semgrep-rules
semgrep-rules copied to clipboard
[Rule] Add rules for NodeJS security audit checklist items
Rule Description https://github.com/jesusprubio/strong-node CC @inkz
What does this rule intend to find?
Examples or references
Put an example or references here
Additional information
More information that would help someone write this rule!
PR Checklist
- [ ] This ticket has links, references, or examples.
- [ ] The rule has true positive and true negative test cases in a file that matches the rule name.
If the rule is
my-rule
, the test file name should bemy-rule.js
.True positives are marked by comments with
ruleid: <my-rule>
and true negatives are marked by comments withok: <my-rule>
.
- [ ] The rule has a good message. A good message includes:
- A description of the pattern (e.g., missing parameter, dangerous flag, out-of-order function calls).
- A description of why this pattern was detected (e.g., logic bug, introduces a security vulnerability, bad practice).
- An alternative that resolves the issue (e.g., use another function, validate data first, discard the dangerous flag).
- [ ] After the PR has been reviewed and approved, merge the rule and close this ticket! Thanks for contributing!
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.