fix(JS rules): make express eval rule stricter (#714)

fix: make express eval rule stricter
Bearer · Mar 3, 2023 · 383492f · 383492f
1 parent 7658ca0
commit 383492f
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/pkg/commands/process/settings/rules/javascript/express/eval_user_input.yml b/pkg/commands/process/settings/rules/javascript/express/eval_user_input.yml
@@ -1,21 +1,21 @@
 patterns:
   - pattern: |
-      eval($<...>$<USER_INPUT>$<...>)
+      eval($<USER_INPUT>)
     filters:
       - variable: USER_INPUT
         detection: javascript_express_eval_user_input_user_input
   - pattern: |
-      new Function($<...>$<USER_INPUT>$<...>)
+      new Function($<USER_INPUT>)
     filters:
       - variable: USER_INPUT
         detection: javascript_express_eval_user_input_user_input
   - pattern: |
-      setTimeout($<...>$<USER_INPUT>$<...>)
+      setTimeout($<USER_INPUT>)
     filters:
       - variable: USER_INPUT
         detection: javascript_express_eval_user_input_user_input
   - pattern: |
-      setInterval($<...>$<USER_INPUT>$<...>)
+      setInterval($<USER_INPUT>)
     filters:
       - variable: USER_INPUT
         detection: javascript_express_eval_user_input_user_input