Feat/configurable sanitizers and js precision (#32)

* chore: Exclude CLAUDE.md from Cargo.toml

* feat: Add configurable analysis rules and CLI commands for custom sanitizers and terminators

* feat: Enhance resource management and analysis efficiency

- Implemented parallel summary merging in `scan_filesystem` using rayon for improved performance.
- Introduced `GlobalSummaries::merge()` for efficient merging of summaries.
- Optimized file reading and hashing to eliminate redundant I/O operations.
- Added `should_scan_with_hash()` and `upsert_file_with_hash()` methods to streamline file processing.
- Enhanced taint analysis with in-place mutations to reduce memory allocations.
- Updated resource acquisition patterns to exclude false positives for `freopen` and wrapper functions.

* feat: Implement severity downgrade for findings in non-production paths and add source kind inference

* feat: Update versioning information in SECURITY.md for new stable line

* feat: Update categories in Cargo.toml to include parser-implementations and text-processing

* feat: Update dependencies in Cargo.lock for improved compatibility and performance

* feat: Update dependencies in Cargo.lock and Cargo.toml for improved compatibility

src/patterns/javascript.rs

@@ -54,9 +54,10 @@ pub const PATTERNS: &[Pattern] = &[
         description: "Assignment to window.location / location.href",
         query: "(assignment_expression
                left: (member_expression
-                        object: (identifier)? @obj
+                        object: (identifier) @obj
+                        (#match? @obj \"^(window|location|document|self|top|parent|frames)$\")
                         property: (property_identifier) @prop
-                        (#match? @prop \"location|href\"))) @vuln",
+                        (#match? @prop \"^(location|href)$\"))) @vuln",
         severity: Severity::High,
     },
     Pattern {
@@ -77,7 +78,7 @@ pub const PATTERNS: &[Pattern] = &[
                left: (member_expression
                         property: (property_identifier) @prop
                         (#eq? @prop \"__proto__\"))) @vuln",
-        severity: Severity::High,
+        severity: Severity::Low,
     },
     Pattern {
         id: "weak_hash_md5",

src/patterns/mod.rs

@@ -23,14 +23,33 @@ pub enum Severity {
     Low,
 }
 
+impl Severity {
+    /// Bracketed, colored, fixed-width tag for aligned console output.
+    ///
+    /// Returns e.g. `"[HIGH]  "` or `"[MEDIUM]"` — always 8 visible characters
+    /// so the column after the tag lines up regardless of severity.
+    pub fn colored_tag(self) -> String {
+        // Visible widths: "[HIGH]" = 6, "[MEDIUM]" = 8, "[LOW]" = 5.
+        // Pad the *whole* tag to 8 visible chars (the longest, "[MEDIUM]").
+        let (label, styled_fn): (&str, fn(&str) -> String) = match self {
+            Severity::High => ("HIGH", |s| style(s).red().bold().to_string()),
+            Severity::Medium => ("MEDIUM", |s| style(s).yellow().bold().to_string()),
+            Severity::Low => ("LOW", |s| style(s).cyan().bold().to_string()),
+        };
+        let bracket_len = label.len() + 2; // "[" + label + "]"
+        let pad = 8usize.saturating_sub(bracket_len);
+        format!("[{}]{:pad$}", styled_fn(label), "", pad = pad)
+    }
+}
+
 impl fmt::Display for Severity {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        let s = match *self {
+        let styled = match *self {
             Severity::High => style("HIGH").red().bold().to_string(),
             Severity::Medium => style("MEDIUM").yellow().bold().to_string(),
             Severity::Low => style("LOW").cyan().bold().to_string(),
         };
-        f.write_str(&s)
+        f.write_str(&styled)
     }
 }