Ravi Sastry Kadali baf0dcfbec fix(taint): gate *http.Request auto-taint on entry-point detection (#1630) ...

* fix(taint): gate *http.Request auto-taint on entry-point detection (#1629)

isParameterTainted unconditionally tainted any *http.Request parameter by
type, even when the function had known callers passing constant-URL requests.

Check the CHA call graph first: only auto-taint when the function has no
in-edges (true external entry point). When callers exist, fall through to
the existing caller-verification loop instead.
Fixes #1629

* Address Barry AI Security Analysis

* improve code coverage

* fix lint

* taint mechanism, framework agnostic

* address lint warning

2026-04-08 11:31:24 +02:00

..

analyzer_internal_test.go

fix(taint): gate *http.Request auto-taint on entry-point detection (#1630)

2026-04-08 11:31:24 +02:00

analyzer_test.go

Add more unit tests to improve coverage (#1512)

2026-02-14 21:57:51 +01:00

analyzer.go

Improve taint analyzer performance with shared SSA cache, parallel analyzer execution, and CI regression guard (#1530)

2026-02-19 16:50:41 +01:00

taint_suite_test.go

…

taint_test.go

fix(G705): eliminate false positive for non-HTTP io.Writer (#1550)

2026-02-27 08:01:14 +01:00

taint.go

fix(taint): gate *http.Request auto-taint on entry-point detection (#1630)

2026-04-08 11:31:24 +02:00