mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius Ciepluch
1ae41eea19
Regex inventory stays the proposer. MAP attaches promote/demote/unadjudicated/coverage from intra-file taint (tree-sitter when a grammar parses, Python ast as last resort). Deep sandboxes promotions only, ordered by the existing heuristic ranker plus optional OpenRouter mechanism recall. The SAST pair slice scores overlay outcomes; the stage-1 detection gate and local pair gate stay inventory-only.
32 lines
606 B
TOML
32 lines
606 B
TOML
version = "1"
|
|
language = "java"
|
|
|
|
[[source]]
|
|
id = "servlet"
|
|
patterns = ["getParameter", "getHeader", "getCookies", "readLine", "getQueryString"]
|
|
|
|
[[sink]]
|
|
id = "exec"
|
|
cwe = "CWE-78"
|
|
calls = ["exec"]
|
|
rule_ids = ["java-command-exec"]
|
|
|
|
[[sink]]
|
|
id = "executeQuery"
|
|
cwe = "CWE-89"
|
|
calls = ["executeQuery", "execute", "prepareCall"]
|
|
rule_ids = ["java-sql-injection"]
|
|
|
|
[[sink]]
|
|
id = "readObject"
|
|
cwe = "CWE-502"
|
|
calls = ["readObject"]
|
|
rule_ids = ["java-deserialization"]
|
|
|
|
[[sink]]
|
|
id = "MessageDigest"
|
|
cwe = "CWE-327"
|
|
calls = ["getInstance"]
|
|
rule_ids = ["java-weak-hash"]
|
|
weak_literals = ["MD5", "SHA-1", "SHA1"]
|