feat(rules): Update rules to use star operator - #314

Open

misonijnik wants to merge 12 commits into

saloed/2-star-rewritefrom

misonijnik/3-rules

Commits on Aug 19, 2026

feat(rules): express Spring whole-object source and sink taint via the star
misonijnik
authored
01a23e6
refactor(rules): migrate the remaining source and sink rules to the star
misonijnik
authored
94661f9
refactor(dataflow): delete the implicit array-element mechanism
misonijnik
authored
cb10f69
fix(rules): whole-object servlet sources and starred value sanitizers
misonijnik
authored
aaf0bc0
fix(rules): rework trust-boundary-violation
misonijnik
authored
59208d3
refactor(rules): field-sensitive java.io.File model and $*VAR syntax
misonijnik
authored
77f52b3
fix(rules): limit SMTP CRLF sinks to raw headers
misonijnik
authored
c477f25
fix(rules): sanitize request URI redirect targets
misonijnik
authored
7e03238
fix(rules): exclude linkset responses from HTML sinks
misonijnik
authored
0f13e6e
fix(rules): keep allowlisted servlet values untrusted
misonijnik
authored
41b19ba
fix(rules): tie the trust-boundary source to the request receiver
misonijnik
authored
44877fb
fix(rules): propagate element taint through arrayToCommaDelimitedString

misonijnik
and
claude
committed
e9f5c2b