Clint Gibler

[Rule] Add rules for NodeJS security audit checklist items

1

**Rule Description** https://github.com/jesusprubio/strong-node CC @inkz *What does this rule intend to find?* **Examples or references** *Put an example or references here* **Additional information** *More information that would help someone write...

User workflow documentation / understanding how components fit together

3

First off, thanks so much for creating promnesia, HPI, grasp, and more! 🙏 The past few months, I've been searching for tool(s) that fit my goals for storing and easily...

Add built-in command to display current list of active shortkeys

1

First off, thanks so much for creating shortkeys! I looked through a bunch of different tools and extensions, and this is by far the most useful and cleanly architected tool...

Constant propagation only runs inside functions

3

**Describe the bug** When making test examples, users often write code outside functions. However, constant propagation only runs inside functions, so this is potentially confusing. For example: ``` x =...

python/lang/security/audit/insecure-transport/requests/request-with-http.yaml does not filter localhost URLs

1

**Describe the bug** If the URL is `http://localhost:whatever`, that's probably intentional and not something we should flag. **To Reproduce** Sample code to reproduce this behavior. https://github.com/returntocorp/semgrep-rules/blob/6eeb0afc178867ecdb3f9cc208d50b9014b8b01f/python/lang/security/audit/insecure-transport/requests/request-with-http.yaml **Expected behavior** Any `http`...

Examples of User Friction in Darklang

5

Darklang does many things really well and makes it a pleasure to prototype small tasks. This issue aims to document aspects that have personally caused me friction / annoyance, with...

Add support for URL parsing to standard library functions (or add String::indexOf)

9

Hey! First off, thanks for building Darklang! It's a really exciting project, and I'm looking forward to seeing where things go 👍 ## Problem Given a URL as a String,...