@contrast/agent 4.3.1-0 → 4.5.1

package/lib/assess/policy/signatures.json

@@ -122,6 +122,7 @@
     },
     "express-session": {
       "moduleName": "express-session",
+      "version": ">=1.16.0",
       "methodName": "",
       "isModule": true
     },
@@ -132,12 +133,14 @@
     },
     "pg.Connection.prototype.query": {
       "moduleName": "pg",
+      "version": ">=7.5.0",
       "methodName": "Connection.prototype.query",
       "isModule": true
     },
     "pg/lib/client.prototype.query": {
       "fileName": "lib/client.js",
       "moduleName": "pg",
+      "version": ">=7.5.0",
       "methodName": "prototype.query",
       "isModule": true
     },
@@ -165,31 +168,37 @@
     },
     "sequelize.prototype.query": {
       "moduleName": "sequelize",
+      "version": ">=5.0.0",
       "methodName": "prototype.query",
       "isModule": true
     },
     "sequelize/lib/sql-string.escape": {
       "moduleName": "sequelize",
+      "version": ">=5.0.0",
       "methodName": "escape",
       "isModule": true
     },
     "sequelize/lib/sql-string.format": {
       "moduleName": "sequelize",
+      "version": ">=5.0.0",
       "methodName": "format",
       "isModule": true
     },
     "sequelize/lib/sql-string.formatNamedParameters": {
       "moduleName": "sequelize",
+      "version": ">=5.0.0",
       "methodName": "formatNamedParameters",
       "isModule": true
     },
     "mongodb.Db.prototype.eval": {
       "moduleName": "mongodb",
+      "version": ">=3.5.0",
       "methodName": "Db.prototype.eval",
       "isModule": true
     },
     "mongodb.Collection.prototype.rename": {
       "moduleName": "mongodb",
+      "version": ">=3.5.0",
       "methodName": "Collection.prototype.rename",
       "isModule": true
     },
@@ -215,6 +224,7 @@
     },
     "express.response.json": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.json",
       "isModule": true
     },
@@ -225,31 +235,37 @@
     },
     "express.response.send": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.send",
       "isModule": true
     },
     "express.response.set": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.set",
       "isModule": true
     },
     "express.response.setHeaders": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.setHeaders",
       "isModule": true
     },
     "express.response.append": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.append",
       "isModule": true
     },
     "express.response.redirect": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.redirect",
       "isModule": true
     },
     "express.response.location": {
       "moduleName": "express",
+      "version": ">=4.0.0",
       "methodName": "response.location",
       "isModule": true
     },
@@ -387,21 +403,25 @@
     },
     "handlebars/dist/cjs/handlebars/utils.escapeExpression": {
       "moduleName": "handlebars",
+      "version": ">=4.0.0",
       "methodName": "utils.escapeExpression",
       "isModule": true
     },
     "handlebars.Utils.escapeExpression": {
       "moduleName": "handlebars",
+      "version": ">=4.0.0",
       "methodName": "Utils.escapeExpression",
       "isModule": true
     },
     "ejs.Template.prototype.generateSource": {
       "moduleName": "ejs",
+      "version": ">=2.6.2",
       "methodName": "Template.prototype.generateSource",
       "isModule": true
     },
     "ejs.utils.escapeXML": {
       "moduleName": "ejs",
+      "version": ">=2.6.2",
       "fileName": "lib/utils.js",
       "methodName": "escapeXML",
       "isModule": true
@@ -533,31 +553,37 @@
     },
     "sqlite3.Database.prototype.all": {
       "moduleName": "sqlite3",
+      "version": ">=4.0.0",
       "methodName": "Database.prototype.all",
       "isModule": true
     },
     "sqlite3.Database.prototype.run": {
       "moduleName": "sqlite3",
+      "version": ">=4.0.0",
       "methodName": "Database.prototype.run",
       "isModule": true
     },
     "sqlite3.Database.prototype.get": {
       "moduleName": "sqlite3",
+      "version": ">=4.0.0",
       "methodName": "Database.prototype.get",
       "isModule": true
     },
     "sqlite3.Database.prototype.each": {
       "moduleName": "sqlite3",
+      "version": ">=4.0.0",
       "methodName": "Database.prototype.each",
       "isModule": true
     },
     "sqlite3.Database.prototype.exec": {
       "moduleName": "sqlite3",
+      "version": ">=4.0.0",
       "methodName": "Database.prototype.exec",
       "isModule": true
     },
     "sqlite3.Database.prototype.prepare": {
       "moduleName": "sqlite3",
+      "version": ">=4.0.0",
       "methodName": "Database.prototype.prepare",
       "isModule": true
     },
@@ -853,6 +879,7 @@
     },
     "pug.compile": {
       "moduleName": "pug",
+      "version": ">=3.0.0",
       "fileName": "lib/index.js",
       "methodName": "compile",
       "isModule": true
@@ -864,342 +891,410 @@
     },
     "handlebars.JavaScriptCompiler.compile": {
       "moduleName": "handlebars",
+      "version": ">=4.0.0",
       "fileName": "dist/cjs/handlebars/compiler/javascript-compiler.js",
       "methodName": "prototype.compile",
       "isModule": true
     },
     "validator.isAfter": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isAfter",
       "isModule": true
     },
     "validator.isAlpha": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isAlpha",
       "isModule": true
     },
     "validator.isAlphanumeric": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isAlphanumeric",
       "isModule": true
     },
     "validator.isBase32": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isBase32",
       "isModule": true
     },
     "validator.isBase58": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isBase58",
       "isModule": true
     },
     "validator.isBefore": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isBefore",
       "isModule": true
     },
     "validator.isBIC": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isBIC",
       "isModule": true
     },
     "validator.isBoolean": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isBoolean",
       "isModule": true
     },
     "validator.isBtcAddress": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isBtcAddress",
       "isModule": true
     },
     "validator.isCreditCard": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isCreditCard",
       "isModule": true
     },
     "validator.isDecimal": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isDecimal",
       "isModule": true
     },
     "validator.isDivisibleBy": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isDivisibleBy",
       "isModule": true
     },
     "validator.isEAN": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isEAN",
       "isModule": true
     },
     "validator.isEthereumAddress": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isEthereumAddress",
       "isModule": true
     },
     "validator.isFloat": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isFloat",
       "isModule": true
     },
     "validator.isHash": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isHash",
       "isModule": true
     },
     "validator.isHexadecimal": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isHexadecimal",
       "isModule": true
     },
     "validator.isHexColor": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isHexColor",
       "isModule": true
     },
     "validator.isHSL": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isHSL",
       "isModule": true
     },
     "validator.isIBAN": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isIBAN",
       "isModule": true
     },
     "validator.isIdentityCard": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isIdentityCard",
       "isModule": true
     },
     "validator.isIMEI": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isIMEI",
       "isModule": true
     },
     "validator.isInt": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isInt",
       "isModule": true
     },
     "validator.isIP": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isIP",
       "isModule": true
     },
     "validator.isIPRange": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isIPRange",
       "isModule": true
     },
     "validator.isISBN": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISBN",
       "isModule": true
     },
     "validator.isISIN": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISIN",
       "isModule": true
     },
     "validator.isISO8601": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISO8601",
       "isModule": true
     },
     "validator.isISO31661Alpha2": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISO31661Alpha2",
       "isModule": true
     },
     "validator.isISO31661Alpha3": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISO31661Alpha3",
       "isModule": true
     },
     "validator.isISRC": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISRC",
       "isModule": true
     },
     "validator.isISSN": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isISSN",
       "isModule": true
     },
     "validator.isJWT": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isJWT",
       "isModule": true
     },
     "validator.isLatLong": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isLatLong",
       "isModule": true
     },
     "validator.isLicensePlate": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isLicensePlate",
       "isModule": true
     },
     "validator.isMACAddress": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isMACAddress",
       "isModule": true
     },
     "validator.isMagnetURI": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isMagnetURI",
       "isModule": true
     },
     "validator.isMD5": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isMD5",
       "isModule": true
     },
     "validator.isMobilePhone": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isMobilePhone",
       "isModule": true
     },
     "validator.isMongoId": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isMongoId",
       "isModule": true
     },
     "validator.isNumeric": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isNumeric",
       "isModule": true
     },
     "validator.isOctal": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isOctal",
       "isModule": true
     },
     "validator.isPassportNumber": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isPassportNumber",
       "isModule": true
     },
     "validator.isPort": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isPort",
       "isModule": true
     },
     "validator.isPostalCode": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isPostalCode",
       "isModule": true
     },
     "validator.isSemVer": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isSemVer",
       "isModule": true
     },
     "validator.isTaxID": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isTaxID",
       "isModule": true
     },
     "validator.isUUID": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isUUID",
       "isModule": true
     },
     "validator.isVAT": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isVAT",
       "isModule": true
     },
     "validator.escape": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "escape",
       "isModule": true
     },
     "validator.isIn": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isIn",
       "isModule": true
     },
     "validator.isMimeType": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isMimeType",
       "isModule": true
     },
     "validator.isRFC3339": {
       "moduleName": "validator",
+      "version": ">=13.0.0",
       "methodName": "isRFC3339",
       "isModule": true
     },
     "joi.boolean.coerce": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "boolean.coerce",
       "isModule": true
     },
     "joi.number.coerce": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "number.coerce",
       "isModule": true
     },
     "joi.string.validate": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.validate",
       "isModule": true
     },
     "joi.string.base64": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.base64",
       "isModule": true
     },
     "joi.string.guid": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.guid",
       "isModule": true
     },
     "joi.string.alphanum": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.alphanum",
       "isModule": true
     },
     "joi.string.hex": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.hex",
       "isModule": true
     },
     "joi.string.isoDate": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.isoDate",
       "isModule": true
     },
     "joi.string.isoDuration": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.isoDuration",
       "isModule": true
     },
     "joi.string.token": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.token",
       "isModule": true
     },
     "joi.string.creditCard": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.creditCard",
       "isModule": true
     },
     "joi.string.ip": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.ip",
       "isModule": true
     },
     "joi.string.hostname": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.hostname",
       "isModule": true
     },
     "joi.string.domain": {
       "moduleName": "joi",
+      "version": ">=17.0.0",
       "methodName": "string.domain",
       "isModule": true
     },

package/lib/assess/policy/util.js

@@ -1,3 +1,17 @@
+/**
+Copyright: 2021 Contrast Security, Inc
+  Contact: support@contrastsecurity.com
+  License: Commercial
+
+  NOTICE: This Software and the patented inventions embodied within may only be
+  used as part of Contrast Security’s commercial offerings. Even though it is
+  made available through public repositories, use of this Software is subject to
+  the applicable End User Licensing Agreement found at
+  https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+  between Contrast Security and the End User. The Software may not be reverse
+  engineered, modified, repackaged, sold, redistributed or otherwise used in a
+  way not consistent with the End User License Agreement.
+*/
 /**
  * Contains helper functions used to manage the policy
  * Management of hooked functions that are defined in assess policies(e.g. deadzone.json, propagators.json, rules.json)
@@ -358,12 +372,19 @@ utils.createHookFromSignature = function(signature, options, patchType) {
       requireHook.resolve(
         {
           name: signature.moduleName,
-          file: signature.fileName
+          file: signature.fileName,
+          version: signature.version
         },
         requireCallback
       );
     } else {
-      requireHook.resolve({ name: signature.moduleName }, requireCallback);
+      requireHook.resolve(
+        {
+          name: signature.moduleName,
+          version: signature.version
+        },
+        requireCallback
+      );
     }
   } else {
     const mod = global[signature.moduleName],

package/lib/assess/propagators/JSON/parse.js

@@ -1,3 +1,17 @@
+/**
+Copyright: 2021 Contrast Security, Inc
+  Contact: support@contrastsecurity.com
+  License: Commercial
+
+  NOTICE: This Software and the patented inventions embodied within may only be
+  used as part of Contrast Security’s commercial offerings. Even though it is
+  made available through public repositories, use of this Software is subject to
+  the applicable End User Licensing Agreement found at
+  https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+  between Contrast Security and the End User. The Software may not be reverse
+  engineered, modified, repackaged, sold, redistributed or otherwise used in a
+  way not consistent with the End User License Agreement.
+*/
 /**
  * JSON.parse Propagation Provider module.
  * @module lib/assess/propagators/JSON.parse.js

package/lib/assess/propagators/JSON/stringify.js

@@ -1,3 +1,17 @@
+/**
+Copyright: 2021 Contrast Security, Inc
+  Contact: support@contrastsecurity.com
+  License: Commercial
+
+  NOTICE: This Software and the patented inventions embodied within may only be
+  used as part of Contrast Security’s commercial offerings. Even though it is
+  made available through public repositories, use of this Software is subject to
+  the applicable End User Licensing Agreement found at
+  https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+  between Contrast Security and the End User. The Software may not be reverse
+  engineered, modified, repackaged, sold, redistributed or otherwise used in a
+  way not consistent with the End User License Agreement.
+*/
 /**
  * JSON.stringify Propagation Provider module.
  * @module lib/assess/propagators/JSON/stringify.js

package/lib/assess/propagators/ajv/conditionals.js

@@ -1,3 +1,17 @@
+/**
+Copyright: 2021 Contrast Security, Inc
+  Contact: support@contrastsecurity.com
+  License: Commercial
+
+  NOTICE: This Software and the patented inventions embodied within may only be
+  used as part of Contrast Security’s commercial offerings. Even though it is
+  made available through public repositories, use of this Software is subject to
+  the applicable End User Licensing Agreement found at
+  https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+  between Contrast Security and the End User. The Software may not be reverse
+  engineered, modified, repackaged, sold, redistributed or otherwise used in a
+  way not consistent with the End User License Agreement.
+*/
 'use strict';
 
 /**