Cosmin Cojocar e354c572d9 Fix false positive in G118 when cancel is stored in a slice/map (#1670) ...

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>

2026-05-11 21:00:26 +02:00

..

analyzers_set_test.go

…

analyzers_set.go

…

analyzers_test.go

Add G710 rule for open redirect via taint analysis (#1654)

2026-04-26 09:38:45 +02:00

analyzerslist_test.go

Add G710 rule for open redirect via taint analysis (#1654)

2026-04-26 09:38:45 +02:00

analyzerslist.go

Add G710 rule for open redirect via taint analysis (#1654)

2026-04-26 09:38:45 +02:00

anaylzers_suite_test.go

…

bench_test.go

…

commandinjection.go

…

context_propagation.go

Fix false positive in G118 when cancel is stored in a slice/map (#1670)

2026-05-11 21:00:26 +02:00

conversion_overflow_test.go

…

conversion_overflow.go

Allow platform specific conversions (#1641)

2026-04-23 08:43:29 +02:00

cors_bypass_pattern.go

…

dependency_checker_internal_test.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

dependency_checker.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

form_parsing_limits.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

hardcoded_nonce.go

…

insecure_cookie.go

feat: add G124 rule for insecure HTTP cookie configuration (#1599)

2026-03-11 14:32:15 +01:00

loginjection.go

fix(G706): scope slog sinks to msg arg only to prevent false positives on structured attributes (#1623)

2026-03-25 21:46:59 +01:00

openredirect.go

Add G710 rule for open redirect via taint analysis (#1654)

2026-04-26 09:38:45 +02:00

pathtraversal.go

Add HTTP file-serving function to the skins of pathtraversal analyzer (#1647)

2026-04-25 10:37:00 +02:00

range_analyzer.go

Allow rune to byte conversion (#1642)

2026-04-23 09:21:59 +02:00

redirect_header_propagation.go

fix(analyzers): avoid SSA dependency cycle blowups in issue #1555 paths (#1559)

2026-02-28 10:47:40 +01:00

request_smuggling.go

…

slice_bounds_test.go

…

slice_bounds.go

fix(G602): avoid false positives for range-over-array indexing (#1531)

2026-02-19 17:39:14 +01:00

smtpinjection.go

Add G707 taint analyzer for SMTP command/header injection (#1535)

2026-02-21 11:12:34 +01:00

sqlinjection.go

…

ssh_callback.go

…

ssrf.go

…

ssti.go

feat: add G708 rule for server-side template injection via text/template (#1597)

2026-03-11 11:03:55 +01:00

tls_resumption_verifypeer.go

Add G123 analyzer for tls.VerifyPeerCertificate resumption bypass risk (#1534)

2026-02-21 10:42:36 +01:00

unsafe_deserialization.go

feat: add G709 rule for unsafe deserialization of untrusted data (#1598)

2026-03-11 12:31:10 +01:00

util_test.go

…

util.go

…

walk_symlink_race.go

Add G122 SSA analyzer for filepath.Walk/WalkDir symlink TOCTOU race risks (#1532)

2026-02-20 19:24:17 +01:00

xss.go

fix(G705): eliminate false positive for non-HTTP io.Writer (#1550)

2026-02-27 08:01:14 +01:00