xploitscan-shared-rules 1.8.0 → 1.8.1

package/dist/index.cjs

@@ -3954,9 +3954,9 @@ var xxeVulnerability = {
         ));
       }
     }
-    if (!/parseXml\s*\(/.test(content)) return matches;
+    if (!/parseXml\s*\(/.test(content)) return filterSilenced(matches, content, "VC081");
     const ctx = tryParse(content, filePath);
-    if (!ctx) return matches;
+    if (!ctx) return filterSilenced(matches, content, "VC081");
     visitCalls(
       ctx.parsed,
       (callee) => isCalleeNamed(callee, "parseXml") || isCalleeNamed(callee, "parseXML"),
@@ -3980,7 +3980,7 @@ var xxeVulnerability = {
         );
       }
     );
-    return matches;
+    return filterSilenced(matches, content, "VC081");
   }
 };
 var ssti = {
@@ -4009,7 +4009,7 @@ var ssti = {
       ));
     }
     if (!/(?:\.compile|\.render|renderString|render_template_string)\s*\(/.test(content)) {
-      return matches;
+      return filterSilenced(matches, content, "VC082");
     }
     const ctx = tryParse(content, filePath);
     if (!ctx) return matches;
@@ -4048,7 +4048,7 @@ var ssti = {
         );
       }
     );
-    return matches;
+    return filterSilenced(matches, content, "VC082");
   }
 };
 var javaDeserialization = {
@@ -4369,7 +4369,7 @@ var commandInjection = {
         matches.push(m);
       }
     }
-    return matches;
+    return filterSilenced(matches, content, "VC094");
   }
 };
 var corsLocalhost = {
@@ -7064,7 +7064,7 @@ var llmPromptInjection = {
         });
       }
     }
-    return findings;
+    return filterSilenced(findings, content, "VC198");
   }
 };
 var llmSystemPromptInjection = {
@@ -7101,7 +7101,7 @@ var llmSystemPromptInjection = {
         });
       }
     }
-    return findings;
+    return filterSilenced(findings, content, "VC199");
   }
 };
 var llmOutputAsHTML = {
@@ -7145,7 +7145,7 @@ var llmOutputAsHTML = {
         });
       }
     }
-    return findings;
+    return filterSilenced(findings, content, "VC200");
   }
 };
 var vectorStoreQueryNoUserFilter = {