@contrast/agent 4.29.1 → 4.29.2-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (580) hide show
  1. package/LICENSE +11 -11
  2. package/README.md +57 -86
  3. package/agent-loader.js +0 -14
  4. package/bootstrap.js +0 -14
  5. package/cli-rewriter.js +0 -14
  6. package/cli.js +0 -14
  7. package/config-diagnostics.js +0 -14
  8. package/esm.mjs +0 -14
  9. package/lib/agent-emitter.js +0 -14
  10. package/lib/agent.js +0 -14
  11. package/lib/app-info.js +0 -14
  12. package/lib/assess/deadzones/index.js +0 -14
  13. package/lib/assess/deadzones/rewrite.js +0 -14
  14. package/lib/assess/express/index.js +0 -14
  15. package/lib/assess/express/route-coverage.js +0 -14
  16. package/lib/assess/express/sinks/index.js +0 -14
  17. package/lib/assess/express/sinks/xss.js +0 -14
  18. package/lib/assess/express/sources.js +0 -14
  19. package/lib/assess/fastify/index.js +0 -14
  20. package/lib/assess/fastify/route-coverage.js +0 -14
  21. package/lib/assess/fastify/sinks/index.js +1 -13
  22. package/lib/assess/fastify/sinks/response-scanning.js +0 -14
  23. package/lib/assess/fastify/sinks/unvalidated-redirect.js +0 -14
  24. package/lib/assess/fastify/sinks/xss.js +0 -14
  25. package/lib/assess/fastify/sources.js +0 -14
  26. package/lib/assess/hapi/index.js +0 -14
  27. package/lib/assess/hapi/route-coverage.js +0 -14
  28. package/lib/assess/hapi/sinks/index.js +0 -14
  29. package/lib/assess/hapi/sinks/response-scanning.js +0 -14
  30. package/lib/assess/hapi/sinks/session.js +0 -14
  31. package/lib/assess/hapi/sinks/unvalidated-redirect.js +0 -14
  32. package/lib/assess/hapi/sinks/xss.js +0 -14
  33. package/lib/assess/hapi/sources.js +0 -14
  34. package/lib/assess/index.js +0 -14
  35. package/lib/assess/koa/index.js +0 -14
  36. package/lib/assess/koa/route-coverage.js +0 -14
  37. package/lib/assess/koa/sinks/index.js +0 -14
  38. package/lib/assess/koa/sinks/response-scanning.js +0 -14
  39. package/lib/assess/koa/sinks/unvalidated-redirect.js +0 -14
  40. package/lib/assess/koa/sinks/xss.js +0 -14
  41. package/lib/assess/koa/sources.js +0 -14
  42. package/lib/assess/loopback4/index.js +0 -14
  43. package/lib/assess/loopback4/route-coverage.js +0 -14
  44. package/lib/assess/loopback4/sinks/index.js +0 -14
  45. package/lib/assess/loopback4/sinks/response-scanning.js +0 -14
  46. package/lib/assess/loopback4/sinks/xss.js +0 -14
  47. package/lib/assess/loopback4/sources.js +0 -14
  48. package/lib/assess/membrane/debraner.js +0 -14
  49. package/lib/assess/membrane/deserialization-membrane.js +0 -14
  50. package/lib/assess/membrane/index.js +0 -14
  51. package/lib/assess/membrane/source-membrane.js +0 -14
  52. package/lib/assess/models/base-event.js +0 -14
  53. package/lib/assess/models/call-context.js +0 -14
  54. package/lib/assess/models/index.js +0 -14
  55. package/lib/assess/models/propagation-event.js +0 -14
  56. package/lib/assess/models/signature.js +0 -14
  57. package/lib/assess/models/sink-event.js +0 -14
  58. package/lib/assess/models/source-event.js +0 -14
  59. package/lib/assess/models/tag-range/index.js +0 -14
  60. package/lib/assess/models/tag-range/relationships.js +0 -14
  61. package/lib/assess/models/tag-range/util.js +0 -14
  62. package/lib/assess/policy/index.js +0 -14
  63. package/lib/assess/policy/init.js +0 -14
  64. package/lib/assess/policy/util.js +0 -14
  65. package/lib/assess/propagators/JSON/parse.js +0 -14
  66. package/lib/assess/propagators/JSON/stringify.js +0 -14
  67. package/lib/assess/propagators/ajv/conditionals.js +0 -14
  68. package/lib/assess/propagators/ajv/evaluator-shim.js +0 -14
  69. package/lib/assess/propagators/ajv/index.js +0 -14
  70. package/lib/assess/propagators/ajv/json-schema-type-evaluators.js +0 -14
  71. package/lib/assess/propagators/ajv/object-walk.js +0 -14
  72. package/lib/assess/propagators/ajv/refs.js +0 -14
  73. package/lib/assess/propagators/ajv/schema-context.js +0 -14
  74. package/lib/assess/propagators/array-prototype-join.js +0 -14
  75. package/lib/assess/propagators/common.js +0 -14
  76. package/lib/assess/propagators/dustjs/escape-html.js +0 -14
  77. package/lib/assess/propagators/dustjs/escape-js.js +0 -14
  78. package/lib/assess/propagators/ejs-template-generate-source.js +0 -14
  79. package/lib/assess/propagators/encode-uri/encode-uri-component.js +0 -14
  80. package/lib/assess/propagators/encode-uri/encode-uri.js +0 -14
  81. package/lib/assess/propagators/fastify-static/allowed-path.js +0 -14
  82. package/lib/assess/propagators/handlebars-compile.js +0 -14
  83. package/lib/assess/propagators/handlebars-escape-expresssion.js +0 -14
  84. package/lib/assess/propagators/index.js +0 -14
  85. package/lib/assess/propagators/joi/any.js +0 -14
  86. package/lib/assess/propagators/joi/boolean.js +0 -14
  87. package/lib/assess/propagators/joi/expression.js +0 -14
  88. package/lib/assess/propagators/joi/index.js +0 -14
  89. package/lib/assess/propagators/joi/keys.js +0 -14
  90. package/lib/assess/propagators/joi/number.js +0 -14
  91. package/lib/assess/propagators/joi/object.js +0 -14
  92. package/lib/assess/propagators/joi/string-base.js +0 -14
  93. package/lib/assess/propagators/joi/string-schema.js +0 -14
  94. package/lib/assess/propagators/joi/values.js +0 -14
  95. package/lib/assess/propagators/manager.js +0 -14
  96. package/lib/assess/propagators/mongoose/helpers.js +0 -14
  97. package/lib/assess/propagators/mongoose/index.js +0 -14
  98. package/lib/assess/propagators/mongoose/map.js +0 -14
  99. package/lib/assess/propagators/mongoose/mixed.js +0 -14
  100. package/lib/assess/propagators/mongoose/string.js +0 -14
  101. package/lib/assess/propagators/mustache/escape.js +0 -14
  102. package/lib/assess/propagators/number.js +0 -14
  103. package/lib/assess/propagators/object.js +0 -14
  104. package/lib/assess/propagators/path/basename.js +0 -14
  105. package/lib/assess/propagators/path/common.js +0 -14
  106. package/lib/assess/propagators/path/dirname.js +0 -14
  107. package/lib/assess/propagators/path/extname.js +0 -14
  108. package/lib/assess/propagators/path/format.js +0 -14
  109. package/lib/assess/propagators/path/join.js +0 -14
  110. package/lib/assess/propagators/path/normalize.js +0 -14
  111. package/lib/assess/propagators/path/parse.js +0 -14
  112. package/lib/assess/propagators/path/relative.js +0 -14
  113. package/lib/assess/propagators/path/resolve.js +0 -14
  114. package/lib/assess/propagators/path/to-namespaced-path.js +0 -14
  115. package/lib/assess/propagators/pug-compile.js +0 -14
  116. package/lib/assess/propagators/querystring/escape.js +0 -14
  117. package/lib/assess/propagators/querystring/parse.js +0 -14
  118. package/lib/assess/propagators/querystring/stringify.js +0 -14
  119. package/lib/assess/propagators/querystring/unescape.js +0 -14
  120. package/lib/assess/propagators/querystring/utils.js +0 -14
  121. package/lib/assess/propagators/sequelize/sql-string-escape.js +0 -14
  122. package/lib/assess/propagators/sequelize/sql-string-format-named-parameters.js +0 -14
  123. package/lib/assess/propagators/sequelize/sql-string-format.js +0 -14
  124. package/lib/assess/propagators/sequelize/utils.js +0 -14
  125. package/lib/assess/propagators/string-prototype-replace.js +0 -14
  126. package/lib/assess/propagators/string-prototype-split.js +0 -14
  127. package/lib/assess/propagators/string-prototype-trim.js +0 -14
  128. package/lib/assess/propagators/string.js +0 -14
  129. package/lib/assess/propagators/template-escape.js +0 -14
  130. package/lib/assess/propagators/templates.js +0 -14
  131. package/lib/assess/propagators/url/url-prototype-parse.js +0 -14
  132. package/lib/assess/propagators/url/url-url.js +0 -14
  133. package/lib/assess/propagators/url/utils.js +0 -14
  134. package/lib/assess/propagators/util/format.js +0 -14
  135. package/lib/assess/propagators/utils.js +0 -14
  136. package/lib/assess/propagators/v8/init-hooks.js +0 -14
  137. package/lib/assess/propagators/validator/init-hooks.js +0 -14
  138. package/lib/assess/propagators/validator/validator-methods.js +0 -14
  139. package/lib/assess/response-scanning/app-activity.js +0 -14
  140. package/lib/assess/response-scanning/autocomplete-missing.js +0 -14
  141. package/lib/assess/response-scanning/cache-controls-missing.js +0 -14
  142. package/lib/assess/response-scanning/clickjacking-control-missing.js +0 -14
  143. package/lib/assess/response-scanning/common.js +0 -14
  144. package/lib/assess/response-scanning/cookies/common.js +0 -14
  145. package/lib/assess/response-scanning/cookies/events.js +0 -14
  146. package/lib/assess/response-scanning/cookies/httponly.js +0 -14
  147. package/lib/assess/response-scanning/cookies/secure-flag-missing.js +0 -14
  148. package/lib/assess/response-scanning/headers/csp-header-insecure.js +0 -14
  149. package/lib/assess/response-scanning/headers/csp-header-missing.js +0 -14
  150. package/lib/assess/response-scanning/headers/csp-utils.js +0 -14
  151. package/lib/assess/response-scanning/headers/hsts-header-missing.js +0 -14
  152. package/lib/assess/response-scanning/headers/powered-by.js +0 -14
  153. package/lib/assess/response-scanning/headers/xcontenttype-header-missing.js +0 -14
  154. package/lib/assess/response-scanning/headers/xxssprotection-header-disabled.js +0 -14
  155. package/lib/assess/response-scanning/parameter-pollution.js +0 -14
  156. package/lib/assess/response-scanning/parseable-response-emitter.js +0 -14
  157. package/lib/assess/restify/index.js +0 -14
  158. package/lib/assess/restify/route-coverage.js +0 -14
  159. package/lib/assess/restify/session.js +0 -14
  160. package/lib/assess/restify/sinks/index.js +0 -14
  161. package/lib/assess/restify/sinks/response-scanning.js +0 -14
  162. package/lib/assess/restify/sinks/unvalidated-redirect.js +0 -14
  163. package/lib/assess/restify/sinks/xss.js +0 -14
  164. package/lib/assess/restify/sources.js +0 -14
  165. package/lib/assess/sinks/common.js +0 -14
  166. package/lib/assess/sinks/dustjs-linkedin-xss.js +0 -14
  167. package/lib/assess/sinks/dynamo.js +0 -14
  168. package/lib/assess/sinks/hapi-16-xss.js +0 -14
  169. package/lib/assess/sinks/index.js +0 -14
  170. package/lib/assess/sinks/libxmljs-xxe.js +0 -14
  171. package/lib/assess/sinks/mongodb.js +0 -14
  172. package/lib/assess/sinks/rethinkdb-nosql-injection.js +0 -14
  173. package/lib/assess/sinks/ssrf-url.js +0 -14
  174. package/lib/assess/sources/event-handler.js +3 -14
  175. package/lib/assess/sources/formidable.js +0 -14
  176. package/lib/assess/sources/index.js +0 -14
  177. package/lib/assess/spdy/index.js +0 -14
  178. package/lib/assess/spdy/sinks/index.js +0 -14
  179. package/lib/assess/spdy/sinks/xss.js +0 -14
  180. package/lib/assess/static/hardcoded.js +0 -14
  181. package/lib/assess/static/read-findings-from-cache.js +0 -14
  182. package/lib/assess/technologies/index.js +0 -14
  183. package/lib/assess/utils.js +0 -14
  184. package/lib/cli-rewriter/index.js +0 -14
  185. package/lib/constants.js +0 -14
  186. package/lib/contrast.js +0 -14
  187. package/lib/core/arch-components/dynamodb.js +0 -14
  188. package/lib/core/arch-components/dynamodbv3.js +0 -14
  189. package/lib/core/arch-components/index.js +0 -14
  190. package/lib/core/arch-components/mongodb.js +0 -14
  191. package/lib/core/arch-components/mysql.js +0 -14
  192. package/lib/core/arch-components/postgres.js +0 -14
  193. package/lib/core/arch-components/rethinkdb.js +0 -14
  194. package/lib/core/arch-components/sqlite3.js +0 -14
  195. package/lib/core/arch-components/util.js +0 -14
  196. package/lib/core/async-storage/context.js +0 -14
  197. package/lib/core/async-storage/hooks/bluebird.js +0 -14
  198. package/lib/core/async-storage/hooks/mongodb.js +0 -14
  199. package/lib/core/async-storage/hooks/mysql.js +0 -14
  200. package/lib/core/async-storage/hooks/redis.js +0 -14
  201. package/lib/core/async-storage/hooks/utils.js +0 -14
  202. package/lib/core/async-storage/index.js +0 -14
  203. package/lib/core/async-storage/scopes/index.js +0 -14
  204. package/lib/core/common/formidable.js +0 -14
  205. package/lib/core/common/index.js +0 -14
  206. package/lib/core/config/options.js +0 -14
  207. package/lib/core/config/util.js +0 -14
  208. package/lib/core/exclusions/exclusion-factory.js +0 -14
  209. package/lib/core/exclusions/exclusion.js +0 -14
  210. package/lib/core/exclusions/input.js +0 -14
  211. package/lib/core/exclusions/url.js +0 -14
  212. package/lib/core/express/index.js +0 -14
  213. package/lib/core/express/utils.js +0 -14
  214. package/lib/core/fastify/index.js +0 -14
  215. package/lib/core/fastify/utils.js +0 -14
  216. package/lib/core/hapi/index.js +0 -14
  217. package/lib/core/hapi/utils.js +0 -14
  218. package/lib/core/index.js +0 -14
  219. package/lib/core/koa/index.js +0 -14
  220. package/lib/core/koa/utils.js +0 -14
  221. package/lib/core/logger/daily-rotate-file.js +0 -14
  222. package/lib/core/logger/dataflow-monitor.js +0 -14
  223. package/lib/core/logger/debug-logger.js +0 -14
  224. package/lib/core/logger/index.js +0 -14
  225. package/lib/core/logger/perf-logger.js +0 -14
  226. package/lib/core/logger/umbrella-logger.js +0 -14
  227. package/lib/core/loopback4/index.js +0 -14
  228. package/lib/core/metrics/index.js +0 -14
  229. package/lib/core/restify/index.js +0 -14
  230. package/lib/core/restify/utils.js +0 -14
  231. package/lib/core/rewrite/assignment-expression.js +0 -14
  232. package/lib/core/rewrite/binary-expression.js +0 -14
  233. package/lib/core/rewrite/call-expression.js +0 -14
  234. package/lib/core/rewrite/callees.js +0 -14
  235. package/lib/core/rewrite/catch-clause.js +0 -14
  236. package/lib/core/rewrite/function-wrap.js +0 -14
  237. package/lib/core/rewrite/import-declaration.js +0 -14
  238. package/lib/core/rewrite/index.js +0 -14
  239. package/lib/core/rewrite/injections.js +0 -14
  240. package/lib/core/rewrite/is-contrast-method.js +0 -14
  241. package/lib/core/rewrite/log.js +0 -14
  242. package/lib/core/rewrite/member-expression.js +0 -14
  243. package/lib/core/rewrite/object-property.js +0 -14
  244. package/lib/core/rewrite/prepend-globals.js +0 -14
  245. package/lib/core/rewrite/rewrite-log.js +0 -14
  246. package/lib/core/rewrite/switch-statement.js +0 -14
  247. package/lib/core/rewrite/template-literal.js +0 -14
  248. package/lib/core/stacktrace.js +0 -14
  249. package/lib/coverage.js +0 -14
  250. package/lib/feature-set.js +0 -14
  251. package/lib/generator-function.js +0 -14
  252. package/lib/hooks/array.js +0 -14
  253. package/lib/hooks/cluster.js +0 -14
  254. package/lib/hooks/dataflow-monitor.js +0 -14
  255. package/lib/hooks/encoding.js +0 -14
  256. package/lib/hooks/express-fileupload.js +0 -14
  257. package/lib/hooks/express-session.js +0 -14
  258. package/lib/hooks/fn-to-string.js +0 -14
  259. package/lib/hooks/frameworks/base.js +0 -14
  260. package/lib/hooks/frameworks/common.js +0 -14
  261. package/lib/hooks/frameworks/hapi16.js +0 -14
  262. package/lib/hooks/frameworks/http.js +0 -14
  263. package/lib/hooks/frameworks/http2.js +0 -14
  264. package/lib/hooks/frameworks/index.js +0 -14
  265. package/lib/hooks/frameworks/spdy.js +0 -14
  266. package/lib/hooks/hapi-16-reply.js +0 -14
  267. package/lib/hooks/hapi-16-session.js +0 -14
  268. package/lib/hooks/http.js +8 -18
  269. package/lib/hooks/module/extensions.js +0 -14
  270. package/lib/hooks/module/helpers.js +0 -14
  271. package/lib/hooks/module/index.js +0 -14
  272. package/lib/hooks/newrelic.js +0 -14
  273. package/lib/hooks/object-is.js +0 -14
  274. package/lib/hooks/object-to-primitive.js +0 -14
  275. package/lib/hooks/patcher.js +0 -14
  276. package/lib/hooks/require.js +0 -14
  277. package/lib/hooks/stealthy-require.js +0 -14
  278. package/lib/instrumentation.js +0 -14
  279. package/lib/libraries.js +0 -14
  280. package/lib/library-usage.js +0 -14
  281. package/lib/list-installed.js +0 -14
  282. package/lib/protect/analysis/aho-corasick.js +0 -14
  283. package/lib/protect/analysis/dfsa-analyzer.js +0 -14
  284. package/lib/protect/errors/handler-async-errors.js +0 -14
  285. package/lib/protect/errors/handler.js +0 -14
  286. package/lib/protect/errors/security-exception.js +0 -14
  287. package/lib/protect/express/index.js +0 -14
  288. package/lib/protect/express/sinks.js +0 -14
  289. package/lib/protect/express/sources.js +0 -14
  290. package/lib/protect/express/utils.js +0 -14
  291. package/lib/protect/fastify/index.js +0 -14
  292. package/lib/protect/fastify/sinks.js +0 -14
  293. package/lib/protect/fastify/sources.js +0 -14
  294. package/lib/protect/hapi/error-handler.js +0 -14
  295. package/lib/protect/hapi/index.js +0 -14
  296. package/lib/protect/hapi/sinks.js +0 -14
  297. package/lib/protect/hapi/sources.js +0 -14
  298. package/lib/protect/index.js +0 -14
  299. package/lib/protect/input-analysis.js +0 -14
  300. package/lib/protect/koa/index.js +0 -14
  301. package/lib/protect/koa/sinks.js +0 -14
  302. package/lib/protect/koa/sources.js +0 -14
  303. package/lib/protect/listeners.js +0 -14
  304. package/lib/protect/loopback4/index.js +0 -14
  305. package/lib/protect/loopback4/sources.js +0 -14
  306. package/lib/protect/models/application-context.js +0 -14
  307. package/lib/protect/models/sink-event.js +0 -14
  308. package/lib/protect/models/source-event.js +0 -14
  309. package/lib/protect/restify/index.js +0 -14
  310. package/lib/protect/restify/sinks.js +0 -14
  311. package/lib/protect/restify/sources.js +0 -14
  312. package/lib/protect/rules/assessment.js +0 -14
  313. package/lib/protect/rules/attack-patterns.js +0 -14
  314. package/lib/protect/rules/base-scanner/index.js +0 -14
  315. package/lib/protect/rules/base-scanner/java-script-scanner.js +0 -14
  316. package/lib/protect/rules/base-scanner/postgresqlscanner.js +0 -14
  317. package/lib/protect/rules/base-scanner/scan-state.js +0 -14
  318. package/lib/protect/rules/base-scanner/substring-finder.js +0 -14
  319. package/lib/protect/rules/base-scanner/token-sequence.js +0 -14
  320. package/lib/protect/rules/bot-blocker/bot-blocker-rule.js +0 -14
  321. package/lib/protect/rules/bot-blocker/index.js +0 -14
  322. package/lib/protect/rules/cmd-injection/cmdinjection-rule.js +0 -14
  323. package/lib/protect/rules/cmd-injection-command-backdoors/backdoor-detector.js +0 -14
  324. package/lib/protect/rules/cmd-injection-command-backdoors/cmd-injection-command-backdoors-rule.js +0 -14
  325. package/lib/protect/rules/cmd-injection-semantic-chained-commands/chained-command-scanner.js +0 -14
  326. package/lib/protect/rules/cmd-injection-semantic-chained-commands/cmd-injection-semantic-chained-commands-rule.js +0 -14
  327. package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/cmd-injection-semantic-dangerous-paths-rule.js +0 -14
  328. package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/dangerous-paths-scanner.js +0 -14
  329. package/lib/protect/rules/common.js +0 -14
  330. package/lib/protect/rules/index.js +0 -14
  331. package/lib/protect/rules/ip-denylist/ip-denylist-rule.js +0 -14
  332. package/lib/protect/rules/method-tampering/evaluator.js +0 -14
  333. package/lib/protect/rules/method-tampering/method-tampering-rule.js +0 -14
  334. package/lib/protect/rules/nosqli/nosql-injection-rule.js +0 -14
  335. package/lib/protect/rules/nosqli/nosql-scanner/index.js +0 -14
  336. package/lib/protect/rules/nosqli/nosql-scanner/mongodbscanner.js +0 -14
  337. package/lib/protect/rules/nosqli/nosql-scanner/rethinkdbscanner.js +0 -14
  338. package/lib/protect/rules/path-traversal/path-traversal-rule.js +0 -14
  339. package/lib/protect/rules/rule-factory.js +0 -14
  340. package/lib/protect/rules/signatures/cmd-injection/custom-searchers/chained-command-searcher.js +0 -14
  341. package/lib/protect/rules/signatures/cmd-injection/custom-searchers/index.js +0 -14
  342. package/lib/protect/rules/signatures/cmd-injection/index.js +0 -14
  343. package/lib/protect/rules/signatures/evaluator.js +0 -14
  344. package/lib/protect/rules/signatures/index.js +0 -14
  345. package/lib/protect/rules/signatures/nosql-injection/custom-searchers/index.js +0 -14
  346. package/lib/protect/rules/signatures/nosql-injection/custom-searchers/nosql-comment-searcher.js +0 -14
  347. package/lib/protect/rules/signatures/nosql-injection/custom-searchers/simple-or-searcher.js +0 -14
  348. package/lib/protect/rules/signatures/nosql-injection/index.js +0 -14
  349. package/lib/protect/rules/signatures/path-traversal/index.js +0 -14
  350. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/behavior-url-searcher.js +0 -14
  351. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/function-definition-searcher.js +0 -14
  352. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/immediate-function-searcher.js +0 -14
  353. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/index.js +0 -14
  354. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/link-and-src-target-searcher.js +0 -14
  355. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/location-set-searcher.js +0 -14
  356. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/map-access-searcher.js +0 -14
  357. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/native-function-execution-searcher.js +0 -14
  358. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/no-alnum-searcher.js +0 -14
  359. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/redefined-function-searcher.js +0 -14
  360. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/style-url-injection-searcher.js +0 -14
  361. package/lib/protect/rules/signatures/reflected-xss/custom-searchers/variable-assignment-searcher.js +0 -14
  362. package/lib/protect/rules/signatures/reflected-xss/helpers/function-call.js +0 -14
  363. package/lib/protect/rules/signatures/reflected-xss/index.js +0 -14
  364. package/lib/protect/rules/signatures/signature.js +0 -14
  365. package/lib/protect/rules/signatures/sql-injection/custom-searchers/if-else-drop-searcher.js +0 -14
  366. package/lib/protect/rules/signatures/sql-injection/custom-searchers/index.js +0 -14
  367. package/lib/protect/rules/signatures/sql-injection/custom-searchers/simple-or-searcher.js +0 -14
  368. package/lib/protect/rules/signatures/sql-injection/custom-searchers/sql-comment-searcher.js +0 -14
  369. package/lib/protect/rules/signatures/sql-injection/custom-searchers/time-function-searcher.js +0 -14
  370. package/lib/protect/rules/signatures/sql-injection/custom-searchers/tsql-exec-searcher.js +0 -14
  371. package/lib/protect/rules/signatures/sql-injection/index.js +0 -14
  372. package/lib/protect/rules/signatures/ssjs-injection/index.js +0 -14
  373. package/lib/protect/rules/signatures/unsafe-file-upload/index.js +0 -14
  374. package/lib/protect/rules/signatures/untrusted-deserialization/index.js +0 -14
  375. package/lib/protect/rules/sqli/generic-complicated.js +0 -14
  376. package/lib/protect/rules/sqli/sql-injection-rule.js +0 -14
  377. package/lib/protect/rules/sqli/sql-scanner/index.js +0 -14
  378. package/lib/protect/rules/sqli/sql-scanner/mysql-scanner.js +0 -14
  379. package/lib/protect/rules/ssjs-injection/evaluator.js +0 -14
  380. package/lib/protect/rules/ssjs-injection/ssjsinjection-rule.js +0 -14
  381. package/lib/protect/rules/unsafe-file-upload/unsafe-file-upload-rule.js +0 -14
  382. package/lib/protect/rules/untrusted-deserialization/untrusted-deserialization-rule.js +0 -14
  383. package/lib/protect/rules/virtual-patch/index.js +0 -14
  384. package/lib/protect/rules/virtual-patch/utils.js +0 -14
  385. package/lib/protect/rules/virtual-patch/virtual-patch-rule.js +0 -14
  386. package/lib/protect/rules/xss/helpers/function-call.js +0 -14
  387. package/lib/protect/rules/xss/reflected-xss-rule.js +0 -14
  388. package/lib/protect/rules/xxe/xxerule.js +0 -14
  389. package/lib/protect/sample-aggregator.js +0 -14
  390. package/lib/protect/samples.js +0 -14
  391. package/lib/protect/service.js +0 -14
  392. package/lib/protect/sinks/child-process.js +0 -14
  393. package/lib/protect/sinks/eval.js +0 -14
  394. package/lib/protect/sinks/fs.js +0 -14
  395. package/lib/protect/sinks/function.js +0 -14
  396. package/lib/protect/sinks/index.js +0 -14
  397. package/lib/protect/sinks/libxmljs.js +0 -14
  398. package/lib/protect/sinks/mongodb.js +0 -14
  399. package/lib/protect/sinks/mysql.js +0 -14
  400. package/lib/protect/sinks/node-serialize.js +0 -14
  401. package/lib/protect/sinks/postgres.js +0 -14
  402. package/lib/protect/sinks/rethinkdb.js +0 -14
  403. package/lib/protect/sinks/sequelize.js +0 -14
  404. package/lib/protect/sinks/sqlite3.js +0 -14
  405. package/lib/protect/sinks/vm.js +0 -14
  406. package/lib/protect/sources/busboy.js +0 -14
  407. package/lib/protect/sources/formidable.js +0 -14
  408. package/lib/protect/sources/index.js +0 -14
  409. package/lib/protect/validators/authorization.js +0 -14
  410. package/lib/protect/validators/common.js +0 -14
  411. package/lib/protect/validators/connection.js +0 -14
  412. package/lib/protect/validators/content-length.js +0 -14
  413. package/lib/protect/validators/host.js +0 -14
  414. package/lib/protect/validators/if-none-match.js +0 -14
  415. package/lib/protect/validators/index.js +0 -14
  416. package/lib/protect/validators/origin.js +0 -14
  417. package/lib/reporter/app-activity-queue.js +0 -14
  418. package/lib/reporter/grpc-client.js +0 -14
  419. package/lib/reporter/messages/speedracer/activity.js +0 -14
  420. package/lib/reporter/messages/speedracer/application-create.js +0 -14
  421. package/lib/reporter/messages/speedracer/application-update.js +0 -14
  422. package/lib/reporter/messages/speedracer/base.js +0 -14
  423. package/lib/reporter/messages/speedracer/index.js +0 -14
  424. package/lib/reporter/messages/speedracer/observed-route.js +0 -14
  425. package/lib/reporter/messages/speedracer/poll.js +0 -14
  426. package/lib/reporter/messages/speedracer/request.js +0 -14
  427. package/lib/reporter/messages/speedracer/startup.js +0 -14
  428. package/lib/reporter/messaging-router.js +0 -14
  429. package/lib/reporter/models/app-activity/app-activity.js +0 -14
  430. package/lib/reporter/models/app-activity/attacker-activity.js +0 -14
  431. package/lib/reporter/models/app-activity/defend.js +0 -14
  432. package/lib/reporter/models/app-activity/inventory.js +0 -14
  433. package/lib/reporter/models/app-activity/protection-rule-activity.js +0 -14
  434. package/lib/reporter/models/app-activity/rule-events.js +0 -14
  435. package/lib/reporter/models/app-activity/sample.js +0 -14
  436. package/lib/reporter/models/app-activity/source.js +0 -14
  437. package/lib/reporter/models/app-activity/user-input.js +0 -14
  438. package/lib/reporter/models/app-create.js +0 -14
  439. package/lib/reporter/models/app-update/index.js +0 -14
  440. package/lib/reporter/models/app-update/library-manifest.js +0 -14
  441. package/lib/reporter/models/app-update/library-usage.js +0 -14
  442. package/lib/reporter/models/app-update/library.js +0 -14
  443. package/lib/reporter/models/event-tag.js +0 -14
  444. package/lib/reporter/models/finding/event.js +0 -14
  445. package/lib/reporter/models/finding/finding.js +0 -14
  446. package/lib/reporter/models/frameworks/express-request.js +0 -14
  447. package/lib/reporter/models/frameworks/fastify-request.js +0 -14
  448. package/lib/reporter/models/frameworks/hapi-request.js +0 -14
  449. package/lib/reporter/models/frameworks/index.js +0 -14
  450. package/lib/reporter/models/frameworks/koa-request.js +0 -14
  451. package/lib/reporter/models/frameworks/restify-request.js +0 -14
  452. package/lib/reporter/models/observed-route.js +0 -14
  453. package/lib/reporter/models/request.js +0 -14
  454. package/lib/reporter/models/route-coverage.js +0 -14
  455. package/lib/reporter/models/startup.js +0 -14
  456. package/lib/reporter/models/trace-event-source.js +0 -14
  457. package/lib/reporter/models/utils/request-factory.js +0 -14
  458. package/lib/reporter/models/utils/user-input-factory.js +0 -14
  459. package/lib/reporter/models/utils/user-input-kit.js +0 -14
  460. package/lib/reporter/mq-client.js +0 -14
  461. package/lib/reporter/server-activity-queue.js +0 -14
  462. package/lib/reporter/socket-client.js +0 -14
  463. package/lib/reporter/speedracer/base-connection-state.js +0 -14
  464. package/lib/reporter/speedracer/constants.js +0 -14
  465. package/lib/reporter/speedracer/failure-connection-state.js +0 -14
  466. package/lib/reporter/speedracer/index.js +0 -14
  467. package/lib/reporter/speedracer/success-connection-state.js +0 -14
  468. package/lib/reporter/speedracer/unknown-connection-state.js +0 -14
  469. package/lib/reporter/translations/enums.js +0 -14
  470. package/lib/reporter/translations/helpers.js +0 -14
  471. package/lib/reporter/translations/to-protobuf/dtm/activity.js +0 -14
  472. package/lib/reporter/translations/to-protobuf/dtm/address.js +0 -14
  473. package/lib/reporter/translations/to-protobuf/dtm/agent-startup.js +0 -14
  474. package/lib/reporter/translations/to-protobuf/dtm/application-create.js +0 -14
  475. package/lib/reporter/translations/to-protobuf/dtm/application-update.js +0 -14
  476. package/lib/reporter/translations/to-protobuf/dtm/architecture-component.js +0 -14
  477. package/lib/reporter/translations/to-protobuf/dtm/attack-result.js +0 -14
  478. package/lib/reporter/translations/to-protobuf/dtm/bot-blocker-details.js +0 -14
  479. package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-details.js +0 -14
  480. package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-semantic-analysis-details.js +0 -14
  481. package/lib/reporter/translations/to-protobuf/dtm/finding.js +0 -14
  482. package/lib/reporter/translations/to-protobuf/dtm/http-method-tampering-details.js +0 -14
  483. package/lib/reporter/translations/to-protobuf/dtm/http-request.js +0 -14
  484. package/lib/reporter/translations/to-protobuf/dtm/index.js +0 -14
  485. package/lib/reporter/translations/to-protobuf/dtm/ip-denylist-details.js +0 -14
  486. package/lib/reporter/translations/to-protobuf/dtm/library-usage-update.js +0 -14
  487. package/lib/reporter/translations/to-protobuf/dtm/no-sql-injection-details.js +0 -14
  488. package/lib/reporter/translations/to-protobuf/dtm/observed-route.js +0 -14
  489. package/lib/reporter/translations/to-protobuf/dtm/pair.js +0 -14
  490. package/lib/reporter/translations/to-protobuf/dtm/path-traversal-details.js +0 -14
  491. package/lib/reporter/translations/to-protobuf/dtm/poll.js +0 -14
  492. package/lib/reporter/translations/to-protobuf/dtm/rasp-rule-sample.js +0 -14
  493. package/lib/reporter/translations/to-protobuf/dtm/raw-request.js +0 -14
  494. package/lib/reporter/translations/to-protobuf/dtm/route-coverage.js +0 -14
  495. package/lib/reporter/translations/to-protobuf/dtm/simple-pair.js +0 -14
  496. package/lib/reporter/translations/to-protobuf/dtm/sql-injection-details.js +0 -14
  497. package/lib/reporter/translations/to-protobuf/dtm/ssjs-injection-details.js +0 -14
  498. package/lib/reporter/translations/to-protobuf/dtm/stack-trace-element.js +0 -14
  499. package/lib/reporter/translations/to-protobuf/dtm/trace-event/action.js +0 -14
  500. package/lib/reporter/translations/to-protobuf/dtm/trace-event/index.js +0 -14
  501. package/lib/reporter/translations/to-protobuf/dtm/trace-event/parent-object-id.js +0 -14
  502. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-object.js +0 -14
  503. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-signature.js +0 -14
  504. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-source.js +0 -14
  505. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-stack.js +0 -14
  506. package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-taint-range.js +0 -14
  507. package/lib/reporter/translations/to-protobuf/dtm/trace-event/type.js +0 -14
  508. package/lib/reporter/translations/to-protobuf/dtm/untrusted-deserialization-details.js +0 -14
  509. package/lib/reporter/translations/to-protobuf/dtm/user-input.js +0 -14
  510. package/lib/reporter/translations/to-protobuf/dtm/virtual-patch-details.js +0 -14
  511. package/lib/reporter/translations/to-protobuf/dtm/xss-details.js +0 -14
  512. package/lib/reporter/translations/to-protobuf/dtm/xxe-details.js +0 -14
  513. package/lib/reporter/translations/to-protobuf/index.js +0 -14
  514. package/lib/reporter/translations/to-protobuf/settings/application-settings.js +0 -14
  515. package/lib/reporter/translations/to-protobuf/settings/assess-features.js +0 -14
  516. package/lib/reporter/translations/to-protobuf/settings/auth.js +0 -14
  517. package/lib/reporter/translations/to-protobuf/settings/bot-blocker.js +0 -14
  518. package/lib/reporter/translations/to-protobuf/settings/custom-rule-feature.js +0 -14
  519. package/lib/reporter/translations/to-protobuf/settings/defend-features.js +0 -14
  520. package/lib/reporter/translations/to-protobuf/settings/exclusions.js +0 -14
  521. package/lib/reporter/translations/to-protobuf/settings/index.js +0 -14
  522. package/lib/reporter/translations/to-protobuf/settings/input-analysis-result.js +0 -14
  523. package/lib/reporter/translations/to-protobuf/settings/inventory-features.js +0 -14
  524. package/lib/reporter/translations/to-protobuf/settings/ip-filter.js +0 -14
  525. package/lib/reporter/translations/to-protobuf/settings/log-enhancer.js +0 -14
  526. package/lib/reporter/translations/to-protobuf/settings/protection-rule.js +0 -14
  527. package/lib/reporter/translations/to-protobuf/settings/reaction.js +0 -14
  528. package/lib/reporter/translations/to-protobuf/settings/rule-definition.js +0 -14
  529. package/lib/reporter/translations/to-protobuf/settings/sampling.js +0 -14
  530. package/lib/reporter/translations/to-protobuf/settings/server-features.js +0 -14
  531. package/lib/reporter/translations/to-protobuf/settings/syslog.js +0 -14
  532. package/lib/reporter/translations/to-protobuf/settings/virtual-patch.js +0 -14
  533. package/lib/reporter/ts-reporter.js +0 -14
  534. package/lib/telemetry.js +0 -14
  535. package/lib/tracker.js +0 -14
  536. package/lib/util/base64.js +0 -14
  537. package/lib/util/bitset.js +0 -14
  538. package/lib/util/block-request.js +0 -14
  539. package/lib/util/callback-resolver.js +0 -14
  540. package/lib/util/clean-stack.js +0 -14
  541. package/lib/util/clean-string/brackets.js +0 -14
  542. package/lib/util/clean-string/clean-string-base.js +0 -14
  543. package/lib/util/clean-string/comments.js +0 -14
  544. package/lib/util/clean-string/concatenations.js +0 -14
  545. package/lib/util/clean-string/jsclean-string.js +0 -14
  546. package/lib/util/clean-string/placeholders.js +0 -14
  547. package/lib/util/clean-string/util.js +0 -14
  548. package/lib/util/colors.js +0 -14
  549. package/lib/util/config-diagnostics-utils.js +0 -14
  550. package/lib/util/file-finder.js +0 -14
  551. package/lib/util/get-file-type.js +0 -14
  552. package/lib/util/heap-dump.js +0 -14
  553. package/lib/util/html-util.js +0 -14
  554. package/lib/util/ip-analyzer.js +0 -14
  555. package/lib/util/is-agent-path.js +0 -14
  556. package/lib/util/is-contrast-error.js +0 -14
  557. package/lib/util/is-piped-to-dev.js +0 -14
  558. package/lib/util/is-string.js +0 -14
  559. package/lib/util/partial.js +0 -14
  560. package/lib/util/pkg-name.js +0 -14
  561. package/lib/util/request-util.js +0 -14
  562. package/lib/util/resolve-obj.js +0 -14
  563. package/lib/util/route-info.js +0 -14
  564. package/lib/util/some.js +0 -14
  565. package/lib/util/source-map.js +0 -14
  566. package/lib/util/static-rules.js +0 -14
  567. package/lib/util/trace-util.js +0 -14
  568. package/lib/util/traverse.js +0 -14
  569. package/lib/util/user-input-evaluator.js +0 -14
  570. package/lib/util/xml-analyzer/external-entity-finder.js +0 -14
  571. package/package.json +1 -1
  572. package/perf-logs.js +0 -14
  573. package/system-diagnostics.js +16 -24
  574. package/bin/VERSION +0 -1
  575. package/bin/contrast-service-darwin-arm64 +0 -0
  576. package/bin/contrast-service-darwin-x64 +0 -0
  577. package/bin/contrast-service-linux-arm64 +0 -0
  578. package/bin/contrast-service-linux-x64 +0 -0
  579. package/bin/contrast-service-win32-x64.exe +0 -0
  580. package/changelog.config.js +0 -56
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const logger = require('../../../core/logger')('contrast:async-storage:hooks');
17
3
  const moduleHook = require('../../../hooks/require');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const logger = require('../../logger')('contrast:hooks');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const logger = require('../../logger')('contrast:async-storage:hooks');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const moduleHook = require('../../../hooks/require');
17
3
  const AsyncStorage = require('../index');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const { AsyncStorage } = require('../index');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  /** @typedef {import('../models/StorageContext')} StorageContext */
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const onFinished = require('on-finished');
17
3
  const agentEmitter = require('../../../agent-emitter');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const AsyncStorage = require('../../core/async-storage');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const Formidable = require('./formidable');
17
3
  module.exports = function(agent) {
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * Sets up the agent config and CLI options. All options include a name and a description to be programatically
17
3
  * added to the commander program. Where the setting is not a boolean, they include args as well.
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const _ = require('lodash');
17
3
 
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const logger = require('../../core/logger')('contrast:rules:exclusions');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  class Exclusion {
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const _ = require('lodash');
17
3
  const UrlExclusion = require('./url.js');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const Exclusion = require('./exclusion.js');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const _ = require('lodash');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const util = require('util');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const moduleHook = require('../../hooks/require');
17
3
  const patcher = require('../../hooks/patcher');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const utils = module.exports;
17
3
 
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const moduleHook = require('../../hooks/require');
17
3
  const patcher = require('../../hooks/patcher');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const utils = module.exports;
17
3
  const { startsWith, cloneDeep } = require('lodash');
package/lib/core/index.js CHANGED
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const ExpressCore = require('./express');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const AsyncStorage = require('../async-storage');
17
3
  const moduleHook = require('../../hooks/require');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const utils = module.exports;
17
3
 
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  // registering transport with winston
16
2
  require('winston-daily-rotate-file');
17
3
  const winston = require('winston');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  const { AsyncStorage, KEYS } = require('../async-storage');
16
2
  const Debraner = require('../../../lib/assess/membrane/debraner');
17
3
 
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  /**
16
2
  * This is based off of/borrows from https://github.com/visionmedia/debug
17
3
  * Export a wrapper to an instance of the factory class
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const DebugLogFactory = require('./debug-logger');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const agentEmitter = require('../../agent-emitter');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const { writeFileSync } = require('fs');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const agentEmitter = require('../../agent-emitter');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const logger = require('../logger');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
  const moduleHook = require('../../hooks/require');
17
3
  const patcher = require('../../hooks/patcher');
@@ -1,17 +1,3 @@
1
- /**
2
- Copyright: 2022 Contrast Security, Inc
3
- Contact: support@contrastsecurity.com
4
- License: Commercial
5
-
6
- NOTICE: This Software and the patented inventions embodied within may only be
7
- used as part of Contrast Security’s commercial offerings. Even though it is
8
- made available through public repositories, use of this Software is subject to
9
- the applicable End User Licensing Agreement found at
10
- https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
11
- between Contrast Security and the End User. The Software may not be reverse
12
- engineered, modified, repackaged, sold, redistributed or otherwise used in a
13
- way not consistent with the End User License Agreement.
14
- */
15
1
  'use strict';
16
2
 
17
3
  const agentEmitter = require('../../agent-emitter');