mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 5
309faad266
A candidate-driven detector can only judge sites something else enumerates,
so the enumerator caps recall. Measured over the 58 scorable web pairs before
building anything:
pattern ruleset: 12.1% ceiling -- and the misses are not near-misses, the
ruleset finds nothing at all in most of these files
semantic IR: 96.6% ceiling, a median of ten call sites and bindings
inside the labeled function
The ruleset would have capped us at 12.1% against the 64.9% the unconstrained
loop already reaches. That design was one commit from being built.
Two corpus defects found on the way, both mine from task 4.1. The overleaf
excerpt started mid-import, because `_declarator_start` walks back to the
nearest `}` and Overleaf writes JavaScript without semicolons, so the nearest
one was inside `import { expressify }`. It then ended mid-object-literal,
because registration mentions were appended as bare lines. Neither parsed,
and a pair that cannot be parsed cannot be scored. Registration mentions now
expand to the statement that contains them; the ceiling moved 94.8% -> 96.6%.
Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
83 lines
2.4 KiB
JavaScript
83 lines
2.4 KiB
JavaScript
// Provenance: ZUENS2020/overleaf-with-claude exportProject (vuln).
|
|
// repo: ZUENS2020/overleaf-with-claude
|
|
// commit: 5a886aa9fb9fe4e2203f3cb1d62c91f4be0525ed
|
|
// parent: 5a886aa9fb9fe4e2203f3cb1d62c91f4be0525ed
|
|
// commit_url: https://github.com/ZUENS2020/overleaf-with-claude/commit/3980b9e5806defb63e45ae2696e6c1899f3a8431
|
|
// cve:
|
|
// license: AGPL-3.0
|
|
// function: exportProject
|
|
// relpath: services/web/app/src/Features/Exports/ExportsController.mjs
|
|
// provenance: agent
|
|
// mechanism: identity_from_request_body
|
|
// upstream_start: 7
|
|
|
|
async function exportProject(req, res, next) {
|
|
const { project_id: projectId, brand_variation_id: brandVariationId } =
|
|
req.params
|
|
const userId = SessionManager.getLoggedInUserId(req.session)
|
|
const exportParams = {
|
|
project_id: projectId,
|
|
brand_variation_id: brandVariationId,
|
|
user_id: userId,
|
|
}
|
|
|
|
if (req.body) {
|
|
if (req.body.firstName) {
|
|
exportParams.first_name = req.body.firstName.trim()
|
|
}
|
|
if (req.body.lastName) {
|
|
exportParams.last_name = req.body.lastName.trim()
|
|
}
|
|
// additional parameters for gallery exports
|
|
if (req.body.title) {
|
|
exportParams.title = req.body.title.trim()
|
|
}
|
|
if (req.body.description) {
|
|
exportParams.description = req.body.description.trim()
|
|
}
|
|
if (req.body.author) {
|
|
exportParams.author = req.body.author.trim()
|
|
}
|
|
if (req.body.license) {
|
|
exportParams.license = req.body.license.trim()
|
|
}
|
|
if (req.body.showSource != null) {
|
|
exportParams.show_source = req.body.showSource
|
|
}
|
|
}
|
|
|
|
try {
|
|
const exportData = await ExportsHandler.exportProject(exportParams)
|
|
logger.debug(
|
|
{
|
|
userId,
|
|
projectId,
|
|
brandVariationId,
|
|
exportV1Id: exportData.v1_id,
|
|
},
|
|
'exported project'
|
|
)
|
|
return res.json({
|
|
export_v1_id: exportData.v1_id,
|
|
message: exportData.message,
|
|
})
|
|
} catch (err) {
|
|
const info = OError.getFullInfo(err)
|
|
if (info?.forwardResponse) {
|
|
logger.debug(
|
|
{ responseError: info.forwardResponse },
|
|
'forwarding response'
|
|
)
|
|
const statusCode = info.forwardResponse.status || 500
|
|
return res.status(statusCode).json(info.forwardResponse)
|
|
}
|
|
throw err
|
|
}
|
|
}
|
|
|
|
export default {
|
|
exportDownload: expressify(exportDownload),
|
|
exportProject: expressify(exportProject),
|
|
exportStatus: expressify(exportStatus),
|
|
}
|