
+
{ pattern: /\.get_data\s*\(/, type: "http_body" }
|
|
24885
24898
|
];
|
|
24886
24899
|
|
|
24887
24900
|
class LanguageSourcesPass {
|
|
@@ -45967,7 +45980,7 @@ var colors = {
|
|
|
45967
45980
|
};
|
|
45968
45981
|
|
|
45969
45982
|
// src/version.ts
|
|
45970
|
-
var version = "3.
|
|
45983
|
+
var version = "3.191.0";
|
|
45971
45984
|
|
|
45972
45985
|
// src/formatters.ts
|
|
45973
45986
|
var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cognium-dev",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.191.0",
|
|
4
4
|
"description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -66,7 +66,7 @@
|
|
|
66
66
|
},
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
69
|
-
"circle-ir": "^3.
|
|
69
|
+
"circle-ir": "^3.191.0"
|
|
70
70
|
},
|
|
71
71
|
"devDependencies": {
|
|
72
72
|
"@types/node": "^25.5.0",
|