1.2.1
Full Changelog: https://github.com/thanatos-vf-2000/sap-devsec-scanner/commits/1.2.1
- Update README,
- backend: update size limit 10mb to 250mb (Max file Upload),
- Security and Quality - Code scanning - Missing rate limiting #8
- Security and Quality - Uncontrolled data used in path expression - routes/scan.js #9
- Security and Quality - Uncontrolled data used in path expression - utils/fileParser.js #10 / #11 / #12
- Correction - Load vue History not refresh,
- Correction - Report UI5 - Display End of Maintenance,
- Report UI5 - Highlighting "Your version",
- Frontend - Add Footer on APP.vue / Add humans informations (authors and maintainers) to AboutView.vue,
- Backend - CAP Scanner:
- Bug 1 - @requires in the CDS_AUTH_PATTERNS regex: without @, because it is already included in the enclosing @(...) annotation,
- Bug 2 - parseCDSServices searches for @requires and @restrict in the raw context,
- Correction in CDS_AUTH_PATTERNS to account for cases with and without @,
- Correction to exclude annotate in searches for @requires and @restrict.
- Backend - BTP Scanner:
- Bug 1 - Destination: ui5.sap.com: Ignored,
- Bug 2 - Destination: srv-api/srv-url & HTML5.ForwardAuthToken = true: Add LOW BTP_MTA_NO_AUTH_FORWARD,
- Bug 3 - Other Destination: HIGH BTP_MTA_NO_AUTH.