xploitscan-shared-rules 1.8.0 → 1.8.1

package/dist/index.js

@@ -3689,9 +3689,9 @@ var xxeVulnerability = {
         ));
       }
     }
-    if (!/parseXml\s*\(/.test(content)) return matches;
+    if (!/parseXml\s*\(/.test(content)) return filterSilenced(matches, content, "VC081");
     const ctx = tryParse(content, filePath);
-    if (!ctx) return matches;
+    if (!ctx) return filterSilenced(matches, content, "VC081");
     visitCalls(
       ctx.parsed,
       (callee) => isCalleeNamed(callee, "parseXml") || isCalleeNamed(callee, "parseXML"),
@@ -3715,7 +3715,7 @@ var xxeVulnerability = {
         );
       }
     );
-    return matches;
+    return filterSilenced(matches, content, "VC081");
   }
 };
 var ssti = {
@@ -3744,7 +3744,7 @@ var ssti = {
       ));
     }
     if (!/(?:\.compile|\.render|renderString|render_template_string)\s*\(/.test(content)) {
-      return matches;
+      return filterSilenced(matches, content, "VC082");
     }
     const ctx = tryParse(content, filePath);
     if (!ctx) return matches;
@@ -3783,7 +3783,7 @@ var ssti = {
         );
       }
     );
-    return matches;
+    return filterSilenced(matches, content, "VC082");
   }
 };
 var javaDeserialization = {
@@ -4104,7 +4104,7 @@ var commandInjection = {
         matches.push(m);
       }
     }
-    return matches;
+    return filterSilenced(matches, content, "VC094");
   }
 };
 var corsLocalhost = {
@@ -6799,7 +6799,7 @@ var llmPromptInjection = {
         });
       }
     }
-    return findings;
+    return filterSilenced(findings, content, "VC198");
   }
 };
 var llmSystemPromptInjection = {
@@ -6836,7 +6836,7 @@ var llmSystemPromptInjection = {
         });
       }
     }
-    return findings;
+    return filterSilenced(findings, content, "VC199");
   }
 };
 var llmOutputAsHTML = {
@@ -6880,7 +6880,7 @@ var llmOutputAsHTML = {
         });
       }
     }
-    return findings;
+    return filterSilenced(findings, content, "VC200");
   }
 };
 var vectorStoreQueryNoUserFilter = {