@contrast/agent-bundle 5.39.1 → 5.41.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (279) hide show
  1. package/node_modules/@contrast/agent/lib/start-agent.js +50 -40
  2. package/node_modules/@contrast/agent/package.json +11 -11
  3. package/node_modules/@contrast/agent-swc-plugin/index.js +9 -3
  4. package/node_modules/@contrast/agent-swc-plugin/methods.js +15 -1
  5. package/node_modules/@contrast/agent-swc-plugin/package.json +5 -8
  6. package/node_modules/@contrast/agent-swc-plugin/rewriter.wasm +0 -0
  7. package/node_modules/@contrast/agentify/lib/index.js +2 -2
  8. package/node_modules/@contrast/agentify/package.json +15 -14
  9. package/node_modules/@contrast/architecture-components/package.json +5 -5
  10. package/node_modules/@contrast/assess/lib/dataflow/propagation/install/string/replace.js +6 -3
  11. package/node_modules/@contrast/assess/lib/dataflow/propagation/install/util-format.js +44 -21
  12. package/node_modules/@contrast/assess/lib/dataflow/sources/index.js +1 -1
  13. package/node_modules/@contrast/assess/lib/dataflow/sources/install/{body-parser1.js → body-parser.js} +2 -2
  14. package/node_modules/@contrast/assess/lib/dataflow/sources/install/koa/koa-bodyparsers.js +3 -1
  15. package/node_modules/@contrast/assess/lib/dataflow/sources/install/qs6.js +5 -5
  16. package/node_modules/@contrast/assess/lib/dataflow/sources/install/querystring.js +2 -1
  17. package/node_modules/@contrast/assess/lib/index.d.ts +0 -1
  18. package/node_modules/@contrast/assess/lib/make-source-context.js +7 -37
  19. package/node_modules/@contrast/assess/lib/sampler/common.js +7 -11
  20. package/node_modules/@contrast/assess/package.json +12 -11
  21. package/node_modules/@contrast/common/lib/constants.d.ts +6 -0
  22. package/node_modules/@contrast/common/lib/constants.js +8 -1
  23. package/node_modules/@contrast/common/lib/types.d.ts +7 -1
  24. package/node_modules/@contrast/common/package.json +1 -1
  25. package/node_modules/@contrast/config/lib/common.js +1 -1
  26. package/node_modules/@contrast/config/lib/config.js +49 -27
  27. package/node_modules/@contrast/config/lib/index.d.ts +3 -2
  28. package/node_modules/@contrast/config/lib/options.js +4 -4
  29. package/node_modules/@contrast/config/package.json +4 -3
  30. package/node_modules/@contrast/core/lib/sensitive-data-masking/protect-listener.js +15 -15
  31. package/node_modules/@contrast/core/package.json +6 -6
  32. package/node_modules/@contrast/deadzones/package.json +5 -5
  33. package/node_modules/@contrast/dep-hooks/package.json +3 -3
  34. package/node_modules/@contrast/esm-hooks/package.json +6 -6
  35. package/node_modules/@contrast/instrumentation/lib/index.js +0 -1
  36. package/node_modules/@contrast/instrumentation/package.json +5 -5
  37. package/node_modules/@contrast/library-analysis/lib/install/library-reporting/dep.json +300 -152
  38. package/node_modules/@contrast/library-analysis/lib/install/library-reporting/index.js +9 -2
  39. package/node_modules/@contrast/library-analysis/lib/install/library-reporting/utils.js +54 -43
  40. package/node_modules/@contrast/library-analysis/package.json +4 -4
  41. package/node_modules/@contrast/logger/lib/serializers.js +2 -2
  42. package/node_modules/@contrast/logger/package.json +3 -3
  43. package/node_modules/@contrast/metrics/package.json +6 -6
  44. package/node_modules/@contrast/patcher/package.json +2 -2
  45. package/node_modules/@contrast/protect/lib/get-source-context.js +3 -1
  46. package/node_modules/@contrast/protect/lib/index.js +6 -1
  47. package/node_modules/@contrast/protect/lib/input-analysis/handlers.js +7 -9
  48. package/node_modules/@contrast/protect/lib/input-analysis/index.js +1 -1
  49. package/node_modules/@contrast/protect/lib/input-analysis/install/{body-parser1.js → body-parser.js} +1 -1
  50. package/node_modules/@contrast/protect/lib/input-analysis/install/http.js +18 -19
  51. package/node_modules/@contrast/protect/lib/input-analysis/install/qs6.js +18 -17
  52. package/node_modules/@contrast/protect/lib/input-analysis/install/universal-cookie4.js +2 -3
  53. package/node_modules/@contrast/protect/lib/make-source-context.js +22 -66
  54. package/node_modules/@contrast/protect/lib/semantic-analysis/handlers.js +73 -72
  55. package/node_modules/@contrast/protect/package.json +11 -11
  56. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/application-activity/index.js +7 -7
  57. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/application-activity/translations.d.ts +3 -3
  58. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/application-activity/translations.js +24 -21
  59. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/routes-observed.js +2 -1
  60. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/traces/index.js +1 -1
  61. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/traces/translations.d.ts +1 -2
  62. package/node_modules/@contrast/reporter/lib/reporters/contrast-ui/endpoints/traces/translations.js +8 -2
  63. package/node_modules/@contrast/reporter/lib/reporters/security-logger/index.d.ts +2 -2
  64. package/node_modules/@contrast/reporter/lib/reporters/security-logger/index.js +22 -20
  65. package/node_modules/@contrast/reporter/package.json +7 -7
  66. package/node_modules/@contrast/rewriter/lib/index.js +2 -2
  67. package/node_modules/@contrast/rewriter/package.json +6 -6
  68. package/node_modules/@contrast/route-coverage/lib/index.d.ts +2 -0
  69. package/node_modules/@contrast/route-coverage/lib/index.js +15 -17
  70. package/node_modules/@contrast/route-coverage/lib/install/express/express5.js +489 -202
  71. package/node_modules/@contrast/route-coverage/package.json +9 -9
  72. package/node_modules/@contrast/scopes/package.json +5 -5
  73. package/node_modules/@contrast/sec-obs/lib/traces/http.js +2 -2
  74. package/node_modules/@contrast/sec-obs/lib/traces/http.test.js +17 -0
  75. package/node_modules/@contrast/sec-obs/lib/traces/outbound-service-call.js +2 -2
  76. package/node_modules/@contrast/sec-obs/lib/traces/outbound-service-call.test.js +17 -0
  77. package/node_modules/@contrast/sec-obs/package.json +9 -9
  78. package/node_modules/@contrast/sources/lib/index.js +109 -0
  79. package/node_modules/@contrast/sources/lib/index.test.js +120 -0
  80. package/node_modules/@contrast/{route-coverage/lib/normalized-url-mapper.js → sources/lib/normalized-uri-mapper.js} +10 -3
  81. package/node_modules/@contrast/sources/lib/normalized-uri-mapper.test.js +59 -0
  82. package/node_modules/@contrast/{sec-obs/node_modules/@contrast/core/lib/sensitive-data-masking/constants.js → sources/lib/req-data.js} +0 -6
  83. package/node_modules/@contrast/sources/lib/source-info.js +183 -0
  84. package/node_modules/@contrast/sources/lib/source-info.test.js +68 -0
  85. package/node_modules/@contrast/sources/package.json +16 -0
  86. package/node_modules/@contrast/telemetry/package.json +6 -6
  87. package/node_modules/@opentelemetry/semantic-conventions/build/esm/experimental_attributes.d.ts +2831 -77
  88. package/node_modules/@opentelemetry/semantic-conventions/build/esm/experimental_attributes.js +2831 -77
  89. package/node_modules/@opentelemetry/semantic-conventions/build/esm/experimental_attributes.js.map +1 -1
  90. package/node_modules/@opentelemetry/semantic-conventions/build/esm/experimental_metrics.d.ts +415 -98
  91. package/node_modules/@opentelemetry/semantic-conventions/build/esm/experimental_metrics.js +415 -98
  92. package/node_modules/@opentelemetry/semantic-conventions/build/esm/experimental_metrics.js.map +1 -1
  93. package/node_modules/@opentelemetry/semantic-conventions/build/esm/stable_attributes.d.ts +106 -0
  94. package/node_modules/@opentelemetry/semantic-conventions/build/esm/stable_attributes.js +106 -0
  95. package/node_modules/@opentelemetry/semantic-conventions/build/esm/stable_attributes.js.map +1 -1
  96. package/node_modules/@opentelemetry/semantic-conventions/build/esm/version.d.ts +1 -1
  97. package/node_modules/@opentelemetry/semantic-conventions/build/esm/version.js +1 -1
  98. package/node_modules/@opentelemetry/semantic-conventions/build/esm/version.js.map +1 -1
  99. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/experimental_attributes.d.ts +2831 -77
  100. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/experimental_attributes.js +2831 -77
  101. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/experimental_attributes.js.map +1 -1
  102. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/experimental_metrics.d.ts +415 -98
  103. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/experimental_metrics.js +415 -98
  104. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/experimental_metrics.js.map +1 -1
  105. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/stable_attributes.d.ts +106 -0
  106. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/stable_attributes.js +106 -0
  107. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/stable_attributes.js.map +1 -1
  108. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/version.d.ts +1 -1
  109. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/version.js +1 -1
  110. package/node_modules/@opentelemetry/semantic-conventions/build/esnext/version.js.map +1 -1
  111. package/node_modules/@opentelemetry/semantic-conventions/build/src/experimental_attributes.d.ts +2831 -77
  112. package/node_modules/@opentelemetry/semantic-conventions/build/src/experimental_attributes.js +2858 -103
  113. package/node_modules/@opentelemetry/semantic-conventions/build/src/experimental_attributes.js.map +1 -1
  114. package/node_modules/@opentelemetry/semantic-conventions/build/src/experimental_metrics.d.ts +415 -98
  115. package/node_modules/@opentelemetry/semantic-conventions/build/src/experimental_metrics.js +420 -102
  116. package/node_modules/@opentelemetry/semantic-conventions/build/src/experimental_metrics.js.map +1 -1
  117. package/node_modules/@opentelemetry/semantic-conventions/build/src/stable_attributes.d.ts +106 -0
  118. package/node_modules/@opentelemetry/semantic-conventions/build/src/stable_attributes.js +106 -0
  119. package/node_modules/@opentelemetry/semantic-conventions/build/src/stable_attributes.js.map +1 -1
  120. package/node_modules/@opentelemetry/semantic-conventions/build/src/version.d.ts +1 -1
  121. package/node_modules/@opentelemetry/semantic-conventions/build/src/version.js +1 -1
  122. package/node_modules/@opentelemetry/semantic-conventions/build/src/version.js.map +1 -1
  123. package/node_modules/@opentelemetry/semantic-conventions/package.json +3 -3
  124. package/node_modules/@types/node/README.md +2 -2
  125. package/node_modules/@types/node/buffer.d.ts +5 -0
  126. package/node_modules/@types/node/dns/promises.d.ts +11 -10
  127. package/node_modules/@types/node/dns.d.ts +18 -19
  128. package/node_modules/@types/node/fs.d.ts +13 -1
  129. package/node_modules/@types/node/http.d.ts +4 -19
  130. package/node_modules/@types/node/inspector.d.ts +53 -0
  131. package/node_modules/@types/node/package.json +2 -82
  132. package/node_modules/@types/node/stream/web.d.ts +4 -0
  133. package/node_modules/axios/CHANGELOG.md +17 -0
  134. package/node_modules/axios/README.md +1 -4
  135. package/node_modules/axios/dist/axios.js +39 -5
  136. package/node_modules/axios/dist/axios.js.map +1 -1
  137. package/node_modules/axios/dist/axios.min.js +2 -2
  138. package/node_modules/axios/dist/axios.min.js.map +1 -1
  139. package/node_modules/axios/dist/browser/axios.cjs +46 -9
  140. package/node_modules/axios/dist/browser/axios.cjs.map +1 -1
  141. package/node_modules/axios/dist/esm/axios.js +46 -9
  142. package/node_modules/axios/dist/esm/axios.js.map +1 -1
  143. package/node_modules/axios/dist/esm/axios.min.js +2 -2
  144. package/node_modules/axios/dist/esm/axios.min.js.map +1 -1
  145. package/node_modules/axios/dist/node/axios.cjs +46 -9
  146. package/node_modules/axios/dist/node/axios.cjs.map +1 -1
  147. package/node_modules/axios/index.d.cts +13 -2
  148. package/node_modules/axios/lib/core/Axios.js +2 -2
  149. package/node_modules/axios/lib/core/mergeConfig.js +1 -1
  150. package/node_modules/axios/lib/env/data.js +1 -1
  151. package/node_modules/axios/lib/helpers/throttle.js +1 -1
  152. package/node_modules/axios/lib/helpers/toURLEncodedForm.js +4 -3
  153. package/node_modules/axios/lib/utils.js +36 -0
  154. package/node_modules/axios/package.json +5 -5
  155. package/node_modules/deepmerge/.editorconfig +7 -0
  156. package/node_modules/deepmerge/.eslintcache +1 -0
  157. package/node_modules/deepmerge/changelog.md +167 -0
  158. package/node_modules/deepmerge/dist/cjs.js +133 -0
  159. package/node_modules/deepmerge/dist/umd.js +139 -0
  160. package/node_modules/deepmerge/index.d.ts +20 -0
  161. package/node_modules/deepmerge/index.js +106 -0
  162. package/node_modules/{path-to-regexp/LICENSE → deepmerge/license.txt} +1 -1
  163. package/node_modules/deepmerge/package.json +42 -0
  164. package/node_modules/deepmerge/readme.md +264 -0
  165. package/node_modules/deepmerge/rollup.config.js +22 -0
  166. package/node_modules/follow-redirects/package.json +1 -1
  167. package/node_modules/form-data/CHANGELOG.md +601 -0
  168. package/node_modules/form-data/{Readme.md → README.md} +4 -4
  169. package/node_modules/form-data/lib/form_data.js +2 -6
  170. package/node_modules/form-data/package.json +22 -6
  171. package/node_modules/nan/.github/workflows/ci.yml +8 -10
  172. package/node_modules/nan/.pre-commit-config.yaml +8 -0
  173. package/node_modules/nan/CHANGELOG.md +5 -1
  174. package/node_modules/nan/README.md +4 -4
  175. package/node_modules/nan/nan.h +16 -12
  176. package/node_modules/nan/nan_callbacks.h +13 -0
  177. package/node_modules/nan/nan_callbacks_12_inl.h +16 -2
  178. package/node_modules/nan/nan_callbacks_pre_12_inl.h +6 -2
  179. package/node_modules/nan/nan_maybe_43_inl.h +1 -1
  180. package/node_modules/nan/nan_maybe_pre_43_inl.h +1 -1
  181. package/node_modules/nan/nan_scriptorigin.h +11 -9
  182. package/node_modules/nan/nan_typedarray_contents.h +1 -1
  183. package/node_modules/nan/package.json +2 -2
  184. package/package.json +5 -3
  185. package/node_modules/@contrast/agentify/lib/sources.js +0 -94
  186. package/node_modules/@contrast/route-coverage/lib/install/http.js +0 -44
  187. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/LICENSE +0 -12
  188. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/constants.d.ts +0 -385
  189. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/constants.js +0 -270
  190. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/index.d.ts +0 -40
  191. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/index.js +0 -228
  192. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/primordials.d.ts +0 -65
  193. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/primordials.js +0 -66
  194. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/types.d.ts +0 -383
  195. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/types.js +0 -30
  196. package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/package.json +0 -23
  197. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/LICENSE +0 -12
  198. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/README.md +0 -44
  199. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/lib/common.js +0 -131
  200. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/lib/config.js +0 -290
  201. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/lib/index.d.ts +0 -328
  202. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/lib/index.js +0 -29
  203. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/lib/options.js +0 -836
  204. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/lib/validators.js +0 -23
  205. package/node_modules/@contrast/sec-obs/node_modules/@contrast/config/package.json +0 -27
  206. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/LICENSE +0 -12
  207. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/README.md +0 -98
  208. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/agent-info.js +0 -36
  209. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/app-info.js +0 -233
  210. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/build-id.js +0 -51
  211. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/capture-stacktrace.js +0 -256
  212. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/contrast-methods.js +0 -155
  213. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/index.d.ts +0 -52
  214. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/ioc/core.js +0 -95
  215. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/is-agent-path.js +0 -37
  216. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/messages.js +0 -28
  217. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/sensitive-data-masking/index.js +0 -63
  218. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/sensitive-data-masking/protect-listener.js +0 -111
  219. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/sensitive-data-masking/server-settings-listener.js +0 -44
  220. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/system-info/cloud-provider-metadata.js +0 -146
  221. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/system-info/index.js +0 -225
  222. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/system-info/linux-os-info.js +0 -137
  223. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/lib/system-info/utils.js +0 -35
  224. package/node_modules/@contrast/sec-obs/node_modules/@contrast/core/package.json +0 -33
  225. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/LICENSE +0 -12
  226. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/README.md +0 -94
  227. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/export-handler-registry.d.ts +0 -121
  228. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/export-handler-registry.js +0 -206
  229. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/export-hook-descriptor.d.ts +0 -72
  230. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/export-hook-descriptor.js +0 -88
  231. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/handler-invoker.d.ts +0 -46
  232. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/handler-invoker.js +0 -106
  233. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/helpers.d.ts +0 -28
  234. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/helpers.js +0 -66
  235. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/index.d.ts +0 -115
  236. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/index.js +0 -208
  237. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/package-finder.d.ts +0 -43
  238. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/lib/package-finder.js +0 -79
  239. package/node_modules/@contrast/sec-obs/node_modules/@contrast/dep-hooks/package.json +0 -29
  240. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/LICENSE +0 -12
  241. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/README.md +0 -270
  242. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/index.d.ts +0 -16
  243. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/index.js +0 -132
  244. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/serializers.d.ts +0 -33
  245. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/serializers.js +0 -75
  246. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/utils.d.ts +0 -15
  247. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/lib/utils.js +0 -34
  248. package/node_modules/@contrast/sec-obs/node_modules/@contrast/logger/package.json +0 -28
  249. package/node_modules/@contrast/sec-obs/node_modules/@contrast/patcher/LICENSE +0 -12
  250. package/node_modules/@contrast/sec-obs/node_modules/@contrast/patcher/README.md +0 -51
  251. package/node_modules/@contrast/sec-obs/node_modules/@contrast/patcher/lib/index.d.ts +0 -101
  252. package/node_modules/@contrast/sec-obs/node_modules/@contrast/patcher/lib/index.js +0 -544
  253. package/node_modules/@contrast/sec-obs/node_modules/@contrast/patcher/package.json +0 -25
  254. package/node_modules/@contrast/sec-obs/node_modules/@contrast/rewriter/LICENSE +0 -12
  255. package/node_modules/@contrast/sec-obs/node_modules/@contrast/rewriter/README.md +0 -6
  256. package/node_modules/@contrast/sec-obs/node_modules/@contrast/rewriter/lib/cache.js +0 -318
  257. package/node_modules/@contrast/sec-obs/node_modules/@contrast/rewriter/lib/index.js +0 -216
  258. package/node_modules/@contrast/sec-obs/node_modules/@contrast/rewriter/lib/rewrite-is-deadzoned.js +0 -143
  259. package/node_modules/@contrast/sec-obs/node_modules/@contrast/rewriter/package.json +0 -30
  260. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/LICENSE +0 -12
  261. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/constants.js +0 -26
  262. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/index.d.ts +0 -46
  263. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/index.js +0 -70
  264. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/bluebird.js +0 -128
  265. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/index.js +0 -34
  266. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/mongodb-core.js +0 -83
  267. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/mongodb3.js +0 -89
  268. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/mongodb4.js +0 -80
  269. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/mongodb6.js +0 -46
  270. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/mysql.js +0 -151
  271. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/install/redis.js +0 -79
  272. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/lib/utils.js +0 -35
  273. package/node_modules/@contrast/sec-obs/node_modules/@contrast/scopes/package.json +0 -28
  274. package/node_modules/form-data/README.md.bak +0 -355
  275. package/node_modules/path-to-regexp/Readme.md +0 -216
  276. package/node_modules/path-to-regexp/dist/index.d.ts +0 -136
  277. package/node_modules/path-to-regexp/dist/index.js +0 -403
  278. package/node_modules/path-to-regexp/dist/index.js.map +0 -1
  279. package/node_modules/path-to-regexp/package.json +0 -62
@@ -1,385 +0,0 @@
1
- export declare enum Event {
2
- RESPONSE_FINISH = "response-finish",
3
- ROUTE_COVERAGE_DISCOVERY_FINISHED = "route-coverage-discovery-finished",
4
- ARCHITECTURE_COMPONENT = "architecture-component",
5
- ASSESS_DATAFLOW_FINDING = "assess-dataflow-findings",
6
- ASSESS_DATAFLOW_SAFE_POSITIVE = "assess-dataflow-safe-positive",
7
- ASSESS_RESPONSE_SCANNING_FINDING = "assess-response-scanning-findings",
8
- ASSESS_SESSION_CONFIGURATION_FINDING = "assess-session-configuration-findings",
9
- ASSESS_CRYPTO_ANALYSIS_FINDING = "assess-crypto-analysis-finding",
10
- LIBRARY = "library",
11
- LIBRARY_USAGE = "library-usage",
12
- PROTECT = "protect",
13
- ROUTE_COVERAGE_OBSERVATION = "route-coverage-observation",
14
- SERVER_SETTINGS_UPDATE = "server-settings-update",// UI remote settings updates
15
- UNINSTALL = "uninstall",// disable all components/features
16
- UNSUPPORTED_LIBRARY = "unsupported-library"
17
- }
18
- export declare enum ProtectRuleMode {
19
- OFF = "off",
20
- MONITOR = "monitor",
21
- BLOCK = "block",
22
- BLOCK_AT_PERIMETER = "block_at_perimeter"
23
- }
24
- export declare enum Rule {
25
- BOT_BLOCKER = "bot-blocker",
26
- CMD_INJECTION = "cmd-injection",
27
- CMD_INJECTION_COMMAND_BACKDOORS = "cmd-injection-command-backdoors",
28
- CMD_INJECTION_SEMANTIC_CHAINED_COMMANDS = "cmd-injection-semantic-chained-commands",
29
- CMD_INJECTION_SEMANTIC_DANGEROUS_PATHS = "cmd-injection-semantic-dangerous-paths",
30
- CRYPTO_BAD_MAC = "crypto-bad-mac",
31
- CRYPTO_BAD_CIPHERS = "crypto-bad-ciphers",
32
- CRYPTO_WEAK_RANDOMNESS = "crypto-weak-randomness",
33
- IP_DENYLIST = "ip-denylist",
34
- METHOD_TAMPERING = "method-tampering",
35
- NOSQL_INJECTION = "nosql-injection",
36
- NOSQL_INJECTION_MONGO = "nosql-injection-mongo",
37
- PATH_TRAVERSAL = "path-traversal",
38
- PATH_TRAVERSAL_SEMANTIC_FILE_SECURITY_BYPASS = "path-traversal-semantic-file-security-bypass",
39
- REFLECTED_XSS = "reflected-xss",
40
- SQL_INJECTION = "sql-injection",
41
- SSJS_INJECTION = "ssjs-injection",
42
- SSRF = "ssrf",
43
- UNSAFE_CODE_EXECUTION = "unsafe-code-execution",
44
- UNSAFE_FILE_UPLOAD = "unsafe-file-upload",
45
- UNTRUSTED_DESERIALIZATION = "untrusted-deserialization",
46
- VIRTUAL_PATCH = "virtual-patch",
47
- XXE = "xxe",
48
- UNVALIDATED_REDIRECT = "unvalidated-redirect"
49
- }
50
- export declare enum ResponseScanningRule {
51
- AUTOCOMPLETE_MISSING = "autocomplete-missing",
52
- CACHE_CONTROLS_MISSING = "cache-controls-missing",
53
- CLICKJACKING_CONTROL_MISSING = "clickjacking-control-missing",
54
- PARAMETER_POLLUTION = "parameter-pollution",
55
- CSP_HEADER_MISSING = "csp-header-missing",
56
- CSP_HEADER_INSECURE = "csp-header-insecure",
57
- HSTS_HEADER_MISSING = "hsts-header-missing",
58
- X_POWERED_BY_HEADER = "x-powered-by-header",
59
- XCONTENTTYPE_HEADER_MISSING = "xcontenttype-header-missing",
60
- XXSPROTECTION_HEADER_DISABLED = "xxssprotection-header-disabled"
61
- }
62
- export declare enum SessionConfigurationRule {
63
- HTTPONLY = "httponly",
64
- SECURE_FLAG_MISSING = "secure-flag-missing"
65
- }
66
- export declare enum InputType {
67
- UNDEFINED_TYPE = "UNDEFINED_TYPE",
68
- BODY = "BODY",
69
- COOKIE_NAME = "COOKIE_NAME",
70
- COOKIE_VALUE = "COOKIE_VALUE",
71
- HEADER = "HEADER",
72
- PARAMETER_NAME = "PARAMETER_NAME",
73
- PARAMETER_VALUE = "PARAMETER_VALUE",
74
- QUERYSTRING = "QUERYSTRING",
75
- URI = "URI",
76
- SOCKET = "SOCKET",
77
- JSON_VALUE = "JSON_VALUE",
78
- JSON_ARRAYED_VALUE = "JSON_ARRAYED_VALUE",
79
- MULTIPART_CONTENT_TYPE = "MULTIPART_CONTENT_TYPE",
80
- MULTIPART_VALUE = "MULTIPART_VALUE",
81
- MULTIPART_FIELD_NAME = "MULTIPART_FIELD_NAME",
82
- MULTIPART_NAME = "MULTIPART_NAME",
83
- XML_VALUE = "XML_VALUE",
84
- DWR_VALUE = "DWR_VALUE",
85
- METHOD = "METHOD",
86
- REQUEST = "REQUEST",
87
- URL_PARAMETER = "URL_PARAMETER",
88
- UNKNOWN = "UNKNOWN"
89
- }
90
- export declare enum ExclusionType {
91
- BODY = "BODY",
92
- COOKIE = "COOKIE",
93
- HEADER = "HEADER",
94
- PARAMETER = "PARAMETER",
95
- QUERYSTRING = "QUERYSTRING",
96
- URL = "URL"
97
- }
98
- export declare enum DataflowTag {
99
- XML_ENCODED = "XML_ENCODED",
100
- XML_DECODED = "XML_DECODED",
101
- HTML_ENCODED = "HTML_ENCODED",
102
- HTML_DECODED = "HTML_DECODED",
103
- URL_ENCODED = "URL_ENCODED",
104
- URL_DECODED = "URL_DECODED",
105
- CSS_ENCODED = "CSS_ENCODED",
106
- CSS_DECODED = "CSS_DECODED",
107
- BASE64_ENCODED = "BASE64_ENCODED",
108
- BASE64_DECODED = "BASE64_DECODED",
109
- JAVASCRIPT_ENCODED = "JAVASCRIPT_ENCODED",
110
- JAVASCRIPT_DECODED = "JAVASCRIPT_DECODED",
111
- JAVA_ENCODED = "JAVA_ENCODED",
112
- JAVA_DECODED = "JAVA_DECODED",
113
- CSV_ENCODED = "CSV_ENCODED",
114
- CSV_DECODED = "CSV_DECODED",
115
- SQL_ENCODED = "SQL_ENCODED",
116
- SQL_DECODED = "SQL_DECODED",
117
- LDAP_ENCODED = "LDAP_ENCODED",
118
- LDAP_DECODED = "LDAP_DECODED",
119
- XPATH_ENCODED = "XPATH_ENCODED",
120
- XPATH_DECODED = "XPATH_DECODED",
121
- OS_ENCODED = "OS_ENCODED",
122
- OS_DECODED = "OS_DECODED",
123
- VBSCRIPT_ENCODED = "VBSCRIPT_ENCODED",
124
- VBSCRIPT_DECODED = "VBSCRIPT_DECODED",
125
- POTENTIAL_SANITIZED = "POTENTIAL_SANITIZED",
126
- POTENTIAL_VALIDATED = "POTENTIAL_VALIDATED",
127
- NO_CONTROL_CHARS = "NO_CONTROL_CHARS",
128
- CUSTOM = "CUSTOM_CATCH_ALL",
129
- CUSTOM_ENCODED = "CUSTOM_ENCODED",
130
- CUSTOM_ENCODED_CMD_INJECTION = "CUSTOM_ENCODED_CMD_INJECTION",
131
- CUSTOM_ENCODED_EXPRESSION_LANGUAGE_INJECTION = "CUSTOM_ENCODED_EXPRESSION_LANGUAGE_INJECTION",
132
- CUSTOM_ENCODED_HEADER_INJECTION = "CUSTOM_ENCODED_HEADER_INJECTION",
133
- CUSTOM_ENCODED_HQL_INJECTION = "CUSTOM_ENCODED_HQL_INJECTION",
134
- CUSTOM_ENCODED_LDAP_INJECTION = "CUSTOM_ENCODED_LDAP_INJECTION",
135
- CUSTOM_ENCODED_LOG_INJECTION = "CUSTOM_ENCODED_LOG_INJECTION",
136
- CUSTOM_ENCODED_NOSQL_INJECTIOn = "CUSTOM_ENCODED_NOSQL_INJECTION",
137
- CUSTOM_ENCODED_PATH_TRAVERSAL = "CUSTOM_ENCODED_PATH_TRAVERSAL",
138
- CUSTOM_ENCODED_REDOS = "CUSTOM_ENCODED_REDOS",
139
- CUSTOM_ENCODED_REFLECTED_XSS = "CUSTOM_ENCODED_REFLECTED_XSS",
140
- CUSTOM_ENCODED_REFLECTION_INJECTION = "CUSTOM_ENCODED_REFLECTION_INJECTION",
141
- CUSTOM_ENCODED_SMTP_INJECTION = "CUSTOM_ENCODED_SMTP_INJECTION",
142
- CUSTOM_ENCODED_SQL_INJECTION = "CUSTOM_ENCODED_SQL_INJECTION",
143
- CUSTOM_ENCODED_SSRF = "CUSTOM_ENCODED_SSRF",
144
- CUSTOM_ENCODED_STORED_XSS = "CUSTOM_ENCODED_STORED_XSS",
145
- CUSTOM_ENCODED_TRUST_BOUNDARY_VIOLATION = "CUSTOM_ENCODED_TRUST_BOUNDARY_VIOLATION",
146
- CUSTOM_ENCODED_UNSAFE_CODE_EXECUTION = "CUSTOM_ENCODED_UNSAFE_CODE_EXECUTION",
147
- CUSTOM_ENCODED_UNSAFE_READLINE = "CUSTOM_ENCODED_UNSAFE_READLINE",
148
- CUSTOM_ENCODED_UNSAFE_XML_DECODE = "CUSTOM_ENCODED_UNSAFE_XML_DECODE",
149
- CUSTOM_ENCODED_UNTRUSTED_DESERIALIZATION = "CUSTOM_ENCODED_UNTRUSTED_DESERIALIZATION",
150
- CUSTOM_ENCODED_UNVALIDATED_FORWARD = "CUSTOM_ENCODED_UNVALIDATED_FORWARD",
151
- CUSTOM_ENCODED_UNVALIDATED_REDIRECT = "CUSTOM_ENCODED_UNVALIDATED_REDIRECT",
152
- CUSTOM_ENCODED_XPATH_INJECTION = "CUSTOM_ENCODED_XPATH_INJECTION",
153
- CUSTOM_ENCODED_XXE = "CUSTOM_ENCODED_XXE",
154
- CUSTOM_SECURITY_CONTROL_APPLIED = "CUSTOM_SECURITY_CONTROL_APPLIED",
155
- CUSTOM_VALIDATED = "CUSTOM_VALIDATED",
156
- CUSTOM_VALIDATED_CMD_INJECTION = "CUSTOM_VALIDATED_CMD_INJECTION",
157
- CUSTOM_VALIDATED_EXPRESSION_LANGUAGE_INJECTION = "CUSTOM_VALIDATED_EXPRESSION_LANGUAGE_INJECTION",
158
- CUSTOM_VALIDATED_HEADER_INJECTION = "CUSTOM_VALIDATED_HEADER_INJECTION",
159
- CUSTOM_VALIDATED_HQL_INJECTION = "CUSTOM_VALIDATED_HQL_INJECTION",
160
- CUSTOM_VALIDATED_LDAP_INJECTION = "CUSTOM_VALIDATED_LDAP_INJECTION",
161
- CUSTOM_VALIDATED_LOG_INJECTION = "CUSTOM_VALIDATED_LOG_INJECTION",
162
- CUSTOM_VALIDATED_NOSQL_INJECTION = "CUSTOM_VALIDATED_NOSQL_INJECTION",
163
- CUSTOM_VALIDATED_PATH_TRAVERSAL = "CUSTOM_VALIDATED_PATH_TRAVERSAL",
164
- CUSTOM_VALIDATED_REDOS = "CUSTOM_VALIDATED_REDOS",
165
- CUSTOM_VALIDATED_REFLECTED_XSS = "CUSTOM_VALIDATED_REFLECTED_XSS",
166
- CUSTOM_VALIDATED_REFLECTION_INJECTION = "CUSTOM_VALIDATED_REFLECTION_INJECTION",
167
- CUSTOM_VALIDATED_SMTP_INJECTION = "CUSTOM_VALIDATED_SMTP_INJECTION",
168
- CUSTOM_VALIDATED_SQL_INJECTION = "CUSTOM_VALIDATED_SQL_INJECTION",
169
- CUSTOM_VALIDATED_SSRF = "CUSTOM_VALIDATED_SSRF",
170
- CUSTOM_VALIDATED_STORED_XSS = "CUSTOM_VALIDATED_STORED_XSS",
171
- CUSTOM_VALIDATED_TRUST_BOUNDARY_VIOLATION = "CUSTOM_VALIDATED_TRUST_BOUNDARY_VIOLATION",
172
- CUSTOM_VALIDATED_UNSAFE_CODE_EXECUTION = "CUSTOM_VALIDATED_UNSAFE_CODE_EXECUTION",
173
- CUSTOM_VALIDATED_UNSAFE_READLINE = "CUSTOM_VALIDATED_UNSAFE_READLINE",
174
- CUSTOM_VALIDATED_UNSAFE_XML_DECODE = "CUSTOM_VALIDATED_UNSAFE_XML_DECODE",
175
- CUSTOM_VALIDATED_UNTRUSTED_DESERIALIZATION = "CUSTOM_VALIDATED_UNTRUSTED_DESERIALIZATION",
176
- CUSTOM_VALIDATED_UNVALIDATED_FORWARD = "CUSTOM_VALIDATED_UNVALIDATED_FORWARD",
177
- CUSTOM_VALIDATED_UNVALIDATED_REDIRECT = "CUSTOM_VALIDATED_UNVALIDATED_REDIRECT",
178
- CUSTOM_VALIDATED_XPATH_INJECTION = "CUSTOM_VALIDATED_XPATH_INJECTION",
179
- CUSTOM_VALIDATED_XXE = "CUSTOM_VALIDATED_XXE",
180
- NO_NEWLINES = "NO_NEWLINES",
181
- UNTRUSTED = "UNTRUSTED",
182
- CROSS_SITE = "CROSS_SITE",
183
- LIMITED_CHARS = "LIMITED_CHARS",
184
- ALPHANUM_SPACE_HYPHEN = "ALPHANUM_SPACE_HYPHEN",
185
- STRING_TYPE_CHECKED = "STRING_TYPE_CHECKED",
186
- DATABASE_WRITE = "DATABASE_WRITE",
187
- HEADER = "HEADER",
188
- COOKIE = "COOKIE",
189
- WEAK_URL_ENCODED = "WEAK_URL_ENCODED"
190
- }
191
- export declare const BLOCKING_MODES: readonly ["block", "block_at_perimeter"];
192
- export declare const FS_METHODS: readonly [{
193
- readonly name: "access";
194
- readonly promises: true;
195
- readonly sync: true;
196
- readonly indices: readonly [0];
197
- }, {
198
- readonly name: "appendFile";
199
- readonly promises: true;
200
- readonly sync: true;
201
- readonly indices: readonly [0];
202
- }, {
203
- readonly name: "chmod";
204
- readonly promises: true;
205
- readonly sync: true;
206
- readonly indices: readonly [0];
207
- }, {
208
- readonly name: "chown";
209
- readonly promises: true;
210
- readonly sync: true;
211
- readonly indices: readonly [0];
212
- }, {
213
- readonly name: "copyFile";
214
- readonly promises: true;
215
- readonly sync: true;
216
- readonly indices: readonly [0, 1];
217
- }, {
218
- readonly name: "cp";
219
- readonly promises: true;
220
- readonly sync: true;
221
- readonly indices: readonly [0, 1];
222
- }, {
223
- readonly name: "createReadStream";
224
- readonly promises: false;
225
- readonly sync: false;
226
- readonly indices: readonly [0];
227
- }, {
228
- readonly name: "createWriteStream";
229
- readonly promises: false;
230
- readonly sync: false;
231
- readonly indices: readonly [0];
232
- }, {
233
- readonly name: "exists";
234
- readonly promises: false;
235
- readonly sync: true;
236
- readonly indices: readonly [0];
237
- }, {
238
- readonly name: "glob";
239
- readonly promises: true;
240
- readonly sync: true;
241
- readonly indices: readonly [0];
242
- }, {
243
- readonly name: "lchmod";
244
- readonly promises: true;
245
- readonly sync: true;
246
- readonly indices: readonly [0];
247
- }, {
248
- readonly name: "lchown";
249
- readonly promises: true;
250
- readonly sync: true;
251
- readonly indices: readonly [0];
252
- }, {
253
- readonly name: "link";
254
- readonly promises: true;
255
- readonly sync: true;
256
- readonly indices: readonly [0];
257
- }, {
258
- readonly name: "lstat";
259
- readonly promises: true;
260
- readonly sync: true;
261
- readonly indices: readonly [0];
262
- }, {
263
- readonly name: "lutimes";
264
- readonly promises: true;
265
- readonly sync: true;
266
- readonly indices: readonly [0];
267
- }, {
268
- readonly name: "mkdir";
269
- readonly promises: true;
270
- readonly sync: true;
271
- readonly indices: readonly [0];
272
- }, {
273
- readonly name: "mkdtemp";
274
- readonly promises: true;
275
- readonly sync: true;
276
- readonly indices: readonly [0];
277
- }, {
278
- readonly name: "open";
279
- readonly promises: true;
280
- readonly sync: true;
281
- readonly indices: readonly [0];
282
- }, {
283
- readonly name: "openAsBlob";
284
- readonly promises: false;
285
- readonly sync: false;
286
- readonly indices: readonly [0];
287
- }, {
288
- readonly name: "opendir";
289
- readonly promises: true;
290
- readonly sync: true;
291
- readonly indices: readonly [0];
292
- }, {
293
- readonly name: "readdir";
294
- readonly promises: true;
295
- readonly sync: true;
296
- readonly indices: readonly [0];
297
- }, {
298
- readonly name: "readFile";
299
- readonly promises: true;
300
- readonly sync: true;
301
- readonly indices: readonly [0];
302
- }, {
303
- readonly name: "readlink";
304
- readonly promises: true;
305
- readonly sync: true;
306
- readonly indices: readonly [0];
307
- }, {
308
- readonly name: "realpath";
309
- readonly promises: true;
310
- readonly sync: true;
311
- readonly indices: readonly [0];
312
- }, {
313
- readonly name: "rename";
314
- readonly promises: true;
315
- readonly sync: true;
316
- readonly indices: readonly [0, 1];
317
- }, {
318
- readonly name: "rmdir";
319
- readonly promises: true;
320
- readonly sync: true;
321
- readonly indices: readonly [0];
322
- }, {
323
- readonly name: "rm";
324
- readonly promises: true;
325
- readonly sync: true;
326
- readonly indices: readonly [0];
327
- }, {
328
- readonly name: "stat";
329
- readonly promises: true;
330
- readonly sync: true;
331
- readonly indices: readonly [0];
332
- }, {
333
- readonly name: "statfs";
334
- readonly promises: true;
335
- readonly sync: true;
336
- readonly indices: readonly [0];
337
- }, {
338
- readonly name: "symlink";
339
- readonly promises: true;
340
- readonly sync: true;
341
- readonly indices: readonly [0, 1];
342
- }, {
343
- readonly name: "truncate";
344
- readonly promises: true;
345
- readonly sync: true;
346
- readonly indices: readonly [0];
347
- }, {
348
- readonly name: "unlink";
349
- readonly promises: true;
350
- readonly sync: true;
351
- readonly indices: readonly [0];
352
- }, {
353
- readonly name: "unwatchFile";
354
- readonly promises: false;
355
- readonly sync: false;
356
- readonly indices: readonly [0];
357
- }, {
358
- readonly name: "utimes";
359
- readonly promises: true;
360
- readonly sync: true;
361
- readonly indices: readonly [0];
362
- }, {
363
- readonly name: "watch";
364
- readonly promises: true;
365
- readonly sync: false;
366
- readonly indices: readonly [0];
367
- }, {
368
- readonly name: "watchFile";
369
- readonly promises: false;
370
- readonly sync: false;
371
- readonly indices: readonly [0];
372
- }, {
373
- readonly name: "writeFile";
374
- readonly promises: true;
375
- readonly sync: true;
376
- readonly indices: readonly [0];
377
- }];
378
- export declare enum agentLibIDListTypes {
379
- MONGO_SLEEP = "MONGO-SLEEP",
380
- TRUE_CLAUSE_1 = "TRUE-CLAUSE-1"
381
- }
382
- export declare const symbols: {
383
- readonly kMetrics: symbol;
384
- };
385
- //# sourceMappingURL=constants.d.ts.map
@@ -1,270 +0,0 @@
1
- "use strict";
2
- /*
3
- * Copyright: 2025 Contrast Security, Inc
4
- * Contact: support@contrastsecurity.com
5
- * License: Commercial
6
-
7
- * NOTICE: This Software and the patented inventions embodied within may only be
8
- * used as part of Contrast Security’s commercial offerings. Even though it is
9
- * made available through public repositories, use of this Software is subject to
10
- * the applicable End User Licensing Agreement found at
11
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
12
- * between Contrast Security and the End User. The Software may not be reverse
13
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
14
- * way not consistent with the End User License Agreement.
15
- */
16
- Object.defineProperty(exports, "__esModule", { value: true });
17
- exports.symbols = exports.agentLibIDListTypes = exports.FS_METHODS = exports.BLOCKING_MODES = exports.DataflowTag = exports.ExclusionType = exports.InputType = exports.SessionConfigurationRule = exports.ResponseScanningRule = exports.Rule = exports.ProtectRuleMode = exports.Event = void 0;
18
- var Event;
19
- (function (Event) {
20
- // lifecycle
21
- Event["RESPONSE_FINISH"] = "response-finish";
22
- Event["ROUTE_COVERAGE_DISCOVERY_FINISHED"] = "route-coverage-discovery-finished";
23
- // reports
24
- Event["ARCHITECTURE_COMPONENT"] = "architecture-component";
25
- Event["ASSESS_DATAFLOW_FINDING"] = "assess-dataflow-findings";
26
- Event["ASSESS_DATAFLOW_SAFE_POSITIVE"] = "assess-dataflow-safe-positive";
27
- Event["ASSESS_RESPONSE_SCANNING_FINDING"] = "assess-response-scanning-findings";
28
- Event["ASSESS_SESSION_CONFIGURATION_FINDING"] = "assess-session-configuration-findings";
29
- Event["ASSESS_CRYPTO_ANALYSIS_FINDING"] = "assess-crypto-analysis-finding";
30
- Event["LIBRARY"] = "library";
31
- Event["LIBRARY_USAGE"] = "library-usage";
32
- Event["PROTECT"] = "protect";
33
- Event["ROUTE_COVERAGE_OBSERVATION"] = "route-coverage-observation";
34
- // state changes
35
- Event["SERVER_SETTINGS_UPDATE"] = "server-settings-update";
36
- Event["UNINSTALL"] = "uninstall";
37
- // telemetry
38
- Event["UNSUPPORTED_LIBRARY"] = "unsupported-library";
39
- })(Event || (exports.Event = Event = {}));
40
- var ProtectRuleMode;
41
- (function (ProtectRuleMode) {
42
- ProtectRuleMode["OFF"] = "off";
43
- ProtectRuleMode["MONITOR"] = "monitor";
44
- ProtectRuleMode["BLOCK"] = "block";
45
- ProtectRuleMode["BLOCK_AT_PERIMETER"] = "block_at_perimeter";
46
- })(ProtectRuleMode || (exports.ProtectRuleMode = ProtectRuleMode = {}));
47
- var Rule;
48
- (function (Rule) {
49
- Rule["BOT_BLOCKER"] = "bot-blocker";
50
- Rule["CMD_INJECTION"] = "cmd-injection";
51
- Rule["CMD_INJECTION_COMMAND_BACKDOORS"] = "cmd-injection-command-backdoors";
52
- Rule["CMD_INJECTION_SEMANTIC_CHAINED_COMMANDS"] = "cmd-injection-semantic-chained-commands";
53
- Rule["CMD_INJECTION_SEMANTIC_DANGEROUS_PATHS"] = "cmd-injection-semantic-dangerous-paths";
54
- Rule["CRYPTO_BAD_MAC"] = "crypto-bad-mac";
55
- Rule["CRYPTO_BAD_CIPHERS"] = "crypto-bad-ciphers";
56
- Rule["CRYPTO_WEAK_RANDOMNESS"] = "crypto-weak-randomness";
57
- Rule["IP_DENYLIST"] = "ip-denylist";
58
- Rule["METHOD_TAMPERING"] = "method-tampering";
59
- Rule["NOSQL_INJECTION"] = "nosql-injection";
60
- Rule["NOSQL_INJECTION_MONGO"] = "nosql-injection-mongo";
61
- Rule["PATH_TRAVERSAL"] = "path-traversal";
62
- Rule["PATH_TRAVERSAL_SEMANTIC_FILE_SECURITY_BYPASS"] = "path-traversal-semantic-file-security-bypass";
63
- Rule["REFLECTED_XSS"] = "reflected-xss";
64
- Rule["SQL_INJECTION"] = "sql-injection";
65
- Rule["SSJS_INJECTION"] = "ssjs-injection";
66
- Rule["SSRF"] = "ssrf";
67
- Rule["UNSAFE_CODE_EXECUTION"] = "unsafe-code-execution";
68
- Rule["UNSAFE_FILE_UPLOAD"] = "unsafe-file-upload";
69
- Rule["UNTRUSTED_DESERIALIZATION"] = "untrusted-deserialization";
70
- Rule["VIRTUAL_PATCH"] = "virtual-patch";
71
- Rule["XXE"] = "xxe";
72
- Rule["UNVALIDATED_REDIRECT"] = "unvalidated-redirect";
73
- })(Rule || (exports.Rule = Rule = {}));
74
- var ResponseScanningRule;
75
- (function (ResponseScanningRule) {
76
- ResponseScanningRule["AUTOCOMPLETE_MISSING"] = "autocomplete-missing";
77
- ResponseScanningRule["CACHE_CONTROLS_MISSING"] = "cache-controls-missing";
78
- ResponseScanningRule["CLICKJACKING_CONTROL_MISSING"] = "clickjacking-control-missing";
79
- ResponseScanningRule["PARAMETER_POLLUTION"] = "parameter-pollution";
80
- ResponseScanningRule["CSP_HEADER_MISSING"] = "csp-header-missing";
81
- ResponseScanningRule["CSP_HEADER_INSECURE"] = "csp-header-insecure";
82
- ResponseScanningRule["HSTS_HEADER_MISSING"] = "hsts-header-missing";
83
- ResponseScanningRule["X_POWERED_BY_HEADER"] = "x-powered-by-header";
84
- ResponseScanningRule["XCONTENTTYPE_HEADER_MISSING"] = "xcontenttype-header-missing";
85
- ResponseScanningRule["XXSPROTECTION_HEADER_DISABLED"] = "xxssprotection-header-disabled";
86
- })(ResponseScanningRule || (exports.ResponseScanningRule = ResponseScanningRule = {}));
87
- var SessionConfigurationRule;
88
- (function (SessionConfigurationRule) {
89
- SessionConfigurationRule["HTTPONLY"] = "httponly";
90
- SessionConfigurationRule["SECURE_FLAG_MISSING"] = "secure-flag-missing";
91
- })(SessionConfigurationRule || (exports.SessionConfigurationRule = SessionConfigurationRule = {}));
92
- var InputType;
93
- (function (InputType) {
94
- InputType["UNDEFINED_TYPE"] = "UNDEFINED_TYPE";
95
- InputType["BODY"] = "BODY";
96
- InputType["COOKIE_NAME"] = "COOKIE_NAME";
97
- InputType["COOKIE_VALUE"] = "COOKIE_VALUE";
98
- InputType["HEADER"] = "HEADER";
99
- InputType["PARAMETER_NAME"] = "PARAMETER_NAME";
100
- InputType["PARAMETER_VALUE"] = "PARAMETER_VALUE";
101
- InputType["QUERYSTRING"] = "QUERYSTRING";
102
- InputType["URI"] = "URI";
103
- InputType["SOCKET"] = "SOCKET";
104
- InputType["JSON_VALUE"] = "JSON_VALUE";
105
- InputType["JSON_ARRAYED_VALUE"] = "JSON_ARRAYED_VALUE";
106
- InputType["MULTIPART_CONTENT_TYPE"] = "MULTIPART_CONTENT_TYPE";
107
- InputType["MULTIPART_VALUE"] = "MULTIPART_VALUE";
108
- InputType["MULTIPART_FIELD_NAME"] = "MULTIPART_FIELD_NAME";
109
- InputType["MULTIPART_NAME"] = "MULTIPART_NAME";
110
- InputType["XML_VALUE"] = "XML_VALUE";
111
- InputType["DWR_VALUE"] = "DWR_VALUE";
112
- InputType["METHOD"] = "METHOD";
113
- InputType["REQUEST"] = "REQUEST";
114
- InputType["URL_PARAMETER"] = "URL_PARAMETER";
115
- InputType["UNKNOWN"] = "UNKNOWN";
116
- })(InputType || (exports.InputType = InputType = {}));
117
- var ExclusionType;
118
- (function (ExclusionType) {
119
- ExclusionType["BODY"] = "BODY";
120
- ExclusionType["COOKIE"] = "COOKIE";
121
- ExclusionType["HEADER"] = "HEADER";
122
- ExclusionType["PARAMETER"] = "PARAMETER";
123
- ExclusionType["QUERYSTRING"] = "QUERYSTRING";
124
- ExclusionType["URL"] = "URL";
125
- })(ExclusionType || (exports.ExclusionType = ExclusionType = {}));
126
- var DataflowTag;
127
- (function (DataflowTag) {
128
- DataflowTag["XML_ENCODED"] = "XML_ENCODED";
129
- DataflowTag["XML_DECODED"] = "XML_DECODED";
130
- DataflowTag["HTML_ENCODED"] = "HTML_ENCODED";
131
- DataflowTag["HTML_DECODED"] = "HTML_DECODED";
132
- DataflowTag["URL_ENCODED"] = "URL_ENCODED";
133
- DataflowTag["URL_DECODED"] = "URL_DECODED";
134
- DataflowTag["CSS_ENCODED"] = "CSS_ENCODED";
135
- DataflowTag["CSS_DECODED"] = "CSS_DECODED";
136
- DataflowTag["BASE64_ENCODED"] = "BASE64_ENCODED";
137
- DataflowTag["BASE64_DECODED"] = "BASE64_DECODED";
138
- DataflowTag["JAVASCRIPT_ENCODED"] = "JAVASCRIPT_ENCODED";
139
- DataflowTag["JAVASCRIPT_DECODED"] = "JAVASCRIPT_DECODED";
140
- DataflowTag["JAVA_ENCODED"] = "JAVA_ENCODED";
141
- DataflowTag["JAVA_DECODED"] = "JAVA_DECODED";
142
- DataflowTag["CSV_ENCODED"] = "CSV_ENCODED";
143
- DataflowTag["CSV_DECODED"] = "CSV_DECODED";
144
- DataflowTag["SQL_ENCODED"] = "SQL_ENCODED";
145
- DataflowTag["SQL_DECODED"] = "SQL_DECODED";
146
- DataflowTag["LDAP_ENCODED"] = "LDAP_ENCODED";
147
- DataflowTag["LDAP_DECODED"] = "LDAP_DECODED";
148
- DataflowTag["XPATH_ENCODED"] = "XPATH_ENCODED";
149
- DataflowTag["XPATH_DECODED"] = "XPATH_DECODED";
150
- DataflowTag["OS_ENCODED"] = "OS_ENCODED";
151
- DataflowTag["OS_DECODED"] = "OS_DECODED";
152
- DataflowTag["VBSCRIPT_ENCODED"] = "VBSCRIPT_ENCODED";
153
- DataflowTag["VBSCRIPT_DECODED"] = "VBSCRIPT_DECODED";
154
- DataflowTag["POTENTIAL_SANITIZED"] = "POTENTIAL_SANITIZED";
155
- DataflowTag["POTENTIAL_VALIDATED"] = "POTENTIAL_VALIDATED";
156
- DataflowTag["NO_CONTROL_CHARS"] = "NO_CONTROL_CHARS";
157
- DataflowTag["CUSTOM"] = "CUSTOM_CATCH_ALL";
158
- // custom encoded/validated tags, only for data flow rules
159
- DataflowTag["CUSTOM_ENCODED"] = "CUSTOM_ENCODED";
160
- DataflowTag["CUSTOM_ENCODED_CMD_INJECTION"] = "CUSTOM_ENCODED_CMD_INJECTION";
161
- DataflowTag["CUSTOM_ENCODED_EXPRESSION_LANGUAGE_INJECTION"] = "CUSTOM_ENCODED_EXPRESSION_LANGUAGE_INJECTION";
162
- DataflowTag["CUSTOM_ENCODED_HEADER_INJECTION"] = "CUSTOM_ENCODED_HEADER_INJECTION";
163
- DataflowTag["CUSTOM_ENCODED_HQL_INJECTION"] = "CUSTOM_ENCODED_HQL_INJECTION";
164
- DataflowTag["CUSTOM_ENCODED_LDAP_INJECTION"] = "CUSTOM_ENCODED_LDAP_INJECTION";
165
- DataflowTag["CUSTOM_ENCODED_LOG_INJECTION"] = "CUSTOM_ENCODED_LOG_INJECTION";
166
- DataflowTag["CUSTOM_ENCODED_NOSQL_INJECTIOn"] = "CUSTOM_ENCODED_NOSQL_INJECTION";
167
- DataflowTag["CUSTOM_ENCODED_PATH_TRAVERSAL"] = "CUSTOM_ENCODED_PATH_TRAVERSAL";
168
- DataflowTag["CUSTOM_ENCODED_REDOS"] = "CUSTOM_ENCODED_REDOS";
169
- DataflowTag["CUSTOM_ENCODED_REFLECTED_XSS"] = "CUSTOM_ENCODED_REFLECTED_XSS";
170
- DataflowTag["CUSTOM_ENCODED_REFLECTION_INJECTION"] = "CUSTOM_ENCODED_REFLECTION_INJECTION";
171
- DataflowTag["CUSTOM_ENCODED_SMTP_INJECTION"] = "CUSTOM_ENCODED_SMTP_INJECTION";
172
- DataflowTag["CUSTOM_ENCODED_SQL_INJECTION"] = "CUSTOM_ENCODED_SQL_INJECTION";
173
- DataflowTag["CUSTOM_ENCODED_SSRF"] = "CUSTOM_ENCODED_SSRF";
174
- DataflowTag["CUSTOM_ENCODED_STORED_XSS"] = "CUSTOM_ENCODED_STORED_XSS";
175
- DataflowTag["CUSTOM_ENCODED_TRUST_BOUNDARY_VIOLATION"] = "CUSTOM_ENCODED_TRUST_BOUNDARY_VIOLATION";
176
- DataflowTag["CUSTOM_ENCODED_UNSAFE_CODE_EXECUTION"] = "CUSTOM_ENCODED_UNSAFE_CODE_EXECUTION";
177
- DataflowTag["CUSTOM_ENCODED_UNSAFE_READLINE"] = "CUSTOM_ENCODED_UNSAFE_READLINE";
178
- DataflowTag["CUSTOM_ENCODED_UNSAFE_XML_DECODE"] = "CUSTOM_ENCODED_UNSAFE_XML_DECODE";
179
- DataflowTag["CUSTOM_ENCODED_UNTRUSTED_DESERIALIZATION"] = "CUSTOM_ENCODED_UNTRUSTED_DESERIALIZATION";
180
- DataflowTag["CUSTOM_ENCODED_UNVALIDATED_FORWARD"] = "CUSTOM_ENCODED_UNVALIDATED_FORWARD";
181
- DataflowTag["CUSTOM_ENCODED_UNVALIDATED_REDIRECT"] = "CUSTOM_ENCODED_UNVALIDATED_REDIRECT";
182
- DataflowTag["CUSTOM_ENCODED_XPATH_INJECTION"] = "CUSTOM_ENCODED_XPATH_INJECTION";
183
- DataflowTag["CUSTOM_ENCODED_XXE"] = "CUSTOM_ENCODED_XXE";
184
- DataflowTag["CUSTOM_SECURITY_CONTROL_APPLIED"] = "CUSTOM_SECURITY_CONTROL_APPLIED";
185
- DataflowTag["CUSTOM_VALIDATED"] = "CUSTOM_VALIDATED";
186
- DataflowTag["CUSTOM_VALIDATED_CMD_INJECTION"] = "CUSTOM_VALIDATED_CMD_INJECTION";
187
- DataflowTag["CUSTOM_VALIDATED_EXPRESSION_LANGUAGE_INJECTION"] = "CUSTOM_VALIDATED_EXPRESSION_LANGUAGE_INJECTION";
188
- DataflowTag["CUSTOM_VALIDATED_HEADER_INJECTION"] = "CUSTOM_VALIDATED_HEADER_INJECTION";
189
- DataflowTag["CUSTOM_VALIDATED_HQL_INJECTION"] = "CUSTOM_VALIDATED_HQL_INJECTION";
190
- DataflowTag["CUSTOM_VALIDATED_LDAP_INJECTION"] = "CUSTOM_VALIDATED_LDAP_INJECTION";
191
- DataflowTag["CUSTOM_VALIDATED_LOG_INJECTION"] = "CUSTOM_VALIDATED_LOG_INJECTION";
192
- DataflowTag["CUSTOM_VALIDATED_NOSQL_INJECTION"] = "CUSTOM_VALIDATED_NOSQL_INJECTION";
193
- DataflowTag["CUSTOM_VALIDATED_PATH_TRAVERSAL"] = "CUSTOM_VALIDATED_PATH_TRAVERSAL";
194
- DataflowTag["CUSTOM_VALIDATED_REDOS"] = "CUSTOM_VALIDATED_REDOS";
195
- DataflowTag["CUSTOM_VALIDATED_REFLECTED_XSS"] = "CUSTOM_VALIDATED_REFLECTED_XSS";
196
- DataflowTag["CUSTOM_VALIDATED_REFLECTION_INJECTION"] = "CUSTOM_VALIDATED_REFLECTION_INJECTION";
197
- DataflowTag["CUSTOM_VALIDATED_SMTP_INJECTION"] = "CUSTOM_VALIDATED_SMTP_INJECTION";
198
- DataflowTag["CUSTOM_VALIDATED_SQL_INJECTION"] = "CUSTOM_VALIDATED_SQL_INJECTION";
199
- DataflowTag["CUSTOM_VALIDATED_SSRF"] = "CUSTOM_VALIDATED_SSRF";
200
- DataflowTag["CUSTOM_VALIDATED_STORED_XSS"] = "CUSTOM_VALIDATED_STORED_XSS";
201
- DataflowTag["CUSTOM_VALIDATED_TRUST_BOUNDARY_VIOLATION"] = "CUSTOM_VALIDATED_TRUST_BOUNDARY_VIOLATION";
202
- DataflowTag["CUSTOM_VALIDATED_UNSAFE_CODE_EXECUTION"] = "CUSTOM_VALIDATED_UNSAFE_CODE_EXECUTION";
203
- DataflowTag["CUSTOM_VALIDATED_UNSAFE_READLINE"] = "CUSTOM_VALIDATED_UNSAFE_READLINE";
204
- DataflowTag["CUSTOM_VALIDATED_UNSAFE_XML_DECODE"] = "CUSTOM_VALIDATED_UNSAFE_XML_DECODE";
205
- DataflowTag["CUSTOM_VALIDATED_UNTRUSTED_DESERIALIZATION"] = "CUSTOM_VALIDATED_UNTRUSTED_DESERIALIZATION";
206
- DataflowTag["CUSTOM_VALIDATED_UNVALIDATED_FORWARD"] = "CUSTOM_VALIDATED_UNVALIDATED_FORWARD";
207
- DataflowTag["CUSTOM_VALIDATED_UNVALIDATED_REDIRECT"] = "CUSTOM_VALIDATED_UNVALIDATED_REDIRECT";
208
- DataflowTag["CUSTOM_VALIDATED_XPATH_INJECTION"] = "CUSTOM_VALIDATED_XPATH_INJECTION";
209
- DataflowTag["CUSTOM_VALIDATED_XXE"] = "CUSTOM_VALIDATED_XXE";
210
- // tracked_string range tags
211
- DataflowTag["NO_NEWLINES"] = "NO_NEWLINES";
212
- DataflowTag["UNTRUSTED"] = "UNTRUSTED";
213
- DataflowTag["CROSS_SITE"] = "CROSS_SITE";
214
- DataflowTag["LIMITED_CHARS"] = "LIMITED_CHARS";
215
- DataflowTag["ALPHANUM_SPACE_HYPHEN"] = "ALPHANUM_SPACE_HYPHEN";
216
- DataflowTag["STRING_TYPE_CHECKED"] = "STRING_TYPE_CHECKED";
217
- DataflowTag["DATABASE_WRITE"] = "DATABASE_WRITE";
218
- DataflowTag["HEADER"] = "HEADER";
219
- DataflowTag["COOKIE"] = "COOKIE";
220
- DataflowTag["WEAK_URL_ENCODED"] = "WEAK_URL_ENCODED";
221
- })(DataflowTag || (exports.DataflowTag = DataflowTag = {}));
222
- exports.BLOCKING_MODES = ['block', 'block_at_perimeter'];
223
- exports.FS_METHODS = [
224
- { name: 'access', promises: true, sync: true, indices: [0] },
225
- { name: 'appendFile', promises: true, sync: true, indices: [0] },
226
- { name: 'chmod', promises: true, sync: true, indices: [0] },
227
- { name: 'chown', promises: true, sync: true, indices: [0] },
228
- { name: 'copyFile', promises: true, sync: true, indices: [0, 1] },
229
- { name: 'cp', promises: true, sync: true, indices: [0, 1] },
230
- { name: 'createReadStream', promises: false, sync: false, indices: [0] },
231
- { name: 'createWriteStream', promises: false, sync: false, indices: [0] },
232
- { name: 'exists', promises: false, sync: true, indices: [0] },
233
- { name: 'glob', promises: true, sync: true, indices: [0] },
234
- { name: 'lchmod', promises: true, sync: true, indices: [0] },
235
- { name: 'lchown', promises: true, sync: true, indices: [0] },
236
- { name: 'link', promises: true, sync: true, indices: [0] },
237
- { name: 'lstat', promises: true, sync: true, indices: [0] },
238
- { name: 'lutimes', promises: true, sync: true, indices: [0] },
239
- { name: 'mkdir', promises: true, sync: true, indices: [0] },
240
- { name: 'mkdtemp', promises: true, sync: true, indices: [0] },
241
- { name: 'open', promises: true, sync: true, indices: [0] },
242
- { name: 'openAsBlob', promises: false, sync: false, indices: [0] },
243
- { name: 'opendir', promises: true, sync: true, indices: [0] },
244
- { name: 'readdir', promises: true, sync: true, indices: [0] },
245
- { name: 'readFile', promises: true, sync: true, indices: [0] },
246
- { name: 'readlink', promises: true, sync: true, indices: [0] },
247
- { name: 'realpath', promises: true, sync: true, indices: [0] },
248
- { name: 'rename', promises: true, sync: true, indices: [0, 1] },
249
- { name: 'rmdir', promises: true, sync: true, indices: [0] },
250
- { name: 'rm', promises: true, sync: true, indices: [0] },
251
- { name: 'stat', promises: true, sync: true, indices: [0] },
252
- { name: 'statfs', promises: true, sync: true, indices: [0] },
253
- { name: 'symlink', promises: true, sync: true, indices: [0, 1] },
254
- { name: 'truncate', promises: true, sync: true, indices: [0] },
255
- { name: 'unlink', promises: true, sync: true, indices: [0] },
256
- { name: 'unwatchFile', promises: false, sync: false, indices: [0] },
257
- { name: 'utimes', promises: true, sync: true, indices: [0] },
258
- { name: 'watch', promises: true, sync: false, indices: [0] },
259
- { name: 'watchFile', promises: false, sync: false, indices: [0] },
260
- { name: 'writeFile', promises: true, sync: true, indices: [0] },
261
- ];
262
- var agentLibIDListTypes;
263
- (function (agentLibIDListTypes) {
264
- agentLibIDListTypes["MONGO_SLEEP"] = "MONGO-SLEEP";
265
- agentLibIDListTypes["TRUE_CLAUSE_1"] = "TRUE-CLAUSE-1";
266
- })(agentLibIDListTypes || (exports.agentLibIDListTypes = agentLibIDListTypes = {}));
267
- exports.symbols = {
268
- kMetrics: Symbol('contrast.metrics'),
269
- };
270
- //# sourceMappingURL=constants.js.map