@contrast/agent-bundle 5.40.0 → 5.42.0

package/node_modules/@contrast/agentify/lib/sources.js

@@ -1,95 +0,0 @@
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-
-'use strict';
-
-const { EventEmitter } = require('events');
-const onFinished = require('on-finished');
-const { Event, primordials: { StringPrototypeToLowerCase } } = require('@contrast/common');
-
-module.exports = function(core) {
-  const {
-    messages,
-    instrumentation: { instrument },
-    scopes: { sources: sourcesStorage }
-  } = core;
-
-  const _hooks = new EventEmitter();
-
-  function aroundHook(serverType) {
-    return function around(next, data) {
-      const { args: [event, req, res] } = data;
-
-      if (event !== 'request') {
-        if (event === 'listening') {
-          // take a snapshot of Perf.all at this point. this will get logged
-          // at some point on the perf interval timer.
-          core.Perf.mark('listening');
-          messages.emit(Event.SERVER_LISTENING, { type: serverType, server: data.obj });
-        }
-        return next();
-      }
-      // let's count requests.
-      core.Perf.requestCount += 1;
-
-      const store = {
-        sourceInfo: {
-          port: req.socket.address?.()?.port || 0,
-          protocol: serverType === 'http' ? 'http' : 'https',
-          serverType,
-          time: Date.now(),
-          method: StringPrototypeToLowerCase.call(req.method),
-        }
-      };
-
-      if (_hooks._events.onSource) {
-        _hooks.emit('onSource', {
-          // future: non-http sources will have their own type
-          sourceType: 'HTTP',
-          store,
-          incomingMessage: req,
-          serverResponse: res,
-        });
-      }
-
-      onFinished(res, (/* err, req */) => {
-        messages.emit(Event.RESPONSE_FINISH, store);
-      });
-
-      return sourcesStorage.run(store, next);
-    };
-  }
-
-  function install() {
-    ['http', 'https', 'spdy', 'http2'].forEach((moduleName) => {
-      instrument({
-        moduleName,
-        patchObjects: [{
-          name: 'Server.prototype',
-          methods: ['emit'],
-          patchType: 'sources',
-          around: aroundHook(moduleName)
-        }]
-      });
-    });
-  }
-  return core.sources = {
-    install,
-    addHook(name, handler) {
-      if (name === 'onSource') _hooks.on(name, handler);
-    },
-    aroundHook
-  };
-};

package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/LICENSE

@@ -1,12 +0,0 @@
-Copyright: 2025 Contrast Security, Inc
-Contact: support@contrastsecurity.com
-License: Commercial
-
-NOTICE: This Software and the patented inventions embodied within may only be
-used as part of Contrast Security’s commercial offerings. Even though it is
-made available through public repositories, use of this Software is subject to
-the applicable End User Licensing Agreement found at
-https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
-between Contrast Security and the End User. The Software may not be reverse
-engineered, modified, repackaged, sold, redistributed or otherwise used in a
-way not consistent with the End User License Agreement.

package/node_modules/@contrast/sec-obs/node_modules/@contrast/common/lib/constants.d.ts

@@ -1,385 +0,0 @@
-export declare enum Event {
-    RESPONSE_FINISH = "response-finish",
-    ROUTE_COVERAGE_DISCOVERY_FINISHED = "route-coverage-discovery-finished",
-    ARCHITECTURE_COMPONENT = "architecture-component",
-    ASSESS_DATAFLOW_FINDING = "assess-dataflow-findings",
-    ASSESS_DATAFLOW_SAFE_POSITIVE = "assess-dataflow-safe-positive",
-    ASSESS_RESPONSE_SCANNING_FINDING = "assess-response-scanning-findings",
-    ASSESS_SESSION_CONFIGURATION_FINDING = "assess-session-configuration-findings",
-    ASSESS_CRYPTO_ANALYSIS_FINDING = "assess-crypto-analysis-finding",
-    LIBRARY = "library",
-    LIBRARY_USAGE = "library-usage",
-    PROTECT = "protect",
-    ROUTE_COVERAGE_OBSERVATION = "route-coverage-observation",
-    SERVER_SETTINGS_UPDATE = "server-settings-update",// UI remote settings updates
-    UNINSTALL = "uninstall",// disable all components/features
-    UNSUPPORTED_LIBRARY = "unsupported-library"
-}
-export declare enum ProtectRuleMode {
-    OFF = "off",
-    MONITOR = "monitor",
-    BLOCK = "block",
-    BLOCK_AT_PERIMETER = "block_at_perimeter"
-}
-export declare enum Rule {
-    BOT_BLOCKER = "bot-blocker",
-    CMD_INJECTION = "cmd-injection",
-    CMD_INJECTION_COMMAND_BACKDOORS = "cmd-injection-command-backdoors",
-    CMD_INJECTION_SEMANTIC_CHAINED_COMMANDS = "cmd-injection-semantic-chained-commands",
-    CMD_INJECTION_SEMANTIC_DANGEROUS_PATHS = "cmd-injection-semantic-dangerous-paths",
-    CRYPTO_BAD_MAC = "crypto-bad-mac",
-    CRYPTO_BAD_CIPHERS = "crypto-bad-ciphers",
-    CRYPTO_WEAK_RANDOMNESS = "crypto-weak-randomness",
-    IP_DENYLIST = "ip-denylist",
-    METHOD_TAMPERING = "method-tampering",
-    NOSQL_INJECTION = "nosql-injection",
-    NOSQL_INJECTION_MONGO = "nosql-injection-mongo",
-    PATH_TRAVERSAL = "path-traversal",
-    PATH_TRAVERSAL_SEMANTIC_FILE_SECURITY_BYPASS = "path-traversal-semantic-file-security-bypass",
-    REFLECTED_XSS = "reflected-xss",
-    SQL_INJECTION = "sql-injection",
-    SSJS_INJECTION = "ssjs-injection",
-    SSRF = "ssrf",
-    UNSAFE_CODE_EXECUTION = "unsafe-code-execution",
-    UNSAFE_FILE_UPLOAD = "unsafe-file-upload",
-    UNTRUSTED_DESERIALIZATION = "untrusted-deserialization",
-    VIRTUAL_PATCH = "virtual-patch",
-    XXE = "xxe",
-    UNVALIDATED_REDIRECT = "unvalidated-redirect"
-}
-export declare enum ResponseScanningRule {
-    AUTOCOMPLETE_MISSING = "autocomplete-missing",
-    CACHE_CONTROLS_MISSING = "cache-controls-missing",
-    CLICKJACKING_CONTROL_MISSING = "clickjacking-control-missing",
-    PARAMETER_POLLUTION = "parameter-pollution",
-    CSP_HEADER_MISSING = "csp-header-missing",
-    CSP_HEADER_INSECURE = "csp-header-insecure",
-    HSTS_HEADER_MISSING = "hsts-header-missing",
-    X_POWERED_BY_HEADER = "x-powered-by-header",
-    XCONTENTTYPE_HEADER_MISSING = "xcontenttype-header-missing",
-    XXSPROTECTION_HEADER_DISABLED = "xxssprotection-header-disabled"
-}
-export declare enum SessionConfigurationRule {
-    HTTPONLY = "httponly",
-    SECURE_FLAG_MISSING = "secure-flag-missing"
-}
-export declare enum InputType {
-    UNDEFINED_TYPE = "UNDEFINED_TYPE",
-    BODY = "BODY",
-    COOKIE_NAME = "COOKIE_NAME",
-    COOKIE_VALUE = "COOKIE_VALUE",
-    HEADER = "HEADER",
-    PARAMETER_NAME = "PARAMETER_NAME",
-    PARAMETER_VALUE = "PARAMETER_VALUE",
-    QUERYSTRING = "QUERYSTRING",
-    URI = "URI",
-    SOCKET = "SOCKET",
-    JSON_VALUE = "JSON_VALUE",
-    JSON_ARRAYED_VALUE = "JSON_ARRAYED_VALUE",
-    MULTIPART_CONTENT_TYPE = "MULTIPART_CONTENT_TYPE",
-    MULTIPART_VALUE = "MULTIPART_VALUE",
-    MULTIPART_FIELD_NAME = "MULTIPART_FIELD_NAME",
-    MULTIPART_NAME = "MULTIPART_NAME",
-    XML_VALUE = "XML_VALUE",
-    DWR_VALUE = "DWR_VALUE",
-    METHOD = "METHOD",
-    REQUEST = "REQUEST",
-    URL_PARAMETER = "URL_PARAMETER",
-    UNKNOWN = "UNKNOWN"
-}
-export declare enum ExclusionType {
-    BODY = "BODY",
-    COOKIE = "COOKIE",
-    HEADER = "HEADER",
-    PARAMETER = "PARAMETER",
-    QUERYSTRING = "QUERYSTRING",
-    URL = "URL"
-}
-export declare enum DataflowTag {
-    XML_ENCODED = "XML_ENCODED",
-    XML_DECODED = "XML_DECODED",
-    HTML_ENCODED = "HTML_ENCODED",
-    HTML_DECODED = "HTML_DECODED",
-    URL_ENCODED = "URL_ENCODED",
-    URL_DECODED = "URL_DECODED",
-    CSS_ENCODED = "CSS_ENCODED",
-    CSS_DECODED = "CSS_DECODED",
-    BASE64_ENCODED = "BASE64_ENCODED",
-    BASE64_DECODED = "BASE64_DECODED",
-    JAVASCRIPT_ENCODED = "JAVASCRIPT_ENCODED",
-    JAVASCRIPT_DECODED = "JAVASCRIPT_DECODED",
-    JAVA_ENCODED = "JAVA_ENCODED",
-    JAVA_DECODED = "JAVA_DECODED",
-    CSV_ENCODED = "CSV_ENCODED",
-    CSV_DECODED = "CSV_DECODED",
-    SQL_ENCODED = "SQL_ENCODED",
-    SQL_DECODED = "SQL_DECODED",
-    LDAP_ENCODED = "LDAP_ENCODED",
-    LDAP_DECODED = "LDAP_DECODED",
-    XPATH_ENCODED = "XPATH_ENCODED",
-    XPATH_DECODED = "XPATH_DECODED",
-    OS_ENCODED = "OS_ENCODED",
-    OS_DECODED = "OS_DECODED",
-    VBSCRIPT_ENCODED = "VBSCRIPT_ENCODED",
-    VBSCRIPT_DECODED = "VBSCRIPT_DECODED",
-    POTENTIAL_SANITIZED = "POTENTIAL_SANITIZED",
-    POTENTIAL_VALIDATED = "POTENTIAL_VALIDATED",
-    NO_CONTROL_CHARS = "NO_CONTROL_CHARS",
-    CUSTOM = "CUSTOM_CATCH_ALL",
-    CUSTOM_ENCODED = "CUSTOM_ENCODED",
-    CUSTOM_ENCODED_CMD_INJECTION = "CUSTOM_ENCODED_CMD_INJECTION",
-    CUSTOM_ENCODED_EXPRESSION_LANGUAGE_INJECTION = "CUSTOM_ENCODED_EXPRESSION_LANGUAGE_INJECTION",
-    CUSTOM_ENCODED_HEADER_INJECTION = "CUSTOM_ENCODED_HEADER_INJECTION",
-    CUSTOM_ENCODED_HQL_INJECTION = "CUSTOM_ENCODED_HQL_INJECTION",
-    CUSTOM_ENCODED_LDAP_INJECTION = "CUSTOM_ENCODED_LDAP_INJECTION",
-    CUSTOM_ENCODED_LOG_INJECTION = "CUSTOM_ENCODED_LOG_INJECTION",
-    CUSTOM_ENCODED_NOSQL_INJECTIOn = "CUSTOM_ENCODED_NOSQL_INJECTION",
-    CUSTOM_ENCODED_PATH_TRAVERSAL = "CUSTOM_ENCODED_PATH_TRAVERSAL",
-    CUSTOM_ENCODED_REDOS = "CUSTOM_ENCODED_REDOS",
-    CUSTOM_ENCODED_REFLECTED_XSS = "CUSTOM_ENCODED_REFLECTED_XSS",
-    CUSTOM_ENCODED_REFLECTION_INJECTION = "CUSTOM_ENCODED_REFLECTION_INJECTION",
-    CUSTOM_ENCODED_SMTP_INJECTION = "CUSTOM_ENCODED_SMTP_INJECTION",
-    CUSTOM_ENCODED_SQL_INJECTION = "CUSTOM_ENCODED_SQL_INJECTION",
-    CUSTOM_ENCODED_SSRF = "CUSTOM_ENCODED_SSRF",
-    CUSTOM_ENCODED_STORED_XSS = "CUSTOM_ENCODED_STORED_XSS",
-    CUSTOM_ENCODED_TRUST_BOUNDARY_VIOLATION = "CUSTOM_ENCODED_TRUST_BOUNDARY_VIOLATION",
-    CUSTOM_ENCODED_UNSAFE_CODE_EXECUTION = "CUSTOM_ENCODED_UNSAFE_CODE_EXECUTION",
-    CUSTOM_ENCODED_UNSAFE_READLINE = "CUSTOM_ENCODED_UNSAFE_READLINE",
-    CUSTOM_ENCODED_UNSAFE_XML_DECODE = "CUSTOM_ENCODED_UNSAFE_XML_DECODE",
-    CUSTOM_ENCODED_UNTRUSTED_DESERIALIZATION = "CUSTOM_ENCODED_UNTRUSTED_DESERIALIZATION",
-    CUSTOM_ENCODED_UNVALIDATED_FORWARD = "CUSTOM_ENCODED_UNVALIDATED_FORWARD",
-    CUSTOM_ENCODED_UNVALIDATED_REDIRECT = "CUSTOM_ENCODED_UNVALIDATED_REDIRECT",
-    CUSTOM_ENCODED_XPATH_INJECTION = "CUSTOM_ENCODED_XPATH_INJECTION",
-    CUSTOM_ENCODED_XXE = "CUSTOM_ENCODED_XXE",
-    CUSTOM_SECURITY_CONTROL_APPLIED = "CUSTOM_SECURITY_CONTROL_APPLIED",
-    CUSTOM_VALIDATED = "CUSTOM_VALIDATED",
-    CUSTOM_VALIDATED_CMD_INJECTION = "CUSTOM_VALIDATED_CMD_INJECTION",
-    CUSTOM_VALIDATED_EXPRESSION_LANGUAGE_INJECTION = "CUSTOM_VALIDATED_EXPRESSION_LANGUAGE_INJECTION",
-    CUSTOM_VALIDATED_HEADER_INJECTION = "CUSTOM_VALIDATED_HEADER_INJECTION",
-    CUSTOM_VALIDATED_HQL_INJECTION = "CUSTOM_VALIDATED_HQL_INJECTION",
-    CUSTOM_VALIDATED_LDAP_INJECTION = "CUSTOM_VALIDATED_LDAP_INJECTION",
-    CUSTOM_VALIDATED_LOG_INJECTION = "CUSTOM_VALIDATED_LOG_INJECTION",
-    CUSTOM_VALIDATED_NOSQL_INJECTION = "CUSTOM_VALIDATED_NOSQL_INJECTION",
-    CUSTOM_VALIDATED_PATH_TRAVERSAL = "CUSTOM_VALIDATED_PATH_TRAVERSAL",
-    CUSTOM_VALIDATED_REDOS = "CUSTOM_VALIDATED_REDOS",
-    CUSTOM_VALIDATED_REFLECTED_XSS = "CUSTOM_VALIDATED_REFLECTED_XSS",
-    CUSTOM_VALIDATED_REFLECTION_INJECTION = "CUSTOM_VALIDATED_REFLECTION_INJECTION",
-    CUSTOM_VALIDATED_SMTP_INJECTION = "CUSTOM_VALIDATED_SMTP_INJECTION",
-    CUSTOM_VALIDATED_SQL_INJECTION = "CUSTOM_VALIDATED_SQL_INJECTION",
-    CUSTOM_VALIDATED_SSRF = "CUSTOM_VALIDATED_SSRF",
-    CUSTOM_VALIDATED_STORED_XSS = "CUSTOM_VALIDATED_STORED_XSS",
-    CUSTOM_VALIDATED_TRUST_BOUNDARY_VIOLATION = "CUSTOM_VALIDATED_TRUST_BOUNDARY_VIOLATION",
-    CUSTOM_VALIDATED_UNSAFE_CODE_EXECUTION = "CUSTOM_VALIDATED_UNSAFE_CODE_EXECUTION",
-    CUSTOM_VALIDATED_UNSAFE_READLINE = "CUSTOM_VALIDATED_UNSAFE_READLINE",
-    CUSTOM_VALIDATED_UNSAFE_XML_DECODE = "CUSTOM_VALIDATED_UNSAFE_XML_DECODE",
-    CUSTOM_VALIDATED_UNTRUSTED_DESERIALIZATION = "CUSTOM_VALIDATED_UNTRUSTED_DESERIALIZATION",
-    CUSTOM_VALIDATED_UNVALIDATED_FORWARD = "CUSTOM_VALIDATED_UNVALIDATED_FORWARD",
-    CUSTOM_VALIDATED_UNVALIDATED_REDIRECT = "CUSTOM_VALIDATED_UNVALIDATED_REDIRECT",
-    CUSTOM_VALIDATED_XPATH_INJECTION = "CUSTOM_VALIDATED_XPATH_INJECTION",
-    CUSTOM_VALIDATED_XXE = "CUSTOM_VALIDATED_XXE",
-    NO_NEWLINES = "NO_NEWLINES",
-    UNTRUSTED = "UNTRUSTED",
-    CROSS_SITE = "CROSS_SITE",
-    LIMITED_CHARS = "LIMITED_CHARS",
-    ALPHANUM_SPACE_HYPHEN = "ALPHANUM_SPACE_HYPHEN",
-    STRING_TYPE_CHECKED = "STRING_TYPE_CHECKED",
-    DATABASE_WRITE = "DATABASE_WRITE",
-    HEADER = "HEADER",
-    COOKIE = "COOKIE",
-    WEAK_URL_ENCODED = "WEAK_URL_ENCODED"
-}
-export declare const BLOCKING_MODES: readonly ["block", "block_at_perimeter"];
-export declare const FS_METHODS: readonly [{
-    readonly name: "access";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "appendFile";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "chmod";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "chown";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "copyFile";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0, 1];
-}, {
-    readonly name: "cp";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0, 1];
-}, {
-    readonly name: "createReadStream";
-    readonly promises: false;
-    readonly sync: false;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "createWriteStream";
-    readonly promises: false;
-    readonly sync: false;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "exists";
-    readonly promises: false;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "glob";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "lchmod";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "lchown";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "link";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "lstat";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "lutimes";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "mkdir";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "mkdtemp";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "open";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "openAsBlob";
-    readonly promises: false;
-    readonly sync: false;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "opendir";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "readdir";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "readFile";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "readlink";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "realpath";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "rename";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0, 1];
-}, {
-    readonly name: "rmdir";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "rm";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "stat";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "statfs";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "symlink";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0, 1];
-}, {
-    readonly name: "truncate";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "unlink";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "unwatchFile";
-    readonly promises: false;
-    readonly sync: false;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "utimes";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "watch";
-    readonly promises: true;
-    readonly sync: false;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "watchFile";
-    readonly promises: false;
-    readonly sync: false;
-    readonly indices: readonly [0];
-}, {
-    readonly name: "writeFile";
-    readonly promises: true;
-    readonly sync: true;
-    readonly indices: readonly [0];
-}];
-export declare enum agentLibIDListTypes {
-    MONGO_SLEEP = "MONGO-SLEEP",
-    TRUE_CLAUSE_1 = "TRUE-CLAUSE-1"
-}
-export declare const symbols: {
-    readonly kMetrics: symbol;
-};
-//# sourceMappingURL=constants.d.ts.map