Merge pull request #36 from SpringKill-team/dev

Dev

Author: springkill

src/main/kotlin/org/skgroup/securityinspector/analysis/ast/nodes/CallExpressionNode.kt

@@ -55,6 +55,14 @@ enum class SubVulnerabilityType(val parent: MainVulnerabilityType) {
     XSLT_RCE(MainVulnerabilityType.RCE),
     XSTREAM_UNSERIALIZE(MainVulnerabilityType.RCE),
     YAML_BEANS_UNSERIALIZE(MainVulnerabilityType.RCE),
+    XXE(MainVulnerabilityType.RCE),
+
+    //SQLI SINK
+    JAVA_SQLI(MainVulnerabilityType.SQL_INJECTION),
+    MYBATIS_ANNOTATION_SQLI(MainVulnerabilityType.SQL_INJECTION),
+    MYBATIS_XML_SQLI(MainVulnerabilityType.SQL_INJECTION),
+    PLACEHOLDER_STRING_SQLI(MainVulnerabilityType.SQL_INJECTION),
+    POLYADIC_SQLI(MainVulnerabilityType.SQL_INJECTION),
 
     //REDIRECT SINK
     JAKARTA_REDIRECT(MainVulnerabilityType.REDIRECT),