@contrast/agent 4.29.0 → 4.29.2-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (580) hide show
  1. package/LICENSE +11 -11
  2. package/README.md +57 -86
  3. package/agent-loader.js +0 -14
  4. package/bootstrap.js +0 -14
  5. package/cli-rewriter.js +0 -14
  6. package/cli.js +0 -14
  7. package/config-diagnostics.js +0 -14
  8. package/esm.mjs +0 -14
  9. package/lib/agent-emitter.js +0 -14
  10. package/lib/agent.js +0 -14
  11. package/lib/app-info.js +0 -14
  12. package/lib/assess/deadzones/index.js +0 -14
  13. package/lib/assess/deadzones/rewrite.js +0 -14
  14. package/lib/assess/express/index.js +0 -14
  15. package/lib/assess/express/route-coverage.js +0 -14
  16. package/lib/assess/express/sinks/index.js +0 -14
  17. package/lib/assess/express/sinks/xss.js +0 -14
  18. package/lib/assess/express/sources.js +0 -14
  19. package/lib/assess/fastify/index.js +0 -14
  20. package/lib/assess/fastify/route-coverage.js +0 -14
  21. package/lib/assess/fastify/sinks/index.js +1 -13
  22. package/lib/assess/fastify/sinks/response-scanning.js +0 -14
  23. package/lib/assess/fastify/sinks/unvalidated-redirect.js +0 -14
  24. package/lib/assess/fastify/sinks/xss.js +0 -14
  25. package/lib/assess/fastify/sources.js +0 -14
  26. package/lib/assess/hapi/index.js +0 -14
  27. package/lib/assess/hapi/route-coverage.js +0 -14
  28. package/lib/assess/hapi/sinks/index.js +0 -14
  29. package/lib/assess/hapi/sinks/response-scanning.js +0 -14
  30. package/lib/assess/hapi/sinks/session.js +0 -14
  31. package/lib/assess/hapi/sinks/unvalidated-redirect.js +0 -14
  32. package/lib/assess/hapi/sinks/xss.js +0 -14
  33. package/lib/assess/hapi/sources.js +0 -14
  34. package/lib/assess/index.js +0 -14
  35. package/lib/assess/koa/index.js +0 -14
  36. package/lib/assess/koa/route-coverage.js +0 -14
  37. package/lib/assess/koa/sinks/index.js +0 -14
  38. package/lib/assess/koa/sinks/response-scanning.js +0 -14
  39. package/lib/assess/koa/sinks/unvalidated-redirect.js +0 -14
  40. package/lib/assess/koa/sinks/xss.js +0 -14
  41. package/lib/assess/koa/sources.js +0 -14
  42. package/lib/assess/loopback4/index.js +0 -14
  43. package/lib/assess/loopback4/route-coverage.js +0 -14
  44. package/lib/assess/loopback4/sinks/index.js +0 -14
  45. package/lib/assess/loopback4/sinks/response-scanning.js +0 -14
  46. package/lib/assess/loopback4/sinks/xss.js +0 -14
  47. package/lib/assess/loopback4/sources.js +0 -14
  48. package/lib/assess/membrane/debraner.js +0 -14
  49. package/lib/assess/membrane/deserialization-membrane.js +0 -14
  50. package/lib/assess/membrane/index.js +0 -14
  51. package/lib/assess/membrane/source-membrane.js +0 -14
  52. package/lib/assess/models/base-event.js +0 -14
  53. package/lib/assess/models/call-context.js +0 -14
  54. package/lib/assess/models/index.js +0 -14
  55. package/lib/assess/models/propagation-event.js +0 -14
  56. package/lib/assess/models/signature.js +0 -14
  57. package/lib/assess/models/sink-event.js +0 -14
  58. package/lib/assess/models/source-event.js +0 -14
  59. package/lib/assess/models/tag-range/index.js +0 -14
  60. package/lib/assess/models/tag-range/relationships.js +0 -14
  61. package/lib/assess/models/tag-range/util.js +0 -14
  62. package/lib/assess/policy/index.js +0 -14
  63. package/lib/assess/policy/init.js +0 -14
  64. package/lib/assess/policy/util.js +0 -14
  65. package/lib/assess/propagators/JSON/parse.js +0 -14
  66. package/lib/assess/propagators/JSON/stringify.js +0 -14
  67. package/lib/assess/propagators/ajv/conditionals.js +0 -14
  68. package/lib/assess/propagators/ajv/evaluator-shim.js +0 -14
  69. package/lib/assess/propagators/ajv/index.js +0 -14
  70. package/lib/assess/propagators/ajv/json-schema-type-evaluators.js +0 -14
  71. package/lib/assess/propagators/ajv/object-walk.js +0 -14
  72. package/lib/assess/propagators/ajv/refs.js +0 -14
  73. package/lib/assess/propagators/ajv/schema-context.js +0 -14
  74. package/lib/assess/propagators/array-prototype-join.js +0 -14
  75. package/lib/assess/propagators/common.js +0 -14
  76. package/lib/assess/propagators/dustjs/escape-html.js +0 -14
  77. package/lib/assess/propagators/dustjs/escape-js.js +0 -14
  78. package/lib/assess/propagators/ejs-template-generate-source.js +0 -14
  79. package/lib/assess/propagators/encode-uri/encode-uri-component.js +0 -14
  80. package/lib/assess/propagators/encode-uri/encode-uri.js +0 -14
  81. package/lib/assess/propagators/fastify-static/allowed-path.js +0 -14
  82. package/lib/assess/propagators/handlebars-compile.js +0 -14
  83. package/lib/assess/propagators/handlebars-escape-expresssion.js +0 -14
  84. package/lib/assess/propagators/index.js +0 -14
  85. package/lib/assess/propagators/joi/any.js +0 -14
  86. package/lib/assess/propagators/joi/boolean.js +0 -14
  87. package/lib/assess/propagators/joi/expression.js +0 -14
  88. package/lib/assess/propagators/joi/index.js +0 -14
  89. package/lib/assess/propagators/joi/keys.js +0 -14
  90. package/lib/assess/propagators/joi/number.js +0 -14
  91. package/lib/assess/propagators/joi/object.js +0 -14
  92. package/lib/assess/propagators/joi/string-base.js +0 -14
  93. package/lib/assess/propagators/joi/string-schema.js +0 -14
  94. package/lib/assess/propagators/joi/values.js +0 -14
  95. package/lib/assess/propagators/manager.js +0 -14
  96. package/lib/assess/propagators/mongoose/helpers.js +0 -14
  97. package/lib/assess/propagators/mongoose/index.js +0 -14
  98. package/lib/assess/propagators/mongoose/map.js +0 -14
  99. package/lib/assess/propagators/mongoose/mixed.js +0 -14
  100. package/lib/assess/propagators/mongoose/string.js +0 -14
  101. package/lib/assess/propagators/mustache/escape.js +0 -14
  102. package/lib/assess/propagators/number.js +0 -14
  103. package/lib/assess/propagators/object.js +0 -14
  104. package/lib/assess/propagators/path/basename.js +0 -14
  105. package/lib/assess/propagators/path/common.js +0 -14
  106. package/lib/assess/propagators/path/dirname.js +0 -14
  107. package/lib/assess/propagators/path/extname.js +0 -14
  108. package/lib/assess/propagators/path/format.js +0 -14
  109. package/lib/assess/propagators/path/join.js +0 -14
  110. package/lib/assess/propagators/path/normalize.js +0 -14
  111. package/lib/assess/propagators/path/parse.js +0 -14
  112. package/lib/assess/propagators/path/relative.js +0 -14
  113. package/lib/assess/propagators/path/resolve.js +0 -14
  114. package/lib/assess/propagators/path/to-namespaced-path.js +0 -14
  115. package/lib/assess/propagators/pug-compile.js +0 -14
  116. package/lib/assess/propagators/querystring/escape.js +0 -14
  117. package/lib/assess/propagators/querystring/parse.js +0 -14
  118. package/lib/assess/propagators/querystring/stringify.js +0 -14
  119. package/lib/assess/propagators/querystring/unescape.js +0 -14
  120. package/lib/assess/propagators/querystring/utils.js +0 -14
  121. package/lib/assess/propagators/sequelize/sql-string-escape.js +0 -14
  122. package/lib/assess/propagators/sequelize/sql-string-format-named-parameters.js +0 -14
  123. package/lib/assess/propagators/sequelize/sql-string-format.js +0 -14
  124. package/lib/assess/propagators/sequelize/utils.js +0 -14
  125. package/lib/assess/propagators/string-prototype-replace.js +0 -14
  126. package/lib/assess/propagators/string-prototype-split.js +0 -14
  127. package/lib/assess/propagators/string-prototype-trim.js +0 -14
  128. package/lib/assess/propagators/string.js +0 -14
  129. package/lib/assess/propagators/template-escape.js +0 -14
  130. package/lib/assess/propagators/templates.js +0 -14
  131. package/lib/assess/propagators/url/url-prototype-parse.js +0 -14
  132. package/lib/assess/propagators/url/url-url.js +0 -14
  133. package/lib/assess/propagators/url/utils.js +0 -14
  134. package/lib/assess/propagators/util/format.js +0 -14
  135. package/lib/assess/propagators/utils.js +0 -14
  136. package/lib/assess/propagators/v8/init-hooks.js +0 -14
  137. package/lib/assess/propagators/validator/init-hooks.js +0 -14
  138. package/lib/assess/propagators/validator/validator-methods.js +0 -14
  139. package/lib/assess/response-scanning/app-activity.js +0 -14
  140. package/lib/assess/response-scanning/autocomplete-missing.js +0 -14
  141. package/lib/assess/response-scanning/cache-controls-missing.js +0 -14
  142. package/lib/assess/response-scanning/clickjacking-control-missing.js +0 -14
  143. package/lib/assess/response-scanning/common.js +0 -14
  144. package/lib/assess/response-scanning/cookies/common.js +0 -14
  145. package/lib/assess/response-scanning/cookies/events.js +0 -14
  146. package/lib/assess/response-scanning/cookies/httponly.js +0 -14
  147. package/lib/assess/response-scanning/cookies/secure-flag-missing.js +0 -14
  148. package/lib/assess/response-scanning/headers/csp-header-insecure.js +0 -14
  149. package/lib/assess/response-scanning/headers/csp-header-missing.js +0 -14
  150. package/lib/assess/response-scanning/headers/csp-utils.js +0 -14
  151. package/lib/assess/response-scanning/headers/hsts-header-missing.js +0 -14
  152. package/lib/assess/response-scanning/headers/powered-by.js +0 -14
  153. package/lib/assess/response-scanning/headers/xcontenttype-header-missing.js +0 -14
  154. package/lib/assess/response-scanning/headers/xxssprotection-header-disabled.js +0 -14
  155. package/lib/assess/response-scanning/parameter-pollution.js +0 -14
  156. package/lib/assess/response-scanning/parseable-response-emitter.js +0 -14
  157. package/lib/assess/restify/index.js +0 -14
  158. package/lib/assess/restify/route-coverage.js +0 -14
  159. package/lib/assess/restify/session.js +0 -14
  160. package/lib/assess/restify/sinks/index.js +0 -14
  161. package/lib/assess/restify/sinks/response-scanning.js +0 -14
  162. package/lib/assess/restify/sinks/unvalidated-redirect.js +0 -14
  163. package/lib/assess/restify/sinks/xss.js +0 -14
  164. package/lib/assess/restify/sources.js +0 -14
  165. package/lib/assess/sinks/common.js +0 -14
  166. package/lib/assess/sinks/dustjs-linkedin-xss.js +0 -14
  167. package/lib/assess/sinks/dynamo.js +0 -14
  168. package/lib/assess/sinks/hapi-16-xss.js +0 -14
  169. package/lib/assess/sinks/index.js +0 -14
  170. package/lib/assess/sinks/libxmljs-xxe.js +0 -14
  171. package/lib/assess/sinks/mongodb.js +0 -14
  172. package/lib/assess/sinks/rethinkdb-nosql-injection.js +0 -14
  173. package/lib/assess/sinks/ssrf-url.js +0 -14
  174. package/lib/assess/sources/event-handler.js +3 -14
  175. package/lib/assess/sources/formidable.js +0 -14
  176. package/lib/assess/sources/index.js +0 -14
  177. package/lib/assess/spdy/index.js +0 -14
  178. package/lib/assess/spdy/sinks/index.js +0 -14
  179. package/lib/assess/spdy/sinks/xss.js +0 -14
  180. package/lib/assess/static/hardcoded.js +0 -14
  181. package/lib/assess/static/read-findings-from-cache.js +0 -14
  182. package/lib/assess/technologies/index.js +0 -14
  183. package/lib/assess/utils.js +0 -14
  184. package/lib/cli-rewriter/index.js +0 -14
  185. package/lib/constants.js +0 -14
  186. package/lib/contrast.js +23 -35
  187. package/lib/core/arch-components/dynamodb.js +0 -14
  188. package/lib/core/arch-components/dynamodbv3.js +0 -14
  189. package/lib/core/arch-components/index.js +0 -14
  190. package/lib/core/arch-components/mongodb.js +0 -14
  191. package/lib/core/arch-components/mysql.js +0 -14
  192. package/lib/core/arch-components/postgres.js +0 -14
  193. package/lib/core/arch-components/rethinkdb.js +0 -14
  194. package/lib/core/arch-components/sqlite3.js +0 -14
  195. package/lib/core/arch-components/util.js +0 -14
  196. package/lib/core/async-storage/context.js +0 -14
  197. package/lib/core/async-storage/hooks/bluebird.js +0 -14
  198. package/lib/core/async-storage/hooks/mongodb.js +0 -14
  199. package/lib/core/async-storage/hooks/mysql.js +0 -14
  200. package/lib/core/async-storage/hooks/redis.js +0 -14
  201. package/lib/core/async-storage/hooks/utils.js +0 -14
  202. package/lib/core/async-storage/index.js +0 -14
  203. package/lib/core/async-storage/scopes/index.js +0 -14
  204. package/lib/core/common/formidable.js +0 -14
  205. package/lib/core/common/index.js +0 -14
  206. package/lib/core/config/options.js +0 -14
  207. package/lib/core/config/util.js +0 -14
  208. package/lib/core/exclusions/exclusion-factory.js +0 -14
  209. package/lib/core/exclusions/exclusion.js +0 -14
  210. package/lib/core/exclusions/input.js +0 -14
  211. package/lib/core/exclusions/url.js +0 -14
  212. package/lib/core/express/index.js +0 -14
  213. package/lib/core/express/utils.js +0 -14
  214. package/lib/core/fastify/index.js +0 -14
  215. package/lib/core/fastify/utils.js +0 -14
  216. package/lib/core/hapi/index.js +0 -14
  217. package/lib/core/hapi/utils.js +0 -14
  218. package/lib/core/index.js +0 -14
  219. package/lib/core/koa/index.js +0 -14
  220. package/lib/core/koa/utils.js +0 -14
  221. package/lib/core/logger/daily-rotate-file.js +0 -14
  222. package/lib/core/logger/dataflow-monitor.js +0 -14
  223. package/lib/core/logger/debug-logger.js +0 -14
  224. package/lib/core/logger/index.js +0 -14
  225. package/lib/core/logger/perf-logger.js +0 -14
  226. package/lib/core/logger/umbrella-logger.js +0 -14
  227. package/lib/core/loopback4/index.js +0 -14
  228. package/lib/core/metrics/index.js +0 -14
  229. package/lib/core/restify/index.js +0 -14
  230. package/lib/core/restify/utils.js +0 -14
  231. package/lib/core/rewrite/assignment-expression.js +0 -14
  232. package/lib/core/rewrite/binary-expression.js +0 -14
  233. package/lib/core/rewrite/call-expression.js +0 -14
  234. package/lib/core/rewrite/callees.js +0 -14
  235. package/lib/core/rewrite/catch-clause.js +0 -14
  236. package/lib/core/rewrite/function-wrap.js +0 -14
  237. package/lib/core/rewrite/import-declaration.js +0 -14
  238. package/lib/core/rewrite/index.js +0 -14
  239. package/lib/core/rewrite/injections.js +0 -14
  240. package/lib/core/rewrite/is-contrast-method.js +0 -14
  241. package/lib/core/rewrite/log.js +0 -14
  242. package/lib/core/rewrite/member-expression.js +0 -14
  243. package/lib/core/rewrite/object-property.js +0 -14
  244. package/lib/core/rewrite/prepend-globals.js +0 -14
  245. package/lib/core/rewrite/rewrite-log.js +0 -14
  246. package/lib/core/rewrite/switch-statement.js +0 -14
  247. package/lib/core/rewrite/template-literal.js +0 -14
  248. package/lib/core/stacktrace.js +0 -14
  249. package/lib/coverage.js +0 -14
  250. package/lib/feature-set.js +0 -14
  251. package/lib/generator-function.js +0 -14
  252. package/lib/hooks/array.js +0 -14
  253. package/lib/hooks/cluster.js +0 -14
  254. package/lib/hooks/dataflow-monitor.js +0 -14
  255. package/lib/hooks/encoding.js +0 -14
  256. package/lib/hooks/express-fileupload.js +0 -14
  257. package/lib/hooks/express-session.js +0 -14
  258. package/lib/hooks/fn-to-string.js +0 -14
  259. package/lib/hooks/frameworks/base.js +0 -14
  260. package/lib/hooks/frameworks/common.js +0 -14
  261. package/lib/hooks/frameworks/hapi16.js +0 -14
  262. package/lib/hooks/frameworks/http.js +0 -14
  263. package/lib/hooks/frameworks/http2.js +0 -14
  264. package/lib/hooks/frameworks/index.js +0 -14
  265. package/lib/hooks/frameworks/spdy.js +0 -14
  266. package/lib/hooks/hapi-16-reply.js +0 -14
  267. package/lib/hooks/hapi-16-session.js +0 -14
  268. package/lib/hooks/http.js +7 -18
  269. package/lib/hooks/module/extensions.js +0 -14
  270. package/lib/hooks/module/helpers.js +0 -14
  271. package/lib/hooks/module/index.js +0 -14
  272. package/lib/hooks/newrelic.js +0 -14
  273. package/lib/hooks/object-is.js +0 -14
  274. package/lib/hooks/object-to-primitive.js +0 -14
  275. package/lib/hooks/patcher.js +0 -14
  276. package/lib/hooks/require.js +0 -14
  277. package/lib/hooks/stealthy-require.js +0 -14
  278. package/lib/instrumentation.js +0 -14
  279. package/lib/libraries.js +0 -14
  280. package/lib/library-usage.js +0 -14
  281. package/lib/list-installed.js +0 -14
  282. package/lib/protect/analysis/aho-corasick.js +0 -14
  283. package/lib/protect/analysis/dfsa-analyzer.js +0 -14
  284. package/lib/protect/errors/handler-async-errors.js +0 -14
  285. package/lib/protect/errors/handler.js +0 -14
  286. package/lib/protect/errors/security-exception.js +0 -14
  287. package/lib/protect/express/index.js +0 -14
  288. package/lib/protect/express/sinks.js +0 -14
  289. package/lib/protect/express/sources.js +0 -14
  290. package/lib/protect/express/utils.js +0 -14
  291. package/lib/protect/fastify/index.js +0 -14
  292. package/lib/protect/fastify/sinks.js +0 -14
  293. package/lib/protect/fastify/sources.js +0 -14
  294. package/lib/protect/hapi/error-handler.js +0 -14
  295. package/lib/protect/hapi/index.js +0 -14
  296. package/lib/protect/hapi/sinks.js +0 -14
  297. package/lib/protect/hapi/sources.js +0 -14
  298. package/lib/protect/index.js +0 -14
  299. package/lib/protect/input-analysis.js +0 -14
  300. package/lib/protect/koa/index.js +0 -14
  301. package/lib/protect/koa/sinks.js +0 -14
  302. package/lib/protect/koa/sources.js +0 -14
  303. package/lib/protect/listeners.js +0 -14
  304. package/lib/protect/loopback4/index.js +0 -14
  305. package/lib/protect/loopback4/sources.js +0 -14
  306. package/lib/protect/models/application-context.js +0 -14
  307. package/lib/protect/models/sink-event.js +0 -14
  308. package/lib/protect/models/source-event.js +0 -14
  309. package/lib/protect/restify/index.js +0 -14
  310. package/lib/protect/restify/sinks.js +0 -14
  311. package/lib/protect/restify/sources.js +0 -14
  312. package/lib/protect/rules/assessment.js +0 -14
  313. package/lib/protect/rules/attack-patterns.js +0 -14
  314. package/lib/protect/rules/base-scanner/index.js +0 -14
  315. package/lib/protect/rules/base-scanner/java-script-scanner.js +0 -14
  316. package/lib/protect/rules/base-scanner/postgresqlscanner.js +0 -14
  317. package/lib/protect/rules/base-scanner/scan-state.js +0 -14
  318. package/lib/protect/rules/base-scanner/substring-finder.js +0 -14
  319. package/lib/protect/rules/base-scanner/token-sequence.js +0 -14
  320. package/lib/protect/rules/bot-blocker/bot-blocker-rule.js +0 -14
  321. package/lib/protect/rules/bot-blocker/index.js +0 -14
  322. package/lib/protect/rules/cmd-injection/cmdinjection-rule.js +0 -14
  323. package/lib/protect/rules/cmd-injection-command-backdoors/backdoor-detector.js +0 -14
  324. package/lib/protect/rules/cmd-injection-command-backdoors/cmd-injection-command-backdoors-rule.js +0 -14
  325. package/lib/protect/rules/cmd-injection-semantic-chained-commands/chained-command-scanner.js +0 -14
  326. package/lib/protect/rules/cmd-injection-semantic-chained-commands/cmd-injection-semantic-chained-commands-rule.js +0 -14
  327. package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/cmd-injection-semantic-dangerous-paths-rule.js +0 -14
  328. package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/dangerous-paths-scanner.js +0 -14
  329. package/lib/protect/rules/common.js +0 -14
  330. package/lib/protect/rules/index.js +0 -14
  331. package/lib/protect/rules/ip-denylist/ip-denylist-rule.js +0 -14
  332. package/lib/protect/rules/method-tampering/evaluator.js +0 -14
  333. package/lib/protect/rules/method-tampering/method-tampering-rule.js +0 -14
  334. package/lib/protect/rules/nosqli/nosql-injection-rule.js +0 -14
  335. package/lib/protect/rules/nosqli/nosql-scanner/index.js +0 -14
  336. package/lib/protect/rules/nosqli/nosql-scanner/mongodbscanner.js +0 -14
  337. package/lib/protect/rules/nosqli/nosql-scanner/rethinkdbscanner.js +0 -14
  338. package/lib/protect/rules/path-traversal/path-traversal-rule.js +0 -14
  339. package/lib/protect/rules/rule-factory.js +0 -14
  340. package/lib/protect/rules/signatures/cmd-injection/custom-searchers/chained-command-searcher.js +0 -14
  341. package/lib/protect/rules/signatures/cmd-injection/custom-searchers/index.js +0 -14
  342. package/lib/protect/rules/signatures/cmd-injection/index.js +0 -14
  343. package/lib/protect/rules/signatures/evaluator.js +0 -14
  344. package/lib/protect/rules/signatures/index.js +0 -14
  345. package/lib/protect/rules/signatures/nosql-injection/custom-searchers/index.js +0 -14
  346. package/lib/protect/rules/signatures/nosql-injection/custom-searchers/nosql-comment-searcher.js +0 -14
  347. package/lib/protect/rules/signatures/nosql-injection/custom-searchers/simple-or-searcher.js +0 -14
  348. package/lib/protect/rules/signatures/nosql-injection/index.js +0 -14
  349. package/lib/protect/rules/signatures/path-traversal/index.js +0 -14
  350. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/behavior-url-searcher.js +0 -14
  351. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/function-definition-searcher.js +0 -14
  352. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/immediate-function-searcher.js +0 -14
  353. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/index.js +0 -14
  354. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/link-and-src-target-searcher.js +0 -14
  355. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/location-set-searcher.js +0 -14
  356. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/map-access-searcher.js +0 -14
  357. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/native-function-execution-searcher.js +0 -14
  358. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/no-alnum-searcher.js +0 -14
  359. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/redefined-function-searcher.js +0 -14
  360. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/style-url-injection-searcher.js +0 -14
  361. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/variable-assignment-searcher.js +0 -14
  362. package/lib/protect/rules/signatures/reflected-xss/helpers/function-call.js +0 -14
  363. package/lib/protect/rules/signatures/reflected-xss/index.js +0 -14
  364. package/lib/protect/rules/signatures/signature.js +0 -14
  365. package/lib/protect/rules/signatures/sql-injection/custom-searchers/if-else-drop-searcher.js +0 -14
  366. package/lib/protect/rules/signatures/sql-injection/custom-searchers/index.js +0 -14
  367. package/lib/protect/rules/signatures/sql-injection/custom-searchers/simple-or-searcher.js +0 -14
  368. package/lib/protect/rules/signatures/sql-injection/custom-searchers/sql-comment-searcher.js +0 -14
  369. package/lib/protect/rules/signatures/sql-injection/custom-searchers/time-function-searcher.js +0 -14
  370. package/lib/protect/rules/signatures/sql-injection/custom-searchers/tsql-exec-searcher.js +0 -14
  371. package/lib/protect/rules/signatures/sql-injection/index.js +0 -14
  372. package/lib/protect/rules/signatures/ssjs-injection/index.js +0 -14
  373. package/lib/protect/rules/signatures/unsafe-file-upload/index.js +0 -14
  374. package/lib/protect/rules/signatures/untrusted-deserialization/index.js +0 -14
  375. package/lib/protect/rules/sqli/generic-complicated.js +0 -14
  376. package/lib/protect/rules/sqli/sql-injection-rule.js +0 -14
  377. package/lib/protect/rules/sqli/sql-scanner/index.js +0 -14
  378. package/lib/protect/rules/sqli/sql-scanner/mysql-scanner.js +0 -14
  379. package/lib/protect/rules/ssjs-injection/evaluator.js +0 -14
  380. package/lib/protect/rules/ssjs-injection/ssjsinjection-rule.js +0 -14
  381. package/lib/protect/rules/unsafe-file-upload/unsafe-file-upload-rule.js +0 -14
  382. package/lib/protect/rules/untrusted-deserialization/untrusted-deserialization-rule.js +0 -14
  383. package/lib/protect/rules/virtual-patch/index.js +0 -14
  384. package/lib/protect/rules/virtual-patch/utils.js +0 -14
  385. package/lib/protect/rules/virtual-patch/virtual-patch-rule.js +0 -14
  386. package/lib/protect/rules/xss/helpers/function-call.js +0 -14
  387. package/lib/protect/rules/xss/reflected-xss-rule.js +0 -14
  388. package/lib/protect/rules/xxe/xxerule.js +0 -14
  389. package/lib/protect/sample-aggregator.js +0 -14
  390. package/lib/protect/samples.js +0 -14
  391. package/lib/protect/service.js +0 -14
  392. package/lib/protect/sinks/child-process.js +0 -14
  393. package/lib/protect/sinks/eval.js +0 -14
  394. package/lib/protect/sinks/fs.js +0 -14
  395. package/lib/protect/sinks/function.js +0 -14
  396. package/lib/protect/sinks/index.js +0 -14
  397. package/lib/protect/sinks/libxmljs.js +0 -14
  398. package/lib/protect/sinks/mongodb.js +0 -14
  399. package/lib/protect/sinks/mysql.js +0 -14
  400. package/lib/protect/sinks/node-serialize.js +0 -14
  401. package/lib/protect/sinks/postgres.js +0 -14
  402. package/lib/protect/sinks/rethinkdb.js +0 -14
  403. package/lib/protect/sinks/sequelize.js +0 -14
  404. package/lib/protect/sinks/sqlite3.js +0 -14
  405. package/lib/protect/sinks/vm.js +0 -14
  406. package/lib/protect/sources/busboy.js +0 -14
  407. package/lib/protect/sources/formidable.js +0 -14
  408. package/lib/protect/sources/index.js +0 -14
  409. package/lib/protect/validators/authorization.js +0 -14
  410. package/lib/protect/validators/common.js +0 -14
  411. package/lib/protect/validators/connection.js +0 -14
  412. package/lib/protect/validators/content-length.js +0 -14
  413. package/lib/protect/validators/host.js +0 -14
  414. package/lib/protect/validators/if-none-match.js +0 -14
  415. package/lib/protect/validators/index.js +0 -14
  416. package/lib/protect/validators/origin.js +0 -14
  417. package/lib/reporter/app-activity-queue.js +0 -14
  418. package/lib/reporter/grpc-client.js +0 -14
  419. package/lib/reporter/messages/speedracer/activity.js +0 -14
  420. package/lib/reporter/messages/speedracer/application-create.js +0 -14
  421. package/lib/reporter/messages/speedracer/application-update.js +0 -14
  422. package/lib/reporter/messages/speedracer/base.js +0 -14
  423. package/lib/reporter/messages/speedracer/index.js +0 -14
  424. package/lib/reporter/messages/speedracer/observed-route.js +0 -14
  425. package/lib/reporter/messages/speedracer/poll.js +0 -14
  426. package/lib/reporter/messages/speedracer/request.js +0 -14
  427. package/lib/reporter/messages/speedracer/startup.js +0 -14
  428. package/lib/reporter/messaging-router.js +0 -14
  429. package/lib/reporter/models/app-activity/app-activity.js +0 -14
  430. package/lib/reporter/models/app-activity/attacker-activity.js +0 -14
  431. package/lib/reporter/models/app-activity/defend.js +0 -14
  432. package/lib/reporter/models/app-activity/inventory.js +0 -14
  433. package/lib/reporter/models/app-activity/protection-rule-activity.js +0 -14
  434. package/lib/reporter/models/app-activity/rule-events.js +0 -14
  435. package/lib/reporter/models/app-activity/sample.js +0 -14
  436. package/lib/reporter/models/app-activity/source.js +0 -14
  437. package/lib/reporter/models/app-activity/user-input.js +0 -14
  438. package/lib/reporter/models/app-create.js +0 -14
  439. package/lib/reporter/models/app-update/index.js +0 -14
  440. package/lib/reporter/models/app-update/library-manifest.js +0 -14
  441. package/lib/reporter/models/app-update/library-usage.js +0 -14
  442. package/lib/reporter/models/app-update/library.js +0 -14
  443. package/lib/reporter/models/event-tag.js +0 -14
  444. package/lib/reporter/models/finding/event.js +0 -14
  445. package/lib/reporter/models/finding/finding.js +0 -14
  446. package/lib/reporter/models/frameworks/express-request.js +0 -14
  447. package/lib/reporter/models/frameworks/fastify-request.js +0 -14
  448. package/lib/reporter/models/frameworks/hapi-request.js +0 -14
  449. package/lib/reporter/models/frameworks/index.js +0 -14
  450. package/lib/reporter/models/frameworks/koa-request.js +0 -14
  451. package/lib/reporter/models/frameworks/restify-request.js +0 -14
  452. package/lib/reporter/models/observed-route.js +0 -14
  453. package/lib/reporter/models/request.js +0 -14
  454. package/lib/reporter/models/route-coverage.js +0 -14
  455. package/lib/reporter/models/startup.js +0 -14
  456. package/lib/reporter/models/trace-event-source.js +0 -14
  457. package/lib/reporter/models/utils/request-factory.js +0 -14
  458. package/lib/reporter/models/utils/user-input-factory.js +0 -14
  459. package/lib/reporter/models/utils/user-input-kit.js +0 -14
  460. package/lib/reporter/mq-client.js +0 -14
  461. package/lib/reporter/server-activity-queue.js +0 -14
  462. package/lib/reporter/socket-client.js +0 -14
  463. package/lib/reporter/speedracer/base-connection-state.js +0 -14
  464. package/lib/reporter/speedracer/constants.js +0 -14
  465. package/lib/reporter/speedracer/failure-connection-state.js +0 -14
  466. package/lib/reporter/speedracer/index.js +0 -14
  467. package/lib/reporter/speedracer/success-connection-state.js +0 -14
  468. package/lib/reporter/speedracer/unknown-connection-state.js +0 -14
  469. package/lib/reporter/translations/enums.js +0 -14
  470. package/lib/reporter/translations/helpers.js +0 -14
  471. package/lib/reporter/translations/to-protobuf/dtm/activity.js +0 -14
  472. package/lib/reporter/translations/to-protobuf/dtm/address.js +0 -14
  473. package/lib/reporter/translations/to-protobuf/dtm/agent-startup.js +0 -14
  474. package/lib/reporter/translations/to-protobuf/dtm/application-create.js +0 -14
  475. package/lib/reporter/translations/to-protobuf/dtm/application-update.js +0 -14
  476. package/lib/reporter/translations/to-protobuf/dtm/architecture-component.js +0 -14
  477. package/lib/reporter/translations/to-protobuf/dtm/attack-result.js +0 -14
  478. package/lib/reporter/translations/to-protobuf/dtm/bot-blocker-details.js +0 -14
  479. package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-details.js +0 -14
  480. package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-semantic-analysis-details.js +0 -14
  481. package/lib/reporter/translations/to-protobuf/dtm/finding.js +0 -14
  482. package/lib/reporter/translations/to-protobuf/dtm/http-method-tampering-details.js +0 -14
  483. package/lib/reporter/translations/to-protobuf/dtm/http-request.js +0 -14
  484. package/lib/reporter/translations/to-protobuf/dtm/index.js +0 -14
  485. package/lib/reporter/translations/to-protobuf/dtm/ip-denylist-details.js +0 -14
  486. package/lib/reporter/translations/to-protobuf/dtm/library-usage-update.js +0 -14
  487. package/lib/reporter/translations/to-protobuf/dtm/no-sql-injection-details.js +0 -14
  488. package/lib/reporter/translations/to-protobuf/dtm/observed-route.js +0 -14
  489. package/lib/reporter/translations/to-protobuf/dtm/pair.js +0 -14
  490. package/lib/reporter/translations/to-protobuf/dtm/path-traversal-details.js +0 -14
  491. package/lib/reporter/translations/to-protobuf/dtm/poll.js +0 -14
  492. package/lib/reporter/translations/to-protobuf/dtm/rasp-rule-sample.js +0 -14
  493. package/lib/reporter/translations/to-protobuf/dtm/raw-request.js +0 -14
  494. package/lib/reporter/translations/to-protobuf/dtm/route-coverage.js +0 -14
  495. package/lib/reporter/translations/to-protobuf/dtm/simple-pair.js +0 -14
  496. package/lib/reporter/translations/to-protobuf/dtm/sql-injection-details.js +0 -14
  497. package/lib/reporter/translations/to-protobuf/dtm/ssjs-injection-details.js +0 -14
  498. package/lib/reporter/translations/to-protobuf/dtm/stack-trace-element.js +0 -14
  499. package/lib/reporter/translations/to-protobuf/dtm/trace-event/action.js +0 -14
  500. package/lib/reporter/translations/to-protobuf/dtm/trace-event/index.js +0 -14
  501. package/lib/reporter/translations/to-protobuf/dtm/trace-event/parent-object-id.js +0 -14
  502. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-object.js +0 -14
  503. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-signature.js +0 -14
  504. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-source.js +0 -14
  505. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-stack.js +0 -14
  506. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-taint-range.js +0 -14
  507. package/lib/reporter/translations/to-protobuf/dtm/trace-event/type.js +0 -14
  508. package/lib/reporter/translations/to-protobuf/dtm/untrusted-deserialization-details.js +0 -14
  509. package/lib/reporter/translations/to-protobuf/dtm/user-input.js +0 -14
  510. package/lib/reporter/translations/to-protobuf/dtm/virtual-patch-details.js +0 -14
  511. package/lib/reporter/translations/to-protobuf/dtm/xss-details.js +0 -14
  512. package/lib/reporter/translations/to-protobuf/dtm/xxe-details.js +0 -14
  513. package/lib/reporter/translations/to-protobuf/index.js +0 -14
  514. package/lib/reporter/translations/to-protobuf/settings/application-settings.js +0 -14
  515. package/lib/reporter/translations/to-protobuf/settings/assess-features.js +0 -14
  516. package/lib/reporter/translations/to-protobuf/settings/auth.js +0 -14
  517. package/lib/reporter/translations/to-protobuf/settings/bot-blocker.js +0 -14
  518. package/lib/reporter/translations/to-protobuf/settings/custom-rule-feature.js +0 -14
  519. package/lib/reporter/translations/to-protobuf/settings/defend-features.js +0 -14
  520. package/lib/reporter/translations/to-protobuf/settings/exclusions.js +0 -14
  521. package/lib/reporter/translations/to-protobuf/settings/index.js +0 -14
  522. package/lib/reporter/translations/to-protobuf/settings/input-analysis-result.js +0 -14
  523. package/lib/reporter/translations/to-protobuf/settings/inventory-features.js +0 -14
  524. package/lib/reporter/translations/to-protobuf/settings/ip-filter.js +0 -14
  525. package/lib/reporter/translations/to-protobuf/settings/log-enhancer.js +0 -14
  526. package/lib/reporter/translations/to-protobuf/settings/protection-rule.js +0 -14
  527. package/lib/reporter/translations/to-protobuf/settings/reaction.js +0 -14
  528. package/lib/reporter/translations/to-protobuf/settings/rule-definition.js +0 -14
  529. package/lib/reporter/translations/to-protobuf/settings/sampling.js +0 -14
  530. package/lib/reporter/translations/to-protobuf/settings/server-features.js +0 -14
  531. package/lib/reporter/translations/to-protobuf/settings/syslog.js +0 -14
  532. package/lib/reporter/translations/to-protobuf/settings/virtual-patch.js +0 -14
  533. package/lib/reporter/ts-reporter.js +0 -14
  534. package/lib/telemetry.js +0 -14
  535. package/lib/tracker.js +0 -14
  536. package/lib/util/base64.js +0 -14
  537. package/lib/util/bitset.js +0 -14
  538. package/lib/util/block-request.js +0 -14
  539. package/lib/util/callback-resolver.js +0 -14
  540. package/lib/util/clean-stack.js +0 -14
  541. package/lib/util/clean-string/brackets.js +0 -14
  542. package/lib/util/clean-string/clean-string-base.js +0 -14
  543. package/lib/util/clean-string/comments.js +0 -14
  544. package/lib/util/clean-string/concatenations.js +0 -14
  545. package/lib/util/clean-string/jsclean-string.js +0 -14
  546. package/lib/util/clean-string/placeholders.js +0 -14
  547. package/lib/util/clean-string/util.js +0 -14
  548. package/lib/util/colors.js +0 -14
  549. package/lib/util/config-diagnostics-utils.js +8 -22
  550. package/lib/util/file-finder.js +0 -14
  551. package/lib/util/get-file-type.js +0 -14
  552. package/lib/util/heap-dump.js +0 -14
  553. package/lib/util/html-util.js +0 -14
  554. package/lib/util/ip-analyzer.js +0 -14
  555. package/lib/util/is-agent-path.js +0 -14
  556. package/lib/util/is-contrast-error.js +0 -14
  557. package/lib/util/is-piped-to-dev.js +0 -14
  558. package/lib/util/is-string.js +0 -14
  559. package/lib/util/partial.js +0 -14
  560. package/lib/util/pkg-name.js +0 -14
  561. package/lib/util/request-util.js +0 -14
  562. package/lib/util/resolve-obj.js +0 -14
  563. package/lib/util/route-info.js +0 -14
  564. package/lib/util/some.js +0 -14
  565. package/lib/util/source-map.js +0 -14
  566. package/lib/util/static-rules.js +0 -14
  567. package/lib/util/trace-util.js +0 -14
  568. package/lib/util/traverse.js +0 -14
  569. package/lib/util/user-input-evaluator.js +0 -14
  570. package/lib/util/xml-analyzer/external-entity-finder.js +0 -14
  571. package/package.json +1 -1
  572. package/perf-logs.js +0 -14
  573. package/system-diagnostics.js +18 -25
  574. package/bin/VERSION +0 -1
  575. package/bin/contrast-service-darwin-arm64 +0 -0
  576. package/bin/contrast-service-darwin-x64 +0 -0
  577. package/bin/contrast-service-linux-arm64 +0 -0
  578. package/bin/contrast-service-linux-x64 +0 -0
  579. package/bin/contrast-service-win32-x64.exe +0 -0
  580. package/changelog.config.js +0 -56
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const BaseFramework = require('./base');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const { PATCH_TYPES } = require('../../constants');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const Http = require('./http');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const {
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * @module lib/hooks/hapi-16-reply
17
3
  * Utility class for hooking the methods we need on the result of
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const _ = require('lodash');
17
3
  const moduleHook = require('../hooks/require.js');
package/lib/hooks/http.js CHANGED
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * @module lib/hooks/http
17
3
  */
@@ -75,7 +61,10 @@ const hookServer = (server, agent, id) => {
75
61
  const self = this;
76
62
  const [event, req, res] = args;
77
63
 
78
- if (event !== 'request') {
64
+ console.log('server.emit - request', req);
65
+ console.log(`Received request ${req.url}, ${req.method}`);
66
+
67
+ if (event !== 'request' || !req) {
79
68
  return emit.apply(self, args);
80
69
  }
81
70
 
@@ -178,7 +167,7 @@ module.exports = (agent) => {
178
167
 
179
168
  moduleHook.resolve({ name: 'http2' }, (http2) => {
180
169
  patcher.patch(http2, 'createServer', {
181
- name: `create-server-http2-hooks`,
170
+ name: 'create-server-http2-hooks',
182
171
  patchType: PATCH_TYPES.MISC,
183
172
  alwaysRun: true,
184
173
  post({ result }) {
@@ -187,7 +176,7 @@ module.exports = (agent) => {
187
176
  });
188
177
 
189
178
  patcher.patch(http2, 'createSecureServer', {
190
- name: `create-secure-server-http2-hooks`,
179
+ name: 'create-secure-server-http2-hooks',
191
180
  patchType: PATCH_TYPES.MISC,
192
181
  alwaysRun: true,
193
182
  post({ result }) {
@@ -198,7 +187,7 @@ module.exports = (agent) => {
198
187
 
199
188
  moduleHook.resolve({ name: 'spdy' }, (spdy) => {
200
189
  patcher.patch(spdy, 'createServer', {
201
- name: `create-server-spdy-hooks`,
190
+ name: 'create-server-spdy-hooks',
202
191
  patchType: PATCH_TYPES.MISC,
203
192
  alwaysRun: true,
204
193
  post({ result }) {
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const mod = require('module');
17
3
  const logger = require('../../core/logger')('contrast:hooks:module:extensions');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  const fs = require('fs');
16
2
  const os = require('os');
17
3
  const makeDir = require('make-dir');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const Module = require('module');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const Module = require('module');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const logger = require('../core/logger')('contrast:hooks:object-is');
17
3
  const {
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const logger = require('../core/logger')('contrast:hooks:object-to-primitive');
17
3
  const tracker = require('../tracker');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * @module lib/hooks/patcher
17
3
  */
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const Module = require('module');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * CONTRAST-20233
17
3
  */
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * Responsible for initializing all the agent instrumentation.
17
3
  * It also collects the application's library information.
package/lib/libraries.js CHANGED
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const { stat } = require('fs').promises;
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const path = require('path');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const semver = require('semver');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  // https://www.geeksforgeeks.org/aho-corasick-algorithm-pattern-searching/
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const AhoCorasick = require('./aho-corasick');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const { KEYS, AsyncStorage } = require('../../core/async-storage');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * @module lib/protect/errors/handler
17
3
  */
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const util = require('util');
17
3
 
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const ProtectSink = require('./sinks');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const agentEmitter = require('../../agent-emitter');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const agentEmitter = require('../../agent-emitter');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const patcher = require('../../hooks/patcher');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const ProtectSink = require('./sinks');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const { SINK_TYPES } = require('../../constants');
17
3
  const { emitSinkEvent } = require('../../hooks/frameworks/common');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const { INPUT_TYPES } = require('../../constants');
17
3
  const { emitSourceEvent } = require('../../hooks/frameworks/common');