cognium-dev 3.210.0 → 3.212.0

package/dist/cli.js

@@ -11840,8 +11840,6 @@ var DEFAULT_SINKS = [
   { method: "setVariable", class: "Context", type: "xss", cwe: "CWE-79", severity: "medium", arg_positions: [1] },
   { method: "clean", class: "AntiSamy", type: "xss", cwe: "CWE-79", severity: "medium", arg_positions: [0] },
   { method: "getValidSafeHTML", class: "ESAPI", type: "xss", cwe: "CWE-79", severity: "medium", arg_positions: [0] },
-  { method: "getAttribute", class: "HttpServletRequest", type: "xss", cwe: "CWE-79", severity: "medium", arg_positions: [] },
-  { method: "getAttribute", class: "HttpSession", type: "xss", cwe: "CWE-79", severity: "medium", arg_positions: [] },
   { method: "spawn", class: "Command", type: "command_injection", cwe: "CWE-78", severity: "critical", arg_positions: [0] },
   { method: "output", class: "Command", type: "command_injection", cwe: "CWE-78", severity: "critical", arg_positions: [0] },
   { method: "status", class: "Command", type: "command_injection", cwe: "CWE-78", severity: "critical", arg_positions: [0] },
@@ -14479,6 +14477,73 @@ function isNonExecutablePython(trimmed) {
   return false;
 }
 
+// ../circle-ir/dist/analysis/sanitizer-index.js
+var SANITIZER_SET_CACHE = new WeakMap;
+function getSanitizesSet(san) {
+  let s = SANITIZER_SET_CACHE.get(san);
+  if (!s) {
+    s = new Set(san.sanitizes);
+    SANITIZER_SET_CACHE.set(san, s);
+  }
+  return s;
+}
+function sanitizerCoversSink(san, sinkType) {
+  return getSanitizesSet(san).has(sinkType);
+}
+
+// ../circle-ir/dist/analysis/dfg-walk.js
+var walkBackwardDefsMemo = new WeakMap;
+function walkBackwardDefs(startDefId, chainsByToDef, defById, options = {}) {
+  const maxHops = options.maxHops ?? 32;
+  let perFile = walkBackwardDefsMemo.get(chainsByToDef);
+  if (perFile !== undefined) {
+    const key = `${startDefId}|${maxHops}`;
+    const hit = perFile.get(key);
+    if (hit !== undefined)
+      return hit;
+  }
+  const visited = new Set;
+  const lines = new Set;
+  let hopCapReached = false;
+  const startDef = defById.get(startDefId);
+  if (!startDef) {
+    return { visited, lines, hopCapReached: false };
+  }
+  visited.add(startDefId);
+  lines.add(startDef.line);
+  const queue = [startDefId];
+  let hops = 0;
+  while (queue.length > 0) {
+    if (hops >= maxHops) {
+      hopCapReached = true;
+      break;
+    }
+    hops++;
+    const currentId = queue.shift();
+    const incoming = chainsByToDef.get(currentId);
+    if (!incoming)
+      continue;
+    for (const chain of incoming) {
+      const fromId = chain.from_def;
+      if (visited.has(fromId))
+        continue;
+      visited.add(fromId);
+      const fromDef = defById.get(fromId);
+      if (fromDef) {
+        lines.add(fromDef.line);
+      }
+      queue.push(fromId);
+    }
+  }
+  const result = { visited, lines, hopCapReached };
+  if (perFile === undefined) {
+    perFile = new Map;
+    walkBackwardDefsMemo.set(chainsByToDef, perFile);
+  }
+  perFile.set(`${startDefId}|${maxHops}`, result);
+  return result;
+}
+
 // ../circle-ir/dist/analysis/findings.js
 function canSourceReachSink(sourceType, sinkType) {
   const sourceToSinkMapping = {
@@ -16765,73 +16830,6 @@ class AnalysisPipeline {
     return { results, findings };
   }
 }
-// ../circle-ir/dist/analysis/dfg-walk.js
-var walkBackwardDefsMemo = new WeakMap;
-function walkBackwardDefs(startDefId, chainsByToDef, defById, options = {}) {
-  const maxHops = options.maxHops ?? 32;
-  let perFile = walkBackwardDefsMemo.get(chainsByToDef);
-  if (perFile !== undefined) {
-    const key = `${startDefId}|${maxHops}`;
-    const hit = perFile.get(key);
-    if (hit !== undefined)
-      return hit;
-  }
-  const visited = new Set;
-  const lines = new Set;
-  let hopCapReached = false;
-  const startDef = defById.get(startDefId);
-  if (!startDef) {
-    return { visited, lines, hopCapReached: false };
-  }
-  visited.add(startDefId);
-  lines.add(startDef.line);
-  const queue = [startDefId];
-  let hops = 0;
-  while (queue.length > 0) {
-    if (hops >= maxHops) {
-      hopCapReached = true;
-      break;
-    }
-    hops++;
-    const currentId = queue.shift();
-    const incoming = chainsByToDef.get(currentId);
-    if (!incoming)
-      continue;
-    for (const chain of incoming) {
-      const fromId = chain.from_def;
-      if (visited.has(fromId))
-        continue;
-      visited.add(fromId);
-      const fromDef = defById.get(fromId);
-      if (fromDef) {
-        lines.add(fromDef.line);
-      }
-      queue.push(fromId);
-    }
-  }
-  const result = { visited, lines, hopCapReached };
-  if (perFile === undefined) {
-    perFile = new Map;
-    walkBackwardDefsMemo.set(chainsByToDef, perFile);
-  }
-  perFile.set(`${startDefId}|${maxHops}`, result);
-  return result;
-}
-
-// ../circle-ir/dist/analysis/sanitizer-index.js
-var SANITIZER_SET_CACHE = new WeakMap;
-function getSanitizesSet(san) {
-  let s = SANITIZER_SET_CACHE.get(san);
-  if (!s) {
-    s = new Set(san.sanitizes);
-    SANITIZER_SET_CACHE.set(san, s);
-  }
-  return s;
-}
-function sanitizerCoversSink(san, sinkType) {
-  return getSanitizesSet(san).has(sinkType);
-}
-
 // ../circle-ir/dist/analysis/taint-propagation.js
 function buildSanitizersByLine(sanitizers) {
   const out2 = new Map;
@@ -47084,7 +47082,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.210.0";
+var version = "3.212.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.210.0",
+  "version": "3.212.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.210.0"
+    "circle-ir": "^3.212.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",