@appland/scanner 1.52.4 → 1.54.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +984 -0
- package/built/algorithms/dataStructures/graph/GraphEdge.js +1 -1
- package/built/algorithms/dataStructures/graph/GraphEdge.js.map +1 -1
- package/built/algorithms/dataStructures/graph/GraphVertex.js +1 -1
- package/built/algorithms/dataStructures/graph/GraphVertex.js.map +1 -1
- package/built/algorithms/dataStructures/linked-list/LinkedListNode.js +1 -1
- package/built/algorithms/dataStructures/linked-list/LinkedListNode.js.map +1 -1
- package/built/analyzer/recordSecrets.js +1 -1
- package/built/analyzer/recordSecrets.js.map +1 -1
- package/built/appMapIndex.js +2 -2
- package/built/appMapIndex.js.map +1 -1
- package/built/check.js +2 -2
- package/built/check.js.map +1 -1
- package/built/cli/ci/command.js +1 -1
- package/built/cli/ci/command.js.map +1 -1
- package/built/cli/fail.js +1 -1
- package/built/cli/fail.js.map +1 -1
- package/built/cli/merge/command.js +1 -1
- package/built/cli/merge/command.js.map +1 -1
- package/built/cli/reportUploadURL.js +2 -2
- package/built/cli/reportUploadURL.js.map +1 -1
- package/built/cli/resolveAppId.js +1 -1
- package/built/cli/resolveAppId.js.map +1 -1
- package/built/cli/scan/command.js +6 -3
- package/built/cli/scan/command.js.map +1 -1
- package/built/cli/scan.js +15 -3
- package/built/cli/scan.js.map +1 -1
- package/built/cli/updateCommitStatus.js +3 -3
- package/built/cli/updateCommitStatus.js.map +1 -1
- package/built/cli/upload.js +5 -5
- package/built/cli/upload.js.map +1 -1
- package/built/cli/validateFile.js +1 -1
- package/built/cli/validateFile.js.map +1 -1
- package/built/cli.js +0 -0
- package/built/configuration/configurationProvider.js +19 -15
- package/built/configuration/configurationProvider.js.map +1 -1
- package/built/database/index.js +1 -1
- package/built/database/index.js.map +1 -1
- package/built/database/visit.js +1 -1
- package/built/database/visit.js.map +1 -1
- package/built/integration/appland/app/exists.js +3 -3
- package/built/integration/appland/app/exists.js.map +1 -1
- package/built/integration/appland/mapset/create.js +1 -1
- package/built/integration/appland/mapset/create.js.map +1 -1
- package/built/integration/appland/retry.js +2 -2
- package/built/integration/appland/retry.js.map +1 -1
- package/built/integration/appland/scannerJob/merge.js +1 -1
- package/built/integration/appland/scannerJob/merge.js.map +1 -1
- package/built/openapi/method.js +1 -1
- package/built/openapi/method.js.map +1 -1
- package/built/openapi/model.js +1 -1
- package/built/openapi/model.js.map +1 -1
- package/built/openapi/provider.js +3 -3
- package/built/openapi/provider.js.map +1 -1
- package/built/report/findingsReport.js +7 -7
- package/built/report/findingsReport.js.map +1 -1
- package/built/report/summaryReport.js +3 -3
- package/built/report/summaryReport.js.map +1 -1
- package/built/ruleChecker.js +5 -5
- package/built/ruleChecker.js.map +1 -1
- package/built/rules/authzBeforeAuthn.js +1 -1
- package/built/rules/authzBeforeAuthn.js.map +1 -1
- package/built/rules/circularDependency.js +9 -9
- package/built/rules/circularDependency.js.map +1 -1
- package/built/rules/deserializationOfUntrustedData.js +1 -1
- package/built/rules/deserializationOfUntrustedData.js.map +1 -1
- package/built/rules/execOfUntrustedCommand.js +1 -1
- package/built/rules/execOfUntrustedCommand.js.map +1 -1
- package/built/rules/{http500 → http-500}/metadata.js +0 -0
- package/built/rules/http-500/metadata.js.map +1 -0
- package/built/rules/{http500 → http-500}/rule.js +0 -0
- package/built/rules/http-500/rule.js.map +1 -0
- package/built/rules/illegalPackageDependency.js +1 -1
- package/built/rules/illegalPackageDependency.js.map +1 -1
- package/built/rules/incompatibleHttpClientRequest.js +2 -2
- package/built/rules/incompatibleHttpClientRequest.js.map +1 -1
- package/built/rules/jobNotCancelled.js +2 -2
- package/built/rules/jobNotCancelled.js.map +1 -1
- package/built/rules/lib/matchEvent.js +1 -1
- package/built/rules/lib/matchEvent.js.map +1 -1
- package/built/rules/lib/parseRuleDescription.js +2 -1
- package/built/rules/lib/parseRuleDescription.js.map +1 -1
- package/built/rules/lib/util.js +8 -6
- package/built/rules/lib/util.js.map +1 -1
- package/built/rules/logoutWithoutSessionReset.js +1 -1
- package/built/rules/logoutWithoutSessionReset.js.map +1 -1
- package/built/rules/missingAuthentication.js +1 -1
- package/built/rules/missingAuthentication.js.map +1 -1
- package/built/rules/nPlusOneQuery.js +83 -37
- package/built/rules/nPlusOneQuery.js.map +1 -1
- package/built/rules/queryFromInvalidPackage.js +1 -1
- package/built/rules/queryFromInvalidPackage.js.map +1 -1
- package/built/rules/queryFromView.js +1 -1
- package/built/rules/queryFromView.js.map +1 -1
- package/built/rules/secretInLog.js +6 -2
- package/built/rules/secretInLog.js.map +1 -1
- package/built/rules/slowFunctionCall.js +1 -1
- package/built/rules/slowFunctionCall.js.map +1 -1
- package/built/rules/slowHttpServerRequest.js +1 -1
- package/built/rules/slowHttpServerRequest.js.map +1 -1
- package/built/rules/tooManyJoins.js +1 -1
- package/built/rules/tooManyJoins.js.map +1 -1
- package/built/rules/tooManyUpdates.js +1 -1
- package/built/rules/tooManyUpdates.js.map +1 -1
- package/built/rules/unbatchedMaterializedQuery.js +2 -2
- package/built/rules/unbatchedMaterializedQuery.js.map +1 -1
- package/built/rules/updateInGetRequest.js +1 -1
- package/built/rules/updateInGetRequest.js.map +1 -1
- package/built/scope/sqlTransactionScope.js +1 -1
- package/built/scope/sqlTransactionScope.js.map +1 -1
- package/doc/rules/{authzBeforeAuthn.md → authz-before-authn.md} +0 -0
- package/doc/rules/{circularDependency.md → circular-dependency.md} +0 -0
- package/doc/rules/{deserializationOfUntrustedData.md → deserialization-of-untrusted-data.md} +0 -0
- package/doc/rules/{execOfUntrustedCommand.md → exec-of-untrusted-command.md} +0 -0
- package/doc/rules/{http500.md → http-500.md} +0 -0
- package/doc/rules/{illegalPackageDependency.md → illegal-package-dependency.md} +0 -0
- package/doc/rules/{incompatibleHttpClientRequest.md → incompatible-http-client-request.md} +0 -0
- package/doc/rules/{insecureCompare.md → insecure-compare.md} +0 -0
- package/doc/rules/{jobNotCancelled.md → job-not-cancelled.md} +0 -0
- package/doc/rules/{logoutWithoutSessionReset.md → logout-without-session-reset.md} +0 -0
- package/doc/rules/{missingAuthentication.md → missing-authentication.md} +5 -4
- package/doc/rules/{missingContentType.md → missing-content-type.md} +0 -0
- package/doc/rules/{nPlusOneQuery.md → n-plus-one-query.md} +0 -0
- package/doc/rules/{queryFromInvalidPackage.md → query-from-invalid-package.md} +0 -0
- package/doc/rules/{queryFromView.md → query-from-view.md} +0 -0
- package/doc/rules/{rpcWithoutCircuitBreaker.md → rpc-without-circuit-breaker.md} +0 -0
- package/doc/rules/{saveWithoutValidation.md → save-without-validation.md} +0 -0
- package/doc/rules/{secretInLog.md → secret-in-log.md} +0 -0
- package/doc/rules/{slowFunctionCall.md → slow-function-call.md} +0 -0
- package/doc/rules/{slowHttpServerRequest.md → slow-http-server-request.md} +0 -0
- package/doc/rules/{slowQuery.md → slow-query.md} +0 -0
- package/doc/rules/{tooManyJoins.md → too-many-joins.md} +0 -0
- package/doc/rules/{tooManyUpdates.md → too-many-updates.md} +0 -0
- package/doc/rules/{unbatchedMaterializedQuery.md → unbatched-materialized-query.md} +0 -0
- package/doc/rules/{updateInGetRequest.md → update-in-get-request.md} +0 -0
- package/package.json +6 -8
- package/built/cli/progressReporter.js +0 -16
- package/built/cli/progressReporter.js.map +0 -1
- package/built/rules/http500/metadata.js.map +0 -1
- package/built/rules/http500/rule.js.map +0 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"unbatchedMaterializedQuery.js","sourceRoot":"","sources":["../../src/rules/unbatchedMaterializedQuery.ts"],"names":[],"mappings":";;;;;AAEA,2CAA0C;AAC1C,2BAA0B;AAC1B,oFAA8D;AAE9D,SAAS,cAAc,CAAC,CAAQ;IAC9B,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,UAAC,EAAU;YAAR,MAAM,YAAA;QAAO,OAAA,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;IAA1B,CAA0B,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,CAAQ,EAAE,WAAwB;IACtD,IAAI;QACF,IAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,UAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,iBAAe,GAAG,KAAK,CAAC;QAE5B,IAAI,GAAG,EAAE;YACP,IAAM,oBAAkB,GAAG,CAAC,eAAe,CAAC,CAAC;YAE7C,IAAA,aAAK,EAAC,GAAG,EAAE;gBACT,kBAAkB,EAAE,UAAC,SAAc;oBACjC,UAAQ,GAAG,IAAI,CAAC;oBAEhB,IACE,SAAS,CAAC,MAAM;wBAChB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;wBAC/B,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;wBAC7B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;wBACvC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EACzC;wBACA,SAAO,GAAG,IAAI,CAAC;qBAChB;gBACH,CAAC;gBACD,kBAAkB,EAAE;oBAClB,gBAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBACD,kBAAkB,EAAE,UAAC,UAAe;oBAClC,IAAI,oBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;wBAChD,iBAAe,GAAG,IAAI,CAAC;qBACxB;gBACH,CAAC;aACF,CAAC,CAAC;SACJ;QAED,IAAM,SAAS,GAAG,gBAAc,IAAI,SAAO,IAAI,iBAAe,CAAC;QAE/D,OAAO,UAAQ,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;KACpD;IAAC,OAAO,CAAC,EAAE;QACV,OAAO,CAAC,IAAI,CAAC
|
|
1
|
+
{"version":3,"file":"unbatchedMaterializedQuery.js","sourceRoot":"","sources":["../../src/rules/unbatchedMaterializedQuery.ts"],"names":[],"mappings":";;;;;AAEA,2CAA0C;AAC1C,2BAA0B;AAC1B,oFAA8D;AAE9D,SAAS,cAAc,CAAC,CAAQ;IAC9B,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,UAAC,EAAU;YAAR,MAAM,YAAA;QAAO,OAAA,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;IAA1B,CAA0B,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,CAAQ,EAAE,WAAwB;IACtD,IAAI;QACF,IAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,UAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,iBAAe,GAAG,KAAK,CAAC;QAE5B,IAAI,GAAG,EAAE;YACP,IAAM,oBAAkB,GAAG,CAAC,eAAe,CAAC,CAAC;YAE7C,IAAA,aAAK,EAAC,GAAG,EAAE;gBACT,kBAAkB,EAAE,UAAC,SAAc;oBACjC,UAAQ,GAAG,IAAI,CAAC;oBAEhB,IACE,SAAS,CAAC,MAAM;wBAChB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;wBAC/B,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;wBAC7B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;wBACvC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EACzC;wBACA,SAAO,GAAG,IAAI,CAAC;qBAChB;gBACH,CAAC;gBACD,kBAAkB,EAAE;oBAClB,gBAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBACD,kBAAkB,EAAE,UAAC,UAAe;oBAClC,IAAI,oBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;wBAChD,iBAAe,GAAG,IAAI,CAAC;qBACxB;gBACH,CAAC;aACF,CAAC,CAAC;SACJ;QAED,IAAM,SAAS,GAAG,gBAAc,IAAI,SAAO,IAAI,iBAAe,CAAC;QAE/D,OAAO,UAAQ,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;KACpD;IAAC,OAAO,CAAC,EAAE;QACV,OAAO,CAAC,IAAI,CAAC,oCAA4B,CAAC,CAAC,QAAS,OAAG,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAY,EAAE,WAAwB;IACrD,IAAI,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE;QACpC,OAAO;YACL;gBACE,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,4CAAqC,KAAK,CAAC,QAAQ,CAAE;aAC/D;SACF,CAAC;KACH;AACH,CAAC;AAED,SAAS,KAAK;IACZ,OAAO;QACL,OAAO,SAAA;QACP,KAAK,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAZ,CAAY;KAC3B,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,IAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,kBAAe;IACb,EAAE,EAAE,8BAA8B;IAClC,KAAK,EAAE,kCAAkC;IACzC,MAAM,EAAE,CAAC,cAAc,CAAC;IACxB,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE,aAAa;IAC3B,UAAU,EAAE;QACV,UAAU,EAAE,IAAI,SAAG,CAAC,kDAAkD,CAAC;KACxE;IACD,WAAW,EAAE,IAAA,8BAAoB,EAAC,4BAA4B,CAAC;IAC/D,GAAG,EAAE,qFAAqF;IAC1F,KAAK,OAAA;CACE,CAAC"}
|
|
@@ -52,7 +52,7 @@ function build(options) {
|
|
|
52
52
|
!options.queryExclude.some(function (pattern) { return e.sqlQuery.match(pattern); }) &&
|
|
53
53
|
!e.ancestors().some(function (ancestor) { return ancestor.codeObject.labels.has(Audit); }) &&
|
|
54
54
|
hasHttpServerRequest()) {
|
|
55
|
-
return "Data update performed in "
|
|
55
|
+
return "Data update performed in ".concat(httpServerRequest.route, ": ").concat(e.sqlQuery);
|
|
56
56
|
}
|
|
57
57
|
},
|
|
58
58
|
where: function (e) { return !!e.sqlQuery; },
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"updateInGetRequest.js","sourceRoot":"","sources":["../../src/rules/updateInGetRequest.ts"],"names":[],"mappings":";;;;;AAEA,mCAA2C;AAC3C,oFAA8D;AAE9D;IAIE,iBACE,YAAuD,EACvD,YAA2B;QAD3B,6BAAA,EAAA,gBAA0B,aAAa,EAAE,aAAa,CAAC;QACvD,6BAAA,EAAA,iBAA2B;QAE3B,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,sBAAI,iCAAY;aAAhB;YACE,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;aAED,UAAiB,KAA0B;YACzC,IAAI,CAAC,aAAa,GAAG,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;;;OAJA;IAMD,sBAAI,iCAAY;aAAhB;YACE,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;aAED,UAAiB,KAA0B;YACzC,IAAI,CAAC,aAAa,GAAG,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;;;OAJA;IAKH,cAAC;AAAD,CAAC,AA3BD,IA2BC;AAED,SAAS,KAAK,CAAC,OAAgC;IAAhC,wBAAA,EAAA,cAAuB,OAAO,EAAE;IAC7C,OAAO;QACL,OAAO,EAAE,UAAC,CAAC;YACT,IAAI,iBAAoC,CAAC;YACzC,SAAS,oBAAoB;gBAC3B,iBAAiB,GAAG,CAAC;qBAClB,SAAS,EAAE;qBACX,IAAI,CACH,UAAC,QAAQ;oBACP,OAAA,QAAQ,CAAC,iBAAiB;wBAC1B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;gBADjF,CACiF,CACpF,CAAC;gBACJ,OAAO,iBAAiB,KAAK,SAAS,CAAC;YACzC,CAAC;YAED,IACE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,CAAC,CAAC,QAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAA1B,CAA0B,CAAC;gBAClE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,CAAC,CAAC,QAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAA1B,CAA0B,CAAC;gBACnE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,UAAC,QAAQ,IAAK,OAAA,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAArC,CAAqC,CAAC;gBACxE,oBAAoB,EAAE,EACtB;gBACA,OAAO,
|
|
1
|
+
{"version":3,"file":"updateInGetRequest.js","sourceRoot":"","sources":["../../src/rules/updateInGetRequest.ts"],"names":[],"mappings":";;;;;AAEA,mCAA2C;AAC3C,oFAA8D;AAE9D;IAIE,iBACE,YAAuD,EACvD,YAA2B;QAD3B,6BAAA,EAAA,gBAA0B,aAAa,EAAE,aAAa,CAAC;QACvD,6BAAA,EAAA,iBAA2B;QAE3B,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,sBAAI,iCAAY;aAAhB;YACE,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;aAED,UAAiB,KAA0B;YACzC,IAAI,CAAC,aAAa,GAAG,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;;;OAJA;IAMD,sBAAI,iCAAY;aAAhB;YACE,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;aAED,UAAiB,KAA0B;YACzC,IAAI,CAAC,aAAa,GAAG,IAAA,oBAAa,EAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;;;OAJA;IAKH,cAAC;AAAD,CAAC,AA3BD,IA2BC;AAED,SAAS,KAAK,CAAC,OAAgC;IAAhC,wBAAA,EAAA,cAAuB,OAAO,EAAE;IAC7C,OAAO;QACL,OAAO,EAAE,UAAC,CAAC;YACT,IAAI,iBAAoC,CAAC;YACzC,SAAS,oBAAoB;gBAC3B,iBAAiB,GAAG,CAAC;qBAClB,SAAS,EAAE;qBACX,IAAI,CACH,UAAC,QAAQ;oBACP,OAAA,QAAQ,CAAC,iBAAiB;wBAC1B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;gBADjF,CACiF,CACpF,CAAC;gBACJ,OAAO,iBAAiB,KAAK,SAAS,CAAC;YACzC,CAAC;YAED,IACE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,CAAC,CAAC,QAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAA1B,CAA0B,CAAC;gBAClE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,CAAC,CAAC,QAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAA1B,CAA0B,CAAC;gBACnE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,UAAC,QAAQ,IAAK,OAAA,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAArC,CAAqC,CAAC;gBACxE,oBAAoB,EAAE,EACtB;gBACA,OAAO,mCAA4B,iBAAkB,CAAC,KAAK,eAAK,CAAC,CAAC,QAAQ,CAAE,CAAC;aAC9E;QACH,CAAC;QACD,KAAK,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAZ,CAAY;KAC3B,CAAC;AACJ,CAAC;AAED,IAAM,KAAK,GAAG,OAAO,CAAC;AAEtB,kBAAe;IACb,EAAE,EAAE,uBAAuB;IAC3B,KAAK,EAAE,8CAA8C;IACrD,KAAK,EAAE,qBAAqB;IAC5B,MAAM,EAAE,CAAC,KAAK,CAAC;IACf,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,IAAA,8BAAoB,EAAC,oBAAoB,CAAC;IACvD,GAAG,EAAE,8EAA8E;IACnF,OAAO,SAAA;IACP,KAAK,OAAA;CACE,CAAC"}
|
|
@@ -120,7 +120,7 @@ function iterateTransaction(begin, tail) {
|
|
|
120
120
|
// We currently don't track the separate connections, so we have to
|
|
121
121
|
// assume this is the same one and issue a warning.
|
|
122
122
|
if (isBegin(sql))
|
|
123
|
-
console.warn("SQL transaction started within a transaction in event "
|
|
123
|
+
console.warn("SQL transaction started within a transaction in event ".concat(event.id));
|
|
124
124
|
var end = isEnd(sql);
|
|
125
125
|
if (end) {
|
|
126
126
|
begin.transaction = { status: end.action, events: transaction };
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sqlTransactionScope.js","sourceRoot":"","sources":["../../src/scope/sqlTransactionScope.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA2C;AAI3C,kEAA4C;AAG5C,SAAS,OAAO,CAAC,GAA2B;IAC1C,QAAQ,GAAG,CAAC,OAAO,EAAE;QACnB,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,OAAO,CAAC,CAAC,CAAC,EAAV,CAAU,CAAC,CAAC;QAC/C,KAAK,aAAa;YAChB,OAAO,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC;QAChC;YACE,OAAO,KAAK,CAAC;KAChB;AACH,CAAC;AAMD,SAAS,KAAK,CAAC,GAA2B;;IACxC,QAAQ,GAAG,CAAC,OAAO,EAAE;QACnB,KAAK,MAAM;;gBACT,KAAwB,IAAA,KAAA,SAAA,GAAG,CAAC,SAAS,CAAA,gBAAA,4BAAE;oBAAlC,IAAM,SAAS,WAAA;oBAClB,IAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,MAAM;wBAAE,OAAO,MAAM,CAAC;iBAC3B;;;;;;;;;YACD,OAAO,SAAS,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,GAA+B,CAAC;QAC/E;YACE,OAAO,SAAS,CAAC;KACpB;AACH,CAAC;AASD,SAAgB,qBAAqB,CACnC,KAA0C;IAE1C,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;AACzC,CAAC;AAJD,sDAIC;AAED,SAAS,kBAAkB,CACzB,KAA0C,EAC1C,IAAqB;IAErB,8CAA8C;IAC9C,wDAAwD;IACxD,IAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE;QAC3D,IAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,SAAS;QACzB,kEAAkE;QAClE,IAAM,GAAG,GAAG,IAAA,iBAAQ,EAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,yDAAyD;QACzD,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,mDAAmD;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"sqlTransactionScope.js","sourceRoot":"","sources":["../../src/scope/sqlTransactionScope.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA2C;AAI3C,kEAA4C;AAG5C,SAAS,OAAO,CAAC,GAA2B;IAC1C,QAAQ,GAAG,CAAC,OAAO,EAAE;QACnB,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAC,CAAC,IAAK,OAAA,OAAO,CAAC,CAAC,CAAC,EAAV,CAAU,CAAC,CAAC;QAC/C,KAAK,aAAa;YAChB,OAAO,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC;QAChC;YACE,OAAO,KAAK,CAAC;KAChB;AACH,CAAC;AAMD,SAAS,KAAK,CAAC,GAA2B;;IACxC,QAAQ,GAAG,CAAC,OAAO,EAAE;QACnB,KAAK,MAAM;;gBACT,KAAwB,IAAA,KAAA,SAAA,GAAG,CAAC,SAAS,CAAA,gBAAA,4BAAE;oBAAlC,IAAM,SAAS,WAAA;oBAClB,IAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,MAAM;wBAAE,OAAO,MAAM,CAAC;iBAC3B;;;;;;;;;YACD,OAAO,SAAS,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,GAA+B,CAAC;QAC/E;YACE,OAAO,SAAS,CAAC;KACpB;AACH,CAAC;AASD,SAAgB,qBAAqB,CACnC,KAA0C;IAE1C,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;AACzC,CAAC;AAJD,sDAIC;AAED,SAAS,kBAAkB,CACzB,KAA0C,EAC1C,IAAqB;IAErB,8CAA8C;IAC9C,wDAAwD;IACxD,IAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE;QAC3D,IAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,SAAS;QAC9B,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,SAAS;QACzB,kEAAkE;QAClE,IAAM,GAAG,GAAG,IAAA,iBAAQ,EAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,yDAAyD;QACzD,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,mDAAmD;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,gEAAyD,KAAK,CAAC,EAAE,CAAE,CAAC,CAAC;QAEpF,IAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,GAAG,EAAE;YACP,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAChE,MAAM;SACP;KACF;IAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QACtB,qDAAqD;QACrD,yBAAyB;QACzB,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;KACjE;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAA2B;KACjF,CAAC;AACJ,CAAC;AAED;IAAiD,uCAAa;IAA9D;;IAUA,CAAC;IATE,oCAAM,GAAP,UAAQ,MAA+B;;;;;;;oBACjB,WAAA,SAAA,MAAM,CAAA;;;;oBAAf,KAAK;oBACd,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;wBAAE,wBAAS;oBACtC,GAAG,GAAG,IAAA,iBAAQ,EAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;yBAChC,CAAA,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA,EAAlC,wBAAkC;oBACpC,qBAAM,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAA;;oBAAvC,SAAuC,CAAC;;;;;;;;;;;;;;;;;;;KAG7C;IACH,0BAAC;AAAD,CAAC,AAVD,CAAiD,uBAAa,GAU7D"}
|
|
File without changes
|
|
File without changes
|
package/doc/rules/{deserializationOfUntrustedData.md → deserialization-of-untrusted-data.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
@@ -21,15 +21,16 @@ This rule checks all HTTP server requests that satisfy the following conditions:
|
|
|
21
21
|
- HTTP status code is `< 300`
|
|
22
22
|
- Matches include and exclude lists of content type (by default, these are empty).
|
|
23
23
|
|
|
24
|
-
For each matching request, any event that satisfies either of these conditions will satisfy the
|
|
24
|
+
For each matching request, any event that satisfies either of these conditions will satisfy the
|
|
25
|
+
rule:
|
|
25
26
|
|
|
26
|
-
1. Has label `public`.
|
|
27
|
+
1. Has label `access.public`.
|
|
27
28
|
2. Has label `security.authentication`, and returns a truthy value.
|
|
28
29
|
|
|
29
30
|
### Notes
|
|
30
31
|
|
|
31
32
|
If a request does not require an authenticated user (e.g. because it contains completely public
|
|
32
|
-
information), then this rule can be satisfied by calling any function labeled `public`.
|
|
33
|
+
information), then this rule can be satisfied by calling any function labeled `access.public`.
|
|
33
34
|
|
|
34
35
|
If the `security.authentication` event returns a falsey value (`false`, `null`, etc), then
|
|
35
36
|
authentication is assumed to be denied, and the rule is not satisfied.
|
|
@@ -37,7 +38,7 @@ authentication is assumed to be denied, and the rule is not satisfied.
|
|
|
37
38
|
### Resolution
|
|
38
39
|
|
|
39
40
|
If the request is designed to be public, and the omission of authentication is intentionaly, modify
|
|
40
|
-
the code so that it calls a function labeled `public`.
|
|
41
|
+
the code so that it calls a function labeled `access.public`.
|
|
41
42
|
|
|
42
43
|
Otherwise, modify the code so that it calls a function labeled `security.authentication` which
|
|
43
44
|
returns a truthy result (for example, a User object).
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@appland/scanner",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.54.0",
|
|
4
4
|
"description": "",
|
|
5
5
|
"bin": "built/cli.js",
|
|
6
6
|
"files": [
|
|
@@ -27,7 +27,7 @@
|
|
|
27
27
|
"@semantic-release/git": "^10.0.1",
|
|
28
28
|
"@types/async": "^3.2.12",
|
|
29
29
|
"@types/glob": "^7.2.0",
|
|
30
|
-
"@types/jest": "^27.
|
|
30
|
+
"@types/jest": "^27.4.1",
|
|
31
31
|
"@types/js-yaml": "^4.0.3",
|
|
32
32
|
"@types/lru-cache": "^5.1.1",
|
|
33
33
|
"@types/node": "^16.7.10",
|
|
@@ -47,7 +47,7 @@
|
|
|
47
47
|
"prettier": "^2.3.2",
|
|
48
48
|
"semantic-release": "^19.0.2",
|
|
49
49
|
"sinon": "^13.0.1",
|
|
50
|
-
"ts-jest": "^27.1.
|
|
50
|
+
"ts-jest": "^27.1.4",
|
|
51
51
|
"ts-json-schema-generator": "^0.97.0",
|
|
52
52
|
"ts-node": "^10.2.1",
|
|
53
53
|
"typescript": "^4.4.2"
|
|
@@ -56,10 +56,12 @@
|
|
|
56
56
|
"@appland/client": "^1.3.0",
|
|
57
57
|
"@appland/models": "^1.14.5",
|
|
58
58
|
"@appland/sql-parser": "^1.5.0",
|
|
59
|
+
"@types/cli-progress": "^3.9.2",
|
|
59
60
|
"ajv": "^8.8.2",
|
|
60
61
|
"ansi-escapes": "^5.0.0",
|
|
61
62
|
"async": "^3.2.3",
|
|
62
63
|
"chalk": "^4.1.2",
|
|
64
|
+
"cli-progress": "^3.11.0",
|
|
63
65
|
"form-data": "^4.0.0",
|
|
64
66
|
"glob": "^7.2.0",
|
|
65
67
|
"js-yaml": "^4.1.0",
|
|
@@ -72,10 +74,6 @@
|
|
|
72
74
|
"tar-stream": "^2.2.0",
|
|
73
75
|
"yargs": "^17.1.1"
|
|
74
76
|
},
|
|
75
|
-
"repository": {
|
|
76
|
-
"type": "git",
|
|
77
|
-
"url": "https://github.com/applandinc/scanner.git"
|
|
78
|
-
},
|
|
79
77
|
"publishConfig": {
|
|
80
78
|
"access": "public"
|
|
81
79
|
},
|
|
@@ -95,4 +93,4 @@
|
|
|
95
93
|
],
|
|
96
94
|
"outputPath": "dist"
|
|
97
95
|
}
|
|
98
|
-
}
|
|
96
|
+
}
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
-
};
|
|
5
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
-
var chalk_1 = __importDefault(require("chalk"));
|
|
7
|
-
function default_1(matches) {
|
|
8
|
-
if (matches.length === 0) {
|
|
9
|
-
return chalk_1.default.stderr.green('.');
|
|
10
|
-
}
|
|
11
|
-
else {
|
|
12
|
-
return chalk_1.default.stderr.magenta('!');
|
|
13
|
-
}
|
|
14
|
-
}
|
|
15
|
-
exports.default = default_1;
|
|
16
|
-
//# sourceMappingURL=progressReporter.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"progressReporter.js","sourceRoot":"","sources":["../../src/cli/progressReporter.ts"],"names":[],"mappings":";;;;;AAAA,gDAA0B;AAG1B,mBAAyB,OAAkB;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;QACxB,OAAO,eAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KAChC;SAAM;QACL,OAAO,eAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;KAClC;AACH,CAAC;AAND,4BAMC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/rules/http500/metadata.ts"],"names":[],"mappings":";;AAEA,kBAAe;IACb,KAAK,EAAE,sBAAsB;IAC7B,KAAK,EAAE,qBAAqB;IAC5B,cAAc,EAAE,KAAK;IACrB,YAAY,EAAE,WAAW;IACzB,UAAU,EAAE;QACV,SAAS,EAAE,iDAAiD;KAC7D;CACU,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../../src/rules/http500/rule.ts"],"names":[],"mappings":";;AAGA,SAAwB,IAAI;IAC1B,OAAO;QACL,OAAO,EAAE,UAAC,CAAQ,IAAK,OAAA,CAAC,CAAC,kBAAmB,CAAC,MAAM,KAAK,GAAG,EAApC,CAAoC;QAC3D,KAAK,EAAE,UAAC,CAAQ,IAAK,OAAA,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAtB,CAAsB;KAC5C,CAAC;AACJ,CAAC;AALD,uBAKC"}
|