elsapet
Follow
Pinned
1,446 contributions in the last year
Contribution activity
March 2023
Created 22 commits in 1 repository
Created a pull request in Bearer/bearer that received 4 comments
fix(JS tests): fix outdated testdata
Description
Branch was out-of-date with main, which meant testdata files were missing secure helmet lines and were failing for reasons unexpected. C…
+117
−48
•
4
comments
Opened 17 other pull requests in 1 repository
Bearer/bearer
15
merged
2
closed
- fix(rules): special case warning severity
- fix(rules): Update missing rule documentation
- fix(JS rules): fix require case for https create server
- fix(JS rules): fix insert HTML rule
- fix: clean up superfluous YAML attributes in rules
- feat: update rules severity
- feat(JS rules): add CWE-94 AWS Lambda code injection
- feat: simplify PDS key
- feat(JS rules): add expressjs rule for missing HTTPS protocol
- fix(JS rules): make express eval rule stricter
- feat(JS rules): add open redirect rule
- feat(JS rules): add template render rule patterns for express js
- feat(JS ruels): add insecure CORS rule for express
- feat(JS rules): Add more rules for hardcoded JWT secrets
- feat(JS rules): extend expressjs cookie rule
- feat(JS rules): Extend expressjs insecure cookie rule
- feat(JS rules): add CWE-525 bad caching policy for expressjs JWT not revoked
Reviewed 17 pull requests in 1 repository
Bearer/bearer
17 pull requests
- fix: don't report sub datatype detections
- docs: update github action version
- docs: improve docs for lambda
- fix(JS rules): fix insert HTML rule
- feat: improve jsonlines support
- feat(javascript rule): add dom purify lib
- fix: ignore empty string literals
- feat(JS rules): add expressjs rule for missing HTTPS protocol
- feat(express rule): detect missing usage within same file
- fix(security report): hide progress bar for built-in rules
- feat(JS rules): add AWS dynamodb query injection
- docs: update github action
- fix(docs): broken links
- feat(JS rules): extend expressjs cookie rule
- feat: enrich dangerous insert html
- feat(JS rules): Add CWE 916 weak password encryption
- feat(javascript rule): dangerous javvascript html inserts