News for hackers. Stuff that matters.

A comment on Node.jsScan: A semantic aware static code analysis tool for Node.js applications.

Re:Node.jsScan: A semantic aware static code analysis tool f... by danenania on Friday June 12, 2020 @04:16PM (#23503409)
A quick summary of what exactly this scans for at the top of the README would be nice.

From the screenshots at the bottom, it looks like mainly SQL injection and outdated dependencies?

[ Parent | on HN ]
Re:Node.jsScan: A semantic aware static code analysis tool f... by nailer on Friday June 12, 2020 @04:31PM (#23503585)
Probably JSON injection too. You can handle this in middleware, but I suspect lot of people don't.
[ Parent | on HN ]