Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: Java and JS SQLi rules and JS Express XXE rule #382

Merged
merged 5 commits into from
May 2, 2024
Merged

fix: Java and JS SQLi rules and JS Express XXE rule #382

merged 5 commits into from
May 2, 2024

Conversation

elsapet
Copy link
Collaborator

@elsapet elsapet commented Apr 30, 2024

Description

  • Fix Java dynamic and user input so that we still consider things like external.toLowerCase() as external input
  • Add sqlite 3 case to JS SQLi rule
  • Handle case with dynamic options for JS Express XXE LibXML case

Checklist

If this is your first time contributing please sign the CLA

  • My rule has adequate metadata to explain its use.

@elsapet elsapet requested review from gotbadger and didroe April 30, 2024 14:14
@elsapet elsapet merged commit a8537e7 into main May 2, 2024
23 checks passed
@elsapet elsapet deleted the fix/sqli-and-xxe-rules branch May 2, 2024 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@gotbadger gotbadger gotbadger approved these changes

@didroe didroe Awaiting requested review from didroe

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@elsapet @gotbadger