@contrast/agent 4.3.1-0 → 4.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +10 -10
- package/README.md +86 -57
- package/agent-loader.js +14 -0
- package/bin/VERSION +1 -0
- package/bin/linux/contrast-service +0 -0
- package/bin/mac/contrast-service +0 -0
- package/bin/windows/contrast-service.exe +0 -0
- package/bootstrap.js +14 -0
- package/cli-rewriter.js +14 -0
- package/cli.js +14 -0
- package/esm.mjs +14 -0
- package/lib/agent-emitter.js +14 -0
- package/lib/agent.js +14 -0
- package/lib/app-info.js +14 -0
- package/lib/assess/deadzones/index.js +14 -0
- package/lib/assess/deadzones/rewrite.js +14 -0
- package/lib/assess/express/index.js +14 -0
- package/lib/assess/express/route-coverage.js +14 -0
- package/lib/assess/express/sinks/index.js +14 -0
- package/lib/assess/express/sinks/xss.js +14 -0
- package/lib/assess/express/sources.js +14 -0
- package/lib/assess/fastify/index.js +14 -0
- package/lib/assess/fastify/route-coverage.js +14 -0
- package/lib/assess/fastify/sinks/index.js +14 -0
- package/lib/assess/fastify/sinks/response-scanning.js +14 -0
- package/lib/assess/fastify/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/fastify/sinks/xss.js +14 -0
- package/lib/assess/fastify/sources.js +14 -0
- package/lib/assess/hapi/index.js +14 -0
- package/lib/assess/hapi/route-coverage.js +17 -3
- package/lib/assess/hapi/sinks/index.js +14 -0
- package/lib/assess/hapi/sinks/response-scanning.js +14 -0
- package/lib/assess/hapi/sinks/session.js +14 -0
- package/lib/assess/hapi/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/hapi/sinks/xss.js +14 -0
- package/lib/assess/hapi/sources.js +14 -0
- package/lib/assess/index.js +14 -0
- package/lib/assess/koa/index.js +14 -0
- package/lib/assess/koa/route-coverage.js +14 -0
- package/lib/assess/koa/sinks/index.js +14 -0
- package/lib/assess/koa/sinks/response-scanning.js +14 -0
- package/lib/assess/koa/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/koa/sinks/xss.js +14 -0
- package/lib/assess/koa/sources.js +14 -0
- package/lib/assess/loopback4/index.js +14 -0
- package/lib/assess/loopback4/route-coverage.js +14 -0
- package/lib/assess/loopback4/sinks/index.js +14 -0
- package/lib/assess/loopback4/sinks/response-scanning.js +14 -0
- package/lib/assess/loopback4/sinks/xss.js +14 -0
- package/lib/assess/loopback4/sources.js +14 -0
- package/lib/assess/membrane/debraner.js +14 -0
- package/lib/assess/membrane/deserialization-membrane.js +14 -0
- package/lib/assess/membrane/index.js +16 -8
- package/lib/assess/membrane/source-membrane.js +17 -4
- package/lib/assess/models/base-event.js +16 -2
- package/lib/assess/models/call-context.js +14 -3
- package/lib/assess/models/index.js +14 -0
- package/lib/assess/models/propagation-event.js +14 -0
- package/lib/assess/models/signature.js +14 -0
- package/lib/assess/models/sink-event.js +14 -0
- package/lib/assess/models/source-event.js +14 -0
- package/lib/assess/models/tag-range/index.js +20 -16
- package/lib/assess/models/tag-range/relationships.js +14 -0
- package/lib/assess/models/tag-range/util.js +14 -0
- package/lib/assess/policy/index.js +14 -0
- package/lib/assess/policy/init.js +14 -0
- package/lib/assess/policy/signatures.json +95 -0
- package/lib/assess/policy/util.js +23 -2
- package/lib/assess/propagators/JSON/parse.js +14 -0
- package/lib/assess/propagators/JSON/stringify.js +14 -0
- package/lib/assess/propagators/ajv/conditionals.js +14 -0
- package/lib/assess/propagators/ajv/evaluator-shim.js +14 -0
- package/lib/assess/propagators/ajv/index.js +14 -0
- package/lib/assess/propagators/ajv/json-schema-type-evaluators.js +14 -0
- package/lib/assess/propagators/ajv/object-walk.js +14 -0
- package/lib/assess/propagators/ajv/refs.js +14 -0
- package/lib/assess/propagators/ajv/schema-context.js +14 -0
- package/lib/assess/propagators/array-prototype-join.js +14 -0
- package/lib/assess/propagators/common.js +14 -0
- package/lib/assess/propagators/ejs-template-generate-source.js +14 -0
- package/lib/assess/propagators/handlebars-compile.js +14 -0
- package/lib/assess/propagators/handlebars-escape-expresssion.js +14 -0
- package/lib/assess/propagators/index.js +14 -0
- package/lib/assess/propagators/joi/boolean.js +14 -0
- package/lib/assess/propagators/joi/expression.js +14 -0
- package/lib/assess/propagators/joi/index.js +14 -0
- package/lib/assess/propagators/joi/number.js +14 -0
- package/lib/assess/propagators/joi/string-base.js +14 -0
- package/lib/assess/propagators/joi/string-schema.js +14 -0
- package/lib/assess/propagators/joi/values.js +14 -0
- package/lib/assess/propagators/manager.js +31 -3
- package/lib/assess/propagators/object.js +14 -0
- package/lib/assess/propagators/path/basename.js +14 -0
- package/lib/assess/propagators/path/common.js +47 -13
- package/lib/assess/propagators/path/dirname.js +14 -0
- package/lib/assess/propagators/path/extname.js +14 -0
- package/lib/assess/propagators/path/format.js +14 -0
- package/lib/assess/propagators/path/join.js +14 -0
- package/lib/assess/propagators/path/normalize.js +20 -1
- package/lib/assess/propagators/path/parse.js +14 -0
- package/lib/assess/propagators/path/relative.js +14 -0
- package/lib/assess/propagators/path/resolve.js +14 -0
- package/lib/assess/propagators/path/to-namespaced-path.js +14 -0
- package/lib/assess/propagators/pug-compile.js +14 -0
- package/lib/assess/propagators/querystring/escape.js +14 -0
- package/lib/assess/propagators/querystring/parse.js +14 -0
- package/lib/assess/propagators/querystring/stringify.js +14 -0
- package/lib/assess/propagators/querystring/unescape.js +14 -0
- package/lib/assess/propagators/querystring/utils.js +14 -0
- package/lib/assess/propagators/sequelize/sql-string-escape.js +14 -0
- package/lib/assess/propagators/sequelize/sql-string-format-named-parameters.js +14 -0
- package/lib/assess/propagators/sequelize/sql-string-format.js +14 -0
- package/lib/assess/propagators/sequelize/utils.js +14 -0
- package/lib/assess/propagators/string-prototype-replace.js +14 -0
- package/lib/assess/propagators/string-prototype-split.js +14 -0
- package/lib/assess/propagators/string-prototype-trim.js +14 -0
- package/lib/assess/propagators/string.js +14 -0
- package/lib/assess/propagators/templates.js +14 -0
- package/lib/assess/propagators/url/url-prototype-parse.js +14 -0
- package/lib/assess/propagators/url/url-url.js +14 -0
- package/lib/assess/propagators/url/utils.js +14 -0
- package/lib/assess/propagators/util/format.js +14 -0
- package/lib/assess/propagators/utils.js +14 -0
- package/lib/assess/propagators/v8/init-hooks.js +14 -0
- package/lib/assess/propagators/validator/init-hooks.js +14 -0
- package/lib/assess/propagators/validator/validator-methods.js +14 -0
- package/lib/assess/response-scanning/app-activity.js +14 -0
- package/lib/assess/response-scanning/autocomplete-missing.js +14 -2
- package/lib/assess/response-scanning/cache-controls-missing.js +14 -0
- package/lib/assess/response-scanning/clickjacking-control-missing.js +14 -0
- package/lib/assess/response-scanning/common.js +14 -0
- package/lib/assess/response-scanning/cookies/common.js +14 -0
- package/lib/assess/response-scanning/cookies/events.js +14 -0
- package/lib/assess/response-scanning/cookies/httponly.js +14 -0
- package/lib/assess/response-scanning/cookies/secure-flag-missing.js +14 -0
- package/lib/assess/response-scanning/headers/csp-header-insecure.js +14 -0
- package/lib/assess/response-scanning/headers/csp-header-missing.js +14 -0
- package/lib/assess/response-scanning/headers/csp-utils.js +14 -0
- package/lib/assess/response-scanning/headers/hsts-header-missing.js +14 -0
- package/lib/assess/response-scanning/headers/powered-by.js +14 -0
- package/lib/assess/response-scanning/headers/xcontenttype-header-missing.js +14 -0
- package/lib/assess/response-scanning/headers/xxssprotection-header-disabled.js +14 -0
- package/lib/assess/response-scanning/parameter-pollution.js +14 -2
- package/lib/assess/response-scanning/parseable-response-emitter.js +14 -0
- package/lib/assess/restify/index.js +14 -0
- package/lib/assess/restify/route-coverage.js +14 -0
- package/lib/assess/restify/session.js +14 -0
- package/lib/assess/restify/sinks/index.js +14 -0
- package/lib/assess/restify/sinks/response-scanning.js +14 -0
- package/lib/assess/restify/sinks/unvalidated-redirect.js +14 -0
- package/lib/assess/restify/sinks/xss.js +14 -0
- package/lib/assess/restify/sources.js +14 -0
- package/lib/assess/sinks/common.js +14 -0
- package/lib/assess/sinks/dynamo.js +14 -0
- package/lib/assess/sinks/hapi-16-xss.js +14 -0
- package/lib/assess/sinks/index.js +14 -0
- package/lib/assess/sinks/libxmljs-xxe.js +14 -0
- package/lib/assess/sinks/mongodb.js +25 -7
- package/lib/assess/sinks/ssrf-url.js +14 -0
- package/lib/assess/sources/formidable.js +14 -0
- package/lib/assess/sources/index.js +14 -0
- package/lib/assess/static/hardcoded.js +14 -0
- package/lib/assess/technologies/index.js +14 -0
- package/lib/assess/utils.js +14 -0
- package/lib/cli-rewriter/index.js +14 -0
- package/lib/constants.js +14 -0
- package/lib/contrast.js +18 -5
- package/lib/core/arch-components/dynamodb.js +14 -0
- package/lib/core/arch-components/index.js +14 -0
- package/lib/core/arch-components/mongodb.js +14 -0
- package/lib/core/arch-components/mysql.js +14 -0
- package/lib/core/arch-components/postgres.js +14 -0
- package/lib/core/arch-components/sqlite3.js +14 -0
- package/lib/core/async-storage/context.js +14 -0
- package/lib/core/async-storage/hooks/bluebird.js +34 -0
- package/lib/core/async-storage/hooks/mongodb-core.js +14 -0
- package/lib/core/async-storage/hooks/mysql.js +14 -0
- package/lib/core/async-storage/hooks/redis.js +14 -0
- package/lib/core/async-storage/hooks/utils.js +14 -0
- package/lib/core/async-storage/index.js +14 -0
- package/lib/core/async-storage/scopes/index.js +14 -0
- package/lib/core/common/formidable.js +14 -0
- package/lib/core/common/index.js +14 -0
- package/lib/core/config/options.js +14 -0
- package/lib/core/config/util.js +14 -0
- package/lib/core/exclusions/exclusion-factory.js +14 -0
- package/lib/core/exclusions/exclusion.js +14 -0
- package/lib/core/exclusions/input.js +14 -0
- package/lib/core/exclusions/url.js +14 -0
- package/lib/core/express/index.js +14 -0
- package/lib/core/express/utils.js +15 -1
- package/lib/core/fastify/index.js +14 -0
- package/lib/core/fastify/utils.js +14 -0
- package/lib/core/hapi/index.js +14 -0
- package/lib/core/hapi/utils.js +14 -0
- package/lib/core/index.js +14 -0
- package/lib/core/koa/index.js +14 -0
- package/lib/core/koa/utils.js +14 -0
- package/lib/core/logger/daily-rotate-file.js +14 -0
- package/lib/core/logger/dataflow-monitor.js +14 -0
- package/lib/core/logger/debug-logger.js +29 -17
- package/lib/core/logger/index.js +14 -0
- package/lib/core/logger/perf-logger.js +14 -0
- package/lib/core/logger/umbrella-logger.js +14 -0
- package/lib/core/loopback4/index.js +14 -0
- package/lib/core/metrics/index.js +14 -0
- package/lib/core/restify/index.js +14 -0
- package/lib/core/restify/utils.js +14 -0
- package/lib/core/rewrite/assignment-expression.js +14 -0
- package/lib/core/rewrite/binary-expression.js +14 -0
- package/lib/core/rewrite/call-expression.js +14 -0
- package/lib/core/rewrite/callees.js +14 -0
- package/lib/core/rewrite/catch-clause.js +14 -0
- package/lib/core/rewrite/function-wrap.js +14 -0
- package/lib/core/rewrite/index.js +14 -0
- package/lib/core/rewrite/injections.js +14 -0
- package/lib/core/rewrite/is-contrast-method.js +14 -0
- package/lib/core/rewrite/log.js +14 -0
- package/lib/core/rewrite/member-expression.js +14 -0
- package/lib/core/rewrite/object-property.js +14 -0
- package/lib/core/rewrite/prepend-globals.js +14 -0
- package/lib/core/rewrite/rewrite-log.js +14 -0
- package/lib/core/rewrite/switch-statement.js +14 -0
- package/lib/core/rewrite/template-literal.js +14 -0
- package/lib/core/stacktrace.js +15 -3
- package/lib/coverage.js +14 -0
- package/lib/feature-set.js +16 -1
- package/lib/generator-function.js +14 -0
- package/lib/hooks/array.js +14 -0
- package/lib/hooks/cluster.js +14 -0
- package/lib/hooks/dataflow-monitor.js +14 -0
- package/lib/hooks/encoding.js +15 -1
- package/lib/hooks/express-fileupload.js +14 -0
- package/lib/hooks/express-session.js +14 -0
- package/lib/hooks/fn-to-string.js +14 -0
- package/lib/hooks/frameworks/base.js +14 -0
- package/lib/hooks/frameworks/common.js +14 -0
- package/lib/hooks/frameworks/hapi16.js +14 -0
- package/lib/hooks/frameworks/http.js +14 -0
- package/lib/hooks/frameworks/https.js +14 -0
- package/lib/hooks/frameworks/index.js +14 -0
- package/lib/hooks/hapi-16-reply.js +14 -0
- package/lib/hooks/hapi-16-session.js +14 -0
- package/lib/hooks/http.js +14 -0
- package/lib/hooks/module/extensions.js +14 -0
- package/lib/hooks/module/helpers.js +14 -0
- package/lib/hooks/module/index.js +14 -0
- package/lib/hooks/newrelic.js +14 -0
- package/lib/hooks/object-is.js +14 -0
- package/lib/hooks/object-to-primitive.js +14 -0
- package/lib/hooks/patcher.js +28 -24
- package/lib/hooks/require.js +14 -0
- package/lib/hooks/stealthy-require.js +14 -0
- package/lib/instrumentation.js +14 -0
- package/lib/libraries.js +21 -3
- package/lib/library-usage.js +14 -0
- package/lib/list-installed.js +14 -0
- package/lib/protect/analysis/aho-corasick.js +27 -30
- package/lib/protect/analysis/dfsa-analyzer.js +14 -0
- package/lib/protect/errors/handler.js +14 -0
- package/lib/protect/errors/security-exception.js +14 -0
- package/lib/protect/express/index.js +14 -0
- package/lib/protect/express/sinks.js +14 -0
- package/lib/protect/express/sources.js +14 -0
- package/lib/protect/fastify/index.js +14 -0
- package/lib/protect/fastify/sinks.js +14 -0
- package/lib/protect/fastify/sources.js +14 -0
- package/lib/protect/hapi/error-handler.js +14 -0
- package/lib/protect/hapi/index.js +14 -0
- package/lib/protect/hapi/sinks.js +14 -0
- package/lib/protect/hapi/sources.js +14 -0
- package/lib/protect/index.js +14 -0
- package/lib/protect/input-analysis.js +14 -0
- package/lib/protect/koa/index.js +14 -0
- package/lib/protect/koa/sinks.js +14 -0
- package/lib/protect/koa/sources.js +14 -0
- package/lib/protect/listeners.js +14 -0
- package/lib/protect/loopback4/index.js +14 -0
- package/lib/protect/loopback4/sources.js +14 -0
- package/lib/protect/models/application-context.js +14 -0
- package/lib/protect/models/sink-event.js +14 -0
- package/lib/protect/models/source-event.js +14 -0
- package/lib/protect/restify/index.js +14 -0
- package/lib/protect/restify/sinks.js +14 -0
- package/lib/protect/restify/sources.js +14 -0
- package/lib/protect/rules/assessment.js +14 -0
- package/lib/protect/rules/attack-patterns.js +14 -0
- package/lib/protect/rules/base-scanner/index.js +14 -0
- package/lib/protect/rules/base-scanner/java-script-scanner.js +14 -0
- package/lib/protect/rules/base-scanner/postgresqlscanner.js +14 -0
- package/lib/protect/rules/base-scanner/scan-state.js +14 -0
- package/lib/protect/rules/base-scanner/substring-finder.js +14 -0
- package/lib/protect/rules/base-scanner/token-sequence.js +14 -0
- package/lib/protect/rules/bot-blocker/bot-blocker-rule.js +14 -0
- package/lib/protect/rules/bot-blocker/index.js +14 -0
- package/lib/protect/rules/cmd-injection/cmdinjection-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-command-backdoors/backdoor-detector.js +17 -3
- package/lib/protect/rules/cmd-injection-command-backdoors/cmd-injection-command-backdoors-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-chained-commands/chained-command-scanner.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-chained-commands/cmd-injection-semantic-chained-commands-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/cmd-injection-semantic-dangerous-paths-rule.js +14 -0
- package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/dangerous-paths-scanner.js +14 -0
- package/lib/protect/rules/common.js +14 -0
- package/lib/protect/rules/index.js +14 -0
- package/lib/protect/rules/ip-denylist/ip-denylist-rule.js +14 -0
- package/lib/protect/rules/method-tampering/evaluator.js +14 -0
- package/lib/protect/rules/method-tampering/method-tampering-rule.js +14 -0
- package/lib/protect/rules/nosqli/no-sql-injection-rule.js +14 -0
- package/lib/protect/rules/nosqli/nosql-scanner/index.js +14 -0
- package/lib/protect/rules/nosqli/nosql-scanner/mongodbscanner.js +14 -0
- package/lib/protect/rules/path-traversal/path-traversal-rule.js +14 -0
- package/lib/protect/rules/rule-factory.js +14 -0
- package/lib/protect/rules/signatures/cmd-injection/custom-searchers/chained-command-searcher.js +14 -0
- package/lib/protect/rules/signatures/cmd-injection/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/cmd-injection/index.js +14 -0
- package/lib/protect/rules/signatures/evaluator.js +14 -0
- package/lib/protect/rules/signatures/index.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/nosql-comment-searcher.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/simple-or-searcher.js +14 -0
- package/lib/protect/rules/signatures/nosql-injection/index.js +14 -0
- package/lib/protect/rules/signatures/path-traversal/index.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/behavior-url-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/function-definition-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/immediate-function-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/link-and-src-target-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/location-set-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/map-access-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/native-function-execution-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/no-alnum-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/redefined-function-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/style-url-injection-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/variable-assignment-searcher.js +14 -0
- package/lib/protect/rules/signatures/reflected-xss/helpers/function-call.js +15 -1
- package/lib/protect/rules/signatures/reflected-xss/index.js +14 -0
- package/lib/protect/rules/signatures/signature.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/if-else-drop-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/index.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/simple-or-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/sql-comment-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/time-function-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/tsql-exec-searcher.js +14 -0
- package/lib/protect/rules/signatures/sql-injection/index.js +14 -0
- package/lib/protect/rules/signatures/ssjs-injection/index.js +14 -0
- package/lib/protect/rules/signatures/unsafe-file-upload/index.js +14 -0
- package/lib/protect/rules/signatures/untrusted-deserialization/index.js +14 -0
- package/lib/protect/rules/sqli/generic-complicated.js +14 -0
- package/lib/protect/rules/sqli/sql-injection-rule.js +14 -0
- package/lib/protect/rules/sqli/sql-scanner/index.js +14 -0
- package/lib/protect/rules/sqli/sql-scanner/mysql-scanner.js +14 -0
- package/lib/protect/rules/ssjs-injection/evaluator.js +14 -0
- package/lib/protect/rules/ssjs-injection/ssjsinjection-rule.js +14 -0
- package/lib/protect/rules/unsafe-file-upload/unsafe-file-upload-rule.js +14 -0
- package/lib/protect/rules/untrusted-deserialization/untrusted-deserialization-rule.js +14 -0
- package/lib/protect/rules/virtual-patch/index.js +14 -0
- package/lib/protect/rules/virtual-patch/utils.js +14 -0
- package/lib/protect/rules/virtual-patch/virtual-patch-rule.js +14 -0
- package/lib/protect/rules/xss/helpers/function-call.js +15 -1
- package/lib/protect/rules/xss/reflected-xss-rule.js +14 -0
- package/lib/protect/rules/xxe/xxerule.js +14 -0
- package/lib/protect/sample-aggregator.js +14 -0
- package/lib/protect/samples.js +14 -0
- package/lib/protect/service.js +14 -0
- package/lib/protect/sinks/child-process.js +14 -0
- package/lib/protect/sinks/eval.js +14 -0
- package/lib/protect/sinks/fs.js +14 -0
- package/lib/protect/sinks/function.js +14 -0
- package/lib/protect/sinks/index.js +14 -0
- package/lib/protect/sinks/libxmljs.js +14 -0
- package/lib/protect/sinks/mongodb.js +14 -0
- package/lib/protect/sinks/mysql.js +14 -0
- package/lib/protect/sinks/node-serialize.js +14 -0
- package/lib/protect/sinks/postgres.js +14 -0
- package/lib/protect/sinks/sequelize.js +14 -0
- package/lib/protect/sinks/sqlite3.js +14 -0
- package/lib/protect/sinks/vm.js +14 -0
- package/lib/protect/sources/busboy.js +14 -0
- package/lib/protect/sources/formidable.js +14 -0
- package/lib/protect/sources/index.js +14 -0
- package/lib/protect/validators/authorization.js +14 -0
- package/lib/protect/validators/common.js +14 -0
- package/lib/protect/validators/connection.js +14 -0
- package/lib/protect/validators/content-length.js +14 -0
- package/lib/protect/validators/host.js +14 -0
- package/lib/protect/validators/if-none-match.js +14 -0
- package/lib/protect/validators/index.js +14 -0
- package/lib/protect/validators/origin.js +14 -0
- package/lib/reporter/app-activity-queue.js +14 -0
- package/lib/reporter/grpc-client.js +14 -0
- package/lib/reporter/messages/speedracer/activity.js +14 -0
- package/lib/reporter/messages/speedracer/application-create.js +14 -0
- package/lib/reporter/messages/speedracer/application-update.js +14 -0
- package/lib/reporter/messages/speedracer/base.js +14 -0
- package/lib/reporter/messages/speedracer/index.js +14 -0
- package/lib/reporter/messages/speedracer/observed-route.js +14 -0
- package/lib/reporter/messages/speedracer/poll.js +14 -0
- package/lib/reporter/messages/speedracer/request.js +14 -0
- package/lib/reporter/messages/speedracer/startup.js +14 -0
- package/lib/reporter/messaging-router.js +14 -0
- package/lib/reporter/models/app-activity/app-activity.js +14 -0
- package/lib/reporter/models/app-activity/attacker-activity.js +14 -0
- package/lib/reporter/models/app-activity/defend.js +14 -0
- package/lib/reporter/models/app-activity/inventory.js +14 -0
- package/lib/reporter/models/app-activity/protection-rule-activity.js +14 -0
- package/lib/reporter/models/app-activity/rule-events.js +14 -0
- package/lib/reporter/models/app-activity/sample.js +14 -0
- package/lib/reporter/models/app-activity/source.js +14 -0
- package/lib/reporter/models/app-activity/user-input.js +14 -0
- package/lib/reporter/models/app-create.js +14 -0
- package/lib/reporter/models/app-update/index.js +16 -4
- package/lib/reporter/models/app-update/library-manifest.js +14 -0
- package/lib/reporter/models/app-update/library-usage.js +14 -0
- package/lib/reporter/models/app-update/library.js +14 -0
- package/lib/reporter/models/event-tag.js +14 -0
- package/lib/reporter/models/finding/event.js +14 -0
- package/lib/reporter/models/finding/finding.js +14 -0
- package/lib/reporter/models/frameworks/express-request.js +14 -0
- package/lib/reporter/models/frameworks/fastify-request.js +14 -0
- package/lib/reporter/models/frameworks/hapi-request.js +14 -0
- package/lib/reporter/models/frameworks/index.js +14 -0
- package/lib/reporter/models/frameworks/koa-request.js +14 -0
- package/lib/reporter/models/frameworks/restify-request.js +14 -0
- package/lib/reporter/models/observed-route.js +14 -0
- package/lib/reporter/models/request.js +14 -0
- package/lib/reporter/models/route-coverage.js +14 -0
- package/lib/reporter/models/startup.js +14 -0
- package/lib/reporter/models/trace-event-source.js +14 -0
- package/lib/reporter/models/utils/request-factory.js +14 -0
- package/lib/reporter/models/utils/user-input-factory.js +14 -0
- package/lib/reporter/models/utils/user-input-kit.js +14 -0
- package/lib/reporter/mq-client.js +14 -0
- package/lib/reporter/server-activity-queue.js +14 -0
- package/lib/reporter/socket-client.js +14 -0
- package/lib/reporter/speedracer/base-connection-state.js +14 -0
- package/lib/reporter/speedracer/constants.js +14 -0
- package/lib/reporter/speedracer/failure-connection-state.js +14 -0
- package/lib/reporter/speedracer/index.js +14 -0
- package/lib/reporter/speedracer/success-connection-state.js +14 -0
- package/lib/reporter/speedracer/unknown-connection-state.js +14 -0
- package/lib/reporter/translations/enums.js +14 -0
- package/lib/reporter/translations/helpers.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/activity.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/address.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/agent-startup.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/application-create.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/application-update.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/architecture-component.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/attack-result.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/bot-blocker-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-semantic-analysis-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/finding.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/http-method-tampering-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/http-request.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/ip-denylist-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/library-usage-update.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/no-sql-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/observed-route.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/pair.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/path-traversal-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/poll.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/rasp-rule-sample.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/raw-request.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/route-coverage.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/simple-pair.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/sql-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/ssjs-injection-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/stack-trace-element.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/action.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/parent-object-id.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-object.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-signature.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-source.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-stack.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-taint-range.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/type.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/untrusted-deserialization-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/user-input.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/virtual-patch-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/xss-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/dtm/xxe-details.js +14 -0
- package/lib/reporter/translations/to-protobuf/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/application-settings.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/assess-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/auth.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/bot-blocker.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/custom-rule-feature.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/defend-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/exclusions.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/index.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/input-analysis-result.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/inventory-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/ip-filter.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/log-enhancer.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/protection-rule.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/reaction.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/rule-definition.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/sampling.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/server-features.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/syslog.js +14 -0
- package/lib/reporter/translations/to-protobuf/settings/virtual-patch.js +14 -0
- package/lib/reporter/ts-reporter.js +14 -0
- package/lib/tracker.js +14 -0
- package/lib/util/base64.js +14 -0
- package/lib/util/bitset.js +14 -0
- package/lib/util/block-request.js +14 -0
- package/lib/util/callback-resolver.js +14 -0
- package/lib/util/clean-stack.js +15 -1
- package/lib/util/clean-string/brackets.js +17 -3
- package/lib/util/clean-string/clean-string-base.js +14 -0
- package/lib/util/clean-string/comments.js +14 -0
- package/lib/util/clean-string/concatenations.js +15 -1
- package/lib/util/clean-string/jsclean-string.js +14 -0
- package/lib/util/clean-string/placeholders.js +14 -0
- package/lib/util/clean-string/util.js +15 -2
- package/lib/util/colors.js +14 -0
- package/lib/util/file-finder.js +14 -0
- package/lib/util/heap-dump.js +14 -0
- package/lib/util/html-util.js +14 -0
- package/lib/util/ip-analyzer.js +15 -1
- package/lib/util/is-agent-path.js +14 -0
- package/lib/util/is-contrast-error.js +14 -0
- package/lib/util/is-piped-to-dev.js +14 -0
- package/lib/util/is-string.js +14 -0
- package/lib/util/partial.js +14 -0
- package/lib/util/pkg-name.js +14 -0
- package/lib/util/request-util.js +14 -0
- package/lib/util/resolve-obj.js +14 -0
- package/lib/util/route-info.js +14 -0
- package/lib/util/source-map.js +14 -0
- package/lib/util/static-rules.js +14 -0
- package/lib/util/trace-util.js +14 -0
- package/lib/util/traverse.js +14 -0
- package/lib/util/user-input-evaluator.js +14 -0
- package/lib/util/xml-analyzer/external-entity-finder.js +15 -1
- package/node_modules/bindings/LICENSE.md +22 -0
- package/node_modules/bindings/README.md +98 -0
- package/node_modules/bindings/bindings.js +221 -0
- package/node_modules/bindings/package.json +32 -0
- package/node_modules/file-uri-to-path/.npmignore +1 -0
- package/node_modules/file-uri-to-path/.travis.yml +30 -0
- package/node_modules/file-uri-to-path/History.md +21 -0
- package/node_modules/file-uri-to-path/LICENSE +20 -0
- package/node_modules/file-uri-to-path/README.md +74 -0
- package/node_modules/file-uri-to-path/index.d.ts +2 -0
- package/node_modules/file-uri-to-path/index.js +66 -0
- package/node_modules/file-uri-to-path/package.json +36 -0
- package/node_modules/file-uri-to-path/test/test.js +24 -0
- package/node_modules/file-uri-to-path/test/tests.json +13 -0
- package/node_modules/nan/CHANGELOG.md +537 -0
- package/node_modules/nan/LICENSE.md +13 -0
- package/node_modules/nan/README.md +455 -0
- package/node_modules/nan/doc/asyncworker.md +146 -0
- package/node_modules/nan/doc/buffers.md +54 -0
- package/node_modules/nan/doc/callback.md +76 -0
- package/node_modules/nan/doc/converters.md +41 -0
- package/node_modules/nan/doc/errors.md +226 -0
- package/node_modules/nan/doc/json.md +62 -0
- package/node_modules/nan/doc/maybe_types.md +583 -0
- package/node_modules/nan/doc/methods.md +664 -0
- package/node_modules/nan/doc/new.md +147 -0
- package/node_modules/nan/doc/node_misc.md +123 -0
- package/node_modules/nan/doc/object_wrappers.md +263 -0
- package/node_modules/nan/doc/persistent.md +296 -0
- package/node_modules/nan/doc/scopes.md +73 -0
- package/node_modules/nan/doc/script.md +38 -0
- package/node_modules/nan/doc/string_bytes.md +62 -0
- package/node_modules/nan/doc/v8_internals.md +199 -0
- package/node_modules/nan/doc/v8_misc.md +85 -0
- package/node_modules/nan/include_dirs.js +1 -0
- package/node_modules/nan/nan.h +2898 -0
- package/node_modules/nan/nan_callbacks.h +88 -0
- package/node_modules/nan/nan_callbacks_12_inl.h +514 -0
- package/node_modules/nan/nan_callbacks_pre_12_inl.h +520 -0
- package/node_modules/nan/nan_converters.h +72 -0
- package/node_modules/nan/nan_converters_43_inl.h +68 -0
- package/node_modules/nan/nan_converters_pre_43_inl.h +42 -0
- package/node_modules/nan/nan_define_own_property_helper.h +29 -0
- package/node_modules/nan/nan_implementation_12_inl.h +430 -0
- package/node_modules/nan/nan_implementation_pre_12_inl.h +263 -0
- package/node_modules/nan/nan_json.h +166 -0
- package/node_modules/nan/nan_maybe_43_inl.h +356 -0
- package/node_modules/nan/nan_maybe_pre_43_inl.h +268 -0
- package/node_modules/nan/nan_new.h +340 -0
- package/node_modules/nan/nan_object_wrap.h +156 -0
- package/node_modules/nan/nan_persistent_12_inl.h +132 -0
- package/node_modules/nan/nan_persistent_pre_12_inl.h +242 -0
- package/node_modules/nan/nan_private.h +73 -0
- package/node_modules/nan/nan_string_bytes.h +305 -0
- package/node_modules/nan/nan_typedarray_contents.h +96 -0
- package/node_modules/nan/nan_weak.h +437 -0
- package/node_modules/nan/package.json +41 -0
- package/node_modules/nan/tools/1to2.js +412 -0
- package/node_modules/nan/tools/README.md +14 -0
- package/node_modules/nan/tools/package.json +19 -0
- package/node_modules/unix-dgram/LICENSE +13 -0
- package/node_modules/unix-dgram/README.md +107 -0
- package/node_modules/unix-dgram/binding.gyp +20 -0
- package/node_modules/unix-dgram/build/Makefile +324 -0
- package/node_modules/unix-dgram/build/Release/.deps/Release/obj.target/unix_dgram/src/unix_dgram.o.d +58 -0
- package/node_modules/unix-dgram/build/Release/.deps/Release/obj.target/unix_dgram.node.d +1 -0
- package/node_modules/unix-dgram/build/Release/.deps/Release/unix_dgram.node.d +1 -0
- package/node_modules/unix-dgram/build/Release/obj.target/unix_dgram/src/unix_dgram.o +0 -0
- package/node_modules/unix-dgram/build/Release/obj.target/unix_dgram.node +0 -0
- package/node_modules/unix-dgram/build/Release/unix_dgram.node +0 -0
- package/node_modules/unix-dgram/build/binding.Makefile +6 -0
- package/node_modules/unix-dgram/build/config.gypi +213 -0
- package/node_modules/unix-dgram/build/unix_dgram.target.mk +159 -0
- package/node_modules/unix-dgram/lib/unix_dgram.js +168 -0
- package/node_modules/unix-dgram/package.json +36 -0
- package/node_modules/unix-dgram/src/unix_dgram.cc +404 -0
- package/node_modules/unix-dgram/src/win_dummy.cc +7 -0
- package/node_modules/unix-dgram/test/test-connect-callback.js +68 -0
- package/node_modules/unix-dgram/test/test-connect.js +53 -0
- package/node_modules/unix-dgram/test/test-dgram-unix.js +58 -0
- package/node_modules/unix-dgram/test/test-send-error.js +26 -0
- package/package.json +3 -2
- package/perf-logs.js +14 -0
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
// this file is a shim so that all the tests don't need to be redone
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const SchemaContext = require('./schema-context');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const fastDeepEqual = require('fast-deep-equal');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
// https://stackoverflow.com/questions/722668/traverse-all-the-nodes-of-a-json-object-tree-with-javascript
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const url = require('url');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const { executeConditionals, notOnlyConditionals } = require('./conditionals');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
// https://github.com/google/closure-compiler/blob/master/externs/es3.js#L1826
|
|
2
16
|
// https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/substr
|
|
3
17
|
'use strict';
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
const _ = require('lodash');
|
|
3
17
|
/** @typedef {import('../../TagRange')} TagRange */
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
let rewriter;
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
let rewriter;
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const requireHook = require('../../hooks/require');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const _ = require('lodash');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const _ = require('lodash');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
const requireHook = require('../../../hooks/require');
|
|
3
17
|
const patcher = require('../../../hooks/patcher');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
module.exports.handle = function() {
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const _ = require('lodash');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const _ = require('lodash');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const _ = require('lodash');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const _ = require('lodash');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
/**
|
|
2
16
|
* This module exports a single static function as an interface for generic
|
|
3
17
|
* dataflow propagation. The rules for the propagation handled within are
|
|
@@ -382,10 +396,24 @@ function isTargetTracked(target, hasTags) {
|
|
|
382
396
|
* @return {Array} all valid targets based on type
|
|
383
397
|
*/
|
|
384
398
|
function extractValidTarget(target, data) {
|
|
385
|
-
|
|
386
|
-
|
|
399
|
+
let validTarget = null;
|
|
400
|
+
switch (target) {
|
|
401
|
+
case 'R':
|
|
402
|
+
validTarget = data.result;
|
|
403
|
+
break;
|
|
404
|
+
default:
|
|
405
|
+
logger.warn(
|
|
406
|
+
'Invalid target type %s for propagator %s',
|
|
407
|
+
target,
|
|
408
|
+
data.name
|
|
409
|
+
);
|
|
410
|
+
break;
|
|
387
411
|
}
|
|
388
|
-
|
|
412
|
+
|
|
413
|
+
if (isString(validTarget) && validTarget.length > 0) {
|
|
414
|
+
return validTarget;
|
|
415
|
+
}
|
|
416
|
+
|
|
389
417
|
return null;
|
|
390
418
|
}
|
|
391
419
|
/**
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
/**
|
|
2
16
|
* Object 'propagation'
|
|
3
17
|
* Note: No propagation event is created.
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const patcher = require('../../../hooks/patcher');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const { trackResult } = require('../common');
|
|
@@ -5,6 +19,7 @@ const TagRange = require('../../models/tag-range');
|
|
|
5
19
|
const tagRangeUtil = require('../../models/tag-range/util');
|
|
6
20
|
const tracker = require('../../../tracker');
|
|
7
21
|
const path = require('path');
|
|
22
|
+
let trackingSeparators;
|
|
8
23
|
|
|
9
24
|
/**
|
|
10
25
|
* Splits string by separator
|
|
@@ -16,14 +31,20 @@ const path = require('path');
|
|
|
16
31
|
*/
|
|
17
32
|
function splitString(str, win32) {
|
|
18
33
|
// windows treats both (forward and backward) slashes as separators
|
|
19
|
-
|
|
34
|
+
const posixRegEx = trackingSeparators ? /(?=\/)/g : /(\/)/g;
|
|
35
|
+
const win32RegEx = trackingSeparators ? /(?=[/\\])/g : /[/\\]/g;
|
|
36
|
+
if (win32) {
|
|
37
|
+
str = str.replace(/\//g, '\\').split(win32RegEx);
|
|
38
|
+
} else {
|
|
39
|
+
str = str.split(posixRegEx);
|
|
40
|
+
}
|
|
20
41
|
if (str.length) {
|
|
21
42
|
// if there is an extension split it out.
|
|
22
43
|
const ix = str[str.length - 1].lastIndexOf('.');
|
|
23
44
|
if (ix > 0) {
|
|
24
45
|
const last = str[str.length - 1];
|
|
25
46
|
str[str.length - 1] = last.substr(0, ix);
|
|
26
|
-
str.push(last.substr(ix));
|
|
47
|
+
str.push(last.substr(ix + 1));
|
|
27
48
|
}
|
|
28
49
|
}
|
|
29
50
|
return str;
|
|
@@ -38,13 +59,25 @@ function splitString(str, win32) {
|
|
|
38
59
|
* @param {string} meta.str result from path.resolve or arg
|
|
39
60
|
* @param {string} segment path segment from one of the args to path.resolve
|
|
40
61
|
*/
|
|
41
|
-
function getSegmentOffset({ str, offset, evaluator }, segment) {
|
|
62
|
+
function getSegmentOffset({ str, offset, evaluator }, segment, win32) {
|
|
42
63
|
// as the segments in each arg and in the result get traversed,
|
|
43
64
|
// winnow away the string to ensure we are finding the proper
|
|
44
65
|
// segment within the path
|
|
45
66
|
const substr = str.substring(offset);
|
|
46
|
-
|
|
47
|
-
|
|
67
|
+
let segmentOffset = substr.indexOf(segment);
|
|
68
|
+
// If tracking separators, evaluator will fail on extensions
|
|
69
|
+
if (trackingSeparators && substr === `.${segment}`) {
|
|
70
|
+
return segmentOffset + offset;
|
|
71
|
+
}
|
|
72
|
+
// Adjust offset if the segment does not start with a separator
|
|
73
|
+
const { sep } = path[win32 ? 'win32' : 'posix'];
|
|
74
|
+
if (
|
|
75
|
+
trackingSeparators &&
|
|
76
|
+
substr.startsWith(sep) &&
|
|
77
|
+
!segment.startsWith(sep)
|
|
78
|
+
) {
|
|
79
|
+
segmentOffset--;
|
|
80
|
+
}
|
|
48
81
|
return evaluator(segmentOffset) ? segmentOffset + offset : -1;
|
|
49
82
|
}
|
|
50
83
|
|
|
@@ -128,8 +161,9 @@ function maybeUpdateResultMeta({ index, arg, resultMeta }) {
|
|
|
128
161
|
* @param {string} segment path segment from one of the args to path.resolve
|
|
129
162
|
*/
|
|
130
163
|
function calculateNewOffset(resultMeta, argMeta, segment) {
|
|
131
|
-
|
|
132
|
-
|
|
164
|
+
const separatorOffset = trackingSeparators ? 0 : 1;
|
|
165
|
+
resultMeta.offset = resultMeta.offset + segment.length + separatorOffset;
|
|
166
|
+
argMeta.offset = argMeta.offset + segment.length + separatorOffset;
|
|
133
167
|
}
|
|
134
168
|
|
|
135
169
|
/**
|
|
@@ -159,14 +193,13 @@ function adjustTagsToPart(resultMeta, argMeta, win32) {
|
|
|
159
193
|
if (!applicableSegment(segment)) {
|
|
160
194
|
return;
|
|
161
195
|
}
|
|
162
|
-
|
|
163
|
-
const offset = getSegmentOffset(resultMeta, segment);
|
|
196
|
+
const offset = getSegmentOffset(resultMeta, segment, win32);
|
|
164
197
|
// no reason to proceed if segment is not in final result
|
|
165
198
|
if (offset === -1) {
|
|
166
199
|
return;
|
|
167
200
|
}
|
|
168
201
|
|
|
169
|
-
const argOffset = getSegmentOffset(argMeta, segment);
|
|
202
|
+
const argOffset = getSegmentOffset(argMeta, segment, win32);
|
|
170
203
|
|
|
171
204
|
calculateNewOffset(resultMeta, argMeta, segment);
|
|
172
205
|
|
|
@@ -183,9 +216,11 @@ function adjustTagsToPart(resultMeta, argMeta, win32) {
|
|
|
183
216
|
return newTags;
|
|
184
217
|
}
|
|
185
218
|
|
|
186
|
-
function propagate({ resultMeta, data, win32 }) {
|
|
219
|
+
function propagate({ resultMeta, data, win32, trackSeparators }) {
|
|
220
|
+
trackingSeparators = trackSeparators;
|
|
187
221
|
if (!resultMeta.evaluator) {
|
|
188
|
-
resultMeta.evaluator = (segmentOffset) =>
|
|
222
|
+
resultMeta.evaluator = (segmentOffset) =>
|
|
223
|
+
segmentOffset === (trackingSeparators ? 0 : 1);
|
|
189
224
|
}
|
|
190
225
|
|
|
191
226
|
data.args.forEach((arg, index) => {
|
|
@@ -206,7 +241,6 @@ function propagate({ resultMeta, data, win32 }) {
|
|
|
206
241
|
tagRangeUtil.addAllInPlace(resultMeta.tagRanges, targetTagRanges);
|
|
207
242
|
}
|
|
208
243
|
});
|
|
209
|
-
|
|
210
244
|
trackResult(resultMeta, data);
|
|
211
245
|
}
|
|
212
246
|
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const patcher = require('../../../hooks/patcher');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const patcher = require('../../../hooks/patcher');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const patcher = require('../../../hooks/patcher');
|
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
Copyright: 2021 Contrast Security, Inc
|
|
3
|
+
Contact: support@contrastsecurity.com
|
|
4
|
+
License: Commercial
|
|
5
|
+
|
|
6
|
+
NOTICE: This Software and the patented inventions embodied within may only be
|
|
7
|
+
used as part of Contrast Security’s commercial offerings. Even though it is
|
|
8
|
+
made available through public repositories, use of this Software is subject to
|
|
9
|
+
the applicable End User Licensing Agreement found at
|
|
10
|
+
https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
|
|
11
|
+
between Contrast Security and the End User. The Software may not be reverse
|
|
12
|
+
engineered, modified, repackaged, sold, redistributed or otherwise used in a
|
|
13
|
+
way not consistent with the End User License Agreement.
|
|
14
|
+
*/
|
|
1
15
|
'use strict';
|
|
2
16
|
|
|
3
17
|
const moduleHook = require('../../../hooks/require');
|