mcp-server-semgrep

Version:

MCP Server for Semgrep Integration - static code analysis with AI

14 lines (10 loc) • 382 B

JavaScript

var wkhtmltoimage = require('wkhtmltoimage')

const html = '<html></html>'
// ok: wkhtmltoimage-injection
wkhtmltoimage.generate(html, { output: 'vuln.jpg' })

// ruleid: wkhtmltoimage-injection
wkhtmltoimage.generate(input(), { output: 'vuln.jpg' })

function test(userInput) {
    // ruleid: wkhtmltoimage-injection
    wkhtmltoimage.generate(userInput, { output: 'vuln.jpg' })
}