nodejs-insecure-url-parse: add inline require('url')

brave · Aug 4, 2023 · 0438f47 · 0438f47
1 parent fe58917
commit 0438f47
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/assets/semgrep_rules/web/nodejs-insecure-url-parse b/assets/semgrep_rules/web/nodejs-insecure-url-parse
@@ -6,7 +6,9 @@ rules:
       assignees: |
         thypon
         fmarier
-    pattern: url.parse(...)
+    pattern-either:
+      - pattern: url.parse(...)
+      - pattern: require('url').parse(...)
     message: Avoid using url.parse() as it may cause security issues. Consider using the URL class instead.
     languages:
       - javascript