e comments

Results 5 comments of

Unable to have a `focus-metavariable` within a `pattern-either`

I posted the relevant section of the rule above under the "To reproduce" section, but I can post the full one on the Linear issue, along with the test code.

Unable to have a `focus-metavariable` within a `pattern-either`

We decided to enhance `focus-metavariable` itself instead of changing the behavior of `pattern-either`. In addition to taking in a single metavariable as a YAML string (which has been the behavior...

False positive pattern in loop pointer rule

Hey! Thanks for filing this issue :) I don't think Semgrep can do that kind of type analysis over contents of a collection in Go right now. I filed an...

Express "tainted-sql-injection" is too broad in the strings it matches

Hey @ollien, thanks for filing this issue. I don't think we can really do that with the current state of Semgrep unfortunately.

FR: Support CNAME responses from global nameservers that refer to magic-DNS names

In case someone's very new to networking and DNS stuff like me and is also coming from [this video](https://youtu.be/Vt4PDUXB_fg?si=MzoAHL9QuDJ34hEV), you can replace the CNAME records with A records in your...