Merge pull request #849 from AikidoSec/zen-internals-0.1-55

Update zen internals to 0.1.55

Author: hansott

library/vulnerabilities/sql-injection/detectSQLInjection.test.ts

@@ -211,6 +211,13 @@ t.test("It does not flag key keyword as SQL injection", async () => {
   isNotSqlInjection(query, "UPDATE");
   isNotSqlInjection(query, "INSERT");
   isNotSqlInjection(query, "INTO");
+  isNotSqlInjection(
+    `
+    SELECT * FROM users u
+    WHERE u.status NOT IN ('active', 'pending')
+  `,
+    "not in"
+  );
 });
 
 t.test("It flags function calls as SQL injections", async () => {

scripts/build.js

@@ -23,7 +23,7 @@ async function execAsyncWithPipe(command, options) {
 }
 
 // Zen Internals configuration
-const INTERNALS_VERSION = "v0.1.50";
+const INTERNALS_VERSION = "v0.1.55";
 const INTERNALS_URL = `https://github.com/AikidoSec/zen-internals/releases/download/${INTERNALS_VERSION}`;
 // ---