You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »

 

 

New version of Kiuwan, CQM (v1.2.18) and Kiuwan Engine 

Main features of this release are:

  1. Kiuwan CQM and Engine (*)
    • Support for SAP HANA - SQLScript (17 new rules for SQLScript)
    • TypeScript is now explicit and unified with JavaScript (see XXXX)
    • Bug fixing, performance and reliability issues in rules for XXXXXX Java, C++, JavaScript and VB.NET
    • Enhancements in XXXXXX parser:

  2. Kiuwan website
    • New password's policy
    • ver motor bloqueado ????


  3. Kiuwan Insights
    • Enhanced readability of components' License information
    • Improved analysis performance

 

 

 

Additional features of this new version are:

  • Support for detecting CWE-1022 vulnerabilities in HTML, JSP and ASP.NET

  • Bug fixing, performance and reliability issues in rules for Java, C++, JavaScript and VB.NET

  • Enhancements in JavaScript parser:

 

(*) You can find new rules by comparing this release of CQM against previous version.  

A detailed description of the behavior of these new rules is available in rule’s description.

Unless you have blocked Kiuwan Engine, Kiuwan Local Analyzer will automatically upgrade it to the last version once a new analysis is run.

In order for these new rules be applicable, your Kiuwan account must be configured to allow automatic engine upgrade:

  • If you are using CQM, these new rules will automatically become active and will be applied to new analyses.
  • If you are using your own custom model, you can activate them in case you want to be applied to your code.

 

Kiuwan CQM and Engine

New SAP HANA SQLScript Rules

 

 

  • OPT.HANA.EFFICIENCY.AvoidTraceInProduction 
  • OPT.HANA.EFFICIENCY.AvoidUsingCursors 
  • OPT.HANA.EFFICIENCY.DeeplyNestedSubqueries 
  • OPT.HANA.EFFICIENCY.ModificationStatementInLoop 
  • OPT.HANA.EFFICIENCY.NonTrivialSubquery 
  • OPT.HANA.EFFICIENCY.ReadsSqlDataNotSpecified 
  • OPT.HANA.EFFICIENCY.SelectInScalarFunction 
  • OPT.HANA.EFFICIENCY.UnusedVariable 
  • OPT.HANA.EFFICIENCY.UseOfCalculationEngineOperator 
  • OPT.HANA.MAINTAINABILITY.LanguageNotSpecified 
  • OPT.HANA.MAINTAINABILITY.UnusedCondition 
  • OPT.HANA.RELIABILITY.ImproperParameterUsage 
  • OPT.HANA.RELIABILITY.NonCustomErrorCode 
  • OPT.HANA.RELIABILITY.UseOfUninitializedVar 
  • OPT.HANA.SEC.ExcessivePrivilegesGranted 
  • OPT.HANA.SEC.ForbiddenCall 
  • OPT.HANA.SEC.SqlInjection

TypeScript is now explicit and unified with JavaScript

After adding support to TypeScript, it was not clear for many users that TypeScript support was embedded within JavaScript.

This approach led to some confussions, so we have unified JavaScript and TypeScript as a unique technology (JavaScript/TypeScript, instead of just JavaScript as before). And rules are now categorized according to this new terminology.

Although JavaScript and TypeScript might be considered different languages, Kiuwan rules for JavaScript were re-written to apply to both languages. And any JavaScript rule it's able to distinguish if the code is JavaScript or TypeScript, acting accordingly.

Therefore, there are not JavaScript or TypeScript specific rules. All those rules apply to both languages.

 


  • No labels