Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge Develop into Release #3462

Merged
merged 4 commits into from
Aug 28, 2024
Merged

Merge Develop into Release #3462

merged 4 commits into from
Aug 28, 2024

Commits on Aug 26, 2024

  1. fix: no pro finding for raw-html-concat.js:18 

    We should not expect a pro finding here since the tainted `newContent`
is not in scope, so this actually throws `ReferenceError`. See also
discussion on SAF-1013.
    @kopecs
    kopecs committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    c9be3a3 View commit details
    Browse the repository at this point in the history

Commits on Aug 27, 2024

  1. fix: flip annotation order 

    Apparently we only support deepok second
    @kopecs
    kopecs committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    c4e709b View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3460 from semgrep/cooper/saf-1013 

    fix: no pro finding for raw-html-concat.js:18
    @kopecs
    kopecs authored Aug 27, 2024
    Configuration menu
    Copy the full SHA
    7e9aa19 View commit details
    Browse the repository at this point in the history

  3. fix(naming-regressions): more updates to semgrep-rules (#3455) 

    * Close saf-1008: taint diff

* resolve saf-1015

* maybe contributes to saf-1016

* not deep only but alos floss

* move findings to be pro only

* With brandons fix: a lot of sym prop is no possible to do

* Add Iago note to java test

---------

Co-authored-by: Yosef Alsuhaibani <[email protected]>
    @yosefAlsuhaibani
    yosefAlsuhaibani and Yosef Alsuhaibani authored Aug 27, 2024
    Configuration menu
    Copy the full SHA
    e2df3ce View commit details
    Browse the repository at this point in the history