javascript

var DataFlowAnalyzer = &analysis.Analyzer{
	Name:        "data_flow_analyzer",
	Language:    analysis.LangJs,
	Description: "Create a Data Flow Graph for a javascript file",
	Category:    analysis.CategorySecurity,
	Severity:    analysis.SeverityCritical,
	Run:         createDataFlowGraph,
	ResultType:  reflect.TypeOf(&DataFlowGraph{}),
	Requires:    []*analysis.Analyzer{ScopeAnalyzer},
}

var NoDoubleEq *analysis.Analyzer = &analysis.Analyzer{
	Name:        "no-double-eq",
	Language:    analysis.LangJs,
	Description: "This checker checks for the usage of '==' in JavaScript code. It reports an issue if '==' is used for comparison. It suggests using '===' instead.",
	Category:    analysis.CategoryBugRisk,
	Severity:    analysis.SeverityWarning,
	Run:         noDoubleEq,
}

var NoExec = &analysis.Analyzer{
	Name:        "no_exec",
	Language:    analysis.LangJs,
	Description: "No prompt",
	Category:    analysis.CategorySecurity,
	Severity:    analysis.SeverityCritical,
	Requires:    []*analysis.Analyzer{DataFlowAnalyzer},
	Run:         detectExecOnUserInput,
}

var SQLInjection = &analysis.Analyzer{
	Name:        "sql_injection",
	Language:    analysis.LangJs,
	Description: "Using raw SQL queries with unvalidated input can lead to SQL injection vulnerabilities",
	Category:    analysis.CategorySecurity,
	Severity:    analysis.SeverityCritical,
	Run:         detectSQLInjection,
}

var ScopeAnalyzer = &analysis.Analyzer{
	Name:       "js-scope",
	ResultType: reflect.TypeOf(&analysis.ScopeTree{}),
	Run:        buildScopeTree,
	Language:   analysis.LangJs,
}

var Sha1 = &analysis.Analyzer{
	Name:        "sha1_detector",
	Language:    analysis.LangJs,
	Description: "Avoid using SHA1 for cryptographic purposes",
	Category:    analysis.CategorySecurity,
	Severity:    analysis.SeverityWarning,
	Requires:    []*analysis.Analyzer{DataFlowAnalyzer},
	Run:         detectSha1Usage,
}

var UnusedImport = &analysis.Analyzer{
	Name:        "unused-import",
	Requires:    []*analysis.Analyzer{ScopeAnalyzer},
	Run:         checkUnusedImports,
	Language:    analysis.LangJs,
	Description: "This checker checks for unused imports in JavaScript code. Unused imports can be removed to reduce the size of the bundle. Unused imports are also a code smell and can indicate that the code is not well-organized.",
	Category:    analysis.CategoryAntipattern,
	Severity:    analysis.SeverityInfo,
}