[
  {
    "id": "LOG001",
    "pattern": "logger\\.(?:info|error|warn|debug)\\s*\\(.*\\+\\s*\\w+",
    "flags": "",
    "category": "log_injection",
    "description": "Log injection",
    "language": [
      "js",
      "ts",
      "python",
      "java",
      "go",
      "csharp",
      "php",
      "ruby",
      "rust",
      "kotlin"
    ],
    "severity": "medium"
  },
  {
    "id": "LOG002",
    "pattern": "\\blog\\.(?:info|error|warn|debug)\\s*\\(.*\\+\\s*\\w+",
    "flags": "",
    "category": "log_injection",
    "description": "Java: log4j log.* injection (lowercase `log` logger variable)",
    "language": [
      "java"
    ],
    "severity": "medium"
  }
]