How to use GitLab SAST tool to detect simple DOM vulnerability?

• njsscan

  2 350 4.6 JavaScript

  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

That's the one! Rules are here: https://github.com/ajinabraham/njsscan/tree/master/njsscan/rules

• security-products

  7 - -

Gitlab uses OSS analyzers for vulnerability detection. You will need to see what predefined rules are set up for the analyzers that were ran for the code in question. More than likely, these predefined rules will not detect everything. A POC will allow you to understand the limits of the provided rulesets, and you will need to customize your own rules for gaps that you find. You can find a list of analyzers here https://gitlab.com/gitlab-org/security-products/analyzers.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project