Open_Ultra_SAST/benchmarks/pairs/github/node-serialize-cve-2017-5941/fixed.js at 094f6d226c807300a685e78624f87dca98911afe - Open_Ultra_SAST - Because Security Code-Cave (private)

marius/Open_Ultra_SAST

mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00

Files

T

Marius Ciepluch 1ae41eea19 feat(propose-adjudicate-prove): overlay adjudicates inventory before prove

Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage
from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort).
Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional
OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1
detection gate and local pair gate stay inventory-only.

2026-09-04 13:57:33 +02:00

7 lines

173 B

JavaScript

Raw Blame History

 // Fixed counterpart of the node-serialize CVE-2017-5941 eval pattern (CWE-95).
 function parsePayload(obj) {
   return JSON.parse(obj);
 }
 module.exports = { parsePayload };