v1.1.3/v1.12: Fix empty-cache rescan, 413 handling, exclude project files, AS BGT thread

- VS: Empty-result cache no longer blocks rescan (0-finding cache treated as stale)
- VS: HTTP 413 shows clear message about nginx file size limit
- VS: Exclude .sln/.csproj/.vbproj from zip (prevents server build timeout)
- AS: getActionUpdateThread returns BGT (fixes right-click context menu freeze)
- AS: KB loads lazily on first scan, not on menu render

Author: Offensive 360

gradle.properties

@@ -1,6 +1,6 @@
 pluginGroup=com.offensive360.sast
 pluginName=O360 SAST
-pluginVersion=1.1.2
+pluginVersion=1.1.3
 
 platformType=IC
 platformVersion=2024.1

src/main/kotlin/com/offensive360/sast/actions/BaseScanAction.kt

@@ -134,6 +134,10 @@ abstract class BaseScanAction : AnAction() {
         })
     }
 
+    override fun getActionUpdateThread(): com.intellij.openapi.actionSystem.ActionUpdateThread {
+        return com.intellij.openapi.actionSystem.ActionUpdateThread.BGT
+    }
+
     override fun update(e: AnActionEvent) {
         e.presentation.isEnabledAndVisible = e.project != null
     }

src/main/kotlin/com/offensive360/sast/knowledge/VulnerabilityKnowledgeBase.kt

@@ -20,10 +20,14 @@ object VulnerabilityKnowledgeBase {
 
     private val byId: MutableMap<String, KBEntry> = mutableMapOf()
     private val byNorm: MutableMap<String, KBEntry> = mutableMapOf()
-    private var loaded = false
+    @Volatile private var loaded = false
 
-    init {
-        loadFromResource()
+    private fun ensureLoaded() {
+        if (!loaded) {
+            synchronized(this) {
+                if (!loaded) loadFromResource()
+            }
+        }
     }
 
     private fun loadFromResource() {
@@ -63,6 +67,7 @@ object VulnerabilityKnowledgeBase {
      */
     fun lookup(type: String): KBEntry? {
         if (type.isBlank()) return null
+        ensureLoaded()
         val l = type.lowercase().trim()
         byId[l]?.let { return it }
         val n = l.replace(Regex("[_\\-\\s]"), "")