eblume/kingfisher
1
0
Fork 0
forked from mirrors/kingfisher
Code Pull requests Activity Actions
kingfisher/src
History
Himanshu Kumar Das 6ed438fe68
 Fix UTF-8 boundary panic in HTTP response body slicing 
The body_looks_like_html() function panicked when byte index 1024 fell inside a multi-byte UTF-8 character (e.g., Chinese text from Gitee). Use is_char_boundary() to find a valid slice point instead of arbitrary byte index.

Signed-off-by: Himanshu Kumar Das <1238723+himanshudas@users.noreply.github.com>
2026-01-13 03:40:06 +05:30
..
access_map v1.73.0 2026-01-01 22:24:57 -08:00
cli v1.73.0 2026-01-01 22:24:57 -08:00
parser preparing for v1.12 2025-06-24 17:17:16 -07:00
reporter v1.73.0 2026-01-01 22:24:57 -08:00
rules - Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled. 2025-11-15 08:11:25 -08:00
scanner v1.73.0 2026-01-01 22:24:57 -08:00
validation Fix UTF-8 boundary panic in HTTP response body slicing 2026-01-13 03:40:06 +05:30
access_map.rs v1.73.0 2026-01-01 22:24:57 -08:00
azure.rs Fixed test 2025-10-05 18:07:45 -07:00
baseline.rs - Reduced per-match memory usage by compacting stored source locations and interning repeated capture names. 2025-12-04 22:02:30 -08:00
binary.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
bitbucket.rs - Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled. 2025-11-15 08:43:54 -08:00
blob.rs - Reduced per-match memory usage by compacting stored source locations and interning repeated capture names. 2025-12-04 22:02:30 -08:00
bstring_escape.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
bstring_table.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
confluence.rs fixed failing tests 2025-08-17 17:41:34 -07:00
content_type.rs Optimized memory usage via string interning and extensive data sharing 2025-09-02 19:54:44 -07:00
decompress.rs fixing test failures 2025-12-16 23:51:22 -08:00
defaults.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
entropy.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
finding_data.rs - Reduced per-match memory usage by compacting stored source locations and interning repeated capture names. 2025-12-04 22:02:30 -08:00
findings_store.rs - Fixed deduplication for dependency-provider rules so dependent validations run per blob 2025-12-21 22:07:45 -08:00
gcs.rs change in response to code review 2025-10-16 10:20:18 -07:00
git_binary.rs Fixed Bitbucket authenticated cloning bug 2025-11-24 23:43:11 -08:00
git_commit_metadata.rs removed serde_utils and added Authress rule 2025-08-16 07:33:36 -07:00
git_metadata_graph.rs code cleanup' 2025-08-15 09:07:25 -07:00
git_repo_enumerator.rs removed serde_utils and added Authress rule 2025-08-16 07:33:36 -07:00
git_url.rs Populate the finding path from git blob metadata so history-derived secrets display their file location instead of an empty path 2025-09-24 10:06:47 -07:00
gitea.rs v1.73.0 2026-01-01 22:24:57 -08:00
github.rs v1.73.0 2026-01-01 22:24:57 -08:00
gitlab.rs v1.73.0 2026-01-01 22:24:57 -08:00
guesser.rs Improved language detection 2025-08-15 16:08:46 -07:00
huggingface.rs - Added first-class Hugging Face scanning support, including CLI enumeration, token authentication, and integration with remote scans. 2025-10-15 22:47:40 -07:00
inline_ignore.rs kingfisher:ignore is only directive built-in 2025-10-11 15:27:21 -07:00
jira.rs improved Jira support and working on salesforce rule, which is broken atm 2025-12-16 16:53:02 -08:00
lib.rs Updated precommit behavior and docs 2025-12-09 12:56:55 -08:00
liquid_filters.rs Added checksum to GitLab rule 2025-11-21 12:33:10 -08:00
location.rs - Reduced per-match memory usage by compacting stored source locations and interning repeated capture names. 2025-12-04 22:02:30 -08:00
main.rs v1.73.0 2026-01-01 22:24:57 -08:00
matcher.rs bug fix 2025-12-12 21:51:57 -08:00
origin.rs removed serde_utils and added Authress rule 2025-08-16 07:33:36 -07:00
parser.rs updated README 2025-07-17 15:11:35 -07:00
reporter.rs v1.73.0 2026-01-01 22:24:57 -08:00
rule_loader.rs fixed failing tests 2025-08-17 17:41:34 -07:00
rule_profiling.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
rules.rs refactored rule loading 2025-08-15 13:13:33 -07:00
rules_database.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
s3.rs refactored output reporting and formatting logic 2025-08-04 08:58:06 -07:00
safe_list.rs added jdbc rule and validator 2025-11-12 22:25:33 -08:00
scanner_pool.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
slack.rs - New rules: Telegram bot token, OpenWeatherMap, Apify 2025-08-01 16:56:04 -07:00
snippet.rs preparing for v1.12 2025-06-24 17:17:16 -07:00
update.rs - Reduced per-match memory usage by compacting stored source locations and interning repeated capture names. 2025-12-04 22:02:30 -08:00
util.rs updated allocator 2025-11-11 13:24:06 -08:00
validation.rs v1.73.0 2026-01-01 22:24:57 -08:00
validation_body.rs - Reduced per-match memory usage by compacting stored source locations and interning repeated capture names. 2025-12-04 22:02:30 -08:00