1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
(document|\$)\.cookie[[:space:]]*\(
[Mm][Dd]5[[:space:]]*\(
[Ss][Hh][Aa]1[[:space:]]*\(
createHash[[:space:]]*\([[:space:]]*['"]([Ss][Hh][Aa][1]?|[Mm][Dd][5])['"]
\.write[[:space:]]*\([^;]+\.location\.href
nodeIntegration
nodeIntegrationInWorker
nodeIntegrationInSubFrames
preload
devTools
BrowserWindow.webContents.openDevTools[[:space:]]*\(\)
webSecurity
allowRunningInsecureContent
contextIsolation
worldSafeExecuteJavaScript
additionalArguments
enableWebSQL
openExternal[[:space:]]*\(
ELECTRON_RUN_AS_NODE
\.query\([^\);]*[\'\"][[:space:]]*\+[[:space:]]*[^\'\"]+
eval[[:space:]]*\([^\)\;]+[\'\"][[:space:]]*\+[[:space:]]*[^\'\"]+
eval[[:space:]]*\(.*[Rr]eq(quest)?\.(query|body|param)?
<%-[[:space:]]+.*%>
\.(spawn|exec)(File)?(Sync)?\([^\);]*([\'\"] *\+|\$\{)
set(Interval|Timeout)[[:space:]]*\([^,\}\)]*[Rr]eq(quest)?\.[A-Za-z0-9]+
\.SafeString[[:space:]]*\([^\)]*[\"'][[:space:]]*\+
eval[[:space:]]*\(
dangerouslySetInnerHTML
trustAsHtml
NODE_TLS_REJECT_UNAUTHORIZED
rejectUnauthorized
insecure
strictSSL
clientPemCrtSignedBySelfSignedRootCaBuffer
require[[:space:]]*\([^))+[Yy][Aa][Mm][Ll].?\)\.load\(
[Jj][Ww][Tt][[:space:]]*\([[:space:]]*\{.*,[[:space:]]*secret[[:space:]]*:[[:space:]]*"[^"]*"
\.verify[[:space:]]*\(.*\{[[:space:]]*algorithms[[:space:]]*:[[:space:]]*\[[^]]*["']none["']
\.verify[[:space:]]*\([^,]+,[^\.]+\.None[[:space:]]*\)
\.(verify|sign)[[:space:]]*\([^,]+,[[:space:]]*['"][^'"]*['"][[:space:]]*,
\.asKey[[:space:]]*\([[:space:]]*['"][^'"]*['"][[:space:]]*\)
\.sign[[:space:]]*\([[:space:]]*\{[^\}]*password[[:space:]]*:
\.sign[[:space:]]*\([[:space:]]*['"][^'"]*['"][[:space:]]*\)
\.IncomingForm\(
\.parse\(
\.readFile\(
\.appendFile\(
\.writeFile\(
\.open\(
\.unlink\(
\.rename\(
\.createReadStream\(
\.createServer\(
\.createTransport\(
\.sendMail\(
#MongoDB rules
\.connect\(
\.createCollection\(
\.aggregate\(.*
\.find(One)?\(.*
\.insert(One|Many)?\(.*
\.delete(One|Many)?\(.*
\.update(One|Many)?\(.*
\.drop\(.*
#MySQL rules
\.createConnection\(.*
\.query\(.*\)
[Ss][Ee][Ll][Ee][Cc][Tt][[:space:]]+\${[^}]+
[Ff][Rr][Oo][Mm][[:space:]]+\${[^}]+
[Ii][Nn][Ss][Ee][Rr][Tt][[:space:]]+[Ii][Nn][Tt][Oo][[:space:]]+\${[^}]+
(UPDATE|update).+\${[^}]+
[Ll][Ii][Mm][Ii][Tt][[:space:]]+\${[^}]+
[Ww][Hh][Ee][Rr][Ee][[:space:]]+.*\${[^}]+
[Aa][Nn][Dd][[:space:]]+.*=[[:space:]]*\${[^}]+
[Ll][Ii][Kk][Ee][[:space:]]+['"]*\${[^}]+
(group|GROUP|order|ORDER)[[:space:]]+[Bb][Yy][[:space:]]+\${[^}]+
renderToString[[:space:]]*\(
to_html[[:space:]]*\(
\.render[[:space:]]*\(
|
