@automattic/jetpack-scan 1.4.9 → 1.4.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [1.4.10] - 2026-07-13
|
|
9
|
+
### Changed
|
|
10
|
+
- Update package dependencies. [#49272]
|
|
11
|
+
|
|
12
|
+
### Removed
|
|
13
|
+
- Remove test files from published package. [#50418]
|
|
14
|
+
|
|
8
15
|
## [1.4.9] - 2026-07-06
|
|
9
16
|
### Changed
|
|
10
17
|
- Update package dependencies. [#50097] [#50183] [#50212]
|
|
@@ -229,6 +236,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
229
236
|
### Removed
|
|
230
237
|
- Updated dependencies. [#39754]
|
|
231
238
|
|
|
239
|
+
[1.4.10]: https://github.com/Automattic/jetpack-scan/compare/v1.4.9...v1.4.10
|
|
232
240
|
[1.4.9]: https://github.com/Automattic/jetpack-scan/compare/v1.4.8...v1.4.9
|
|
233
241
|
[1.4.8]: https://github.com/Automattic/jetpack-scan/compare/v1.4.7...v1.4.8
|
|
234
242
|
[1.4.7]: https://github.com/Automattic/jetpack-scan/compare/v1.4.6...v1.4.7
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@automattic/jetpack-scan",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.10",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "A JS client for consuming Jetpack Scan services",
|
|
6
6
|
"homepage": "https://github.com/Automattic/jetpack/tree/HEAD/projects/js-packages/scan/#readme",
|
|
@@ -28,17 +28,17 @@
|
|
|
28
28
|
},
|
|
29
29
|
"dependencies": {
|
|
30
30
|
"@automattic/jetpack-api": "^1.0.31",
|
|
31
|
-
"@automattic/jetpack-base-styles": "^1.2.
|
|
32
|
-
"@automattic/jetpack-components": "^1.12.
|
|
31
|
+
"@automattic/jetpack-base-styles": "^1.2.9",
|
|
32
|
+
"@automattic/jetpack-components": "^1.12.16",
|
|
33
33
|
"@wordpress/api-fetch": "7.50.0",
|
|
34
34
|
"@wordpress/components": "36.1.0",
|
|
35
|
-
"@wordpress/dataviews": "
|
|
35
|
+
"@wordpress/dataviews": "17.1.0",
|
|
36
36
|
"@wordpress/date": "5.50.0",
|
|
37
37
|
"@wordpress/element": "8.2.0",
|
|
38
38
|
"@wordpress/i18n": "6.23.0",
|
|
39
|
-
"@wordpress/icons": "
|
|
40
|
-
"@wordpress/theme": "0.
|
|
41
|
-
"@wordpress/ui": "0.
|
|
39
|
+
"@wordpress/icons": "15.1.0",
|
|
40
|
+
"@wordpress/theme": "0.17.0",
|
|
41
|
+
"@wordpress/ui": "0.17.0",
|
|
42
42
|
"@wordpress/url": "4.50.0",
|
|
43
43
|
"debug": "4.4.3"
|
|
44
44
|
},
|
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
import { render, screen } from '@testing-library/react';
|
|
2
|
-
import ThreatSeverityBadge from '../index.tsx';
|
|
3
|
-
|
|
4
|
-
describe( 'ThreatSeverityBadge', () => {
|
|
5
|
-
it( 'renders the correct severity label', () => {
|
|
6
|
-
render( <ThreatSeverityBadge severity={ 4 } /> );
|
|
7
|
-
expect( screen.getByText( 'High' ) ).toBeInTheDocument();
|
|
8
|
-
} );
|
|
9
|
-
} );
|
|
@@ -1,56 +0,0 @@
|
|
|
1
|
-
import { render, screen } from '@testing-library/react';
|
|
2
|
-
import ThreatsDataViews from '../index.tsx';
|
|
3
|
-
|
|
4
|
-
const data = [
|
|
5
|
-
// Scan API Data
|
|
6
|
-
{
|
|
7
|
-
id: 185869885,
|
|
8
|
-
signature: 'EICAR_AV_Test',
|
|
9
|
-
title: 'Malicious code found in file: index.php',
|
|
10
|
-
description:
|
|
11
|
-
"This is the standard EICAR antivirus test code, and not a real infection. If your site contains this code when you don't expect it to, contact Jetpack support for some help.",
|
|
12
|
-
firstDetected: '2024-10-07T20:45:06.000Z',
|
|
13
|
-
fixedIn: null,
|
|
14
|
-
fixedOn: '2024-10-07T20:45:06.000Z',
|
|
15
|
-
fixable: { fixer: 'rollback', target: 'January 26, 2024, 6:49 am', extensionStatus: '' },
|
|
16
|
-
fixer: {
|
|
17
|
-
status: 'in_progress',
|
|
18
|
-
startedAt: '2024-10-07T20:45:06.000Z',
|
|
19
|
-
lastUpdated: '2024-10-07T20:45:06.000Z',
|
|
20
|
-
},
|
|
21
|
-
severity: 8,
|
|
22
|
-
status: 'current',
|
|
23
|
-
filename: '/var/www/html/wp-content/index.php',
|
|
24
|
-
context: {
|
|
25
|
-
1: 'echo <<<HTML',
|
|
26
|
-
2: 'X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*',
|
|
27
|
-
3: 'HTML;',
|
|
28
|
-
marks: {},
|
|
29
|
-
},
|
|
30
|
-
},
|
|
31
|
-
// Protect Report Data
|
|
32
|
-
{
|
|
33
|
-
id: '1d0470df-4671-47ac-8d87-a165e8f7d502',
|
|
34
|
-
title: 'WooCommerce <= 3.2.3 - Authenticated PHP Object Injection',
|
|
35
|
-
description:
|
|
36
|
-
'Versions 3.2.3 and earlier are affected by an issue where cached queries within shortcodes could lead to object injection. This is related to the recent WordPress 4.8.3 security release.This issue can only be exploited by users who can edit content and add shortcodes, but we still recommend all users running WooCommerce 3.x upgrade to 3.2 to mitigate this issue.',
|
|
37
|
-
source: 'https://wpscan.com/vulnerability/1d0470df-4671-47ac-8d87-a165e8f7d502',
|
|
38
|
-
extension: {
|
|
39
|
-
name: 'WooCommerce',
|
|
40
|
-
slug: 'woocommerce',
|
|
41
|
-
version: '3.2.3',
|
|
42
|
-
type: 'plugins',
|
|
43
|
-
},
|
|
44
|
-
fixedIn: '3.2.4',
|
|
45
|
-
},
|
|
46
|
-
];
|
|
47
|
-
|
|
48
|
-
describe( 'ThreatsDataViews', () => {
|
|
49
|
-
it( 'renders threat data', () => {
|
|
50
|
-
render( <ThreatsDataViews data={ data } /> );
|
|
51
|
-
expect( screen.getByText( 'Malicious code found in file: index.php' ) ).toBeInTheDocument();
|
|
52
|
-
expect(
|
|
53
|
-
screen.getByText( 'WooCommerce <= 3.2.3 - Authenticated PHP Object Injection' )
|
|
54
|
-
).toBeInTheDocument();
|
|
55
|
-
} );
|
|
56
|
-
} );
|