contrast-agent 3.11.0 → 3.13.1

data/lib/contrast/utils/sinatra_helper.rb

@@ -1,49 +0,0 @@
-# Copyright (c) 2020 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
-
-module Contrast
-  module Utils
-    # This module is to help perform sometimes necessary tasks specific to Sinatra
-    module SinatraHelper
-      SINATRA_VIEWS = [
-        ['public/stylesheets', '*.scss', %w[SASS]],
-        ['views', '*.html', %w[HTML5]],
-        ['views', '*.html.erb', %w[HTML5 ERB]],
-        ['views', '*.html.haml', %w[HTML5 HAML]],
-        ['public', '*.html', %w[HTML5]]
-      ].cs__freeze
-
-      def self.app_class
-        @_app_class ||= begin
-          return nil unless defined?(Sinatra) && defined?(Sinatra::Base)
-
-          sinatra_layers = ObjectSpace.each_object(Sinatra::Base).to_a
-          result_layer = sinatra_layers.find { |layer| layer.app.nil? }
-          result_layer
-        end
-      end
-
-      def self.scannable_view_dirs
-        @_scannable_view_dirs ||= begin
-          views = SINATRA_VIEWS.dup
-          views << [view_directory, '*.erb', %w[HTML5 ERB]] if view_directory
-          views << [view_directory, '*.haml', %w[HTML5 HAML]] if view_directory
-          views << [public_directory, '*.html', %w[HTML5]] if public_directory
-          views
-        end
-      end
-
-      def self.view_directory
-        @_view_directory ||= begin
-          app_class&.settings&.views
-        end
-      end
-
-      def self.public_directory
-        @_public_directory ||= begin
-          app_class&.settings&.public_dir
-        end
-      end
-    end
-  end
-end

data/resources/csrf/inject.js

@@ -1,44 +0,0 @@
-<script>
-  function _contrast_isSameOrigin(action) {
-    var thisDomain = document.domain;
-    var parser = document.createElement('a');
-    parser.href = action;
-    return parser.hostname == thisDomain;
-  }
-
-  function _contrast_addTokenToForms() {
-    for(var i=0;i<document.forms.length;i++) {
-      var form = document.forms[i];
-      var action = form.action;
-      if(!!action || _contrast_isSameOrigin(action)) {
-        if(!form._contrast_tokenized) {
-          var input = document.createElement("input");
-          input.setAttribute("type", "hidden");
-          input.setAttribute("name", "!TOKEN_NAME!");
-          input.setAttribute("value", "!TOKEN_VALUE!");
-          form.appendChild(input);
-          form._contrast_tokenized = true;
-        }
-      }
-    }
-  }
-
-  (function() {_contrast_addTokenToForms();})();
-
-  var _contrast_watchNewForms = (function() {
-    var MutationObserver = window.MutationObserver || window.WebKitMutationObserver, eventListenerSupported = window.addEventListener;
-    return function(obj, callback) {
-      if(MutationObserver) {
-        var obs = new MutationObserver(function(mutations, observer) {
-          if( mutations[0].addedNodes.length )
-            callback();
-        });
-        obs.observe(obj, { childList:true, subtree:true });
-      } else if(eventListenerSupported) {
-        obj.addEventListener('DOMNodeInserted', callback, false);
-      }
-    }
-  })();
-
-  _contrast_watchNewForms(document.body, function() { _contrast_addTokenToForms(); });
-</script>