semgrep-rules icon indicating copy to clipboard operation
semgrep-rules copied to clipboard

[Rule] Add rules for NodeJS security audit checklist items

Open clintgibler opened this issue 3 years ago • 1 comments

Rule Description https://github.com/jesusprubio/strong-node CC @inkz

What does this rule intend to find?

Examples or references

Put an example or references here

Additional information

More information that would help someone write this rule!

PR Checklist

  • [ ] This ticket has links, references, or examples.
  • [ ] The rule has true positive and true negative test cases in a file that matches the rule name.

If the rule is my-rule, the test file name should be my-rule.js.

True positives are marked by comments with ruleid: <my-rule> and true negatives are marked by comments with ok: <my-rule>.

  • [ ] The rule has a good message. A good message includes:
  1. A description of the pattern (e.g., missing parameter, dangerous flag, out-of-order function calls).
  2. A description of why this pattern was detected (e.g., logic bug, introduces a security vulnerability, bad practice).
  3. An alternative that resolves the issue (e.g., use another function, validate data first, discard the dangerous flag).
  • [ ] After the PR has been reviewed and approved, merge the rule and close this ticket! Thanks for contributing!

clintgibler avatar Jun 22 '21 15:06 clintgibler

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Mar 29 '22 02:03 stale[bot]