Skip to content

CodexSentinel v1.4.0 - Enhanced Security Detection & XSS Protection

Choose a tag to compare

View all tags
@Voskan Voskan released this 28 Jul 10:20
· 16 commits to main since this release
v1.4.0
bdf4cb3

CodexSentinel v1.4.0

🎉 What's New

This release introduces XSS detection and enhanced security capabilities, making CodexSentinel even more powerful for securing Go applications.

🔥 Key Features

XSS Detection

  • New built-in XSS rule that detects unescaped user input in HTTP responses
  • Detects vulnerabilities in w.Write(), fmt.Fprintf(), template.Execute(), and more
  • Comprehensive coverage for Go web applications
  • High-accuracy detection with minimal false positives

🔍 Enhanced SQL Injection Detection

  • Advanced SQL injection detection for string concatenation patterns
  • Improved detection accuracy for database query vulnerabilities
  • Better coverage of common SQL injection attack vectors

🛠️ Improved Engine Architecture

  • Unified rule registration system for better maintainability
  • Cleaned up legacy matchers for improved performance
  • Enhanced security coverage across all detection categories

📊 What Changed

✨ New Features

  • 🎯 XSS detection rule (analyzer/rules/builtin/xss.go)
  • 🎯 Enhanced severity filtering with improved --severity flag
  • 📝 Better ignore functionality with .codexsentinel.ignore support
  • 🔧 Improved configuration loading (config/loader.go)

🐛 Bug Fixes

  • 📚 Fixed GitLab CI example to use correct --out flag
  • 📚 Improved logging system for better debugging
  • 📋 Enhanced scan command with better error handling

🏗️ Architecture Improvements

  • 🧹 Code cleanup in analyzer engine for better maintainability
  • 🔄 Unified rule registration system
  • 📈 Performance optimizations in security detection

Statistics

  • 10 files changed
  • 376 insertions, 145 deletions
  • 159 lines of new XSS detection code
  • Enhanced security coverage for Go web applications

🚀 Getting Started

Quick Install

curl -sSfL https://raw.githubusercontent.com/Voskan/codexsentinel/main/scripts/install.sh | sh

Scan for XSS Vulnerabilities

# Scan your Go web application
codex-cli scan . --severity high

# Generate detailed HTML report
codex-cli scan . --format html --out security-report.html

🔍 Example XSS Detection

CodexSentinel now detects vulnerable patterns like:

// ❌ Vulnerable - Will be detected
func handler(w http.ResponseWriter, r *http.Request) {
    userInput := r.FormValue("input")
    w.Write([]byte(userInput)) // XSS vulnerability detected!
}

// ✅ Safe - Will pass
func handler(w http.ResponseWriter, r *http.Request) {
    userInput := r.FormValue("input")
    w.Write([]byte(html.EscapeString(userInput))) // Safe
}

📦 Supported Platforms

  • 🐧 Linux (AMD64, ARM64)
  • 🍎 macOS (AMD64, ARM64)
  • Windows (AMD64, ARM64)

🔐 SLSA Level 3 Compliance

All releases are built with SLSA Level 3 compliance for supply chain security:

  • ✅ Provenance files included with every release
  • ✅ Verifiable builds from source code
  • ✅ Reproducible artifacts for security auditing

🎯 What's Next

  • 🔍 Enhanced taint analysis with more precise data flow tracking
  • 📊 Advanced code metrics and visualization
  • 🔧 IDE integration (VS Code, GoLand extensions)
  • 🌐 Web-based dashboard for analysis results

🙏 Thanks

Special thanks to all contributors and users who helped make this release possible!

Download: CodexSentinel v1.4.0

Documentation: README.md

Issues & Feedback: GitHub Issues

Assets 2
Loading