Documentation
¶
Index ¶
- Variables
- func RegisterAccessControlRule(ctx *analyzer.AnalyzerContext)
- func RegisterCommandExecRule(ctx *analyzer.AnalyzerContext)
- func RegisterDataIntegrityRule(ctx *analyzer.AnalyzerContext)
- func RegisterInsecureDesignRule(ctx *analyzer.AnalyzerContext)
- func RegisterLoggingMonitoringRule(ctx *analyzer.AnalyzerContext)
- func RegisterSSRFRule(ctx *analyzer.AnalyzerContext)
- func RegisterXSSRule(ctx *analyzer.AnalyzerContext)
Constants ¶
This section is empty.
Variables ¶
View Source
var SQLInjectionRule = &analysis.Analyzer{
Name: "sql_injection",
Doc: "Detects potential SQL injection vulnerabilities in raw query constructions",
Run: runSQLInjection,
}
SQLInjectionRule detects insecure SQL query constructions using string concatenation.
Functions ¶
func RegisterAccessControlRule ¶ added in v0.2.1
func RegisterAccessControlRule(ctx *analyzer.AnalyzerContext)
RegisterAccessControlRule registers the access control violation detection rule.
func RegisterCommandExecRule ¶
func RegisterCommandExecRule(ctx *analyzer.AnalyzerContext)
RegisterCommandExecRule registers the command injection detection rule.
func RegisterDataIntegrityRule ¶ added in v0.2.1
func RegisterDataIntegrityRule(ctx *analyzer.AnalyzerContext)
RegisterDataIntegrityRule registers the data integrity failure detection rule.
func RegisterInsecureDesignRule ¶ added in v0.2.1
func RegisterInsecureDesignRule(ctx *analyzer.AnalyzerContext)
RegisterInsecureDesignRule registers the insecure design detection rule.
func RegisterLoggingMonitoringRule ¶ added in v0.2.1
func RegisterLoggingMonitoringRule(ctx *analyzer.AnalyzerContext)
RegisterLoggingMonitoringRule registers the security logging and monitoring failure detection rule.
func RegisterSSRFRule ¶ added in v0.2.1
func RegisterSSRFRule(ctx *analyzer.AnalyzerContext)
RegisterSSRFRule registers the SSRF detection rule.
func RegisterXSSRule ¶ added in v1.4.0
func RegisterXSSRule(ctx *analyzer.AnalyzerContext)
RegisterXSSRule registers the XSS detection rule.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.