builtin

package
v1.4.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 23, 2025 License: MIT Imports: 8 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var SQLInjectionRule = &analysis.Analyzer{
	Name: "sql_injection",
	Doc:  "Detects potential SQL injection vulnerabilities in raw query constructions",
	Run:  runSQLInjection,
}

SQLInjectionRule detects insecure SQL query constructions using string concatenation.

Functions

func RegisterAccessControlRule added in v0.2.1

func RegisterAccessControlRule(ctx *analyzer.AnalyzerContext)

RegisterAccessControlRule registers the access control violation detection rule.

func RegisterCommandExecRule

func RegisterCommandExecRule(ctx *analyzer.AnalyzerContext)

RegisterCommandExecRule registers the command injection detection rule.

func RegisterDataIntegrityRule added in v0.2.1

func RegisterDataIntegrityRule(ctx *analyzer.AnalyzerContext)

RegisterDataIntegrityRule registers the data integrity failure detection rule.

func RegisterInsecureDesignRule added in v0.2.1

func RegisterInsecureDesignRule(ctx *analyzer.AnalyzerContext)

RegisterInsecureDesignRule registers the insecure design detection rule.

func RegisterLoggingMonitoringRule added in v0.2.1

func RegisterLoggingMonitoringRule(ctx *analyzer.AnalyzerContext)

RegisterLoggingMonitoringRule registers the security logging and monitoring failure detection rule.

func RegisterSSRFRule added in v0.2.1

func RegisterSSRFRule(ctx *analyzer.AnalyzerContext)

RegisterSSRFRule registers the SSRF detection rule.

func RegisterXSSRule added in v1.4.0

func RegisterXSSRule(ctx *analyzer.AnalyzerContext)

RegisterXSSRule registers the XSS detection rule.

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL