mobbdev 1.0.143 → 1.0.147

package/dist/index.mjs

@@ -1601,6 +1601,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["Redos"] = "REDOS";
   IssueType_Enum2["RegexInjection"] = "REGEX_INJECTION";
   IssueType_Enum2["RegexMissingTimeout"] = "REGEX_MISSING_TIMEOUT";
+  IssueType_Enum2["RequestParametersBoundViaInput"] = "REQUEST_PARAMETERS_BOUND_VIA_INPUT";
   IssueType_Enum2["ReturnShouldNotBeInvariant"] = "RETURN_SHOULD_NOT_BE_INVARIANT";
   IssueType_Enum2["SqlInjection"] = "SQL_Injection";
   IssueType_Enum2["Ssrf"] = "SSRF";
@@ -2664,7 +2665,8 @@ var fixDetailsData = {
   ["PORT_ALL_INTERFACES" /* PortAllInterfaces */]: void 0,
   ["WRITABLE_FILESYSTEM_SERVICE" /* WritableFilesystemService */]: void 0,
   ["NO_NEW_PRIVILEGES" /* NoNewPrivileges */]: void 0,
-  ["USELESS_TERNARY" /* UselessTernary */]: void 0
+  ["USELESS_TERNARY" /* UselessTernary */]: void 0,
+  ["REQUEST_PARAMETERS_BOUND_VIA_INPUT" /* RequestParametersBoundViaInput */]: void 0
 };
 
 // src/features/analysis/scm/shared/src/getIssueType.ts
@@ -2790,7 +2792,8 @@ var issueTypeMap = {
   ["PORT_ALL_INTERFACES" /* PortAllInterfaces */]: "Port All Interfaces",
   ["WRITABLE_FILESYSTEM_SERVICE" /* WritableFilesystemService */]: "Writable Filesystem Service",
   ["NO_NEW_PRIVILEGES" /* NoNewPrivileges */]: "No New Privileges",
-  ["USELESS_TERNARY" /* UselessTernary */]: "Useless Ternary"
+  ["USELESS_TERNARY" /* UselessTernary */]: "Useless Ternary",
+  ["REQUEST_PARAMETERS_BOUND_VIA_INPUT" /* RequestParametersBoundViaInput */]: "Request Parameters Bound Via Input"
 };
 var issueTypeZ = z.nativeEnum(IssueType_Enum);
 var getIssueTypeFriendlyString = (issueType) => {
@@ -3290,6 +3293,15 @@ var regexMissingTimeout = {
   }
 };
 
+// src/features/analysis/scm/shared/src/storedQuestionData/csharp/requestParametersBoundViaInput.ts
+var requestParametersBoundViaInput = {
+  fieldsToCopy: {
+    content: () => "Please list all the fields you expect as input from the user. Use comma separated list.",
+    description: () => `This is meant to avoid mass assignment vulnerabilities, where the user would enter an inner unexpected field`,
+    guidance: () => ""
+  }
+};
+
 // src/features/analysis/scm/shared/src/storedQuestionData/csharp/sqlInjection.ts
 var sqlInjection2 = {
   databaseProvider: {
@@ -3445,7 +3457,8 @@ var vulnerabilities10 = {
   ["VALUE_SHADOWING" /* ValueShadowing */]: valueShadowing,
   ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: insecureRandomness,
   ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: insufficientLogging,
-  ["SQL_Injection" /* SqlInjection */]: sqlInjection2
+  ["SQL_Injection" /* SqlInjection */]: sqlInjection2,
+  ["REQUEST_PARAMETERS_BOUND_VIA_INPUT" /* RequestParametersBoundViaInput */]: requestParametersBoundViaInput
 };
 var csharp_default2 = vulnerabilities10;
 
@@ -5227,23 +5240,18 @@ var ProjectVulnerabilityReport = z11.object({
     expirationOn: z11.string()
   })
 });
-var ProjectGetProjectZ = z11.object({
-  id: z11.string().uuid(),
-  name: z11.string(),
-  vulnerabilityReports: z11.object({
-    vendor: z11.nativeEnum(Vulnerability_Report_Vendor_Enum).nullable(),
-    fixReport: z11.object({
-      issueLanguages: z11.record(z11.nativeEnum(IssueLanguage_Enum), z11.number()).nullable(),
-      state: z11.nativeEnum(Fix_Report_State_Enum),
-      repo: z11.object({
-        originalUrl: z11.string(),
-        reference: z11.string()
-      }),
-      expirationOn: z11.string()
-    })
-  }).array()
+var GetProjectsQueryZ = z11.object({
+  organization: z11.object({
+    id: z11.string(),
+    projects: z11.array(
+      z11.object({
+        id: z11.string().uuid(),
+        name: z11.string(),
+        numberOfUniqueRepos: z11.number()
+      })
+    )
+  })
 });
-var GetProjectsQueryZ = z11.array(ProjectGetProjectZ);
 var ProjectPageQueryResultZ = z11.object({
   name: z11.string(),
   id: z11.string().uuid(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.143",
+  "version": "1.0.147",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",