Skip to content

1.2.1

Choose a tag to compare

@thanatos-vf-2000 thanatos-vf-2000 released this 20 Jun 22:45
· 1 commit to master since this release

Full Changelog: https://github.com/thanatos-vf-2000/sap-devsec-scanner/commits/1.2.1

  • Update README,
  • backend: update size limit 10mb to 250mb (Max file Upload),
  • Security and Quality - Code scanning - Missing rate limiting #8
  • Security and Quality - Uncontrolled data used in path expression - routes/scan.js #9
  • Security and Quality - Uncontrolled data used in path expression - utils/fileParser.js #10 / #11 / #12
  • Correction - Load vue History not refresh,
  • Correction - Report UI5 - Display End of Maintenance,
  • Report UI5 - Highlighting "Your version",
  • Frontend - Add Footer on APP.vue / Add humans informations (authors and maintainers) to AboutView.vue,
  • Backend - CAP Scanner:
    • Bug 1 - @requires in the CDS_AUTH_PATTERNS regex: without @, because it is already included in the enclosing @(...) annotation,
    • Bug 2 - parseCDSServices searches for @requires and @restrict in the raw context,
    • Correction in CDS_AUTH_PATTERNS to account for cases with and without @,
    • Correction to exclude annotate in searches for @requires and @restrict.
  • Backend - BTP Scanner:
    • Bug 1 - Destination: ui5.sap.com: Ignored,
    • Bug 2 - Destination: srv-api/srv-url & HTML5.ForwardAuthToken = true: Add LOW BTP_MTA_NO_AUTH_FORWARD,
    • Bug 3 - Other Destination: HIGH BTP_MTA_NO_AUTH.