Enhance Javascript Open Redirect community rule to use taint mode and add sanitizer patterns
What does this MR do?
This MR enhances the rule - https://gitlab.com/gitlab-org/security-products/sast-rules/-/blob/main/rules/lgpl/javascript/redirect/rule-express_open_redirect.yml to do multiple things:
- Change rule to use Taint mode
- Add multiple Sanitizer Patterns
- Change description to add remediation text with secure example
It also adds various test cases corresponding to rule patterns for thorough test coverage.
What are the relevant issue numbers?
Addresses issue : gitlab-org/gitlab#440620 (closed)
Does this MR meet the acceptance criteria?
-
Changelog entry added -
Documentation created/updated for GitLab EE, if necessary -
Documentation created/updated for this project, if necessary -
Documentation reviewed by technical writer or follow-up review issue created -
Tests added for this feature/bug -
Job definition updated, if necessary -
Conforms to the code review guidelines -
Conforms to the Go guidelines -
Security reports checked/validated by reviewer