mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-06 19:35:13 +02:00
* feat: Add const_bound_vars tracking to prevent false positives in ownership checks
* feat: Introduce field interner and typed bounded vars for enhanced type tracking
* feat: Add typed_call_receivers and typed_bounded_dto_fields for enhanced type tracking
* feat: Centralize method name extraction with bare_method_name helper
* feat: Implement Phase-6 hierarchy fan-out for runtime virtual dispatch
* feat: Enhance C++ taint tracking with additional container operations and inline method resolution
* feat: Introduce field-sensitive points-to analysis for enhanced resource tracking
* feat: Implement Pointer-Phase 6 subscript handling for enhanced container analysis
* test: Add comprehensive tests for JavaScript control flow constructs and lattice operations
* docs: Update advanced analysis documentation with field-sensitive points-to and hierarchy fan-out details
* test: Add comprehensive tests for lattice algebra laws and SSA edge cases
* feat: Add destructured session user handling and safe user ID access patterns
* feat: Implement row-population reverse-walk for enhanced authorization checks
* feat: Enhance authorization checks with local alias chain for self-actor types
* feat: Introduce ActiveRecord query safety checks and enhance snippet extraction
* feat: Implement chained method call inner-gate rebinding for SSRF prevention
* feat: Add observability and error modules, enhance debug functionality, and implement theme context
* feat: Remove Auth Analysis page and update navigation to redirect to Explorer
* feat: Optimize SSA lowering by sharing results between taint engine and artifact extractor
* feat: Optimize SSA lowering by sharing results between taint engine and artifact extractor
* feat: Reset path-safe-suppressed spans before lowering to maintain analysis integrity
* fix(ssa): ungate debug_assert_bfs_ordering for release-tests build
The helper at src/ssa/lower.rs was gated `#[cfg(debug_assertions)]` while
the unit test at the bottom of the file was gated only `#[cfg(test)]`.
Since `cfg(test)` is set in release builds with `--tests` but
`cfg(debug_assertions)` is not, `cargo build --release --tests` failed
with E0425. Removing the gate fixes the build; the body is `debug_assert!`
only, so the helper is free in release. Also drop the gate at the call
site to avoid a `dead_code` warning when the lib is built without
`--tests`.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* test(closure-capture): flip JS/TS fixtures to required-finding
The JS and TS closure-capture fixtures pinned the old broken behaviour
via `forbidden_findings: [{ "id_prefix": "taint-" }]`. The engine now
correctly traces taint through the closure boundary (env source captured
by an arrow function, sunk via `child_process.exec` inside the body), so
the formerly-forbidden finding is a true positive.
Match the Python sibling's shape — `required_findings` with
`id_prefix` + `min_count` plus a small `noise_budget` — and rewrite the
companion READMEs and the phase8_fragility_tests doc-comments from
"known gap" to "regression guard".
Verified:
- cargo test --release --test phase8_fragility_tests → 8/8 pass
- cargo test --release --lib bfs_assertion → pass
- corpus benchmark F1 = 0.9976 (TP=205, FP=1, FN=0) — unchanged
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feat: Add OWASP mapping and baseline mutation hooks for enhanced security analysis
* feat: Introduce health module and enhance health score computation with calibration tests
* feat: Add expectations configuration and cleanup .gitignore for log files
* feat: Implement theme selection and enhance settings panel for triage sync
* feat: Suppress false positives for strcpy calls with literal sources in AST
* feat: Update analyse_function_ssa to return body CFG for accurate analysis
* feat: Add bug report and feature request templates for improved issue tracking
* feat: removed dev scripts
* feat: update README.md for clarity and consistency in fixture descriptions
* feat: removed dev docs
* feat: clean up error handling and UI elements for improved user experience
* feat: adjust button sizes in HeaderBar for better UI consistency
* feat: enhance taint analysis with additional context for sanitizer and taint findings
* cargo fmt
* prettier
* refactor: simplify conditional checks and improve code readability in AST and screenshot capture scripts
* feat: add script to frame PNG screenshots with brand gradient
* feat: add fuzzing support with new targets and CI workflows
* refactor: streamline match expressions and improve formatting in CLI and output handling
* feat: enhance configuration display with detailed output options
* feat: stage demo configuration for improved CLI screenshot output
* feat: expose merge_configs function for user-configurable settings
* refactor: simplify code structure and improve readability in config handling
* refactor: improve descriptions for vulnerability patterns in various languages
* feat: update MIT License section with additional usage details and copyright information
* feat: update screenshots
* refactor: update build process and paths for frontend assets
* feat: add cross-file taint fuzzing target and supporting dictionary
* refactor: clean up formatting and comments in fuzz configuration and example files
* refactor: remove outdated comments and clean up CI configuration files
* chore: update changelog dates and improve formatting in documentation
* refactor: update Cargo.toml and CI configuration for improved packaging and build process
* refactor: enhance quote-stripping logic to prevent panics and add regression tests
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
171 lines
5.6 KiB
TypeScript
171 lines
5.6 KiB
TypeScript
import { useCallback, useMemo, useState } from 'react';
|
|
import { Routes, Route, Navigate } from 'react-router-dom';
|
|
import { Sidebar } from './Sidebar';
|
|
import { HeaderBar } from './HeaderBar';
|
|
import { NewScanModal } from '../../modals/NewScanModal';
|
|
import { CommandPalette, type PaletteCommand } from '../ui/CommandPalette';
|
|
import { ShortcutsHelp } from '../ui/ShortcutsHelp';
|
|
import { useKeyboardShortcuts } from '../../hooks/useKeyboardShortcuts';
|
|
import { useChordNavigation } from '../../hooks/useChordNavigation';
|
|
import { OverviewPage } from '../../pages/OverviewPage';
|
|
import { FindingsPage } from '../../pages/FindingsPage';
|
|
import { FindingDetailPage } from '../../pages/FindingDetailPage';
|
|
import { ScansPage } from '../../pages/ScansPage';
|
|
import { ScanDetailPage } from '../../pages/ScanDetailPage';
|
|
import { ScanComparePage } from '../../pages/ScanComparePage';
|
|
import { RulesPage } from '../../pages/RulesPage';
|
|
import { TriagePage } from '../../pages/TriagePage';
|
|
import { ConfigPage } from '../../pages/ConfigPage';
|
|
import { ExplorerPage } from '../../pages/ExplorerPage';
|
|
import { DebugLayout } from '../../pages/debug/DebugLayout';
|
|
import { CallGraphPage } from '../../pages/debug/CallGraphPage';
|
|
import { SummaryExplorerPage } from '../../pages/debug/SummaryExplorerPage';
|
|
|
|
export function AppLayout() {
|
|
const [scanModalOpen, setScanModalOpen] = useState(false);
|
|
const [paletteOpen, setPaletteOpen] = useState(false);
|
|
const [helpOpen, setHelpOpen] = useState(false);
|
|
|
|
const handleStartScan = useCallback(() => {
|
|
setScanModalOpen(true);
|
|
}, []);
|
|
|
|
const commands = useMemo<PaletteCommand[]>(
|
|
() => [
|
|
// Navigation
|
|
{ id: 'go-overview', group: 'Navigate', label: 'Overview', to: '/' },
|
|
{
|
|
id: 'go-findings',
|
|
group: 'Navigate',
|
|
label: 'Findings',
|
|
to: '/findings',
|
|
},
|
|
{ id: 'go-scans', group: 'Navigate', label: 'Scans', to: '/scans' },
|
|
{ id: 'go-rules', group: 'Navigate', label: 'Rules', to: '/rules' },
|
|
{ id: 'go-triage', group: 'Navigate', label: 'Triage', to: '/triage' },
|
|
{ id: 'go-config', group: 'Navigate', label: 'Config', to: '/config' },
|
|
{
|
|
id: 'go-explorer',
|
|
group: 'Navigate',
|
|
label: 'Explorer',
|
|
to: '/explorer',
|
|
},
|
|
{
|
|
id: 'go-debug-cg',
|
|
group: 'Navigate',
|
|
label: 'Call Graph',
|
|
hint: 'Debug',
|
|
to: '/debug/call-graph',
|
|
},
|
|
{
|
|
id: 'go-debug-summaries',
|
|
group: 'Navigate',
|
|
label: 'Summary Explorer',
|
|
hint: 'Debug',
|
|
to: '/debug/summaries',
|
|
},
|
|
// Actions
|
|
{
|
|
id: 'start-scan',
|
|
group: 'Actions',
|
|
label: 'Start new scan',
|
|
keywords: ['scan', 'run'],
|
|
action: () => setScanModalOpen(true),
|
|
},
|
|
{
|
|
id: 'show-shortcuts',
|
|
group: 'Actions',
|
|
label: 'Show keyboard shortcuts',
|
|
keywords: ['help', 'keys'],
|
|
shortcut: '?',
|
|
action: () => setHelpOpen(true),
|
|
},
|
|
],
|
|
[],
|
|
);
|
|
|
|
useChordNavigation();
|
|
|
|
const shortcuts = useMemo(
|
|
() => [
|
|
{
|
|
key: 'k',
|
|
meta: true,
|
|
description: 'Open command palette',
|
|
handler: () => setPaletteOpen(true),
|
|
allowInInput: true,
|
|
},
|
|
{
|
|
key: '?',
|
|
shift: true,
|
|
description: 'Show keyboard shortcuts',
|
|
handler: () => setHelpOpen(true),
|
|
},
|
|
{
|
|
key: 'Escape',
|
|
description: 'Close modal / palette',
|
|
handler: () => {
|
|
if (paletteOpen) setPaletteOpen(false);
|
|
else if (helpOpen) setHelpOpen(false);
|
|
else if (scanModalOpen) setScanModalOpen(false);
|
|
},
|
|
allowInInput: true,
|
|
},
|
|
],
|
|
[paletteOpen, helpOpen, scanModalOpen],
|
|
);
|
|
|
|
useKeyboardShortcuts(shortcuts);
|
|
|
|
return (
|
|
<div id="app">
|
|
<Sidebar />
|
|
<div className="main-panel">
|
|
<HeaderBar
|
|
onStartScan={handleStartScan}
|
|
onOpenPalette={() => setPaletteOpen(true)}
|
|
/>
|
|
<main className="content">
|
|
<Routes>
|
|
<Route path="/" element={<OverviewPage />} />
|
|
<Route path="/findings" element={<FindingsPage />} />
|
|
<Route path="/findings/:id" element={<FindingDetailPage />} />
|
|
<Route path="/scans" element={<ScansPage />} />
|
|
<Route
|
|
path="/scans/compare/:left/:right"
|
|
element={<ScanComparePage />}
|
|
/>
|
|
<Route path="/scans/:id" element={<ScanDetailPage />} />
|
|
<Route path="/rules" element={<RulesPage />} />
|
|
<Route path="/rules/:id" element={<RulesPage />} />
|
|
<Route path="/triage" element={<TriagePage />} />
|
|
<Route path="/config" element={<ConfigPage />} />
|
|
<Route path="/explorer" element={<ExplorerPage />} />
|
|
<Route path="/debug" element={<DebugLayout />}>
|
|
<Route
|
|
index
|
|
element={<Navigate to="/debug/call-graph" replace />}
|
|
/>
|
|
<Route path="call-graph" element={<CallGraphPage />} />
|
|
<Route path="summaries" element={<SummaryExplorerPage />} />
|
|
<Route
|
|
path="auth"
|
|
element={<Navigate to="/explorer?view=auth" replace />}
|
|
/>
|
|
</Route>
|
|
</Routes>
|
|
</main>
|
|
</div>
|
|
<NewScanModal
|
|
open={scanModalOpen}
|
|
onClose={() => setScanModalOpen(false)}
|
|
/>
|
|
<CommandPalette
|
|
open={paletteOpen}
|
|
onClose={() => setPaletteOpen(false)}
|
|
commands={commands}
|
|
/>
|
|
<ShortcutsHelp open={helpOpen} onClose={() => setHelpOpen(false)} />
|
|
</div>
|
|
);
|
|
}
|