feat: add security sink detection patterns for JavaScript/TypeScript
- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations). - Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns. - Added `package-lock.json` for dependency management.
This commit is contained in:
@@ -9,7 +9,7 @@
|
||||
<PackageDownload Include="AWSSDK.Core" Version="[4.0.1.3]" />
|
||||
<PackageDownload Include="AWSSDK.KeyManagementService" Version="[4.0.6]" />
|
||||
<PackageDownload Include="AWSSDK.S3" Version="[3.7.305.6]" />
|
||||
<PackageDownload Include="CycloneDX.Core" Version="[11.0.0]" />
|
||||
<PackageDownload Include="CycloneDX.Core" Version="[10.0.2]" />
|
||||
<PackageDownload Include="Google.Protobuf" Version="[3.27.2]" />
|
||||
<PackageDownload Include="Grpc.Net.Client" Version="[2.65.0]" />
|
||||
<PackageDownload Include="Grpc.Tools" Version="[2.65.0]" />
|
||||
|
||||
Reference in New Issue
Block a user