38 lines
987 B
JSON
38 lines
987 B
JSON
{
|
|
"version": "1.0.0",
|
|
"cases": [
|
|
{
|
|
"case_id": "js-express-blog:001",
|
|
"case_version": "1.0.0",
|
|
"notes": "Baseline public case",
|
|
"sinks": [
|
|
{
|
|
"sink_id": "Deserializer::parse",
|
|
"label": "reachable",
|
|
"confidence": "high",
|
|
"dynamic_evidence": {
|
|
"covered_by_tests": [
|
|
"tests/test_reachable_deserialization.js::should_reach_sink"
|
|
],
|
|
"coverage_files": [
|
|
"outputs/coverage.json"
|
|
]
|
|
},
|
|
"static_evidence": {
|
|
"call_path": [
|
|
"POST /api/posts",
|
|
"PostsController.create",
|
|
"PostsService.createFromJson",
|
|
"Deserializer.parse"
|
|
]
|
|
},
|
|
"config_conditions": [
|
|
"process.env.FEATURE_JSON_ENABLED == 'true'"
|
|
],
|
|
"notes": "If FEATURE_JSON_ENABLED=false the path is unreachable"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|