JavaScript Security Injection Audit Bundle
Run a read-only JavaScript and TypeScript security audit focused on injection, XSS, SSRF, path traversal, prototype pollution, command execution, and unsafe dynamic execution risks.
This bundle covers injection, xss, ssrf, path traversal, prototype pollution, command execution, and unsafe dynamic execution risks.
Included Codemods
- @codemod/angular-domsanitizer-bypass-detection@0.1.0
- @codemod/detect-client-db-injection-ts@0.1.1
- @codemod/detect-dom-redirect-sinks-from-url-input@0.1.0
- @codemod/detect-dynamic-execution-injection-ts@0.1.0
- @codemod/detect-dynamic-html-template-building@0.1.0
- @codemod/detect-dynamic-import-injection-ts@0.1.0
- @codemod/detect-dynamic-sql-string-formatting@0.1.0
- @codemod/detect-filesystem-path-oracle-access@0.1.0
- @codemod/detect-nosql-injection-sinks-ts@0.1.0
- @codemod/detect-open-redirects-in-ts-handlers@0.1.0
- @codemod/detect-path-based-os-command-exec@0.1.0
- @codemod/detect-path-injection-io-usage@0.1.0
- @codemod/detect-redos-prone-regex-typescript@0.1.0
- @codemod/detect-sensitive-data-logging-ts@0.1.0
- @codemod/detect-server-template-injection-risk@0.1.0
- @codemod/detect-ssrf-path-traversal-taint-ts@0.1.0
- @codemod/detect-ts-command-execution-injection@0.1.0
- @codemod/detect-ts-dom-css-injection-sinks@0.1.0
- @codemod/detect-ts-object-binding-write-sinks@0.1.0
- @codemod/detect-ts-prototype-pollution-sinks@0.1.0
- @codemod/detect-typescript-ldap-injection@0.1.0
- @codemod/detect-typescript-log-injection-risk@0.1.0
- @codemod/detect-typescript-ssrf-request-sinks@0.1.0
- @codemod/detect-unsafe-db-connection-string-builds@0.1.0
- @codemod/detect-unsafe-dom-xss-sinks-ts@0.1.0
- @codemod/detect-unsafe-node-ipc-command-inputs@0.1.0
- @codemod/detect-unsafe-xml-xxe-in-typescript@0.1.0
- @codemod/detect-untrusted-env-assignment-ts@0.1.0
- @codemod/detect-unvalidated-command-args-ts@0.1.0
- @codemod/detect-user-tainted-dynamic-code-exec@0.1.0
- @codemod/typescript-os-command-argument-injection@0.1.0
- @codemod/typescript-reflected-xss-endpoints@0.1.0
- @codemod/typescript-regex-backtracking-risk@0.1.0
- @codemod/typescript-sql-query-injection-risk@0.1.0
- @codemod/typescript-xpath-injection-risk@0.1.0
Coverage
- 35 codemods