Documentation
¶
Index ¶
- Variables
- func RegisterAccessControlRule(ctx *analyzer.AnalyzerContext)
- func RegisterCSRFRule(ctx *analyzer.AnalyzerContext)
- func RegisterCommandExecRule(ctx *analyzer.AnalyzerContext)
- func RegisterCryptoWeakRule(ctx *analyzer.AnalyzerContext)
- func RegisterDataIntegrityRule(ctx *analyzer.AnalyzerContext)
- func RegisterInsecureDesignRule(ctx *analyzer.AnalyzerContext)
- func RegisterLoggingMonitoringRule(ctx *analyzer.AnalyzerContext)
- func RegisterPathTraversalRule(ctx *analyzer.AnalyzerContext)
- func RegisterSSRFRule(ctx *analyzer.AnalyzerContext)
- func RegisterSecurityMisconfigRule(ctx *analyzer.AnalyzerContext)
- func RegisterXSSRule(ctx *analyzer.AnalyzerContext)
Constants ¶
This section is empty.
Variables ¶
var SQLInjectionRule = &analysis.Analyzer{
Name: "sql_injection",
Doc: "Detects potential SQL injection vulnerabilities in raw query constructions",
Run: runSQLInjection,
}
SQLInjectionRule detects insecure SQL query constructions using string concatenation.
Functions ¶
func RegisterAccessControlRule ¶ added in v0.2.1
func RegisterAccessControlRule(ctx *analyzer.AnalyzerContext)
RegisterAccessControlRule registers the access control violation detection rule.
func RegisterCSRFRule ¶ added in v1.4.2
func RegisterCSRFRule(ctx *analyzer.AnalyzerContext)
RegisterCSRFRule registers the CSRF detection rule.
func RegisterCommandExecRule ¶
func RegisterCommandExecRule(ctx *analyzer.AnalyzerContext)
RegisterCommandExecRule registers the command injection detection rule.
func RegisterCryptoWeakRule ¶ added in v1.4.2
func RegisterCryptoWeakRule(ctx *analyzer.AnalyzerContext)
RegisterCryptoWeakRule registers the weak cryptographic algorithms detection rule.
func RegisterDataIntegrityRule ¶ added in v0.2.1
func RegisterDataIntegrityRule(ctx *analyzer.AnalyzerContext)
RegisterDataIntegrityRule registers the data integrity failure detection rule.
func RegisterInsecureDesignRule ¶ added in v0.2.1
func RegisterInsecureDesignRule(ctx *analyzer.AnalyzerContext)
RegisterInsecureDesignRule registers the insecure design detection rule.
func RegisterLoggingMonitoringRule ¶ added in v0.2.1
func RegisterLoggingMonitoringRule(ctx *analyzer.AnalyzerContext)
RegisterLoggingMonitoringRule registers the security logging and monitoring failure detection rule.
func RegisterPathTraversalRule ¶ added in v1.4.2
func RegisterPathTraversalRule(ctx *analyzer.AnalyzerContext)
RegisterPathTraversalRule registers the Path Traversal detection rule.
func RegisterSSRFRule ¶ added in v0.2.1
func RegisterSSRFRule(ctx *analyzer.AnalyzerContext)
RegisterSSRFRule registers the SSRF detection rule.
func RegisterSecurityMisconfigRule ¶ added in v1.4.2
func RegisterSecurityMisconfigRule(ctx *analyzer.AnalyzerContext)
RegisterSecurityMisconfigRule registers the Security Misconfiguration detection rule.
func RegisterXSSRule ¶ added in v1.4.0
func RegisterXSSRule(ctx *analyzer.AnalyzerContext)
RegisterXSSRule registers the XSS detection rule.
Types ¶
This section is empty.
Source Files