Sobelow v0.4.3 API Reference

Modules

Mix.Tasks.Sobelow

Sobelow is a static analysis tool for discovering vulnerabilities in Phoenix applications

Sobelow is a static analysis tool for discovering vulnerabilities in Phoenix applications

Command Injection

Sobelow.CI.System

Sobelow.Config.CSRF

Cross-Site Request Forgery

Sobelow.Config.HSTS

HSTS

Sobelow.Config.HTTPS

HTTPS

Sobelow.Config.Secrets

Hard-coded Secrets

Sobelow.DOS.ListToAtom

Denial of Service via `List.to_atom`

Sobelow.DOS.StringToAtom

Denial of Service via `String.to_atom`

Sobelow.Finding

Sobelow.FindingLog

Sobelow.Misc.BinToTerm

Insecure use of `binary_to_term`

Sobelow.Misc.FilePath

Insecure use of `File` and `Path`

SQL Injection

Sobelow.SQL.Query

Sobelow.SQL.Stream

Sobelow.Traversal

Path Traversal

Sobelow.Traversal.FileModule

Sobelow.Traversal.SendFile

Known Vulnerable Dependencies

Sobelow.Vuln.CookieRCE

Sobelow.Vuln.HeaderInject

Sobelow.Vuln.PlugNull

Sobelow.Vuln.Redirect

Cross-Site Scripting

Sobelow.XSS.Raw

Sobelow.XSS.SendResp