@contrast/agent 4.3.1-0 → 4.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +10 -10
- package/README.md +86 -57
- package/agent-loader.js +14 -0
- package/bin/VERSION +1 -0
- package/bin/linux/contrast-service +0 -0
- package/bin/mac/contrast-service +0 -0
- package/bin/windows/contrast-service.exe +0 -0
- package/bootstrap.js +14 -0
- package/cli-rewriter.js +14 -0
- package/cli.js +14 -0
- package/esm.mjs +14 -0
- package/lib/agent-emitter.js +14 -0
- package/lib/agent.js +14 -0
- package/lib/app-info.js +14 -0
- package/lib/assess/deadzones/index.js +14 -0
- package/lib/assess/deadzones/rewrite.js +14 -0
- package/lib/assess/express/index.js +14 -0
- package/lib/assess/express/route-coverage.js +14 -0
- package/lib/assess/express/sinks/index.js +14 -0
- package/lib/assess/express/sinks/xss.js +14 -0
- package/lib/assess/express/sources.js +14 -0
- package/lib/assess/fastify/index.js +14 -0
- package/lib/assess/fastify/route-coverage.js +14 -0
- package/lib/assess/fastify/sinks/index.js +14 -0
- package/lib/assess/fastify/sinks/response-scanning.js +14 -0
- package/lib/assess/fastify/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/fastify/sinks/xss.js +14 -0
- package/lib/assess/fastify/sources.js +14 -0
- package/lib/assess/hapi/index.js +14 -0
- package/lib/assess/hapi/route-coverage.js +17 -3
- package/lib/assess/hapi/sinks/index.js +14 -0
- package/lib/assess/hapi/sinks/response-scanning.js +14 -0
- package/lib/assess/hapi/sinks/session.js +14 -0
- package/lib/assess/hapi/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/hapi/sinks/xss.js +14 -0
- package/lib/assess/hapi/sources.js +14 -0
- package/lib/assess/index.js +14 -0
- package/lib/assess/koa/index.js +14 -0
- package/lib/assess/koa/route-coverage.js +14 -0
- package/lib/assess/koa/sinks/index.js +14 -0
- package/lib/assess/koa/sinks/response-scanning.js +14 -0
- package/lib/assess/koa/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/koa/sinks/xss.js +14 -0
- package/lib/assess/koa/sources.js +14 -0
- package/lib/assess/loopback4/index.js +14 -0
- package/lib/assess/loopback4/route-coverage.js +14 -0
- package/lib/assess/loopback4/sinks/index.js +14 -0
- package/lib/assess/loopback4/sinks/response-scanning.js +14 -0
- package/lib/assess/loopback4/sinks/xss.js +14 -0
- package/lib/assess/loopback4/sources.js +14 -0
- package/lib/assess/membrane/debraner.js +14 -0
- package/lib/assess/membrane/deserialization-membrane.js +14 -0
- package/lib/assess/membrane/index.js +16 -8
- package/lib/assess/membrane/source-membrane.js +17 -4
- package/lib/assess/models/base-event.js +16 -2
- package/lib/assess/models/call-context.js +14 -3
- package/lib/assess/models/index.js +14 -0
- package/lib/assess/models/propagation-event.js +14 -0
- package/lib/assess/models/signature.js +14 -0
- package/lib/assess/models/sink-event.js +14 -0
- package/lib/assess/models/source-event.js +14 -0
- package/lib/assess/models/tag-range/index.js +20 -16
- package/lib/assess/models/tag-range/relationships.js +14 -0
- package/lib/assess/models/tag-range/util.js +14 -0
- package/lib/assess/policy/index.js +14 -0
- package/lib/assess/policy/init.js +14 -0
- package/lib/assess/policy/signatures.json +95 -0
- package/lib/assess/policy/util.js +23 -2
- package/lib/assess/propagators/JSON/parse.js +14 -0
- package/lib/assess/propagators/JSON/stringify.js +14 -0
- package/lib/assess/propagators/ajv/conditionals.js +14 -0
- package/lib/assess/propagators/ajv/evaluator-shim.js +14 -0
- package/lib/assess/propagators/ajv/index.js +14 -0
- package/lib/assess/propagators/ajv/json-schema-type-evaluators.js +14 -0
- package/lib/assess/propagators/ajv/object-walk.js +14 -0
- package/lib/assess/propagators/ajv/refs.js +14 -0
- package/lib/assess/propagators/ajv/schema-context.js +14 -0
- package/lib/assess/propagators/array-prototype-join.js +14 -0
- package/lib/assess/propagators/common.js +14 -0
- package/lib/assess/propagators/ejs-template-generate-source.js +14 -0
- package/lib/assess/propagators/handlebars-compile.js +14 -0
- package/lib/assess/propagators/handlebars-escape-expresssion.js +14 -0
- package/lib/assess/propagators/index.js +14 -0
- package/lib/assess/propagators/joi/boolean.js +14 -0
- package/lib/assess/propagators/joi/expression.js +14 -0
- package/lib/assess/propagators/joi/index.js +14 -0
- package/lib/assess/propagators/joi/number.js +14 -0
- package/lib/assess/propagators/joi/string-base.js +14 -0
- package/lib/assess/propagators/joi/string-schema.js +14 -0
- package/lib/assess/propagators/joi/values.js +14 -0
- package/lib/assess/propagators/manager.js +31 -3
- package/lib/assess/propagators/object.js +14 -0
- package/lib/assess/propagators/path/basename.js +14 -0
- package/lib/assess/propagators/path/common.js +47 -13
- package/lib/assess/propagators/path/dirname.js +14 -0
- package/lib/assess/propagators/path/extname.js +14 -0
- package/lib/assess/propagators/path/format.js +14 -0
- package/lib/assess/propagators/path/join.js +14 -0
- package/lib/assess/propagators/path/normalize.js +20 -1
- package/lib/assess/propagators/path/parse.js +14 -0
- package/lib/assess/propagators/path/relative.js +14 -0
- package/lib/assess/propagators/path/resolve.js +14 -0
- package/lib/assess/propagators/path/to-namespaced-path.js +14 -0
- package/lib/assess/propagators/pug-compile.js +14 -0
- package/lib/assess/propagators/querystring/escape.js +14 -0
- package/lib/assess/propagators/querystring/parse.js +14 -0
- package/lib/assess/propagators/querystring/stringify.js +14 -0
- package/lib/assess/propagators/querystring/unescape.js +14 -0
- package/lib/assess/propagators/querystring/utils.js +14 -0
- package/lib/assess/propagators/sequelize/sql-string-escape.js +14 -0
- package/lib/assess/propagators/sequelize/sql-string-format-named-parameters.js +14 -0
- package/lib/assess/propagators/sequelize/sql-string-format.js +14 -0
- package/lib/assess/propagators/sequelize/utils.js +14 -0
- package/lib/assess/propagators/string-prototype-replace.js +14 -0
- package/lib/assess/propagators/string-prototype-split.js +14 -0
- package/lib/assess/propagators/string-prototype-trim.js +14 -0
- package/lib/assess/propagators/string.js +14 -0
- package/lib/assess/propagators/templates.js +14 -0
- package/lib/assess/propagators/url/url-prototype-parse.js +14 -0
- package/lib/assess/propagators/url/url-url.js +14 -0
- package/lib/assess/propagators/url/utils.js +14 -0
- package/lib/assess/propagators/util/format.js +14 -0
- package/lib/assess/propagators/utils.js +14 -0
- package/lib/assess/propagators/v8/init-hooks.js +14 -0
- package/lib/assess/propagators/validator/init-hooks.js +14 -0
- package/lib/assess/propagators/validator/validator-methods.js +14 -0
- package/lib/assess/response-scanning/app-activity.js +14 -0
- package/lib/assess/response-scanning/autocomplete-missing.js +14 -2
- package/lib/assess/response-scanning/cache-controls-missing.js +14 -0
- package/lib/assess/response-scanning/clickjacking-control-missing.js +14 -0
- package/lib/assess/response-scanning/common.js +14 -0
- package/lib/assess/response-scanning/cookies/common.js +14 -0
- package/lib/assess/response-scanning/cookies/events.js +14 -0
- package/lib/assess/response-scanning/cookies/httponly.js +14 -0
- package/lib/assess/response-scanning/cookies/secure-flag-missing.js +14 -0
- package/lib/assess/response-scanning/headers/csp-header-insecure.js +14 -0
- package/lib/assess/response-scanning/headers/csp-header-missing.js +14 -0
- package/lib/assess/response-scanning/headers/csp-utils.js +14 -0
- package/lib/assess/response-scanning/headers/hsts-header-missing.js +14 -0
- package/lib/assess/response-scanning/headers/powered-by.js +14 -0
- package/lib/assess/response-scanning/headers/xcontenttype-header-missing.js +14 -0
- package/lib/assess/response-scanning/headers/xxssprotection-header-disabled.js +14 -0
- package/lib/assess/response-scanning/parameter-pollution.js +14 -2
- package/lib/assess/response-scanning/parseable-response-emitter.js +14 -0
- package/lib/assess/restify/index.js +14 -0
- package/lib/assess/restify/route-coverage.js +14 -0
- package/lib/assess/restify/session.js +14 -0
- package/lib/assess/restify/sinks/index.js +14 -0
- package/lib/assess/restify/sinks/response-scanning.js +14 -0
- package/lib/assess/restify/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/restify/sinks/xss.js +14 -0
- package/lib/assess/restify/sources.js +14 -0
- package/lib/assess/sinks/common.js +14 -0
- package/lib/assess/sinks/dynamo.js +14 -0
- package/lib/assess/sinks/hapi-16-xss.js +14 -0
- package/lib/assess/sinks/index.js +14 -0
- package/lib/assess/sinks/libxmljs-xxe.js +14 -0
- package/lib/assess/sinks/mongodb.js +25 -7
- package/lib/assess/sinks/ssrf-url.js +14 -0
- package/lib/assess/sources/formidable.js +14 -0
- package/lib/assess/sources/index.js +14 -0
- package/lib/assess/static/hardcoded.js +14 -0
- package/lib/assess/technologies/index.js +14 -0
- package/lib/assess/utils.js +14 -0
- package/lib/cli-rewriter/index.js +14 -0
- package/lib/constants.js +14 -0
- package/lib/contrast.js +18 -5
- package/lib/core/arch-components/dynamodb.js +14 -0
- package/lib/core/arch-components/index.js +14 -0
- package/lib/core/arch-components/mongodb.js +14 -0
- package/lib/core/arch-components/mysql.js +14 -0
- package/lib/core/arch-components/postgres.js +14 -0
- package/lib/core/arch-components/sqlite3.js +14 -0
- package/lib/core/async-storage/context.js +14 -0
- package/lib/core/async-storage/hooks/bluebird.js +34 -0
- package/lib/core/async-storage/hooks/mongodb-core.js +14 -0
- package/lib/core/async-storage/hooks/mysql.js +14 -0
- package/lib/core/async-storage/hooks/redis.js +14 -0
- package/lib/core/async-storage/hooks/utils.js +14 -0
- package/lib/core/async-storage/index.js +14 -0
- package/lib/core/async-storage/scopes/index.js +14 -0
- package/lib/core/common/formidable.js +14 -0
- package/lib/core/common/index.js +14 -0
- package/lib/core/config/options.js +14 -0
- package/lib/core/config/util.js +14 -0
- package/lib/core/exclusions/exclusion-factory.js +14 -0
- package/lib/core/exclusions/exclusion.js +14 -0
- package/lib/core/exclusions/input.js +14 -0
- package/lib/core/exclusions/url.js +14 -0
- package/lib/core/express/index.js +14 -0
- package/lib/core/express/utils.js +15 -1
- package/lib/core/fastify/index.js +14 -0
- package/lib/core/fastify/utils.js +14 -0
- package/lib/core/hapi/index.js +14 -0
- package/lib/core/hapi/utils.js +14 -0
- package/lib/core/index.js +14 -0
- package/lib/core/koa/index.js +14 -0
- package/lib/core/koa/utils.js +14 -0
- package/lib/core/logger/daily-rotate-file.js +14 -0
- package/lib/core/logger/dataflow-monitor.js +14 -0
- package/lib/core/logger/debug-logger.js +29 -17
- package/lib/core/logger/index.js +14 -0
- package/lib/core/logger/perf-logger.js +14 -0
- package/lib/core/logger/umbrella-logger.js +14 -0
- package/lib/core/loopback4/index.js +14 -0
- package/lib/core/metrics/index.js +14 -0
- package/lib/core/restify/index.js +14 -0
- package/lib/core/restify/utils.js +14 -0
- package/lib/core/rewrite/assignment-expression.js +14 -0
- package/lib/core/rewrite/binary-expression.js +14 -0
- package/lib/core/rewrite/call-expression.js +14 -0
- package/lib/core/rewrite/callees.js +14 -0
- package/lib/core/rewrite/catch-clause.js +14 -0
- package/lib/core/rewrite/function-wrap.js +14 -0
- package/lib/core/rewrite/index.js +14 -0
- package/lib/core/rewrite/injections.js +14 -0
- package/lib/core/rewrite/is-contrast-method.js +14 -0
- package/lib/core/rewrite/log.js +14 -0
- package/lib/core/rewrite/member-expression.js +14 -0
- package/lib/core/rewrite/object-property.js +14 -0
- package/lib/core/rewrite/prepend-globals.js +14 -0
- package/lib/core/rewrite/rewrite-log.js +14 -0
- package/lib/core/rewrite/switch-statement.js +14 -0
- package/lib/core/rewrite/template-literal.js +14 -0
- package/lib/core/stacktrace.js +15 -3
- package/lib/coverage.js +14 -0
- package/lib/feature-set.js +16 -1
- package/lib/generator-function.js +14 -0
- package/lib/hooks/array.js +14 -0
- package/lib/hooks/cluster.js +14 -0
- package/lib/hooks/dataflow-monitor.js +14 -0
- package/lib/hooks/encoding.js +15 -1
- package/lib/hooks/express-fileupload.js +14 -0
- package/lib/hooks/express-session.js +14 -0
- package/lib/hooks/fn-to-string.js +14 -0
- package/lib/hooks/frameworks/base.js +14 -0
- package/lib/hooks/frameworks/common.js +14 -0
- package/lib/hooks/frameworks/hapi16.js +14 -0
- package/lib/hooks/frameworks/http.js +14 -0
- package/lib/hooks/frameworks/https.js +14 -0
- package/lib/hooks/frameworks/index.js +14 -0
- package/lib/hooks/hapi-16-reply.js +14 -0
- package/lib/hooks/hapi-16-session.js +14 -0
- package/lib/hooks/http.js +14 -0
- package/lib/hooks/module/extensions.js +14 -0
- package/lib/hooks/module/helpers.js +14 -0
- package/lib/hooks/module/index.js +14 -0
- package/lib/hooks/newrelic.js +14 -0
- package/lib/hooks/object-is.js +14 -0
- package/lib/hooks/object-to-primitive.js +14 -0
- package/lib/hooks/patcher.js +28 -24
- package/lib/hooks/require.js +14 -0
- package/lib/hooks/stealthy-require.js +14 -0
- package/lib/instrumentation.js +14 -0
- package/lib/libraries.js +21 -3
- package/lib/library-usage.js +14 -0
- package/lib/list-installed.js +14 -0
- package/lib/protect/analysis/aho-corasick.js +27 -30
- package/lib/protect/analysis/dfsa-analyzer.js +14 -0
- package/lib/protect/errors/handler.js +14 -0
- package/lib/protect/errors/security-exception.js +14 -0
- package/lib/protect/express/index.js +14 -0
- package/lib/protect/express/sinks.js +14 -0
- package/lib/protect/express/sources.js +14 -0
- package/lib/protect/fastify/index.js +14 -0
- package/lib/protect/fastify/sinks.js +14 -0
- package/lib/protect/fastify/sources.js +14 -0
- package/lib/protect/hapi/error-handler.js +14 -0
- package/lib/protect/hapi/index.js +14 -0
- package/lib/protect/hapi/sinks.js +14 -0
- package/lib/protect/hapi/sources.js +14 -0
- package/lib/protect/index.js +14 -0
- package/lib/protect/input-analysis.js +14 -0
- package/lib/protect/koa/index.js +14 -0
- package/lib/protect/koa/sinks.js +14 -0
- package/lib/protect/koa/sources.js +14 -0
- package/lib/protect/listeners.js +14 -0
- package/lib/protect/loopback4/index.js +14 -0
- package/lib/protect/loopback4/sources.js +14 -0
- package/lib/protect/models/application-context.js +14 -0
- package/lib/protect/models/sink-event.js +14 -0
- package/lib/protect/models/source-event.js +14 -0
- package/lib/protect/restify/index.js +14 -0
- package/lib/protect/restify/sinks.js +14 -0
- package/lib/protect/restify/sources.js +14 -0
- package/lib/protect/rules/assessment.js +14 -0
- package/lib/protect/rules/attack-patterns.js +14 -0
- package/lib/protect/rules/base-scanner/index.js +14 -0
- package/lib/protect/rules/base-scanner/java-script-scanner.js +14 -0
- package/lib/protect/rules/base-scanner/postgresqlscanner.js +14 -0
- package/lib/protect/rules/base-scanner/scan-state.js +14 -0
- package/lib/protect/rules/base-scanner/substring-finder.js +14 -0
- package/lib/protect/rules/base-scanner/token-sequence.js +14 -0
- package/lib/protect/rules/bot-blocker/bot-blocker-rule.js +14 -0
- package/lib/protect/rules/bot-blocker/index.js +14 -0
- package/lib/protect/rules/cmd-injection/cmdinjection-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-command-backdoors/backdoor-detector.js +17 -3
- package/lib/protect/rules/cmd-injection-command-backdoors/cmd-injection-command-backdoors-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-chained-commands/chained-command-scanner.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-chained-commands/cmd-injection-semantic-chained-commands-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/cmd-injection-semantic-dangerous-paths-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/dangerous-paths-scanner.js +14 -0
- package/lib/protect/rules/common.js +14 -0
- package/lib/protect/rules/index.js +14 -0
- package/lib/protect/rules/ip-denylist/ip-denylist-rule.js +14 -0
- package/lib/protect/rules/method-tampering/evaluator.js +14 -0
- package/lib/protect/rules/method-tampering/method-tampering-rule.js +14 -0
- package/lib/protect/rules/nosqli/no-sql-injection-rule.js +14 -0
- package/lib/protect/rules/nosqli/nosql-scanner/index.js +14 -0
- package/lib/protect/rules/nosqli/nosql-scanner/mongodbscanner.js +14 -0
- package/lib/protect/rules/path-traversal/path-traversal-rule.js +14 -0
- package/lib/protect/rules/rule-factory.js +14 -0
- package/lib/protect/rules/signatures/cmd-injection/custom-searchers/chained-command-searcher.js +14 -0
- package/lib/protect/rules/signatures/cmd-injection/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/cmd-injection/index.js +14 -0
- package/lib/protect/rules/signatures/evaluator.js +14 -0
- package/lib/protect/rules/signatures/index.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/nosql-comment-searcher.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/simple-or-searcher.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/index.js +14 -0
- package/lib/protect/rules/signatures/path-traversal/index.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/behavior-url-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/function-definition-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/immediate-function-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/link-and-src-target-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/location-set-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/map-access-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/native-function-execution-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/no-alnum-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/redefined-function-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/style-url-injection-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/variable-assignment-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/helpers/function-call.js +15 -1
- package/lib/protect/rules/signatures/reflected-xss/index.js +14 -0
- package/lib/protect/rules/signatures/signature.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/if-else-drop-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/simple-or-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/sql-comment-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/time-function-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/tsql-exec-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/index.js +14 -0
- package/lib/protect/rules/signatures/ssjs-injection/index.js +14 -0
- package/lib/protect/rules/signatures/unsafe-file-upload/index.js +14 -0
- package/lib/protect/rules/signatures/untrusted-deserialization/index.js +14 -0
- package/lib/protect/rules/sqli/generic-complicated.js +14 -0
- package/lib/protect/rules/sqli/sql-injection-rule.js +14 -0
- package/lib/protect/rules/sqli/sql-scanner/index.js +14 -0
- package/lib/protect/rules/sqli/sql-scanner/mysql-scanner.js +14 -0
- package/lib/protect/rules/ssjs-injection/evaluator.js +14 -0
- package/lib/protect/rules/ssjs-injection/ssjsinjection-rule.js +14 -0
- package/lib/protect/rules/unsafe-file-upload/unsafe-file-upload-rule.js +14 -0
- package/lib/protect/rules/untrusted-deserialization/untrusted-deserialization-rule.js +14 -0
- package/lib/protect/rules/virtual-patch/index.js +14 -0
- package/lib/protect/rules/virtual-patch/utils.js +14 -0
- package/lib/protect/rules/virtual-patch/virtual-patch-rule.js +14 -0
- package/lib/protect/rules/xss/helpers/function-call.js +15 -1
- package/lib/protect/rules/xss/reflected-xss-rule.js +14 -0
- package/lib/protect/rules/xxe/xxerule.js +14 -0
- package/lib/protect/sample-aggregator.js +14 -0
- package/lib/protect/samples.js +14 -0
- package/lib/protect/service.js +14 -0
- package/lib/protect/sinks/child-process.js +14 -0
- package/lib/protect/sinks/eval.js +14 -0
- package/lib/protect/sinks/fs.js +14 -0
- package/lib/protect/sinks/function.js +14 -0
- package/lib/protect/sinks/index.js +14 -0
- package/lib/protect/sinks/libxmljs.js +14 -0
- package/lib/protect/sinks/mongodb.js +14 -0
- package/lib/protect/sinks/mysql.js +14 -0
- package/lib/protect/sinks/node-serialize.js +14 -0
- package/lib/protect/sinks/postgres.js +14 -0
- package/lib/protect/sinks/sequelize.js +14 -0
- package/lib/protect/sinks/sqlite3.js +14 -0
- package/lib/protect/sinks/vm.js +14 -0
- package/lib/protect/sources/busboy.js +14 -0
- package/lib/protect/sources/formidable.js +14 -0
- package/lib/protect/sources/index.js +14 -0
- package/lib/protect/validators/authorization.js +14 -0
- package/lib/protect/validators/common.js +14 -0
- package/lib/protect/validators/connection.js +14 -0
- package/lib/protect/validators/content-length.js +14 -0
- package/lib/protect/validators/host.js +14 -0
- package/lib/protect/validators/if-none-match.js +14 -0
- package/lib/protect/validators/index.js +14 -0
- package/lib/protect/validators/origin.js +14 -0
- package/lib/reporter/app-activity-queue.js +14 -0
- package/lib/reporter/grpc-client.js +14 -0
- package/lib/reporter/messages/speedracer/activity.js +14 -0
- package/lib/reporter/messages/speedracer/application-create.js +14 -0
- package/lib/reporter/messages/speedracer/application-update.js +14 -0
- package/lib/reporter/messages/speedracer/base.js +14 -0
- package/lib/reporter/messages/speedracer/index.js +14 -0
- package/lib/reporter/messages/speedracer/observed-route.js +14 -0
- package/lib/reporter/messages/speedracer/poll.js +14 -0
- package/lib/reporter/messages/speedracer/request.js +14 -0
- package/lib/reporter/messages/speedracer/startup.js +14 -0
- package/lib/reporter/messaging-router.js +14 -0
- package/lib/reporter/models/app-activity/app-activity.js +14 -0
- package/lib/reporter/models/app-activity/attacker-activity.js +14 -0
- package/lib/reporter/models/app-activity/defend.js +14 -0
- package/lib/reporter/models/app-activity/inventory.js +14 -0
- package/lib/reporter/models/app-activity/protection-rule-activity.js +14 -0
- package/lib/reporter/models/app-activity/rule-events.js +14 -0
- package/lib/reporter/models/app-activity/sample.js +14 -0
- package/lib/reporter/models/app-activity/source.js +14 -0
- package/lib/reporter/models/app-activity/user-input.js +14 -0
- package/lib/reporter/models/app-create.js +14 -0
- package/lib/reporter/models/app-update/index.js +16 -4
- package/lib/reporter/models/app-update/library-manifest.js +14 -0
- package/lib/reporter/models/app-update/library-usage.js +14 -0
- package/lib/reporter/models/app-update/library.js +14 -0
- package/lib/reporter/models/event-tag.js +14 -0
- package/lib/reporter/models/finding/event.js +14 -0
- package/lib/reporter/models/finding/finding.js +14 -0
- package/lib/reporter/models/frameworks/express-request.js +14 -0
- package/lib/reporter/models/frameworks/fastify-request.js +14 -0
- package/lib/reporter/models/frameworks/hapi-request.js +14 -0
- package/lib/reporter/models/frameworks/index.js +14 -0
- package/lib/reporter/models/frameworks/koa-request.js +14 -0
- package/lib/reporter/models/frameworks/restify-request.js +14 -0
- package/lib/reporter/models/observed-route.js +14 -0
- package/lib/reporter/models/request.js +14 -0
- package/lib/reporter/models/route-coverage.js +14 -0
- package/lib/reporter/models/startup.js +14 -0
- package/lib/reporter/models/trace-event-source.js +14 -0
- package/lib/reporter/models/utils/request-factory.js +14 -0
- package/lib/reporter/models/utils/user-input-factory.js +14 -0
- package/lib/reporter/models/utils/user-input-kit.js +14 -0
- package/lib/reporter/mq-client.js +14 -0
- package/lib/reporter/server-activity-queue.js +14 -0
- package/lib/reporter/socket-client.js +14 -0
- package/lib/reporter/speedracer/base-connection-state.js +14 -0
- package/lib/reporter/speedracer/constants.js +14 -0
- package/lib/reporter/speedracer/failure-connection-state.js +14 -0
- package/lib/reporter/speedracer/index.js +14 -0
- package/lib/reporter/speedracer/success-connection-state.js +14 -0
- package/lib/reporter/speedracer/unknown-connection-state.js +14 -0
- package/lib/reporter/translations/enums.js +14 -0
- package/lib/reporter/translations/helpers.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/activity.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/address.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/agent-startup.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/application-create.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/application-update.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/architecture-component.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/attack-result.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/bot-blocker-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-semantic-analysis-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/finding.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/http-method-tampering-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/http-request.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/ip-denylist-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/library-usage-update.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/no-sql-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/observed-route.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/pair.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/path-traversal-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/poll.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/rasp-rule-sample.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/raw-request.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/route-coverage.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/simple-pair.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/sql-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/ssjs-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/stack-trace-element.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/action.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/parent-object-id.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-object.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-signature.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-source.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-stack.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-taint-range.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/type.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/untrusted-deserialization-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/user-input.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/virtual-patch-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/xss-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/xxe-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/application-settings.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/assess-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/auth.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/bot-blocker.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/custom-rule-feature.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/defend-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/exclusions.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/input-analysis-result.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/inventory-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/ip-filter.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/log-enhancer.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/protection-rule.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/reaction.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/rule-definition.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/sampling.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/server-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/syslog.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/virtual-patch.js +14 -0
- package/lib/reporter/ts-reporter.js +14 -0
- package/lib/tracker.js +14 -0
- package/lib/util/base64.js +14 -0
- package/lib/util/bitset.js +14 -0
- package/lib/util/block-request.js +14 -0
- package/lib/util/callback-resolver.js +14 -0
- package/lib/util/clean-stack.js +15 -1
- package/lib/util/clean-string/brackets.js +17 -3
- package/lib/util/clean-string/clean-string-base.js +14 -0
- package/lib/util/clean-string/comments.js +14 -0
- package/lib/util/clean-string/concatenations.js +15 -1
- package/lib/util/clean-string/jsclean-string.js +14 -0
- package/lib/util/clean-string/placeholders.js +14 -0
- package/lib/util/clean-string/util.js +15 -2
- package/lib/util/colors.js +14 -0
- package/lib/util/file-finder.js +14 -0
- package/lib/util/heap-dump.js +14 -0
- package/lib/util/html-util.js +14 -0
- package/lib/util/ip-analyzer.js +15 -1
- package/lib/util/is-agent-path.js +14 -0
- package/lib/util/is-contrast-error.js +14 -0
- package/lib/util/is-piped-to-dev.js +14 -0
- package/lib/util/is-string.js +14 -0
- package/lib/util/partial.js +14 -0
- package/lib/util/pkg-name.js +14 -0
- package/lib/util/request-util.js +14 -0
- package/lib/util/resolve-obj.js +14 -0
- package/lib/util/route-info.js +14 -0
- package/lib/util/source-map.js +14 -0
- package/lib/util/static-rules.js +14 -0
- package/lib/util/trace-util.js +14 -0
- package/lib/util/traverse.js +14 -0
- package/lib/util/user-input-evaluator.js +14 -0
- package/lib/util/xml-analyzer/external-entity-finder.js +15 -1
- package/node_modules/bindings/LICENSE.md +22 -0
- package/node_modules/bindings/README.md +98 -0
- package/node_modules/bindings/bindings.js +221 -0
- package/node_modules/bindings/package.json +32 -0
- package/node_modules/file-uri-to-path/.npmignore +1 -0
- package/node_modules/file-uri-to-path/.travis.yml +30 -0
- package/node_modules/file-uri-to-path/History.md +21 -0
- package/node_modules/file-uri-to-path/LICENSE +20 -0
- package/node_modules/file-uri-to-path/README.md +74 -0
- package/node_modules/file-uri-to-path/index.d.ts +2 -0
- package/node_modules/file-uri-to-path/index.js +66 -0
- package/node_modules/file-uri-to-path/package.json +36 -0
- package/node_modules/file-uri-to-path/test/test.js +24 -0
- package/node_modules/file-uri-to-path/test/tests.json +13 -0
- package/node_modules/nan/CHANGELOG.md +537 -0
- package/node_modules/nan/LICENSE.md +13 -0
- package/node_modules/nan/README.md +455 -0
- package/node_modules/nan/doc/asyncworker.md +146 -0
- package/node_modules/nan/doc/buffers.md +54 -0
- package/node_modules/nan/doc/callback.md +76 -0
- package/node_modules/nan/doc/converters.md +41 -0
- package/node_modules/nan/doc/errors.md +226 -0
- package/node_modules/nan/doc/json.md +62 -0
- package/node_modules/nan/doc/maybe_types.md +583 -0
- package/node_modules/nan/doc/methods.md +664 -0
- package/node_modules/nan/doc/new.md +147 -0
- package/node_modules/nan/doc/node_misc.md +123 -0
- package/node_modules/nan/doc/object_wrappers.md +263 -0
- package/node_modules/nan/doc/persistent.md +296 -0
- package/node_modules/nan/doc/scopes.md +73 -0
- package/node_modules/nan/doc/script.md +38 -0
- package/node_modules/nan/doc/string_bytes.md +62 -0
- package/node_modules/nan/doc/v8_internals.md +199 -0
- package/node_modules/nan/doc/v8_misc.md +85 -0
- package/node_modules/nan/include_dirs.js +1 -0
- package/node_modules/nan/nan.h +2898 -0
- package/node_modules/nan/nan_callbacks.h +88 -0
- package/node_modules/nan/nan_callbacks_12_inl.h +514 -0
- package/node_modules/nan/nan_callbacks_pre_12_inl.h +520 -0
- package/node_modules/nan/nan_converters.h +72 -0
- package/node_modules/nan/nan_converters_43_inl.h +68 -0
- package/node_modules/nan/nan_converters_pre_43_inl.h +42 -0
- package/node_modules/nan/nan_define_own_property_helper.h +29 -0
- package/node_modules/nan/nan_implementation_12_inl.h +430 -0
- package/node_modules/nan/nan_implementation_pre_12_inl.h +263 -0
- package/node_modules/nan/nan_json.h +166 -0
- package/node_modules/nan/nan_maybe_43_inl.h +356 -0
- package/node_modules/nan/nan_maybe_pre_43_inl.h +268 -0
- package/node_modules/nan/nan_new.h +340 -0
- package/node_modules/nan/nan_object_wrap.h +156 -0
- package/node_modules/nan/nan_persistent_12_inl.h +132 -0
- package/node_modules/nan/nan_persistent_pre_12_inl.h +242 -0
- package/node_modules/nan/nan_private.h +73 -0
- package/node_modules/nan/nan_string_bytes.h +305 -0
- package/node_modules/nan/nan_typedarray_contents.h +96 -0
- package/node_modules/nan/nan_weak.h +437 -0
- package/node_modules/nan/package.json +41 -0
- package/node_modules/nan/tools/1to2.js +412 -0
- package/node_modules/nan/tools/README.md +14 -0
- package/node_modules/nan/tools/package.json +19 -0
- package/node_modules/unix-dgram/LICENSE +13 -0
- package/node_modules/unix-dgram/README.md +107 -0
- package/node_modules/unix-dgram/binding.gyp +20 -0
- package/node_modules/unix-dgram/build/Makefile +324 -0
- package/node_modules/unix-dgram/build/Release/.deps/Release/obj.target/unix_dgram/src/unix_dgram.o.d +58 -0
- package/node_modules/unix-dgram/build/Release/.deps/Release/obj.target/unix_dgram.node.d +1 -0
- package/node_modules/unix-dgram/build/Release/.deps/Release/unix_dgram.node.d +1 -0
- package/node_modules/unix-dgram/build/Release/obj.target/unix_dgram/src/unix_dgram.o +0 -0
- package/node_modules/unix-dgram/build/Release/obj.target/unix_dgram.node +0 -0
- package/node_modules/unix-dgram/build/Release/unix_dgram.node +0 -0
- package/node_modules/unix-dgram/build/binding.Makefile +6 -0
- package/node_modules/unix-dgram/build/config.gypi +213 -0
- package/node_modules/unix-dgram/build/unix_dgram.target.mk +159 -0
- package/node_modules/unix-dgram/lib/unix_dgram.js +168 -0
- package/node_modules/unix-dgram/package.json +36 -0
- package/node_modules/unix-dgram/src/unix_dgram.cc +404 -0
- package/node_modules/unix-dgram/src/win_dummy.cc +7 -0
- package/node_modules/unix-dgram/test/test-connect-callback.js +68 -0
- package/node_modules/unix-dgram/test/test-connect.js +53 -0
- package/node_modules/unix-dgram/test/test-dgram-unix.js +58 -0
- package/node_modules/unix-dgram/test/test-send-error.js +26 -0
- package/package.json +3 -2
- package/perf-logs.js +14 -0
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
## Miscellaneous V8 Helpers
|
|
2
|
+
|
|
3
|
+
- <a href="#api_nan_utf8_string"><b><code>Nan::Utf8String</code></b></a>
|
|
4
|
+
- <a href="#api_nan_get_current_context"><b><code>Nan::GetCurrentContext()</code></b></a>
|
|
5
|
+
- <a href="#api_nan_set_isolate_data"><b><code>Nan::SetIsolateData()</code></b></a>
|
|
6
|
+
- <a href="#api_nan_get_isolate_data"><b><code>Nan::GetIsolateData()</code></b></a>
|
|
7
|
+
- <a href="#api_nan_typedarray_contents"><b><code>Nan::TypedArrayContents</code></b></a>
|
|
8
|
+
|
|
9
|
+
|
|
10
|
+
<a name="api_nan_utf8_string"></a>
|
|
11
|
+
### Nan::Utf8String
|
|
12
|
+
|
|
13
|
+
Converts an object to a UTF-8-encoded character array. If conversion to a string fails (e.g. due to an exception in the toString() method of the object) then the length() method returns 0 and the * operator returns NULL. The underlying memory used for this object is managed by the object.
|
|
14
|
+
|
|
15
|
+
An implementation of [`v8::String::Utf8Value`](https://v8docs.nodesource.com/node-8.16/d4/d1b/classv8_1_1_string_1_1_utf8_value.html) that is consistent across all supported versions of V8.
|
|
16
|
+
|
|
17
|
+
Definition:
|
|
18
|
+
|
|
19
|
+
```c++
|
|
20
|
+
class Nan::Utf8String {
|
|
21
|
+
public:
|
|
22
|
+
Nan::Utf8String(v8::Local<v8::Value> from);
|
|
23
|
+
|
|
24
|
+
int length() const;
|
|
25
|
+
|
|
26
|
+
char* operator*();
|
|
27
|
+
const char* operator*() const;
|
|
28
|
+
};
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
<a name="api_nan_get_current_context"></a>
|
|
32
|
+
### Nan::GetCurrentContext()
|
|
33
|
+
|
|
34
|
+
A call to [`v8::Isolate::GetCurrent()->GetCurrentContext()`](https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a81c7a1ed7001ae2a65e89107f75fd053) that works across all supported versions of V8.
|
|
35
|
+
|
|
36
|
+
Signature:
|
|
37
|
+
|
|
38
|
+
```c++
|
|
39
|
+
v8::Local<v8::Context> Nan::GetCurrentContext()
|
|
40
|
+
```
|
|
41
|
+
|
|
42
|
+
<a name="api_nan_set_isolate_data"></a>
|
|
43
|
+
### Nan::SetIsolateData()
|
|
44
|
+
|
|
45
|
+
A helper to provide a consistent API to [`v8::Isolate#SetData()`](https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#a7acadfe7965997e9c386a05f098fbe36).
|
|
46
|
+
|
|
47
|
+
Signature:
|
|
48
|
+
|
|
49
|
+
```c++
|
|
50
|
+
void Nan::SetIsolateData(v8::Isolate *isolate, T *data)
|
|
51
|
+
```
|
|
52
|
+
|
|
53
|
+
|
|
54
|
+
<a name="api_nan_get_isolate_data"></a>
|
|
55
|
+
### Nan::GetIsolateData()
|
|
56
|
+
|
|
57
|
+
A helper to provide a consistent API to [`v8::Isolate#GetData()`](https://v8docs.nodesource.com/node-8.16/d5/dda/classv8_1_1_isolate.html#aabd223436bc1100a787dadaa024c6257).
|
|
58
|
+
|
|
59
|
+
Signature:
|
|
60
|
+
|
|
61
|
+
```c++
|
|
62
|
+
T *Nan::GetIsolateData(v8::Isolate *isolate)
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
<a name="api_nan_typedarray_contents"></a>
|
|
66
|
+
### Nan::TypedArrayContents<T>
|
|
67
|
+
|
|
68
|
+
A helper class for accessing the contents of an ArrayBufferView (aka a typedarray) from C++. If the input array is not a valid typedarray, then the data pointer of TypedArrayContents will default to `NULL` and the length will be 0. If the data pointer is not compatible with the alignment requirements of type, an assertion error will fail.
|
|
69
|
+
|
|
70
|
+
Note that you must store a reference to the `array` object while you are accessing its contents.
|
|
71
|
+
|
|
72
|
+
Definition:
|
|
73
|
+
|
|
74
|
+
```c++
|
|
75
|
+
template<typename T>
|
|
76
|
+
class Nan::TypedArrayContents {
|
|
77
|
+
public:
|
|
78
|
+
TypedArrayContents(v8::Local<Value> array);
|
|
79
|
+
|
|
80
|
+
size_t length() const;
|
|
81
|
+
|
|
82
|
+
T* const operator*();
|
|
83
|
+
const T* const operator*() const;
|
|
84
|
+
};
|
|
85
|
+
```
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
console.log(require('path').relative('.', __dirname));
|