go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2026-06-20 00:15:59 +02:00
Code Issues Releases Activity

Add G707 taint analyzer for SMTP command/header injection (#1535)

Browse Source 
This change introduces a new taint-analysis rule, G707, to detect
potential SMTP command/header injection when untrusted input reaches
net/smtp sink.

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>
This commit is contained in:
Cosmin Cojocar
2026-02-21 11:12:34 +01:00
committed by GitHub
parent f61ed314c2
commit c13a48626b
8 changed files with 183 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
issue/issue.go
+1
View File
@@ -65,6 +65,7 @@ var ruleToCWE = map[string]string{
"G110": "409",
"G111": "22",
"G112": "400",
"G707": "93",
"G114": "676",
"G115": "190",
"G116": "838",