From f0ea85749e55629a4eb509a8f5657f33e33a0d59 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Heitor=20Gouv=C3=AAa?= Date: Thu, 9 Nov 2023 19:56:48 -0300 Subject: [PATCH 1/2] delete some things (#15) --- README.md | 11 ----------- rules/default.yml | 7 +------ rules/mojociliius.yml | 3 --- 3 files changed, 1 insertion(+), 20 deletions(-) delete mode 100644 rules/mojociliius.yml diff --git a/README.md b/README.md index ae66ada..070ae27 100644 --- a/README.md +++ b/README.md @@ -74,17 +74,6 @@ rules: --- -### Future work - -- SARIF output format; -- A Github Actions App; -- A engine dedicated to Dataflow, with the following features: - - Alias analysis; - - Multiple files context analysis; -- Keep the false-positive and false-negative rate as low as possible. - ---- - ### Contribution Your contributions and suggestions are heartily ♥ welcome. [See here the contribution guidelines.](/.github/CONTRIBUTING.md) Please, report bugs via [issues page](https://github.com/htrgouvea/nipe/issues) and for security issues, see here the [security policy.](/SECURITY.md) (✿ ◕‿◕) diff --git a/rules/default.yml b/rules/default.yml index b5da3e5..4b25f0f 100644 --- a/rules/default.yml +++ b/rules/default.yml @@ -26,9 +26,4 @@ rules: name: Weak Criptography Algorithm message: sample: - - md5 - -# Generic notes -# SSTI - Server Side Template Injection -# CPAN Protocol: cpan://https://metacpan.org/pod/LWP#CPAN-Requests -# Strict/warnings for modules: https://metacpan.org/pod/Carp + - md5 \ No newline at end of file diff --git a/rules/mojociliius.yml b/rules/mojociliius.yml deleted file mode 100644 index 675f5e0..0000000 --- a/rules/mojociliius.yml +++ /dev/null @@ -1,3 +0,0 @@ -# 1. Mojo -> XSS -# 2. Mojo Template Builder -> SSTI -# 3. Mojo Web Socket -> Cross Hijacking \ No newline at end of file From 6432fb8ceb87e69413446f069a4a0b3c03dde713 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Heitor=20Gouv=C3=AAa?= Date: Thu, 9 Nov 2023 21:52:59 -0300 Subject: [PATCH 2/2] Develop (#17) * delete some things * some fix --- .github/CONTRIBUTING.md | 28 ++++++++++++++++++++++++++++ README.md | 2 +- SECURITY.md | 2 +- 3 files changed, 30 insertions(+), 2 deletions(-) create mode 100644 .github/CONTRIBUTING.md diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md new file mode 100644 index 0000000..d671bba --- /dev/null +++ b/.github/CONTRIBUTING.md @@ -0,0 +1,28 @@ +# Contributing to the ZARN! + +## Branches + +The `main` branch is used only for holding released code of the project. Any +new feature or bugfix **must** be opened against `develop` branch, where some +additional testing is performed before the code lands `main`. + +## Testing + +For every new feature, please, submit in the same PR a testing code (under +`t/` folder) to cover that completely. Make sure to expand and cover the +added/replaced code as much as possible. + +In case it's a functional bugfix (not a typo, commentary, whitespace, ... +issue), make sure to check why the test code didn't trigger the bug before +and, if possible, update the test. + +## Great Re-Writings + +Open a discussion issue before you begin. So we can listen to what you have to +say, and we can provide a referral if it will be worth changing big parts of +the project. + +## License + +By opening a pull request in this repository, you agree to provide your work +under the [project license](../LICENSE.md). \ No newline at end of file diff --git a/README.md b/README.md index 070ae27..2cccabe 100644 --- a/README.md +++ b/README.md @@ -76,7 +76,7 @@ rules: ### Contribution -Your contributions and suggestions are heartily ♥ welcome. [See here the contribution guidelines.](/.github/CONTRIBUTING.md) Please, report bugs via [issues page](https://github.com/htrgouvea/nipe/issues) and for security issues, see here the [security policy.](/SECURITY.md) (✿ ◕‿◕) +Your contributions and suggestions are heartily ♥ welcome. [See here the contribution guidelines.](/.github/CONTRIBUTING.md) Please, report bugs via [issues page](https://github.com/htrgouvea/zarn/issues) and for security issues, see here the [security policy.](/SECURITY.md) (✿ ◕‿◕) --- diff --git a/SECURITY.md b/SECURITY.md index 74e181b..33340dd 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,4 +4,4 @@ If you find a security issue, please DO NOT submit it via the issue tracker! Ins Even in cases where you have limited or incomplete information, or you're not sure whether or not a problem constitutes a security issue, please make contact as soon as possible. We can work together to investigate, debug, and assess. -Your help is greatly appreciated in keeping this project secure! +Your help is greatly appreciated in keeping this project secure! \ No newline at end of file