Skip to content

Update Node TLS Reject rule and tests

Bhavya Kaushal requested to merge node-tls-reject-final into main

What does this MR do?

This MR updates the Node TLS Reject Rule and its correponsing test file.

  1. It modifies the patterns to cover more vulnerable cases i.e. reduce false negatives.
  2. It updates the description to add detailed explanation and secure code example.
  3. It updates the rule metadata (owasp mapping, cwe, shortdescription and also the severity and security-severity)
  4. It adds test cases to cover different syntax styles.

What are the relevant issue numbers?

This addresses the issue: gitlab-org/gitlab#440270 (closed)

Does this MR meet the acceptance criteria?

Edited by Hua Yan

Merge request reports