Cosmin Cojocar 24ee992e95 Added filepath.Abs as a sanitizer (#1643) ...

it calls Clean internally per Go docs.

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>

2026-04-23 15:25:57 +02:00

..

analyzers_set_test.go

Add more unit tests to improve coverage (#1512)

2026-02-14 21:57:51 +01:00

analyzers_set.go

…

analyzers_test.go

feat: add G124 rule for insecure HTTP cookie configuration (#1599)

2026-03-11 14:32:15 +01:00

analyzerslist_test.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

analyzerslist.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

anaylzers_suite_test.go

…

bench_test.go

…

commandinjection.go

…

context_propagation.go

fix(G118): eliminate false positive for package-level cancel variables (#1602)

2026-03-12 17:16:02 +01:00

conversion_overflow_test.go

…

conversion_overflow.go

Allow platform specific conversions (#1641)

2026-04-23 08:43:29 +02:00

cors_bypass_pattern.go

Add G121 analyzer for unsafe CORS bypass patterns in CrossOriginProtection (#1521)

2026-02-16 15:59:57 +01:00

dependency_checker_internal_test.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

dependency_checker.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

form_parsing_limits.go

Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

2026-03-13 12:01:02 +01:00

hardcoded_nonce.go

…

insecure_cookie.go

feat: add G124 rule for insecure HTTP cookie configuration (#1599)

2026-03-11 14:32:15 +01:00

loginjection.go

fix(G706): scope slog sinks to msg arg only to prevent false positives on structured attributes (#1623)

2026-03-25 21:46:59 +01:00

pathtraversal.go

Added filepath.Abs as a sanitizer (#1643)

2026-04-23 15:25:57 +02:00

range_analyzer.go

Allow rune to byte conversion (#1642)

2026-04-23 09:21:59 +02:00

redirect_header_propagation.go

fix(analyzers): avoid SSA dependency cycle blowups in issue #1555 paths (#1559)

2026-02-28 10:47:40 +01:00

request_smuggling.go

Add G113: Detect HTTP Request Smuggling via conflicting headers (CVE-2025-22891, CWE-444) (#1515)

2026-02-15 18:48:01 +01:00

slice_bounds_test.go

…

slice_bounds.go

fix(G602): avoid false positives for range-over-array indexing (#1531)

2026-02-19 17:39:14 +01:00

smtpinjection.go

Add G707 taint analyzer for SMTP command/header injection (#1535)

2026-02-21 11:12:34 +01:00

sqlinjection.go

…

ssh_callback.go

Add G408: SSH PublicKeyCallback Authentication Bypass Analyzer (#1513)

2026-02-14 23:11:18 +01:00

ssrf.go

…

ssti.go

feat: add G708 rule for server-side template injection via text/template (#1597)

2026-03-11 11:03:55 +01:00

tls_resumption_verifypeer.go

Add G123 analyzer for tls.VerifyPeerCertificate resumption bypass risk (#1534)

2026-02-21 10:42:36 +01:00

unsafe_deserialization.go

feat: add G709 rule for unsafe deserialization of untrusted data (#1598)

2026-03-11 12:31:10 +01:00

util_test.go

Add more unit tests to improve coverage (#1512)

2026-02-14 21:57:51 +01:00

util.go

Fix G115 false positives and negatives (Issue #1501) (#1518)

2026-02-16 13:58:21 +01:00

walk_symlink_race.go

Add G122 SSA analyzer for filepath.Walk/WalkDir symlink TOCTOU race risks (#1532)

2026-02-20 19:24:17 +01:00

xss.go

fix(G705): eliminate false positive for non-HTTP io.Writer (#1550)

2026-02-27 08:01:14 +01:00