nyx/frontend/src/hooks/useFindingsURLState.ts
Eli Peter 82f18184b1
Prerelease cleanup (#46)
* feat: Add const_bound_vars tracking to prevent false positives in ownership checks

* feat: Introduce field interner and typed bounded vars for enhanced type tracking

* feat: Add typed_call_receivers and typed_bounded_dto_fields for enhanced type tracking

* feat: Centralize method name extraction with bare_method_name helper

* feat: Implement Phase-6 hierarchy fan-out for runtime virtual dispatch

* feat: Enhance C++ taint tracking with additional container operations and inline method resolution

* feat: Introduce field-sensitive points-to analysis for enhanced resource tracking

* feat: Implement Pointer-Phase 6 subscript handling for enhanced container analysis

* test: Add comprehensive tests for JavaScript control flow constructs and lattice operations

* docs: Update advanced analysis documentation with field-sensitive points-to and hierarchy fan-out details

* test: Add comprehensive tests for lattice algebra laws and SSA edge cases

* feat: Add destructured session user handling and safe user ID access patterns

* feat: Implement row-population reverse-walk for enhanced authorization checks

* feat: Enhance authorization checks with local alias chain for self-actor types

* feat: Introduce ActiveRecord query safety checks and enhance snippet extraction

* feat: Implement chained method call inner-gate rebinding for SSRF prevention

* feat: Add observability and error modules, enhance debug functionality, and implement theme context

* feat: Remove Auth Analysis page and update navigation to redirect to Explorer

* feat: Optimize SSA lowering by sharing results between taint engine and artifact extractor

* feat: Optimize SSA lowering by sharing results between taint engine and artifact extractor

* feat: Reset path-safe-suppressed spans before lowering to maintain analysis integrity

* fix(ssa): ungate debug_assert_bfs_ordering for release-tests build

The helper at src/ssa/lower.rs was gated `#[cfg(debug_assertions)]` while
the unit test at the bottom of the file was gated only `#[cfg(test)]`.
Since `cfg(test)` is set in release builds with `--tests` but
`cfg(debug_assertions)` is not, `cargo build --release --tests` failed
with E0425. Removing the gate fixes the build; the body is `debug_assert!`
only, so the helper is free in release. Also drop the gate at the call
site to avoid a `dead_code` warning when the lib is built without
`--tests`.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* test(closure-capture): flip JS/TS fixtures to required-finding

The JS and TS closure-capture fixtures pinned the old broken behaviour
via `forbidden_findings: [{ "id_prefix": "taint-" }]`. The engine now
correctly traces taint through the closure boundary (env source captured
by an arrow function, sunk via `child_process.exec` inside the body), so
the formerly-forbidden finding is a true positive.

Match the Python sibling's shape — `required_findings` with
`id_prefix` + `min_count` plus a small `noise_budget` — and rewrite the
companion READMEs and the phase8_fragility_tests doc-comments from
"known gap" to "regression guard".

Verified:
- cargo test --release --test phase8_fragility_tests → 8/8 pass
- cargo test --release --lib bfs_assertion → pass
- corpus benchmark F1 = 0.9976 (TP=205, FP=1, FN=0) — unchanged

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* feat: Add OWASP mapping and baseline mutation hooks for enhanced security analysis

* feat: Introduce health module and enhance health score computation with calibration tests

* feat: Add expectations configuration and cleanup .gitignore for log files

* feat: Implement theme selection and enhance settings panel for triage sync

* feat: Suppress false positives for strcpy calls with literal sources in AST

* feat: Update analyse_function_ssa to return body CFG for accurate analysis

* feat: Add bug report and feature request templates for improved issue tracking

* feat: removed dev scripts

* feat: update README.md for clarity and consistency in fixture descriptions

* feat: removed dev docs

* feat: clean up error handling and UI elements for improved user experience

* feat: adjust button sizes in HeaderBar for better UI consistency

* feat: enhance taint analysis with additional context for sanitizer and taint findings

* cargo fmt

* prettier

* refactor: simplify conditional checks and improve code readability in AST and screenshot capture scripts

* feat: add script to frame PNG screenshots with brand gradient

* feat: add fuzzing support with new targets and CI workflows

* refactor: streamline match expressions and improve formatting in CLI and output handling

* feat: enhance configuration display with detailed output options

* feat: stage demo configuration for improved CLI screenshot output

* feat: expose merge_configs function for user-configurable settings

* refactor: simplify code structure and improve readability in config handling

* refactor: improve descriptions for vulnerability patterns in various languages

* feat: update MIT License section with additional usage details and copyright information

* feat: update screenshots

* refactor: update build process and paths for frontend assets

* feat: add cross-file taint fuzzing target and supporting dictionary

* refactor: clean up formatting and comments in fuzz configuration and example files

* refactor: remove outdated comments and clean up CI configuration files

* chore: update changelog dates and improve formatting in documentation

* refactor: update Cargo.toml and CI configuration for improved packaging and build process

* refactor: enhance quote-stripping logic to prevent panics and add regression tests

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-29 00:58:38 -04:00

159 lines
4.1 KiB
TypeScript

import { useCallback, useEffect, useMemo } from 'react';
import { useSearchParams } from 'react-router-dom';
import { usePersistedState } from './usePersistedState';
export interface FindingsURLState {
page: string;
per_page: string;
sort_by: string;
sort_dir: string;
severity: string;
category: string;
confidence: string;
language: string;
rule_id: string;
status: string;
search: string;
}
const FINDINGS_DEFAULTS: FindingsURLState = {
page: '1',
per_page: '50',
sort_by: '',
sort_dir: 'asc',
severity: '',
category: '',
confidence: '',
language: '',
rule_id: '',
status: '',
search: '',
};
/** Subset of state we remember across sessions. Filters intentionally are
* NOT persisted — they're scan-specific and should reset by default, but the
* URL still reflects them so a shared link reproduces them exactly. */
interface PersistedFindingsPrefs {
per_page: string;
sort_by: string;
sort_dir: string;
}
const DEFAULT_PREFS: PersistedFindingsPrefs = {
per_page: '50',
sort_by: '',
sort_dir: 'asc',
};
const FILTER_KEYS: ReadonlySet<string> = new Set([
'severity',
'category',
'confidence',
'language',
'rule_id',
'status',
'search',
]);
/** Keys that do NOT trigger a page reset when changed. */
const NON_RESET_KEYS: ReadonlySet<string> = new Set([
'page',
'sort_by',
'sort_dir',
'per_page',
]);
export function useFindingsURLState() {
const [searchParams, setSearchParams] = useSearchParams();
const [prefs, setPrefs] = usePersistedState<PersistedFindingsPrefs>(
'findings:prefs',
DEFAULT_PREFS,
);
const state: FindingsURLState = useMemo(() => {
const s = {} as FindingsURLState;
for (const key of Object.keys(
FINDINGS_DEFAULTS,
) as (keyof FindingsURLState)[]) {
// URL wins; fall back to remembered prefs for keys we persist;
// last resort is the global default.
const fromUrl = searchParams.get(key);
if (fromUrl) {
s[key] = fromUrl;
} else if (
key === 'per_page' ||
key === 'sort_by' ||
key === 'sort_dir'
) {
s[key] = prefs[key] || FINDINGS_DEFAULTS[key];
} else {
s[key] = FINDINGS_DEFAULTS[key];
}
}
return s;
}, [searchParams, prefs]);
// Persist user-driven changes to per_page / sort_*.
useEffect(() => {
setPrefs({
per_page: state.per_page,
sort_by: state.sort_by,
sort_dir: state.sort_dir,
});
}, [state.per_page, state.sort_by, state.sort_dir, setPrefs]);
const updateState = useCallback(
(updates: Partial<FindingsURLState>) => {
setSearchParams((prev) => {
const current = {} as FindingsURLState;
for (const key of Object.keys(
FINDINGS_DEFAULTS,
) as (keyof FindingsURLState)[]) {
current[key] = prev.get(key) || FINDINGS_DEFAULTS[key];
}
const merged = { ...current, ...updates };
// Reset page to 1 when any filter/non-pagination field changes
const hasFilterChange = Object.keys(updates).some(
(k) => !NON_RESET_KEYS.has(k),
);
if (hasFilterChange) {
merged.page = '1';
}
// Build new search params, omitting defaults
const next = new URLSearchParams();
for (const [k, v] of Object.entries(merged)) {
if (v && v !== FINDINGS_DEFAULTS[k as keyof FindingsURLState]) {
next.set(k, v);
}
}
return next;
});
},
[setSearchParams],
);
const resetFilters = useCallback(() => {
setSearchParams((prev) => {
const next = new URLSearchParams();
// Preserve per_page but reset everything else
const perPage = prev.get('per_page');
if (perPage && perPage !== FINDINGS_DEFAULTS.per_page) {
next.set('per_page', perPage);
}
return next;
});
}, [setSearchParams]);
const hasActiveFilters = useMemo(
() =>
Array.from(FILTER_KEYS).some(
(k) => state[k as keyof FindingsURLState] !== '',
),
[state],
);
return { state, updateState, resetFilters, hasActiveFilters };
}