@contrast/agent 4.32.19 → 5.0.0-alpha.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/index.js +52 -0
- package/package.json +20 -202
- package/LICENSE +0 -12
- package/README.md +0 -111
- package/agent-loader.js +0 -44
- package/bin/VERSION +0 -1
- package/bin/contrast-service-darwin-arm64 +0 -0
- package/bin/contrast-service-darwin-x64 +0 -0
- package/bin/contrast-service-linux-arm64 +0 -0
- package/bin/contrast-service-linux-x64 +0 -0
- package/bin/contrast-service-win32-x64.exe +0 -0
- package/bootstrap.js +0 -65
- package/changelog.config.js +0 -56
- package/cli-rewriter.js +0 -24
- package/cli.js +0 -38
- package/config-diagnostics.js +0 -127
- package/esm.mjs +0 -156
- package/lib/agent-emitter.js +0 -89
- package/lib/agent.js +0 -214
- package/lib/app-info.js +0 -150
- package/lib/assess/deadzones/index.js +0 -93
- package/lib/assess/deadzones/rewrite.js +0 -64
- package/lib/assess/express/index.js +0 -29
- package/lib/assess/express/route-coverage.js +0 -143
- package/lib/assess/express/sinks/index.js +0 -23
- package/lib/assess/express/sinks/xss.js +0 -88
- package/lib/assess/express/sources.js +0 -56
- package/lib/assess/fastify/index.js +0 -29
- package/lib/assess/fastify/route-coverage.js +0 -119
- package/lib/assess/fastify/sinks/index.js +0 -25
- package/lib/assess/fastify/sinks/response-scanning.js +0 -54
- package/lib/assess/fastify/sinks/unvalidated-redirect.js +0 -95
- package/lib/assess/fastify/sinks/xss.js +0 -240
- package/lib/assess/fastify/sources.js +0 -76
- package/lib/assess/hapi/index.js +0 -29
- package/lib/assess/hapi/route-coverage.js +0 -163
- package/lib/assess/hapi/sinks/index.js +0 -27
- package/lib/assess/hapi/sinks/response-scanning.js +0 -49
- package/lib/assess/hapi/sinks/session.js +0 -125
- package/lib/assess/hapi/sinks/unvalidated-redirect.js +0 -100
- package/lib/assess/hapi/sinks/xss.js +0 -178
- package/lib/assess/hapi/sources.js +0 -37
- package/lib/assess/index.js +0 -35
- package/lib/assess/koa/index.js +0 -29
- package/lib/assess/koa/route-coverage.js +0 -114
- package/lib/assess/koa/sinks/index.js +0 -25
- package/lib/assess/koa/sinks/response-scanning.js +0 -40
- package/lib/assess/koa/sinks/unvalidated-redirect.js +0 -96
- package/lib/assess/koa/sinks/xss.js +0 -127
- package/lib/assess/koa/sources.js +0 -145
- package/lib/assess/loopback4/index.js +0 -29
- package/lib/assess/loopback4/route-coverage.js +0 -129
- package/lib/assess/loopback4/sinks/index.js +0 -25
- package/lib/assess/loopback4/sinks/response-scanning.js +0 -39
- package/lib/assess/loopback4/sinks/xss.js +0 -77
- package/lib/assess/loopback4/sources.js +0 -33
- package/lib/assess/membrane/debraner.js +0 -170
- package/lib/assess/membrane/deserialization-membrane.js +0 -76
- package/lib/assess/membrane/index.js +0 -463
- package/lib/assess/membrane/source-membrane.js +0 -415
- package/lib/assess/models/base-event.js +0 -207
- package/lib/assess/models/call-context.js +0 -197
- package/lib/assess/models/index.js +0 -31
- package/lib/assess/models/propagation-event.js +0 -77
- package/lib/assess/models/signature.js +0 -92
- package/lib/assess/models/sink-event.js +0 -43
- package/lib/assess/models/source-event.js +0 -95
- package/lib/assess/models/tag-range/index.js +0 -180
- package/lib/assess/models/tag-range/relationships.js +0 -67
- package/lib/assess/models/tag-range/util.js +0 -363
- package/lib/assess/policy/deadzones.json +0 -185
- package/lib/assess/policy/index.js +0 -20
- package/lib/assess/policy/init.js +0 -309
- package/lib/assess/policy/non-dataflow-rules.json +0 -156
- package/lib/assess/policy/propagators.json +0 -545
- package/lib/assess/policy/rules.json +0 -1682
- package/lib/assess/policy/signatures.json +0 -1412
- package/lib/assess/policy/util.js +0 -423
- package/lib/assess/propagators/JSON/parse.js +0 -53
- package/lib/assess/propagators/JSON/stringify.js +0 -444
- package/lib/assess/propagators/ajv/conditionals.js +0 -164
- package/lib/assess/propagators/ajv/evaluator-shim.js +0 -42
- package/lib/assess/propagators/ajv/index.js +0 -91
- package/lib/assess/propagators/ajv/json-schema-type-evaluators.js +0 -495
- package/lib/assess/propagators/ajv/object-walk.js +0 -76
- package/lib/assess/propagators/ajv/refs.js +0 -265
- package/lib/assess/propagators/ajv/schema-context.js +0 -388
- package/lib/assess/propagators/array-prototype-join.js +0 -163
- package/lib/assess/propagators/common.js +0 -137
- package/lib/assess/propagators/dustjs/escape-html.js +0 -22
- package/lib/assess/propagators/dustjs/escape-js.js +0 -22
- package/lib/assess/propagators/ejs-template-generate-source.js +0 -64
- package/lib/assess/propagators/encode-uri/encode-uri-component.js +0 -22
- package/lib/assess/propagators/encode-uri/encode-uri.js +0 -22
- package/lib/assess/propagators/fastify-static/allowed-path.js +0 -85
- package/lib/assess/propagators/handlebars-compile.js +0 -78
- package/lib/assess/propagators/handlebars-escape-expresssion.js +0 -71
- package/lib/assess/propagators/index.js +0 -154
- package/lib/assess/propagators/joi/any.js +0 -47
- package/lib/assess/propagators/joi/boolean.js +0 -68
- package/lib/assess/propagators/joi/expression.js +0 -48
- package/lib/assess/propagators/joi/index.js +0 -27
- package/lib/assess/propagators/joi/keys.js +0 -72
- package/lib/assess/propagators/joi/number.js +0 -67
- package/lib/assess/propagators/joi/object.js +0 -60
- package/lib/assess/propagators/joi/string-base.js +0 -123
- package/lib/assess/propagators/joi/string-schema.js +0 -199
- package/lib/assess/propagators/joi/values.js +0 -304
- package/lib/assess/propagators/manager.js +0 -469
- package/lib/assess/propagators/mongoose/helpers.js +0 -57
- package/lib/assess/propagators/mongoose/index.js +0 -19
- package/lib/assess/propagators/mongoose/map.js +0 -62
- package/lib/assess/propagators/mongoose/mixed.js +0 -71
- package/lib/assess/propagators/mongoose/string.js +0 -112
- package/lib/assess/propagators/mustache/escape.js +0 -22
- package/lib/assess/propagators/number.js +0 -54
- package/lib/assess/propagators/object.js +0 -60
- package/lib/assess/propagators/path/basename.js +0 -113
- package/lib/assess/propagators/path/common.js +0 -387
- package/lib/assess/propagators/path/dirname.js +0 -78
- package/lib/assess/propagators/path/extname.js +0 -83
- package/lib/assess/propagators/path/format.js +0 -65
- package/lib/assess/propagators/path/join.js +0 -53
- package/lib/assess/propagators/path/normalize.js +0 -55
- package/lib/assess/propagators/path/parse.js +0 -43
- package/lib/assess/propagators/path/relative.js +0 -154
- package/lib/assess/propagators/path/resolve.js +0 -63
- package/lib/assess/propagators/path/to-namespaced-path.js +0 -53
- package/lib/assess/propagators/pug-compile.js +0 -58
- package/lib/assess/propagators/querystring/escape.js +0 -56
- package/lib/assess/propagators/querystring/parse.js +0 -118
- package/lib/assess/propagators/querystring/stringify.js +0 -313
- package/lib/assess/propagators/querystring/unescape.js +0 -60
- package/lib/assess/propagators/querystring/utils.js +0 -69
- package/lib/assess/propagators/sequelize/sql-string-escape.js +0 -61
- package/lib/assess/propagators/sequelize/sql-string-format-named-parameters.js +0 -145
- package/lib/assess/propagators/sequelize/sql-string-format.js +0 -104
- package/lib/assess/propagators/sequelize/utils.js +0 -36
- package/lib/assess/propagators/serve-static.js +0 -109
- package/lib/assess/propagators/string-prototype-replace.js +0 -671
- package/lib/assess/propagators/string-prototype-split.js +0 -266
- package/lib/assess/propagators/string-prototype-trim.js +0 -61
- package/lib/assess/propagators/string.js +0 -68
- package/lib/assess/propagators/template-escape.js +0 -87
- package/lib/assess/propagators/templates.js +0 -168
- package/lib/assess/propagators/url/url-prototype-parse.js +0 -133
- package/lib/assess/propagators/url/url-url.js +0 -464
- package/lib/assess/propagators/url/utils.js +0 -58
- package/lib/assess/propagators/util/format.js +0 -305
- package/lib/assess/propagators/utils.js +0 -148
- package/lib/assess/propagators/v8/init-hooks.js +0 -142
- package/lib/assess/propagators/validator/init-hooks.js +0 -252
- package/lib/assess/propagators/validator/validator-methods.js +0 -98
- package/lib/assess/response-scanning/app-activity.js +0 -33
- package/lib/assess/response-scanning/autocomplete-missing.js +0 -66
- package/lib/assess/response-scanning/cache-controls-missing.js +0 -205
- package/lib/assess/response-scanning/clickjacking-control-missing.js +0 -49
- package/lib/assess/response-scanning/common.js +0 -58
- package/lib/assess/response-scanning/cookies/common.js +0 -63
- package/lib/assess/response-scanning/cookies/events.js +0 -28
- package/lib/assess/response-scanning/cookies/httponly.js +0 -45
- package/lib/assess/response-scanning/cookies/secure-flag-missing.js +0 -46
- package/lib/assess/response-scanning/headers/csp-header-insecure.js +0 -209
- package/lib/assess/response-scanning/headers/csp-header-missing.js +0 -45
- package/lib/assess/response-scanning/headers/csp-utils.js +0 -28
- package/lib/assess/response-scanning/headers/hsts-header-missing.js +0 -59
- package/lib/assess/response-scanning/headers/powered-by.js +0 -53
- package/lib/assess/response-scanning/headers/xcontenttype-header-missing.js +0 -51
- package/lib/assess/response-scanning/headers/xxssprotection-header-disabled.js +0 -46
- package/lib/assess/response-scanning/parameter-pollution.js +0 -63
- package/lib/assess/response-scanning/parseable-response-emitter.js +0 -43
- package/lib/assess/restify/index.js +0 -30
- package/lib/assess/restify/route-coverage.js +0 -86
- package/lib/assess/restify/session.js +0 -53
- package/lib/assess/restify/sinks/index.js +0 -25
- package/lib/assess/restify/sinks/response-scanning.js +0 -48
- package/lib/assess/restify/sinks/unvalidated-redirect.js +0 -100
- package/lib/assess/restify/sinks/xss.js +0 -87
- package/lib/assess/restify/sources.js +0 -224
- package/lib/assess/sinks/common.js +0 -513
- package/lib/assess/sinks/dustjs-linkedin-xss.js +0 -131
- package/lib/assess/sinks/dynamo.js +0 -277
- package/lib/assess/sinks/hapi-16-xss.js +0 -75
- package/lib/assess/sinks/index.js +0 -179
- package/lib/assess/sinks/libxmljs-xxe.js +0 -57
- package/lib/assess/sinks/mongodb.js +0 -368
- package/lib/assess/sinks/rethinkdb-nosql-injection.js +0 -142
- package/lib/assess/sinks/ssrf-url.js +0 -108
- package/lib/assess/sources/event-handler.js +0 -309
- package/lib/assess/sources/formidable.js +0 -38
- package/lib/assess/sources/index.js +0 -247
- package/lib/assess/spdy/index.js +0 -23
- package/lib/assess/spdy/sinks/index.js +0 -23
- package/lib/assess/spdy/sinks/xss.js +0 -84
- package/lib/assess/static/hardcoded.js +0 -345
- package/lib/assess/static/read-findings-from-cache.js +0 -40
- package/lib/assess/technologies/index.js +0 -48
- package/lib/assess/utils.js +0 -22
- package/lib/cat.txt +0 -87
- package/lib/cli-rewriter/index.js +0 -328
- package/lib/constants.js +0 -749
- package/lib/contrast.js +0 -497
- package/lib/core/arch-components/dynamodb.js +0 -45
- package/lib/core/arch-components/dynamodbv3.js +0 -48
- package/lib/core/arch-components/index.js +0 -23
- package/lib/core/arch-components/mongodb.js +0 -189
- package/lib/core/arch-components/mysql.js +0 -63
- package/lib/core/arch-components/postgres.js +0 -70
- package/lib/core/arch-components/rethinkdb.js +0 -53
- package/lib/core/arch-components/sqlite3.js +0 -44
- package/lib/core/arch-components/util.js +0 -51
- package/lib/core/async-storage/context.js +0 -133
- package/lib/core/async-storage/hooks/bluebird.js +0 -91
- package/lib/core/async-storage/hooks/mongodb.js +0 -157
- package/lib/core/async-storage/hooks/mysql.js +0 -154
- package/lib/core/async-storage/hooks/redis.js +0 -38
- package/lib/core/async-storage/hooks/utils.js +0 -42
- package/lib/core/async-storage/index.js +0 -222
- package/lib/core/async-storage/scopes/index.js +0 -153
- package/lib/core/common/formidable.js +0 -65
- package/lib/core/common/index.js +0 -19
- package/lib/core/config/options.js +0 -1023
- package/lib/core/config/util.js +0 -392
- package/lib/core/exclusions/exclusion-factory.js +0 -124
- package/lib/core/exclusions/exclusion.js +0 -48
- package/lib/core/exclusions/input.js +0 -95
- package/lib/core/exclusions/url.js +0 -66
- package/lib/core/express/index.js +0 -538
- package/lib/core/express/utils.js +0 -571
- package/lib/core/fastify/index.js +0 -199
- package/lib/core/fastify/utils.js +0 -28
- package/lib/core/hapi/index.js +0 -215
- package/lib/core/hapi/utils.js +0 -126
- package/lib/core/index.js +0 -34
- package/lib/core/koa/index.js +0 -299
- package/lib/core/koa/utils.js +0 -31
- package/lib/core/logger/daily-rotate-file.js +0 -45
- package/lib/core/logger/dataflow-monitor.js +0 -124
- package/lib/core/logger/debug-logger.js +0 -364
- package/lib/core/logger/index.js +0 -43
- package/lib/core/logger/perf-logger.js +0 -241
- package/lib/core/logger/umbrella-logger.js +0 -163
- package/lib/core/loopback4/index.js +0 -173
- package/lib/core/metrics/index.js +0 -150
- package/lib/core/restify/index.js +0 -147
- package/lib/core/restify/utils.js +0 -84
- package/lib/core/rewrite/assignment-expression.js +0 -40
- package/lib/core/rewrite/binary-expression.js +0 -63
- package/lib/core/rewrite/call-expression.js +0 -44
- package/lib/core/rewrite/callees.js +0 -142
- package/lib/core/rewrite/catch-clause.js +0 -49
- package/lib/core/rewrite/function-wrap.js +0 -49
- package/lib/core/rewrite/import-declaration.js +0 -71
- package/lib/core/rewrite/index.js +0 -316
- package/lib/core/rewrite/injections.js +0 -169
- package/lib/core/rewrite/is-contrast-method.js +0 -28
- package/lib/core/rewrite/log.js +0 -24
- package/lib/core/rewrite/member-expression.js +0 -52
- package/lib/core/rewrite/object-property.js +0 -46
- package/lib/core/rewrite/prepend-globals.js +0 -48
- package/lib/core/rewrite/rewrite-log.js +0 -74
- package/lib/core/rewrite/switch-statement.js +0 -71
- package/lib/core/rewrite/template-literal.js +0 -64
- package/lib/core/stacktrace.js +0 -221
- package/lib/coverage.js +0 -158
- package/lib/feature-set.js +0 -297
- package/lib/generator-function.js +0 -20
- package/lib/hooks/array.js +0 -75
- package/lib/hooks/cluster.js +0 -232
- package/lib/hooks/dataflow-monitor.js +0 -38
- package/lib/hooks/encoding.js +0 -88
- package/lib/hooks/express-fileupload.js +0 -57
- package/lib/hooks/express-session.js +0 -108
- package/lib/hooks/fn-to-string.js +0 -106
- package/lib/hooks/frameworks/base.js +0 -103
- package/lib/hooks/frameworks/common.js +0 -191
- package/lib/hooks/frameworks/hapi16.js +0 -293
- package/lib/hooks/frameworks/http.js +0 -89
- package/lib/hooks/frameworks/http2.js +0 -73
- package/lib/hooks/frameworks/index.js +0 -29
- package/lib/hooks/frameworks/spdy.js +0 -87
- package/lib/hooks/hapi-16-reply.js +0 -55
- package/lib/hooks/hapi-16-session.js +0 -312
- package/lib/hooks/http.js +0 -210
- package/lib/hooks/module/extensions.js +0 -41
- package/lib/hooks/module/helpers.js +0 -191
- package/lib/hooks/module/index.js +0 -99
- package/lib/hooks/newrelic.js +0 -60
- package/lib/hooks/object-is.js +0 -48
- package/lib/hooks/object-to-primitive.js +0 -64
- package/lib/hooks/patcher.js +0 -575
- package/lib/hooks/require.js +0 -57
- package/lib/hooks/stealthy-require.js +0 -64
- package/lib/instrumentation.js +0 -190
- package/lib/libraries.js +0 -172
- package/lib/library-usage.js +0 -51
- package/lib/list-installed.js +0 -97
- package/lib/protect/analysis/aho-corasick.js +0 -175
- package/lib/protect/analysis/dfsa-analyzer.js +0 -64
- package/lib/protect/errors/handler-async-errors.js +0 -66
- package/lib/protect/errors/handler.js +0 -55
- package/lib/protect/errors/security-exception.js +0 -31
- package/lib/protect/express/index.js +0 -27
- package/lib/protect/express/sinks.js +0 -34
- package/lib/protect/express/sources.js +0 -54
- package/lib/protect/express/utils.js +0 -60
- package/lib/protect/fastify/index.js +0 -25
- package/lib/protect/fastify/sinks.js +0 -37
- package/lib/protect/fastify/sources.js +0 -90
- package/lib/protect/hapi/error-handler.js +0 -79
- package/lib/protect/hapi/index.js +0 -27
- package/lib/protect/hapi/sinks.js +0 -40
- package/lib/protect/hapi/sources.js +0 -104
- package/lib/protect/index.js +0 -31
- package/lib/protect/input-analysis.js +0 -359
- package/lib/protect/koa/index.js +0 -25
- package/lib/protect/koa/sinks.js +0 -38
- package/lib/protect/koa/sources.js +0 -152
- package/lib/protect/listeners.js +0 -213
- package/lib/protect/loopback4/index.js +0 -23
- package/lib/protect/loopback4/sources.js +0 -48
- package/lib/protect/models/application-context.js +0 -46
- package/lib/protect/models/sink-event.js +0 -28
- package/lib/protect/models/source-event.js +0 -51
- package/lib/protect/restify/index.js +0 -25
- package/lib/protect/restify/sinks.js +0 -39
- package/lib/protect/restify/sources.js +0 -100
- package/lib/protect/rules/assessment.js +0 -204
- package/lib/protect/rules/attack-patterns.js +0 -364
- package/lib/protect/rules/base-scanner/index.js +0 -621
- package/lib/protect/rules/base-scanner/java-script-scanner.js +0 -154
- package/lib/protect/rules/base-scanner/postgresqlscanner.js +0 -26
- package/lib/protect/rules/base-scanner/scan-state.js +0 -243
- package/lib/protect/rules/base-scanner/scan-states.json +0 -14
- package/lib/protect/rules/base-scanner/substring-finder.js +0 -59
- package/lib/protect/rules/base-scanner/token-sequence.js +0 -57
- package/lib/protect/rules/bot-blocker/bot-blocker-rule.js +0 -108
- package/lib/protect/rules/bot-blocker/bots.json +0 -283
- package/lib/protect/rules/bot-blocker/index.js +0 -93
- package/lib/protect/rules/cmd-injection/cmdinjection-rule.js +0 -113
- package/lib/protect/rules/cmd-injection-command-backdoors/backdoor-detector.js +0 -103
- package/lib/protect/rules/cmd-injection-command-backdoors/cmd-injection-command-backdoors-rule.js +0 -90
- package/lib/protect/rules/cmd-injection-semantic-chained-commands/chained-command-scanner.js +0 -278
- package/lib/protect/rules/cmd-injection-semantic-chained-commands/cmd-injection-semantic-chained-commands-rule.js +0 -117
- package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/cmd-injection-semantic-dangerous-paths-rule.js +0 -112
- package/lib/protect/rules/cmd-injection-semantic-dangerous-paths/dangerous-paths-scanner.js +0 -210
- package/lib/protect/rules/common.js +0 -38
- package/lib/protect/rules/index.js +0 -357
- package/lib/protect/rules/ip-denylist/ip-denylist-rule.js +0 -106
- package/lib/protect/rules/method-tampering/evaluator.js +0 -39
- package/lib/protect/rules/method-tampering/method-tampering-rule.js +0 -99
- package/lib/protect/rules/nosqli/nosql-injection-rule.js +0 -307
- package/lib/protect/rules/nosqli/nosql-scanner/index.js +0 -46
- package/lib/protect/rules/nosqli/nosql-scanner/labels.json +0 -73
- package/lib/protect/rules/nosqli/nosql-scanner/mongodbscanner.js +0 -85
- package/lib/protect/rules/nosqli/nosql-scanner/rethinkdbscanner.js +0 -26
- package/lib/protect/rules/path-traversal/path-traversal-rule.js +0 -61
- package/lib/protect/rules/rule-factory.js +0 -250
- package/lib/protect/rules/signatures/cmd-injection/config.json +0 -8
- package/lib/protect/rules/signatures/cmd-injection/custom-searchers/chained-command-searcher.js +0 -117
- package/lib/protect/rules/signatures/cmd-injection/custom-searchers/index.js +0 -26
- package/lib/protect/rules/signatures/cmd-injection/index.js +0 -30
- package/lib/protect/rules/signatures/evaluator.js +0 -187
- package/lib/protect/rules/signatures/index.js +0 -83
- package/lib/protect/rules/signatures/nosql-injection/config.json +0 -8
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/index.js +0 -28
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/nosql-comment-searcher.js +0 -42
- package/lib/protect/rules/signatures/nosql-injection/custom-searchers/simple-or-searcher.js +0 -115
- package/lib/protect/rules/signatures/nosql-injection/index.js +0 -30
- package/lib/protect/rules/signatures/path-traversal/config.json +0 -8
- package/lib/protect/rules/signatures/path-traversal/index.js +0 -30
- package/lib/protect/rules/signatures/reflected-xss/config.json +0 -14
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/behavior-url-searcher.js +0 -84
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/custom-searches.json +0 -103
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/function-definition-searcher.js +0 -59
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/immediate-function-searcher.js +0 -105
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/index.js +0 -36
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/link-and-src-target-searcher.js +0 -145
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/location-set-searcher.js +0 -72
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/map-access-searcher.js +0 -102
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/native-function-execution-searcher.js +0 -82
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/no-alnum-searcher.js +0 -50
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/redefined-function-searcher.js +0 -111
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/style-url-injection-searcher.js +0 -65
- package/lib/protect/rules/signatures/reflected-xss/custom-searchers/variable-assignment-searcher.js +0 -90
- package/lib/protect/rules/signatures/reflected-xss/helpers/function-call.js +0 -83
- package/lib/protect/rules/signatures/reflected-xss/index.js +0 -30
- package/lib/protect/rules/signatures/signature.js +0 -201
- package/lib/protect/rules/signatures/sql-injection/config.json +0 -10
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/if-else-drop-searcher.js +0 -49
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/index.js +0 -30
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/simple-or-searcher.js +0 -124
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/sql-comment-searcher.js +0 -73
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/time-function-searcher.js +0 -64
- package/lib/protect/rules/signatures/sql-injection/custom-searchers/tsql-exec-searcher.js +0 -45
- package/lib/protect/rules/signatures/sql-injection/index.js +0 -30
- package/lib/protect/rules/signatures/ssjs-injection/config.json +0 -17
- package/lib/protect/rules/signatures/ssjs-injection/index.js +0 -30
- package/lib/protect/rules/signatures/unsafe-file-upload/config.json +0 -7
- package/lib/protect/rules/signatures/unsafe-file-upload/index.js +0 -29
- package/lib/protect/rules/signatures/untrusted-deserialization/config.json +0 -8
- package/lib/protect/rules/signatures/untrusted-deserialization/index.js +0 -27
- package/lib/protect/rules/sqli/generic-complicated.js +0 -50
- package/lib/protect/rules/sqli/sql-injection-rule.js +0 -278
- package/lib/protect/rules/sqli/sql-scanner/index.js +0 -61
- package/lib/protect/rules/sqli/sql-scanner/labels.json +0 -135
- package/lib/protect/rules/sqli/sql-scanner/mysql-scanner.js +0 -170
- package/lib/protect/rules/ssjs-injection/evaluator.js +0 -48
- package/lib/protect/rules/ssjs-injection/ssjsinjection-rule.js +0 -164
- package/lib/protect/rules/unsafe-file-upload/unsafe-file-upload-rule.js +0 -33
- package/lib/protect/rules/untrusted-deserialization/untrusted-deserialization-rule.js +0 -95
- package/lib/protect/rules/virtual-patch/index.js +0 -17
- package/lib/protect/rules/virtual-patch/utils.js +0 -72
- package/lib/protect/rules/virtual-patch/virtual-patch-rule.js +0 -162
- package/lib/protect/rules/xss/helpers/function-call.js +0 -82
- package/lib/protect/rules/xss/reflected-xss-rule.js +0 -103
- package/lib/protect/rules/xxe/xxerule.js +0 -184
- package/lib/protect/sample-aggregator.js +0 -144
- package/lib/protect/samples.js +0 -167
- package/lib/protect/service.js +0 -1203
- package/lib/protect/sinks/child-process.js +0 -65
- package/lib/protect/sinks/eval.js +0 -57
- package/lib/protect/sinks/fs.js +0 -97
- package/lib/protect/sinks/function.js +0 -64
- package/lib/protect/sinks/index.js +0 -54
- package/lib/protect/sinks/libxmljs.js +0 -107
- package/lib/protect/sinks/mongodb.js +0 -158
- package/lib/protect/sinks/mysql.js +0 -63
- package/lib/protect/sinks/node-serialize.js +0 -53
- package/lib/protect/sinks/postgres.js +0 -81
- package/lib/protect/sinks/rethinkdb.js +0 -47
- package/lib/protect/sinks/sequelize.js +0 -86
- package/lib/protect/sinks/sqlite3.js +0 -50
- package/lib/protect/sinks/vm.js +0 -89
- package/lib/protect/sources/busboy.js +0 -58
- package/lib/protect/sources/formidable.js +0 -55
- package/lib/protect/sources/index.js +0 -27
- package/lib/protect/validators/authorization.js +0 -31
- package/lib/protect/validators/common.js +0 -74
- package/lib/protect/validators/connection.js +0 -31
- package/lib/protect/validators/content-length.js +0 -30
- package/lib/protect/validators/host.js +0 -23
- package/lib/protect/validators/if-none-match.js +0 -71
- package/lib/protect/validators/index.js +0 -24
- package/lib/protect/validators/origin.js +0 -29
- package/lib/reporter/app-activity-queue.js +0 -179
- package/lib/reporter/grpc-client.js +0 -88
- package/lib/reporter/messages/speedracer/activity.js +0 -38
- package/lib/reporter/messages/speedracer/application-create.js +0 -65
- package/lib/reporter/messages/speedracer/application-update.js +0 -41
- package/lib/reporter/messages/speedracer/base.js +0 -401
- package/lib/reporter/messages/speedracer/index.js +0 -33
- package/lib/reporter/messages/speedracer/observed-route.js +0 -41
- package/lib/reporter/messages/speedracer/poll.js +0 -43
- package/lib/reporter/messages/speedracer/request.js +0 -33
- package/lib/reporter/messages/speedracer/startup.js +0 -63
- package/lib/reporter/messaging-router.js +0 -116
- package/lib/reporter/models/app-activity/app-activity.js +0 -43
- package/lib/reporter/models/app-activity/attacker-activity.js +0 -77
- package/lib/reporter/models/app-activity/defend.js +0 -94
- package/lib/reporter/models/app-activity/inventory.js +0 -73
- package/lib/reporter/models/app-activity/protection-rule-activity.js +0 -68
- package/lib/reporter/models/app-activity/rule-events.js +0 -55
- package/lib/reporter/models/app-activity/sample.js +0 -139
- package/lib/reporter/models/app-activity/source.js +0 -79
- package/lib/reporter/models/app-activity/user-input.js +0 -87
- package/lib/reporter/models/app-create.js +0 -63
- package/lib/reporter/models/app-update/index.js +0 -178
- package/lib/reporter/models/app-update/library-manifest.js +0 -54
- package/lib/reporter/models/app-update/library-usage.js +0 -36
- package/lib/reporter/models/app-update/library.js +0 -165
- package/lib/reporter/models/event-tag.js +0 -36
- package/lib/reporter/models/finding/event.js +0 -158
- package/lib/reporter/models/finding/finding.js +0 -77
- package/lib/reporter/models/frameworks/express-request.js +0 -75
- package/lib/reporter/models/frameworks/fastify-request.js +0 -27
- package/lib/reporter/models/frameworks/hapi-request.js +0 -39
- package/lib/reporter/models/frameworks/index.js +0 -21
- package/lib/reporter/models/frameworks/koa-request.js +0 -27
- package/lib/reporter/models/frameworks/restify-request.js +0 -27
- package/lib/reporter/models/observed-route.js +0 -37
- package/lib/reporter/models/request.js +0 -288
- package/lib/reporter/models/route-coverage.js +0 -53
- package/lib/reporter/models/startup.js +0 -56
- package/lib/reporter/models/trace-event-source.js +0 -38
- package/lib/reporter/models/utils/request-factory.js +0 -32
- package/lib/reporter/models/utils/user-input-factory.js +0 -190
- package/lib/reporter/models/utils/user-input-kit.js +0 -48
- package/lib/reporter/mq-client.js +0 -59
- package/lib/reporter/server-activity-queue.js +0 -37
- package/lib/reporter/socket-client.js +0 -172
- package/lib/reporter/speedracer/base-connection-state.js +0 -49
- package/lib/reporter/speedracer/constants.js +0 -68
- package/lib/reporter/speedracer/failure-connection-state.js +0 -45
- package/lib/reporter/speedracer/index.js +0 -330
- package/lib/reporter/speedracer/success-connection-state.js +0 -67
- package/lib/reporter/speedracer/unknown-connection-state.js +0 -154
- package/lib/reporter/translations/enums.js +0 -268
- package/lib/reporter/translations/helpers.js +0 -115
- package/lib/reporter/translations/to-protobuf/dtm/activity.js +0 -149
- package/lib/reporter/translations/to-protobuf/dtm/address.js +0 -25
- package/lib/reporter/translations/to-protobuf/dtm/agent-startup.js +0 -40
- package/lib/reporter/translations/to-protobuf/dtm/application-create.js +0 -44
- package/lib/reporter/translations/to-protobuf/dtm/application-update.js +0 -61
- package/lib/reporter/translations/to-protobuf/dtm/architecture-component.js +0 -33
- package/lib/reporter/translations/to-protobuf/dtm/attack-result.js +0 -38
- package/lib/reporter/translations/to-protobuf/dtm/bot-blocker-details.js +0 -23
- package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-details.js +0 -22
- package/lib/reporter/translations/to-protobuf/dtm/cmd-injection-semantic-analysis-details.js +0 -23
- package/lib/reporter/translations/to-protobuf/dtm/finding.js +0 -47
- package/lib/reporter/translations/to-protobuf/dtm/http-method-tampering-details.js +0 -24
- package/lib/reporter/translations/to-protobuf/dtm/http-request.js +0 -50
- package/lib/reporter/translations/to-protobuf/dtm/index.js +0 -48
- package/lib/reporter/translations/to-protobuf/dtm/ip-denylist-details.js +0 -23
- package/lib/reporter/translations/to-protobuf/dtm/library-usage-update.js +0 -32
- package/lib/reporter/translations/to-protobuf/dtm/no-sql-injection-details.js +0 -26
- package/lib/reporter/translations/to-protobuf/dtm/observed-route.js +0 -73
- package/lib/reporter/translations/to-protobuf/dtm/pair.js +0 -24
- package/lib/reporter/translations/to-protobuf/dtm/path-traversal-details.js +0 -22
- package/lib/reporter/translations/to-protobuf/dtm/poll.js +0 -19
- package/lib/reporter/translations/to-protobuf/dtm/rasp-rule-sample.js +0 -134
- package/lib/reporter/translations/to-protobuf/dtm/raw-request.js +0 -105
- package/lib/reporter/translations/to-protobuf/dtm/route-coverage.js +0 -68
- package/lib/reporter/translations/to-protobuf/dtm/simple-pair.js +0 -24
- package/lib/reporter/translations/to-protobuf/dtm/sql-injection-details.js +0 -26
- package/lib/reporter/translations/to-protobuf/dtm/ssjs-injection-details.js +0 -25
- package/lib/reporter/translations/to-protobuf/dtm/stack-trace-element.js +0 -30
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/action.js +0 -21
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/index.js +0 -56
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/parent-object-id.js +0 -23
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-object.js +0 -28
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-signature.js +0 -37
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-event-source.js +0 -24
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-stack.js +0 -27
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/trace-taint-range.js +0 -24
- package/lib/reporter/translations/to-protobuf/dtm/trace-event/type.js +0 -21
- package/lib/reporter/translations/to-protobuf/dtm/untrusted-deserialization-details.js +0 -24
- package/lib/reporter/translations/to-protobuf/dtm/user-input.js +0 -37
- package/lib/reporter/translations/to-protobuf/dtm/virtual-patch-details.js +0 -23
- package/lib/reporter/translations/to-protobuf/dtm/xss-details.js +0 -34
- package/lib/reporter/translations/to-protobuf/dtm/xxe-details.js +0 -45
- package/lib/reporter/translations/to-protobuf/index.js +0 -18
- package/lib/reporter/translations/to-protobuf/settings/application-settings.js +0 -76
- package/lib/reporter/translations/to-protobuf/settings/assess-features.js +0 -66
- package/lib/reporter/translations/to-protobuf/settings/auth.js +0 -25
- package/lib/reporter/translations/to-protobuf/settings/bot-blocker.js +0 -27
- package/lib/reporter/translations/to-protobuf/settings/custom-rule-feature.js +0 -27
- package/lib/reporter/translations/to-protobuf/settings/defend-features.js +0 -74
- package/lib/reporter/translations/to-protobuf/settings/exclusions.js +0 -98
- package/lib/reporter/translations/to-protobuf/settings/index.js +0 -37
- package/lib/reporter/translations/to-protobuf/settings/input-analysis-result.js +0 -22
- package/lib/reporter/translations/to-protobuf/settings/inventory-features.js +0 -35
- package/lib/reporter/translations/to-protobuf/settings/ip-filter.js +0 -29
- package/lib/reporter/translations/to-protobuf/settings/log-enhancer.js +0 -23
- package/lib/reporter/translations/to-protobuf/settings/protection-rule.js +0 -45
- package/lib/reporter/translations/to-protobuf/settings/reaction.js +0 -29
- package/lib/reporter/translations/to-protobuf/settings/rule-definition.js +0 -59
- package/lib/reporter/translations/to-protobuf/settings/sampling.js +0 -35
- package/lib/reporter/translations/to-protobuf/settings/server-features.js +0 -73
- package/lib/reporter/translations/to-protobuf/settings/syslog.js +0 -62
- package/lib/reporter/translations/to-protobuf/settings/virtual-patch.js +0 -77
- package/lib/reporter/ts-reporter.js +0 -448
- package/lib/telemetry.js +0 -194
- package/lib/tracker.js +0 -156
- package/lib/util/base64.js +0 -23
- package/lib/util/bitset.js +0 -85
- package/lib/util/block-request.js +0 -34
- package/lib/util/callback-resolver.js +0 -37
- package/lib/util/clean-stack.js +0 -308
- package/lib/util/clean-string/brackets.js +0 -86
- package/lib/util/clean-string/clean-string-base.js +0 -60
- package/lib/util/clean-string/comments.js +0 -107
- package/lib/util/clean-string/concatenations.js +0 -183
- package/lib/util/clean-string/jsclean-string.js +0 -96
- package/lib/util/clean-string/placeholders.js +0 -107
- package/lib/util/clean-string/util.js +0 -69
- package/lib/util/colors.js +0 -28
- package/lib/util/config-diagnostics-utils.js +0 -229
- package/lib/util/file-finder.js +0 -160
- package/lib/util/find-cache-dir.js +0 -91
- package/lib/util/get-file-type.js +0 -43
- package/lib/util/heap-dump.js +0 -72
- package/lib/util/html-util.js +0 -83
- package/lib/util/ip-analyzer.js +0 -246
- package/lib/util/is-agent-path.js +0 -25
- package/lib/util/is-contrast-error.js +0 -15
- package/lib/util/is-piped-to-dev.js +0 -16
- package/lib/util/is-string.js +0 -24
- package/lib/util/partial.js +0 -29
- package/lib/util/pkg-name.js +0 -23
- package/lib/util/request-util.js +0 -74
- package/lib/util/resolve-obj.js +0 -39
- package/lib/util/route-info.js +0 -50
- package/lib/util/some.js +0 -27
- package/lib/util/source-map.js +0 -171
- package/lib/util/static-rules.js +0 -33
- package/lib/util/trace-util.js +0 -74
- package/lib/util/traverse.js +0 -188
- package/lib/util/user-input-evaluator.js +0 -64
- package/lib/util/xml-analyzer/external-entity-finder.js +0 -183
- package/node_modules/@colors/colors/LICENSE +0 -26
- package/node_modules/@colors/colors/README.md +0 -219
- package/node_modules/@colors/colors/examples/normal-usage.js +0 -83
- package/node_modules/@colors/colors/examples/safe-string.js +0 -80
- package/node_modules/@colors/colors/index.d.ts +0 -136
- package/node_modules/@colors/colors/lib/colors.js +0 -211
- package/node_modules/@colors/colors/lib/custom/trap.js +0 -46
- package/node_modules/@colors/colors/lib/custom/zalgo.js +0 -110
- package/node_modules/@colors/colors/lib/extendStringPrototype.js +0 -110
- package/node_modules/@colors/colors/lib/index.js +0 -13
- package/node_modules/@colors/colors/lib/maps/america.js +0 -10
- package/node_modules/@colors/colors/lib/maps/rainbow.js +0 -12
- package/node_modules/@colors/colors/lib/maps/random.js +0 -11
- package/node_modules/@colors/colors/lib/maps/zebra.js +0 -5
- package/node_modules/@colors/colors/lib/styles.js +0 -95
- package/node_modules/@colors/colors/lib/system/has-flag.js +0 -35
- package/node_modules/@colors/colors/lib/system/supports-colors.js +0 -151
- package/node_modules/@colors/colors/package.json +0 -49
- package/node_modules/@colors/colors/safe.d.ts +0 -48
- package/node_modules/@colors/colors/safe.js +0 -10
- package/node_modules/@colors/colors/themes/generic-logging.js +0 -12
- package/node_modules/@dabh/diagnostics/CHANGELOG.md +0 -26
- package/node_modules/@dabh/diagnostics/LICENSE +0 -20
- package/node_modules/@dabh/diagnostics/README.md +0 -473
- package/node_modules/@dabh/diagnostics/adapters/hash.js +0 -11
- package/node_modules/@dabh/diagnostics/adapters/index.js +0 -18
- package/node_modules/@dabh/diagnostics/adapters/localstorage.js +0 -11
- package/node_modules/@dabh/diagnostics/adapters/process.env.js +0 -11
- package/node_modules/@dabh/diagnostics/browser/development.js +0 -35
- package/node_modules/@dabh/diagnostics/browser/index.js +0 -8
- package/node_modules/@dabh/diagnostics/browser/override.js +0 -6
- package/node_modules/@dabh/diagnostics/browser/production.js +0 -24
- package/node_modules/@dabh/diagnostics/diagnostics.js +0 -212
- package/node_modules/@dabh/diagnostics/logger/console.js +0 -19
- package/node_modules/@dabh/diagnostics/modifiers/namespace-ansi.js +0 -20
- package/node_modules/@dabh/diagnostics/modifiers/namespace.js +0 -32
- package/node_modules/@dabh/diagnostics/node/development.js +0 -36
- package/node_modules/@dabh/diagnostics/node/index.js +0 -8
- package/node_modules/@dabh/diagnostics/node/override.js +0 -21
- package/node_modules/@dabh/diagnostics/node/production.js +0 -24
- package/node_modules/@dabh/diagnostics/package.json +0 -68
- package/node_modules/async/CHANGELOG.md +0 -344
- package/node_modules/async/LICENSE +0 -19
- package/node_modules/async/README.md +0 -60
- package/node_modules/async/all.js +0 -119
- package/node_modules/async/allLimit.js +0 -46
- package/node_modules/async/allSeries.js +0 -45
- package/node_modules/async/any.js +0 -122
- package/node_modules/async/anyLimit.js +0 -47
- package/node_modules/async/anySeries.js +0 -46
- package/node_modules/async/apply.js +0 -55
- package/node_modules/async/applyEach.js +0 -57
- package/node_modules/async/applyEachSeries.js +0 -37
- package/node_modules/async/asyncify.js +0 -118
- package/node_modules/async/auto.js +0 -333
- package/node_modules/async/autoInject.js +0 -182
- package/node_modules/async/bower.json +0 -17
- package/node_modules/async/cargo.js +0 -63
- package/node_modules/async/cargoQueue.js +0 -71
- package/node_modules/async/compose.js +0 -55
- package/node_modules/async/concat.js +0 -115
- package/node_modules/async/concatLimit.js +0 -60
- package/node_modules/async/concatSeries.js +0 -41
- package/node_modules/async/constant.js +0 -55
- package/node_modules/async/detect.js +0 -96
- package/node_modules/async/detectLimit.js +0 -48
- package/node_modules/async/detectSeries.js +0 -47
- package/node_modules/async/dir.js +0 -43
- package/node_modules/async/dist/async.js +0 -6057
- package/node_modules/async/dist/async.min.js +0 -1
- package/node_modules/async/dist/async.mjs +0 -5945
- package/node_modules/async/doDuring.js +0 -68
- package/node_modules/async/doUntil.js +0 -46
- package/node_modules/async/doWhilst.js +0 -68
- package/node_modules/async/during.js +0 -78
- package/node_modules/async/each.js +0 -129
- package/node_modules/async/eachLimit.js +0 -50
- package/node_modules/async/eachOf.js +0 -185
- package/node_modules/async/eachOfLimit.js +0 -47
- package/node_modules/async/eachOfSeries.js +0 -39
- package/node_modules/async/eachSeries.js +0 -44
- package/node_modules/async/ensureAsync.js +0 -67
- package/node_modules/async/every.js +0 -119
- package/node_modules/async/everyLimit.js +0 -46
- package/node_modules/async/everySeries.js +0 -45
- package/node_modules/async/filter.js +0 -93
- package/node_modules/async/filterLimit.js +0 -45
- package/node_modules/async/filterSeries.js +0 -43
- package/node_modules/async/find.js +0 -96
- package/node_modules/async/findLimit.js +0 -48
- package/node_modules/async/findSeries.js +0 -47
- package/node_modules/async/flatMap.js +0 -115
- package/node_modules/async/flatMapLimit.js +0 -60
- package/node_modules/async/flatMapSeries.js +0 -41
- package/node_modules/async/foldl.js +0 -153
- package/node_modules/async/foldr.js +0 -41
- package/node_modules/async/forEach.js +0 -129
- package/node_modules/async/forEachLimit.js +0 -50
- package/node_modules/async/forEachOf.js +0 -185
- package/node_modules/async/forEachOfLimit.js +0 -47
- package/node_modules/async/forEachOfSeries.js +0 -39
- package/node_modules/async/forEachSeries.js +0 -44
- package/node_modules/async/forever.js +0 -68
- package/node_modules/async/groupBy.js +0 -108
- package/node_modules/async/groupByLimit.js +0 -71
- package/node_modules/async/groupBySeries.js +0 -36
- package/node_modules/async/index.js +0 -588
- package/node_modules/async/inject.js +0 -153
- package/node_modules/async/internal/DoublyLinkedList.js +0 -92
- package/node_modules/async/internal/Heap.js +0 -120
- package/node_modules/async/internal/applyEach.js +0 -29
- package/node_modules/async/internal/asyncEachOfLimit.js +0 -75
- package/node_modules/async/internal/awaitify.js +0 -27
- package/node_modules/async/internal/breakLoop.js +0 -10
- package/node_modules/async/internal/consoleFunc.js +0 -31
- package/node_modules/async/internal/createTester.js +0 -40
- package/node_modules/async/internal/eachOfLimit.js +0 -90
- package/node_modules/async/internal/filter.js +0 -55
- package/node_modules/async/internal/getIterator.js +0 -11
- package/node_modules/async/internal/initialParams.js +0 -14
- package/node_modules/async/internal/isArrayLike.js +0 -10
- package/node_modules/async/internal/iterator.js +0 -57
- package/node_modules/async/internal/map.js +0 -30
- package/node_modules/async/internal/once.js +0 -17
- package/node_modules/async/internal/onlyOnce.js +0 -15
- package/node_modules/async/internal/parallel.js +0 -34
- package/node_modules/async/internal/promiseCallback.js +0 -23
- package/node_modules/async/internal/queue.js +0 -291
- package/node_modules/async/internal/range.js +0 -14
- package/node_modules/async/internal/reject.js +0 -26
- package/node_modules/async/internal/setImmediate.js +0 -34
- package/node_modules/async/internal/withoutIndex.js +0 -10
- package/node_modules/async/internal/wrapAsync.js +0 -34
- package/node_modules/async/log.js +0 -41
- package/node_modules/async/map.js +0 -142
- package/node_modules/async/mapLimit.js +0 -45
- package/node_modules/async/mapSeries.js +0 -44
- package/node_modules/async/mapValues.js +0 -152
- package/node_modules/async/mapValuesLimit.js +0 -61
- package/node_modules/async/mapValuesSeries.js +0 -37
- package/node_modules/async/memoize.js +0 -91
- package/node_modules/async/nextTick.js +0 -52
- package/node_modules/async/package.json +0 -84
- package/node_modules/async/parallel.js +0 -180
- package/node_modules/async/parallelLimit.js +0 -41
- package/node_modules/async/priorityQueue.js +0 -91
- package/node_modules/async/queue.js +0 -167
- package/node_modules/async/race.js +0 -67
- package/node_modules/async/reduce.js +0 -153
- package/node_modules/async/reduceRight.js +0 -41
- package/node_modules/async/reflect.js +0 -78
- package/node_modules/async/reflectAll.js +0 -93
- package/node_modules/async/reject.js +0 -87
- package/node_modules/async/rejectLimit.js +0 -45
- package/node_modules/async/rejectSeries.js +0 -43
- package/node_modules/async/retry.js +0 -159
- package/node_modules/async/retryable.js +0 -77
- package/node_modules/async/select.js +0 -93
- package/node_modules/async/selectLimit.js +0 -45
- package/node_modules/async/selectSeries.js +0 -43
- package/node_modules/async/seq.js +0 -79
- package/node_modules/async/series.js +0 -186
- package/node_modules/async/setImmediate.js +0 -45
- package/node_modules/async/some.js +0 -122
- package/node_modules/async/someLimit.js +0 -47
- package/node_modules/async/someSeries.js +0 -46
- package/node_modules/async/sortBy.js +0 -190
- package/node_modules/async/timeout.js +0 -89
- package/node_modules/async/times.js +0 -50
- package/node_modules/async/timesLimit.js +0 -43
- package/node_modules/async/timesSeries.js +0 -32
- package/node_modules/async/transform.js +0 -173
- package/node_modules/async/tryEach.js +0 -78
- package/node_modules/async/unmemoize.js +0 -25
- package/node_modules/async/until.js +0 -61
- package/node_modules/async/waterfall.js +0 -105
- package/node_modules/async/whilst.js +0 -78
- package/node_modules/async/wrapSync.js +0 -118
- package/node_modules/color/LICENSE +0 -21
- package/node_modules/color/README.md +0 -123
- package/node_modules/color/index.js +0 -482
- package/node_modules/color/package.json +0 -44
- package/node_modules/color-convert/CHANGELOG.md +0 -54
- package/node_modules/color-convert/LICENSE +0 -21
- package/node_modules/color-convert/README.md +0 -68
- package/node_modules/color-convert/conversions.js +0 -868
- package/node_modules/color-convert/index.js +0 -78
- package/node_modules/color-convert/package.json +0 -50
- package/node_modules/color-convert/route.js +0 -97
- package/node_modules/color-name/.eslintrc.json +0 -43
- package/node_modules/color-name/.npmignore +0 -107
- package/node_modules/color-name/LICENSE +0 -8
- package/node_modules/color-name/README.md +0 -11
- package/node_modules/color-name/index.js +0 -152
- package/node_modules/color-name/package.json +0 -29
- package/node_modules/color-name/test.js +0 -7
- package/node_modules/color-string/LICENSE +0 -21
- package/node_modules/color-string/README.md +0 -62
- package/node_modules/color-string/index.js +0 -242
- package/node_modules/color-string/package.json +0 -43
- package/node_modules/colorspace/LICENSE.md +0 -20
- package/node_modules/colorspace/README.md +0 -43
- package/node_modules/colorspace/index.js +0 -29
- package/node_modules/colorspace/package.json +0 -41
- package/node_modules/enabled/.travis.yml +0 -9
- package/node_modules/enabled/LICENSE +0 -20
- package/node_modules/enabled/README.md +0 -68
- package/node_modules/enabled/index.js +0 -34
- package/node_modules/enabled/package.json +0 -37
- package/node_modules/enabled/test.js +0 -39
- package/node_modules/fecha/LICENSE +0 -22
- package/node_modules/fecha/README.md +0 -320
- package/node_modules/fecha/dist/fecha.min.js +0 -2
- package/node_modules/fecha/dist/fecha.min.js.map +0 -1
- package/node_modules/fecha/lib/fecha.d.ts +0 -52
- package/node_modules/fecha/lib/fecha.js +0 -403
- package/node_modules/fecha/lib/fecha.js.map +0 -1
- package/node_modules/fecha/lib/fecha.umd.js +0 -418
- package/node_modules/fecha/lib/fecha.umd.js.map +0 -1
- package/node_modules/fecha/package.json +0 -59
- package/node_modules/fecha/src/fecha.ts +0 -524
- package/node_modules/file-stream-rotator/.nvmrc +0 -1
- package/node_modules/file-stream-rotator/.travis.yml +0 -5
- package/node_modules/file-stream-rotator/FileStreamRotator.js +0 -702
- package/node_modules/file-stream-rotator/LICENSE.txt +0 -17
- package/node_modules/file-stream-rotator/README.md +0 -148
- package/node_modules/file-stream-rotator/index.js +0 -1
- package/node_modules/file-stream-rotator/package.json +0 -34
- package/node_modules/file-stream-rotator/test.js +0 -208
- package/node_modules/file-stream-rotator/tests/every-minute-test.js +0 -85
- package/node_modules/file-stream-rotator/tests/every-second-test.js +0 -75
- package/node_modules/file-stream-rotator/tests/large-test.js +0 -33
- package/node_modules/file-stream-rotator/tests/rotate-on-size-without-date.js +0 -103
- package/node_modules/fn.name/.gitattributes +0 -1
- package/node_modules/fn.name/.travis.yml +0 -10
- package/node_modules/fn.name/LICENSE +0 -22
- package/node_modules/fn.name/README.md +0 -42
- package/node_modules/fn.name/index.js +0 -42
- package/node_modules/fn.name/package.json +0 -41
- package/node_modules/fn.name/test.js +0 -73
- package/node_modules/inherits/LICENSE +0 -16
- package/node_modules/inherits/README.md +0 -42
- package/node_modules/inherits/inherits.js +0 -9
- package/node_modules/inherits/inherits_browser.js +0 -27
- package/node_modules/inherits/package.json +0 -33
- package/node_modules/is-arrayish/LICENSE +0 -21
- package/node_modules/is-arrayish/README.md +0 -16
- package/node_modules/is-arrayish/index.js +0 -9
- package/node_modules/is-arrayish/package.json +0 -49
- package/node_modules/is-arrayish/yarn-error.log +0 -1443
- package/node_modules/is-stream/index.d.ts +0 -80
- package/node_modules/is-stream/index.js +0 -29
- package/node_modules/is-stream/license +0 -9
- package/node_modules/is-stream/package.json +0 -45
- package/node_modules/is-stream/readme.md +0 -57
- package/node_modules/kuler/.travis.yml +0 -5
- package/node_modules/kuler/LICENSE +0 -7
- package/node_modules/kuler/README.md +0 -40
- package/node_modules/kuler/index.js +0 -118
- package/node_modules/kuler/package.json +0 -38
- package/node_modules/kuler/test.js +0 -23
- package/node_modules/logform/.babelrc +0 -3
- package/node_modules/logform/.eslintrc +0 -7
- package/node_modules/logform/.gitattributes +0 -1
- package/node_modules/logform/CHANGELOG.md +0 -256
- package/node_modules/logform/LICENSE +0 -21
- package/node_modules/logform/README.md +0 -653
- package/node_modules/logform/align.js +0 -14
- package/node_modules/logform/browser.js +0 -38
- package/node_modules/logform/cli.js +0 -52
- package/node_modules/logform/colorize.js +0 -122
- package/node_modules/logform/combine.js +0 -66
- package/node_modules/logform/dist/align.js +0 -15
- package/node_modules/logform/dist/browser.js +0 -72
- package/node_modules/logform/dist/cli.js +0 -73
- package/node_modules/logform/dist/colorize.js +0 -144
- package/node_modules/logform/dist/combine.js +0 -71
- package/node_modules/logform/dist/errors.js +0 -43
- package/node_modules/logform/dist/format.js +0 -91
- package/node_modules/logform/dist/index.js +0 -87
- package/node_modules/logform/dist/json.js +0 -34
- package/node_modules/logform/dist/label.js +0 -20
- package/node_modules/logform/dist/levels.js +0 -14
- package/node_modules/logform/dist/logstash.js +0 -34
- package/node_modules/logform/dist/metadata.js +0 -64
- package/node_modules/logform/dist/ms.js +0 -21
- package/node_modules/logform/dist/pad-levels.js +0 -127
- package/node_modules/logform/dist/pretty-print.js +0 -34
- package/node_modules/logform/dist/printf.js +0 -41
- package/node_modules/logform/dist/simple.js +0 -37
- package/node_modules/logform/dist/splat.js +0 -159
- package/node_modules/logform/dist/timestamp.js +0 -32
- package/node_modules/logform/dist/uncolorize.js +0 -31
- package/node_modules/logform/errors.js +0 -39
- package/node_modules/logform/examples/combine.js +0 -14
- package/node_modules/logform/examples/filter.js +0 -30
- package/node_modules/logform/examples/invalid.js +0 -6
- package/node_modules/logform/examples/metadata.js +0 -78
- package/node_modules/logform/examples/padLevels.js +0 -39
- package/node_modules/logform/examples/volume.js +0 -25
- package/node_modules/logform/format.js +0 -52
- package/node_modules/logform/index.d.ts +0 -197
- package/node_modules/logform/index.js +0 -52
- package/node_modules/logform/json.js +0 -30
- package/node_modules/logform/label.js +0 -19
- package/node_modules/logform/levels.js +0 -12
- package/node_modules/logform/logstash.js +0 -29
- package/node_modules/logform/metadata.js +0 -61
- package/node_modules/logform/ms.js +0 -18
- package/node_modules/logform/package.json +0 -53
- package/node_modules/logform/pad-levels.js +0 -83
- package/node_modules/logform/pretty-print.js +0 -29
- package/node_modules/logform/printf.js +0 -26
- package/node_modules/logform/simple.js +0 -33
- package/node_modules/logform/splat.js +0 -132
- package/node_modules/logform/timestamp.js +0 -30
- package/node_modules/logform/tsconfig.json +0 -22
- package/node_modules/logform/uncolorize.js +0 -27
- package/node_modules/moment/CHANGELOG.md +0 -988
- package/node_modules/moment/LICENSE +0 -22
- package/node_modules/moment/README.md +0 -55
- package/node_modules/moment/dist/locale/af.js +0 -71
- package/node_modules/moment/dist/locale/ar-dz.js +0 -156
- package/node_modules/moment/dist/locale/ar-kw.js +0 -55
- package/node_modules/moment/dist/locale/ar-ly.js +0 -171
- package/node_modules/moment/dist/locale/ar-ma.js +0 -56
- package/node_modules/moment/dist/locale/ar-sa.js +0 -105
- package/node_modules/moment/dist/locale/ar-tn.js +0 -55
- package/node_modules/moment/dist/locale/ar.js +0 -189
- package/node_modules/moment/dist/locale/az.js +0 -102
- package/node_modules/moment/dist/locale/be.js +0 -142
- package/node_modules/moment/dist/locale/bg.js +0 -87
- package/node_modules/moment/dist/locale/bm.js +0 -52
- package/node_modules/moment/dist/locale/bn-bd.js +0 -129
- package/node_modules/moment/dist/locale/bn.js +0 -119
- package/node_modules/moment/dist/locale/bo.js +0 -124
- package/node_modules/moment/dist/locale/br.js +0 -168
- package/node_modules/moment/dist/locale/bs.js +0 -150
- package/node_modules/moment/dist/locale/ca.js +0 -100
- package/node_modules/moment/dist/locale/cs.js +0 -180
- package/node_modules/moment/dist/locale/cv.js +0 -63
- package/node_modules/moment/dist/locale/cy.js +0 -98
- package/node_modules/moment/dist/locale/da.js +0 -53
- package/node_modules/moment/dist/locale/de-at.js +0 -79
- package/node_modules/moment/dist/locale/de-ch.js +0 -78
- package/node_modules/moment/dist/locale/de.js +0 -78
- package/node_modules/moment/dist/locale/dv.js +0 -90
- package/node_modules/moment/dist/locale/el.js +0 -106
- package/node_modules/moment/dist/locale/en-au.js +0 -68
- package/node_modules/moment/dist/locale/en-ca.js +0 -64
- package/node_modules/moment/dist/locale/en-gb.js +0 -68
- package/node_modules/moment/dist/locale/en-ie.js +0 -68
- package/node_modules/moment/dist/locale/en-il.js +0 -64
- package/node_modules/moment/dist/locale/en-in.js +0 -68
- package/node_modules/moment/dist/locale/en-nz.js +0 -68
- package/node_modules/moment/dist/locale/en-sg.js +0 -68
- package/node_modules/moment/dist/locale/eo.js +0 -68
- package/node_modules/moment/dist/locale/es-do.js +0 -108
- package/node_modules/moment/dist/locale/es-mx.js +0 -110
- package/node_modules/moment/dist/locale/es-us.js +0 -110
- package/node_modules/moment/dist/locale/es.js +0 -110
- package/node_modules/moment/dist/locale/et.js +0 -78
- package/node_modules/moment/dist/locale/eu.js +0 -65
- package/node_modules/moment/dist/locale/fa.js +0 -113
- package/node_modules/moment/dist/locale/fi.js +0 -124
- package/node_modules/moment/dist/locale/fil.js +0 -58
- package/node_modules/moment/dist/locale/fo.js +0 -57
- package/node_modules/moment/dist/locale/fr-ca.js +0 -70
- package/node_modules/moment/dist/locale/fr-ch.js +0 -74
- package/node_modules/moment/dist/locale/fr.js +0 -108
- package/node_modules/moment/dist/locale/fy.js +0 -75
- package/node_modules/moment/dist/locale/ga.js +0 -95
- package/node_modules/moment/dist/locale/gd.js +0 -95
- package/node_modules/moment/dist/locale/gl.js +0 -75
- package/node_modules/moment/dist/locale/gom-deva.js +0 -126
- package/node_modules/moment/dist/locale/gom-latn.js +0 -124
- package/node_modules/moment/dist/locale/gu.js +0 -122
- package/node_modules/moment/dist/locale/he.js +0 -94
- package/node_modules/moment/dist/locale/hi.js +0 -168
- package/node_modules/moment/dist/locale/hr.js +0 -156
- package/node_modules/moment/dist/locale/hu.js +0 -118
- package/node_modules/moment/dist/locale/hy-am.js +0 -94
- package/node_modules/moment/dist/locale/id.js +0 -76
- package/node_modules/moment/dist/locale/is.js +0 -140
- package/node_modules/moment/dist/locale/it-ch.js +0 -64
- package/node_modules/moment/dist/locale/it.js +0 -106
- package/node_modules/moment/dist/locale/ja.js +0 -148
- package/node_modules/moment/dist/locale/jv.js +0 -76
- package/node_modules/moment/dist/locale/ka.js +0 -92
- package/node_modules/moment/dist/locale/kk.js +0 -82
- package/node_modules/moment/dist/locale/km.js +0 -103
- package/node_modules/moment/dist/locale/kn.js +0 -124
- package/node_modules/moment/dist/locale/ko.js +0 -75
- package/node_modules/moment/dist/locale/ku.js +0 -118
- package/node_modules/moment/dist/locale/ky.js +0 -84
- package/node_modules/moment/dist/locale/lb.js +0 -137
- package/node_modules/moment/dist/locale/lo.js +0 -66
- package/node_modules/moment/dist/locale/lt.js +0 -125
- package/node_modules/moment/dist/locale/lv.js +0 -94
- package/node_modules/moment/dist/locale/me.js +0 -117
- package/node_modules/moment/dist/locale/mi.js +0 -60
- package/node_modules/moment/dist/locale/mk.js +0 -85
- package/node_modules/moment/dist/locale/ml.js +0 -82
- package/node_modules/moment/dist/locale/mn.js +0 -100
- package/node_modules/moment/dist/locale/mr.js +0 -203
- package/node_modules/moment/dist/locale/ms-my.js +0 -76
- package/node_modules/moment/dist/locale/ms.js +0 -75
- package/node_modules/moment/dist/locale/mt.js +0 -56
- package/node_modules/moment/dist/locale/my.js +0 -91
- package/node_modules/moment/dist/locale/nb.js +0 -60
- package/node_modules/moment/dist/locale/ne.js +0 -121
- package/node_modules/moment/dist/locale/nl-be.js +0 -102
- package/node_modules/moment/dist/locale/nl.js +0 -104
- package/node_modules/moment/dist/locale/nn.js +0 -59
- package/node_modules/moment/dist/locale/oc-lnc.js +0 -85
- package/node_modules/moment/dist/locale/pa-in.js +0 -122
- package/node_modules/moment/dist/locale/pl.js +0 -140
- package/node_modules/moment/dist/locale/pt-br.js +0 -58
- package/node_modules/moment/dist/locale/pt.js +0 -63
- package/node_modules/moment/dist/locale/ro.js +0 -76
- package/node_modules/moment/dist/locale/ru.js +0 -213
- package/node_modules/moment/dist/locale/sd.js +0 -81
- package/node_modules/moment/dist/locale/se.js +0 -57
- package/node_modules/moment/dist/locale/si.js +0 -69
- package/node_modules/moment/dist/locale/sk.js +0 -145
- package/node_modules/moment/dist/locale/sl.js +0 -171
- package/node_modules/moment/dist/locale/sq.js +0 -65
- package/node_modules/moment/dist/locale/sr-cyrl.js +0 -127
- package/node_modules/moment/dist/locale/sr.js +0 -129
- package/node_modules/moment/dist/locale/ss.js +0 -84
- package/node_modules/moment/dist/locale/sv.js +0 -68
- package/node_modules/moment/dist/locale/sw.js +0 -55
- package/node_modules/moment/dist/locale/ta.js +0 -131
- package/node_modules/moment/dist/locale/te.js +0 -88
- package/node_modules/moment/dist/locale/tet.js +0 -68
- package/node_modules/moment/dist/locale/tg.js +0 -117
- package/node_modules/moment/dist/locale/th.js +0 -65
- package/node_modules/moment/dist/locale/tk.js +0 -91
- package/node_modules/moment/dist/locale/tl-ph.js +0 -57
- package/node_modules/moment/dist/locale/tlh.js +0 -124
- package/node_modules/moment/dist/locale/tr.js +0 -106
- package/node_modules/moment/dist/locale/tzl.js +0 -89
- package/node_modules/moment/dist/locale/tzm-latn.js +0 -54
- package/node_modules/moment/dist/locale/tzm.js +0 -54
- package/node_modules/moment/dist/locale/ug-cn.js +0 -111
- package/node_modules/moment/dist/locale/uk.js +0 -167
- package/node_modules/moment/dist/locale/ur.js +0 -82
- package/node_modules/moment/dist/locale/uz-latn.js +0 -54
- package/node_modules/moment/dist/locale/uz.js +0 -51
- package/node_modules/moment/dist/locale/vi.js +0 -80
- package/node_modules/moment/dist/locale/x-pseudo.js +0 -73
- package/node_modules/moment/dist/locale/yo.js +0 -53
- package/node_modules/moment/dist/locale/zh-cn.js +0 -120
- package/node_modules/moment/dist/locale/zh-hk.js +0 -101
- package/node_modules/moment/dist/locale/zh-mo.js +0 -100
- package/node_modules/moment/dist/locale/zh-tw.js +0 -99
- package/node_modules/moment/dist/moment.js +0 -5677
- package/node_modules/moment/ender.js +0 -1
- package/node_modules/moment/locale/af.js +0 -82
- package/node_modules/moment/locale/ar-dz.js +0 -167
- package/node_modules/moment/locale/ar-kw.js +0 -66
- package/node_modules/moment/locale/ar-ly.js +0 -182
- package/node_modules/moment/locale/ar-ma.js +0 -67
- package/node_modules/moment/locale/ar-sa.js +0 -116
- package/node_modules/moment/locale/ar-tn.js +0 -66
- package/node_modules/moment/locale/ar.js +0 -200
- package/node_modules/moment/locale/az.js +0 -113
- package/node_modules/moment/locale/be.js +0 -153
- package/node_modules/moment/locale/bg.js +0 -98
- package/node_modules/moment/locale/bm.js +0 -62
- package/node_modules/moment/locale/bn-bd.js +0 -140
- package/node_modules/moment/locale/bn.js +0 -130
- package/node_modules/moment/locale/bo.js +0 -135
- package/node_modules/moment/locale/br.js +0 -179
- package/node_modules/moment/locale/bs.js +0 -161
- package/node_modules/moment/locale/ca.js +0 -111
- package/node_modules/moment/locale/cs.js +0 -191
- package/node_modules/moment/locale/cv.js +0 -74
- package/node_modules/moment/locale/cy.js +0 -109
- package/node_modules/moment/locale/da.js +0 -64
- package/node_modules/moment/locale/de-at.js +0 -90
- package/node_modules/moment/locale/de-ch.js +0 -87
- package/node_modules/moment/locale/de.js +0 -89
- package/node_modules/moment/locale/dv.js +0 -101
- package/node_modules/moment/locale/el.js +0 -117
- package/node_modules/moment/locale/en-au.js +0 -79
- package/node_modules/moment/locale/en-ca.js +0 -75
- package/node_modules/moment/locale/en-gb.js +0 -79
- package/node_modules/moment/locale/en-ie.js +0 -79
- package/node_modules/moment/locale/en-il.js +0 -75
- package/node_modules/moment/locale/en-in.js +0 -79
- package/node_modules/moment/locale/en-nz.js +0 -79
- package/node_modules/moment/locale/en-sg.js +0 -79
- package/node_modules/moment/locale/eo.js +0 -79
- package/node_modules/moment/locale/es-do.js +0 -119
- package/node_modules/moment/locale/es-mx.js +0 -121
- package/node_modules/moment/locale/es-us.js +0 -121
- package/node_modules/moment/locale/es.js +0 -121
- package/node_modules/moment/locale/et.js +0 -89
- package/node_modules/moment/locale/eu.js +0 -76
- package/node_modules/moment/locale/fa.js +0 -124
- package/node_modules/moment/locale/fi.js +0 -135
- package/node_modules/moment/locale/fil.js +0 -69
- package/node_modules/moment/locale/fo.js +0 -68
- package/node_modules/moment/locale/fr-ca.js +0 -81
- package/node_modules/moment/locale/fr-ch.js +0 -85
- package/node_modules/moment/locale/fr.js +0 -119
- package/node_modules/moment/locale/fy.js +0 -86
- package/node_modules/moment/locale/ga.js +0 -106
- package/node_modules/moment/locale/gd.js +0 -106
- package/node_modules/moment/locale/gl.js +0 -86
- package/node_modules/moment/locale/gom-deva.js +0 -137
- package/node_modules/moment/locale/gom-latn.js +0 -135
- package/node_modules/moment/locale/gu.js +0 -133
- package/node_modules/moment/locale/he.js +0 -105
- package/node_modules/moment/locale/hi.js +0 -179
- package/node_modules/moment/locale/hr.js +0 -167
- package/node_modules/moment/locale/hu.js +0 -129
- package/node_modules/moment/locale/hy-am.js +0 -105
- package/node_modules/moment/locale/id.js +0 -87
- package/node_modules/moment/locale/is.js +0 -151
- package/node_modules/moment/locale/it-ch.js +0 -75
- package/node_modules/moment/locale/it.js +0 -117
- package/node_modules/moment/locale/ja.js +0 -159
- package/node_modules/moment/locale/jv.js +0 -87
- package/node_modules/moment/locale/ka.js +0 -103
- package/node_modules/moment/locale/kk.js +0 -93
- package/node_modules/moment/locale/km.js +0 -114
- package/node_modules/moment/locale/kn.js +0 -135
- package/node_modules/moment/locale/ko.js +0 -86
- package/node_modules/moment/locale/ku.js +0 -129
- package/node_modules/moment/locale/ky.js +0 -95
- package/node_modules/moment/locale/lb.js +0 -148
- package/node_modules/moment/locale/lo.js +0 -77
- package/node_modules/moment/locale/lt.js +0 -136
- package/node_modules/moment/locale/lv.js +0 -105
- package/node_modules/moment/locale/me.js +0 -128
- package/node_modules/moment/locale/mi.js +0 -71
- package/node_modules/moment/locale/mk.js +0 -97
- package/node_modules/moment/locale/ml.js +0 -93
- package/node_modules/moment/locale/mn.js +0 -111
- package/node_modules/moment/locale/mr.js +0 -214
- package/node_modules/moment/locale/ms-my.js +0 -87
- package/node_modules/moment/locale/ms.js +0 -86
- package/node_modules/moment/locale/mt.js +0 -67
- package/node_modules/moment/locale/my.js +0 -102
- package/node_modules/moment/locale/nb.js +0 -71
- package/node_modules/moment/locale/ne.js +0 -132
- package/node_modules/moment/locale/nl-be.js +0 -113
- package/node_modules/moment/locale/nl.js +0 -115
- package/node_modules/moment/locale/nn.js +0 -70
- package/node_modules/moment/locale/oc-lnc.js +0 -96
- package/node_modules/moment/locale/pa-in.js +0 -133
- package/node_modules/moment/locale/pl.js +0 -151
- package/node_modules/moment/locale/pt-br.js +0 -69
- package/node_modules/moment/locale/pt.js +0 -74
- package/node_modules/moment/locale/ro.js +0 -87
- package/node_modules/moment/locale/ru.js +0 -224
- package/node_modules/moment/locale/sd.js +0 -92
- package/node_modules/moment/locale/se.js +0 -68
- package/node_modules/moment/locale/si.js +0 -80
- package/node_modules/moment/locale/sk.js +0 -156
- package/node_modules/moment/locale/sl.js +0 -182
- package/node_modules/moment/locale/sq.js +0 -76
- package/node_modules/moment/locale/sr-cyrl.js +0 -138
- package/node_modules/moment/locale/sr.js +0 -140
- package/node_modules/moment/locale/ss.js +0 -95
- package/node_modules/moment/locale/sv.js +0 -79
- package/node_modules/moment/locale/sw.js +0 -66
- package/node_modules/moment/locale/ta.js +0 -142
- package/node_modules/moment/locale/te.js +0 -99
- package/node_modules/moment/locale/tet.js +0 -79
- package/node_modules/moment/locale/tg.js +0 -128
- package/node_modules/moment/locale/th.js +0 -76
- package/node_modules/moment/locale/tk.js +0 -102
- package/node_modules/moment/locale/tl-ph.js +0 -68
- package/node_modules/moment/locale/tlh.js +0 -135
- package/node_modules/moment/locale/tr.js +0 -117
- package/node_modules/moment/locale/tzl.js +0 -100
- package/node_modules/moment/locale/tzm-latn.js +0 -65
- package/node_modules/moment/locale/tzm.js +0 -65
- package/node_modules/moment/locale/ug-cn.js +0 -122
- package/node_modules/moment/locale/uk.js +0 -178
- package/node_modules/moment/locale/ur.js +0 -93
- package/node_modules/moment/locale/uz-latn.js +0 -65
- package/node_modules/moment/locale/uz.js +0 -62
- package/node_modules/moment/locale/vi.js +0 -91
- package/node_modules/moment/locale/x-pseudo.js +0 -84
- package/node_modules/moment/locale/yo.js +0 -64
- package/node_modules/moment/locale/zh-cn.js +0 -131
- package/node_modules/moment/locale/zh-hk.js +0 -112
- package/node_modules/moment/locale/zh-mo.js +0 -111
- package/node_modules/moment/locale/zh-tw.js +0 -110
- package/node_modules/moment/min/locales.js +0 -12570
- package/node_modules/moment/min/locales.min.js +0 -2
- package/node_modules/moment/min/locales.min.js.map +0 -1
- package/node_modules/moment/min/moment-with-locales.js +0 -18239
- package/node_modules/moment/min/moment-with-locales.min.js +0 -2
- package/node_modules/moment/min/moment-with-locales.min.js.map +0 -1
- package/node_modules/moment/min/moment.min.js +0 -2
- package/node_modules/moment/min/moment.min.js.map +0 -1
- package/node_modules/moment/moment.d.ts +0 -796
- package/node_modules/moment/moment.js +0 -5685
- package/node_modules/moment/package.js +0 -11
- package/node_modules/moment/package.json +0 -116
- package/node_modules/moment/src/lib/create/check-overflow.js +0 -57
- package/node_modules/moment/src/lib/create/date-from-array.js +0 -35
- package/node_modules/moment/src/lib/create/from-anything.js +0 -117
- package/node_modules/moment/src/lib/create/from-array.js +0 -187
- package/node_modules/moment/src/lib/create/from-object.js +0 -20
- package/node_modules/moment/src/lib/create/from-string-and-array.js +0 -67
- package/node_modules/moment/src/lib/create/from-string-and-format.js +0 -135
- package/node_modules/moment/src/lib/create/from-string.js +0 -258
- package/node_modules/moment/src/lib/create/local.js +0 -5
- package/node_modules/moment/src/lib/create/parsing-flags.js +0 -28
- package/node_modules/moment/src/lib/create/utc.js +0 -5
- package/node_modules/moment/src/lib/create/valid.js +0 -51
- package/node_modules/moment/src/lib/duration/abs.js +0 -18
- package/node_modules/moment/src/lib/duration/add-subtract.js +0 -21
- package/node_modules/moment/src/lib/duration/as.js +0 -88
- package/node_modules/moment/src/lib/duration/bubble.js +0 -68
- package/node_modules/moment/src/lib/duration/clone.js +0 -5
- package/node_modules/moment/src/lib/duration/constructor.js +0 -42
- package/node_modules/moment/src/lib/duration/create.js +0 -133
- package/node_modules/moment/src/lib/duration/duration.js +0 -16
- package/node_modules/moment/src/lib/duration/get.js +0 -27
- package/node_modules/moment/src/lib/duration/humanize.js +0 -114
- package/node_modules/moment/src/lib/duration/iso-string.js +0 -68
- package/node_modules/moment/src/lib/duration/prototype.js +0 -78
- package/node_modules/moment/src/lib/duration/valid.js +0 -55
- package/node_modules/moment/src/lib/format/format.js +0 -104
- package/node_modules/moment/src/lib/locale/base-config.js +0 -41
- package/node_modules/moment/src/lib/locale/calendar.js +0 -15
- package/node_modules/moment/src/lib/locale/constructor.js +0 -5
- package/node_modules/moment/src/lib/locale/en.js +0 -39
- package/node_modules/moment/src/lib/locale/formats.js +0 -36
- package/node_modules/moment/src/lib/locale/invalid.js +0 -5
- package/node_modules/moment/src/lib/locale/lists.js +0 -93
- package/node_modules/moment/src/lib/locale/locale.js +0 -45
- package/node_modules/moment/src/lib/locale/locales.js +0 -248
- package/node_modules/moment/src/lib/locale/ordinal.js +0 -8
- package/node_modules/moment/src/lib/locale/pre-post-format.js +0 -3
- package/node_modules/moment/src/lib/locale/prototype.js +0 -88
- package/node_modules/moment/src/lib/locale/relative.js +0 -32
- package/node_modules/moment/src/lib/locale/set.js +0 -56
- package/node_modules/moment/src/lib/moment/add-subtract.js +0 -61
- package/node_modules/moment/src/lib/moment/calendar.js +0 -53
- package/node_modules/moment/src/lib/moment/clone.js +0 -5
- package/node_modules/moment/src/lib/moment/compare.js +0 -72
- package/node_modules/moment/src/lib/moment/constructor.js +0 -80
- package/node_modules/moment/src/lib/moment/creation-data.js +0 -9
- package/node_modules/moment/src/lib/moment/diff.js +0 -79
- package/node_modules/moment/src/lib/moment/format.js +0 -78
- package/node_modules/moment/src/lib/moment/from.js +0 -20
- package/node_modules/moment/src/lib/moment/get-set.js +0 -73
- package/node_modules/moment/src/lib/moment/locale.js +0 -34
- package/node_modules/moment/src/lib/moment/min-max.js +0 -62
- package/node_modules/moment/src/lib/moment/moment.js +0 -28
- package/node_modules/moment/src/lib/moment/now.js +0 -3
- package/node_modules/moment/src/lib/moment/prototype.js +0 -197
- package/node_modules/moment/src/lib/moment/start-end-of.js +0 -164
- package/node_modules/moment/src/lib/moment/to-type.js +0 -42
- package/node_modules/moment/src/lib/moment/to.js +0 -20
- package/node_modules/moment/src/lib/moment/valid.js +0 -15
- package/node_modules/moment/src/lib/parse/regex.js +0 -80
- package/node_modules/moment/src/lib/parse/token.js +0 -36
- package/node_modules/moment/src/lib/units/aliases.js +0 -31
- package/node_modules/moment/src/lib/units/constants.js +0 -9
- package/node_modules/moment/src/lib/units/day-of-month.js +0 -39
- package/node_modules/moment/src/lib/units/day-of-week.js +0 -443
- package/node_modules/moment/src/lib/units/day-of-year.js +0 -37
- package/node_modules/moment/src/lib/units/era.js +0 -287
- package/node_modules/moment/src/lib/units/hour.js +0 -159
- package/node_modules/moment/src/lib/units/millisecond.js +0 -76
- package/node_modules/moment/src/lib/units/minute.js +0 -29
- package/node_modules/moment/src/lib/units/month.js +0 -349
- package/node_modules/moment/src/lib/units/offset.js +0 -249
- package/node_modules/moment/src/lib/units/priorities.js +0 -21
- package/node_modules/moment/src/lib/units/quarter.js +0 -34
- package/node_modules/moment/src/lib/units/second.js +0 -29
- package/node_modules/moment/src/lib/units/timestamp.js +0 -20
- package/node_modules/moment/src/lib/units/timezone.js +0 -16
- package/node_modules/moment/src/lib/units/units.js +0 -20
- package/node_modules/moment/src/lib/units/week-calendar-utils.js +0 -66
- package/node_modules/moment/src/lib/units/week-year.js +0 -138
- package/node_modules/moment/src/lib/units/week.js +0 -69
- package/node_modules/moment/src/lib/units/year.js +0 -85
- package/node_modules/moment/src/lib/utils/abs-ceil.js +0 -7
- package/node_modules/moment/src/lib/utils/abs-floor.js +0 -8
- package/node_modules/moment/src/lib/utils/abs-round.js +0 -7
- package/node_modules/moment/src/lib/utils/compare-arrays.js +0 -18
- package/node_modules/moment/src/lib/utils/defaults.js +0 -10
- package/node_modules/moment/src/lib/utils/deprecate.js +0 -69
- package/node_modules/moment/src/lib/utils/extend.js +0 -19
- package/node_modules/moment/src/lib/utils/has-own-prop.js +0 -3
- package/node_modules/moment/src/lib/utils/hooks.js +0 -13
- package/node_modules/moment/src/lib/utils/index-of.js +0 -18
- package/node_modules/moment/src/lib/utils/is-array.js +0 -6
- package/node_modules/moment/src/lib/utils/is-calendar-spec.js +0 -25
- package/node_modules/moment/src/lib/utils/is-date.js +0 -6
- package/node_modules/moment/src/lib/utils/is-function.js +0 -6
- package/node_modules/moment/src/lib/utils/is-leap-year.js +0 -3
- package/node_modules/moment/src/lib/utils/is-moment-input.js +0 -75
- package/node_modules/moment/src/lib/utils/is-number.js +0 -6
- package/node_modules/moment/src/lib/utils/is-object-empty.js +0 -15
- package/node_modules/moment/src/lib/utils/is-object.js +0 -8
- package/node_modules/moment/src/lib/utils/is-string.js +0 -3
- package/node_modules/moment/src/lib/utils/is-undefined.js +0 -3
- package/node_modules/moment/src/lib/utils/keys.js +0 -20
- package/node_modules/moment/src/lib/utils/map.js +0 -9
- package/node_modules/moment/src/lib/utils/mod.js +0 -3
- package/node_modules/moment/src/lib/utils/some.js +0 -20
- package/node_modules/moment/src/lib/utils/to-int.js +0 -12
- package/node_modules/moment/src/lib/utils/zero-fill.js +0 -10
- package/node_modules/moment/src/locale/af.js +0 -71
- package/node_modules/moment/src/locale/ar-dz.js +0 -156
- package/node_modules/moment/src/locale/ar-kw.js +0 -55
- package/node_modules/moment/src/locale/ar-ly.js +0 -171
- package/node_modules/moment/src/locale/ar-ma.js +0 -56
- package/node_modules/moment/src/locale/ar-sa.js +0 -105
- package/node_modules/moment/src/locale/ar-tn.js +0 -55
- package/node_modules/moment/src/locale/ar.js +0 -189
- package/node_modules/moment/src/locale/az.js +0 -102
- package/node_modules/moment/src/locale/be.js +0 -142
- package/node_modules/moment/src/locale/bg.js +0 -87
- package/node_modules/moment/src/locale/bm.js +0 -52
- package/node_modules/moment/src/locale/bn-bd.js +0 -129
- package/node_modules/moment/src/locale/bn.js +0 -119
- package/node_modules/moment/src/locale/bo.js +0 -124
- package/node_modules/moment/src/locale/br.js +0 -168
- package/node_modules/moment/src/locale/bs.js +0 -150
- package/node_modules/moment/src/locale/ca.js +0 -100
- package/node_modules/moment/src/locale/cs.js +0 -180
- package/node_modules/moment/src/locale/cv.js +0 -63
- package/node_modules/moment/src/locale/cy.js +0 -98
- package/node_modules/moment/src/locale/da.js +0 -53
- package/node_modules/moment/src/locale/de-at.js +0 -79
- package/node_modules/moment/src/locale/de-ch.js +0 -78
- package/node_modules/moment/src/locale/de.js +0 -78
- package/node_modules/moment/src/locale/dv.js +0 -90
- package/node_modules/moment/src/locale/el.js +0 -106
- package/node_modules/moment/src/locale/en-au.js +0 -68
- package/node_modules/moment/src/locale/en-ca.js +0 -64
- package/node_modules/moment/src/locale/en-gb.js +0 -68
- package/node_modules/moment/src/locale/en-ie.js +0 -68
- package/node_modules/moment/src/locale/en-il.js +0 -64
- package/node_modules/moment/src/locale/en-in.js +0 -68
- package/node_modules/moment/src/locale/en-nz.js +0 -68
- package/node_modules/moment/src/locale/en-sg.js +0 -68
- package/node_modules/moment/src/locale/eo.js +0 -68
- package/node_modules/moment/src/locale/es-do.js +0 -108
- package/node_modules/moment/src/locale/es-mx.js +0 -110
- package/node_modules/moment/src/locale/es-us.js +0 -110
- package/node_modules/moment/src/locale/es.js +0 -110
- package/node_modules/moment/src/locale/et.js +0 -78
- package/node_modules/moment/src/locale/eu.js +0 -65
- package/node_modules/moment/src/locale/fa.js +0 -113
- package/node_modules/moment/src/locale/fi.js +0 -124
- package/node_modules/moment/src/locale/fil.js +0 -58
- package/node_modules/moment/src/locale/fo.js +0 -57
- package/node_modules/moment/src/locale/fr-ca.js +0 -70
- package/node_modules/moment/src/locale/fr-ch.js +0 -74
- package/node_modules/moment/src/locale/fr.js +0 -108
- package/node_modules/moment/src/locale/fy.js +0 -75
- package/node_modules/moment/src/locale/ga.js +0 -95
- package/node_modules/moment/src/locale/gd.js +0 -95
- package/node_modules/moment/src/locale/gl.js +0 -75
- package/node_modules/moment/src/locale/gom-deva.js +0 -126
- package/node_modules/moment/src/locale/gom-latn.js +0 -124
- package/node_modules/moment/src/locale/gu.js +0 -122
- package/node_modules/moment/src/locale/he.js +0 -94
- package/node_modules/moment/src/locale/hi.js +0 -168
- package/node_modules/moment/src/locale/hr.js +0 -156
- package/node_modules/moment/src/locale/hu.js +0 -118
- package/node_modules/moment/src/locale/hy-am.js +0 -94
- package/node_modules/moment/src/locale/id.js +0 -76
- package/node_modules/moment/src/locale/is.js +0 -140
- package/node_modules/moment/src/locale/it-ch.js +0 -64
- package/node_modules/moment/src/locale/it.js +0 -106
- package/node_modules/moment/src/locale/ja.js +0 -148
- package/node_modules/moment/src/locale/jv.js +0 -76
- package/node_modules/moment/src/locale/ka.js +0 -92
- package/node_modules/moment/src/locale/kk.js +0 -82
- package/node_modules/moment/src/locale/km.js +0 -103
- package/node_modules/moment/src/locale/kn.js +0 -124
- package/node_modules/moment/src/locale/ko.js +0 -75
- package/node_modules/moment/src/locale/ku.js +0 -118
- package/node_modules/moment/src/locale/ky.js +0 -84
- package/node_modules/moment/src/locale/lb.js +0 -137
- package/node_modules/moment/src/locale/lo.js +0 -66
- package/node_modules/moment/src/locale/lt.js +0 -125
- package/node_modules/moment/src/locale/lv.js +0 -94
- package/node_modules/moment/src/locale/me.js +0 -117
- package/node_modules/moment/src/locale/mi.js +0 -60
- package/node_modules/moment/src/locale/mk.js +0 -85
- package/node_modules/moment/src/locale/ml.js +0 -82
- package/node_modules/moment/src/locale/mn.js +0 -100
- package/node_modules/moment/src/locale/mr.js +0 -203
- package/node_modules/moment/src/locale/ms-my.js +0 -76
- package/node_modules/moment/src/locale/ms.js +0 -75
- package/node_modules/moment/src/locale/mt.js +0 -56
- package/node_modules/moment/src/locale/my.js +0 -91
- package/node_modules/moment/src/locale/nb.js +0 -60
- package/node_modules/moment/src/locale/ne.js +0 -121
- package/node_modules/moment/src/locale/nl-be.js +0 -102
- package/node_modules/moment/src/locale/nl.js +0 -104
- package/node_modules/moment/src/locale/nn.js +0 -59
- package/node_modules/moment/src/locale/oc-lnc.js +0 -85
- package/node_modules/moment/src/locale/pa-in.js +0 -122
- package/node_modules/moment/src/locale/pl.js +0 -140
- package/node_modules/moment/src/locale/pt-br.js +0 -58
- package/node_modules/moment/src/locale/pt.js +0 -63
- package/node_modules/moment/src/locale/ro.js +0 -76
- package/node_modules/moment/src/locale/ru.js +0 -213
- package/node_modules/moment/src/locale/sd.js +0 -81
- package/node_modules/moment/src/locale/se.js +0 -57
- package/node_modules/moment/src/locale/si.js +0 -69
- package/node_modules/moment/src/locale/sk.js +0 -145
- package/node_modules/moment/src/locale/sl.js +0 -171
- package/node_modules/moment/src/locale/sq.js +0 -65
- package/node_modules/moment/src/locale/sr-cyrl.js +0 -127
- package/node_modules/moment/src/locale/sr.js +0 -129
- package/node_modules/moment/src/locale/ss.js +0 -84
- package/node_modules/moment/src/locale/sv.js +0 -68
- package/node_modules/moment/src/locale/sw.js +0 -55
- package/node_modules/moment/src/locale/ta.js +0 -131
- package/node_modules/moment/src/locale/te.js +0 -88
- package/node_modules/moment/src/locale/tet.js +0 -68
- package/node_modules/moment/src/locale/tg.js +0 -117
- package/node_modules/moment/src/locale/th.js +0 -65
- package/node_modules/moment/src/locale/tk.js +0 -91
- package/node_modules/moment/src/locale/tl-ph.js +0 -57
- package/node_modules/moment/src/locale/tlh.js +0 -124
- package/node_modules/moment/src/locale/tr.js +0 -106
- package/node_modules/moment/src/locale/tzl.js +0 -89
- package/node_modules/moment/src/locale/tzm-latn.js +0 -54
- package/node_modules/moment/src/locale/tzm.js +0 -54
- package/node_modules/moment/src/locale/ug-cn.js +0 -111
- package/node_modules/moment/src/locale/uk.js +0 -167
- package/node_modules/moment/src/locale/ur.js +0 -82
- package/node_modules/moment/src/locale/uz-latn.js +0 -54
- package/node_modules/moment/src/locale/uz.js +0 -51
- package/node_modules/moment/src/locale/vi.js +0 -80
- package/node_modules/moment/src/locale/x-pseudo.js +0 -73
- package/node_modules/moment/src/locale/yo.js +0 -53
- package/node_modules/moment/src/locale/zh-cn.js +0 -120
- package/node_modules/moment/src/locale/zh-hk.js +0 -101
- package/node_modules/moment/src/locale/zh-mo.js +0 -100
- package/node_modules/moment/src/locale/zh-tw.js +0 -99
- package/node_modules/moment/src/moment.js +0 -93
- package/node_modules/moment/ts3.1-typings/moment.d.ts +0 -785
- package/node_modules/ms/index.js +0 -162
- package/node_modules/ms/license.md +0 -21
- package/node_modules/ms/package.json +0 -41
- package/node_modules/ms/readme.md +0 -60
- package/node_modules/object-hash/LICENSE +0 -22
- package/node_modules/object-hash/dist/object_hash.js +0 -1
- package/node_modules/object-hash/index.js +0 -453
- package/node_modules/object-hash/package.json +0 -57
- package/node_modules/object-hash/readme.markdown +0 -184
- package/node_modules/one-time/LICENSE +0 -22
- package/node_modules/one-time/README.md +0 -88
- package/node_modules/one-time/async.js +0 -43
- package/node_modules/one-time/index.js +0 -42
- package/node_modules/one-time/package.json +0 -38
- package/node_modules/safe-buffer/LICENSE +0 -21
- package/node_modules/safe-buffer/README.md +0 -584
- package/node_modules/safe-buffer/index.d.ts +0 -187
- package/node_modules/safe-buffer/index.js +0 -62
- package/node_modules/safe-buffer/package.json +0 -41
- package/node_modules/safe-stable-stringify/CHANGELOG.md +0 -75
- package/node_modules/safe-stable-stringify/LICENSE +0 -21
- package/node_modules/safe-stable-stringify/esm/package.json +0 -4
- package/node_modules/safe-stable-stringify/esm/wrapper.js +0 -6
- package/node_modules/safe-stable-stringify/index.d.ts +0 -18
- package/node_modules/safe-stable-stringify/index.js +0 -618
- package/node_modules/safe-stable-stringify/package.json +0 -69
- package/node_modules/safe-stable-stringify/readme.md +0 -170
- package/node_modules/safe-stable-stringify/tsconfig.json +0 -22
- package/node_modules/simple-swizzle/LICENSE +0 -21
- package/node_modules/simple-swizzle/README.md +0 -39
- package/node_modules/simple-swizzle/index.js +0 -29
- package/node_modules/simple-swizzle/package.json +0 -40
- package/node_modules/stack-trace/.npmignore +0 -1
- package/node_modules/stack-trace/License +0 -19
- package/node_modules/stack-trace/Makefile +0 -11
- package/node_modules/stack-trace/Readme.md +0 -98
- package/node_modules/stack-trace/lib/stack-trace.js +0 -136
- package/node_modules/stack-trace/package.json +0 -25
- package/node_modules/string_decoder/.travis.yml +0 -50
- package/node_modules/string_decoder/LICENSE +0 -48
- package/node_modules/string_decoder/README.md +0 -47
- package/node_modules/string_decoder/lib/string_decoder.js +0 -296
- package/node_modules/string_decoder/package.json +0 -35
- package/node_modules/text-hex/LICENSE +0 -21
- package/node_modules/text-hex/README.md +0 -20
- package/node_modules/text-hex/index.js +0 -24
- package/node_modules/text-hex/package.json +0 -34
- package/node_modules/text-hex/test.js +0 -11
- package/node_modules/triple-beam/.eslintrc +0 -7
- package/node_modules/triple-beam/.gitattributes +0 -1
- package/node_modules/triple-beam/.travis.yml +0 -17
- package/node_modules/triple-beam/CHANGELOG.md +0 -22
- package/node_modules/triple-beam/LICENSE +0 -21
- package/node_modules/triple-beam/README.md +0 -34
- package/node_modules/triple-beam/config/cli.js +0 -42
- package/node_modules/triple-beam/config/index.js +0 -32
- package/node_modules/triple-beam/config/npm.js +0 -36
- package/node_modules/triple-beam/config/syslog.js +0 -38
- package/node_modules/triple-beam/index.js +0 -46
- package/node_modules/triple-beam/package.json +0 -40
- package/node_modules/triple-beam/test.js +0 -98
- package/node_modules/util-deprecate/History.md +0 -16
- package/node_modules/util-deprecate/LICENSE +0 -24
- package/node_modules/util-deprecate/README.md +0 -53
- package/node_modules/util-deprecate/browser.js +0 -67
- package/node_modules/util-deprecate/node.js +0 -6
- package/node_modules/util-deprecate/package.json +0 -31
- package/node_modules/winston/LICENSE +0 -19
- package/node_modules/winston/README.md +0 -1231
- package/node_modules/winston/dist/winston/common.js +0 -56
- package/node_modules/winston/dist/winston/config/index.js +0 -37
- package/node_modules/winston/dist/winston/container.js +0 -147
- package/node_modules/winston/dist/winston/create-logger.js +0 -145
- package/node_modules/winston/dist/winston/exception-handler.js +0 -288
- package/node_modules/winston/dist/winston/exception-stream.js +0 -94
- package/node_modules/winston/dist/winston/logger.js +0 -766
- package/node_modules/winston/dist/winston/profiler.js +0 -69
- package/node_modules/winston/dist/winston/rejection-handler.js +0 -288
- package/node_modules/winston/dist/winston/tail-file.js +0 -135
- package/node_modules/winston/dist/winston/transports/console.js +0 -166
- package/node_modules/winston/dist/winston/transports/file.js +0 -817
- package/node_modules/winston/dist/winston/transports/http.js +0 -342
- package/node_modules/winston/dist/winston/transports/index.js +0 -55
- package/node_modules/winston/dist/winston/transports/stream.js +0 -117
- package/node_modules/winston/dist/winston.js +0 -166
- package/node_modules/winston/index.d.ts +0 -213
- package/node_modules/winston/lib/winston/common.js +0 -61
- package/node_modules/winston/lib/winston/config/index.d.ts +0 -99
- package/node_modules/winston/lib/winston/config/index.js +0 -35
- package/node_modules/winston/lib/winston/container.js +0 -114
- package/node_modules/winston/lib/winston/create-logger.js +0 -104
- package/node_modules/winston/lib/winston/exception-handler.js +0 -245
- package/node_modules/winston/lib/winston/exception-stream.js +0 -54
- package/node_modules/winston/lib/winston/logger.js +0 -676
- package/node_modules/winston/lib/winston/profiler.js +0 -51
- package/node_modules/winston/lib/winston/rejection-handler.js +0 -251
- package/node_modules/winston/lib/winston/tail-file.js +0 -124
- package/node_modules/winston/lib/winston/transports/console.js +0 -117
- package/node_modules/winston/lib/winston/transports/file.js +0 -695
- package/node_modules/winston/lib/winston/transports/http.js +0 -267
- package/node_modules/winston/lib/winston/transports/index.d.ts +0 -103
- package/node_modules/winston/lib/winston/transports/index.js +0 -56
- package/node_modules/winston/lib/winston/transports/stream.js +0 -63
- package/node_modules/winston/lib/winston.js +0 -176
- package/node_modules/winston/node_modules/readable-stream/CONTRIBUTING.md +0 -38
- package/node_modules/winston/node_modules/readable-stream/GOVERNANCE.md +0 -136
- package/node_modules/winston/node_modules/readable-stream/LICENSE +0 -47
- package/node_modules/winston/node_modules/readable-stream/README.md +0 -106
- package/node_modules/winston/node_modules/readable-stream/errors-browser.js +0 -127
- package/node_modules/winston/node_modules/readable-stream/errors.js +0 -116
- package/node_modules/winston/node_modules/readable-stream/experimentalWarning.js +0 -17
- package/node_modules/winston/node_modules/readable-stream/lib/_stream_duplex.js +0 -139
- package/node_modules/winston/node_modules/readable-stream/lib/_stream_passthrough.js +0 -39
- package/node_modules/winston/node_modules/readable-stream/lib/_stream_readable.js +0 -1124
- package/node_modules/winston/node_modules/readable-stream/lib/_stream_transform.js +0 -201
- package/node_modules/winston/node_modules/readable-stream/lib/_stream_writable.js +0 -697
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/async_iterator.js +0 -207
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/buffer_list.js +0 -210
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/destroy.js +0 -105
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/end-of-stream.js +0 -104
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/from-browser.js +0 -3
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/from.js +0 -64
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/pipeline.js +0 -97
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/state.js +0 -27
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/stream-browser.js +0 -1
- package/node_modules/winston/node_modules/readable-stream/lib/internal/streams/stream.js +0 -1
- package/node_modules/winston/node_modules/readable-stream/package.json +0 -72
- package/node_modules/winston/node_modules/readable-stream/readable-browser.js +0 -9
- package/node_modules/winston/node_modules/readable-stream/readable.js +0 -16
- package/node_modules/winston/node_modules/winston-transport/.babelrc +0 -3
- package/node_modules/winston/node_modules/winston-transport/.eslintrc +0 -7
- package/node_modules/winston/node_modules/winston-transport/.gitattributes +0 -1
- package/node_modules/winston/node_modules/winston-transport/.nyc_output/c3d7ddb9-cc26-466b-a4f6-993ad69e86f6.json +0 -1
- package/node_modules/winston/node_modules/winston-transport/.nyc_output/processinfo/c3d7ddb9-cc26-466b-a4f6-993ad69e86f6.json +0 -1
- package/node_modules/winston/node_modules/winston-transport/.nyc_output/processinfo/index.json +0 -1
- package/node_modules/winston/node_modules/winston-transport/CHANGELOG.md +0 -126
- package/node_modules/winston/node_modules/winston-transport/LICENSE +0 -22
- package/node_modules/winston/node_modules/winston-transport/README.md +0 -50
- package/node_modules/winston/node_modules/winston-transport/dist/index.js +0 -215
- package/node_modules/winston/node_modules/winston-transport/dist/legacy.js +0 -116
- package/node_modules/winston/node_modules/winston-transport/index.d.ts +0 -39
- package/node_modules/winston/node_modules/winston-transport/index.js +0 -215
- package/node_modules/winston/node_modules/winston-transport/legacy.js +0 -119
- package/node_modules/winston/node_modules/winston-transport/package.json +0 -56
- package/node_modules/winston/package.json +0 -78
- package/node_modules/winston-daily-rotate-file/LICENSE +0 -22
- package/node_modules/winston-daily-rotate-file/README.md +0 -136
- package/node_modules/winston-daily-rotate-file/daily-rotate-file.js +0 -331
- package/node_modules/winston-daily-rotate-file/index.d.ts +0 -120
- package/node_modules/winston-daily-rotate-file/index.js +0 -7
- package/node_modules/winston-daily-rotate-file/package.json +0 -55
- package/node_modules/winston-transport/.babelrc +0 -3
- package/node_modules/winston-transport/.eslintrc +0 -7
- package/node_modules/winston-transport/.gitattributes +0 -1
- package/node_modules/winston-transport/.nyc_output/c3d7ddb9-cc26-466b-a4f6-993ad69e86f6.json +0 -1
- package/node_modules/winston-transport/.nyc_output/processinfo/c3d7ddb9-cc26-466b-a4f6-993ad69e86f6.json +0 -1
- package/node_modules/winston-transport/.nyc_output/processinfo/index.json +0 -1
- package/node_modules/winston-transport/CHANGELOG.md +0 -126
- package/node_modules/winston-transport/LICENSE +0 -22
- package/node_modules/winston-transport/README.md +0 -50
- package/node_modules/winston-transport/dist/index.js +0 -215
- package/node_modules/winston-transport/dist/legacy.js +0 -116
- package/node_modules/winston-transport/index.d.ts +0 -39
- package/node_modules/winston-transport/index.js +0 -215
- package/node_modules/winston-transport/legacy.js +0 -119
- package/node_modules/winston-transport/node_modules/readable-stream/CONTRIBUTING.md +0 -38
- package/node_modules/winston-transport/node_modules/readable-stream/GOVERNANCE.md +0 -136
- package/node_modules/winston-transport/node_modules/readable-stream/LICENSE +0 -47
- package/node_modules/winston-transport/node_modules/readable-stream/README.md +0 -106
- package/node_modules/winston-transport/node_modules/readable-stream/errors-browser.js +0 -127
- package/node_modules/winston-transport/node_modules/readable-stream/errors.js +0 -116
- package/node_modules/winston-transport/node_modules/readable-stream/experimentalWarning.js +0 -17
- package/node_modules/winston-transport/node_modules/readable-stream/lib/_stream_duplex.js +0 -126
- package/node_modules/winston-transport/node_modules/readable-stream/lib/_stream_passthrough.js +0 -37
- package/node_modules/winston-transport/node_modules/readable-stream/lib/_stream_readable.js +0 -1027
- package/node_modules/winston-transport/node_modules/readable-stream/lib/_stream_transform.js +0 -190
- package/node_modules/winston-transport/node_modules/readable-stream/lib/_stream_writable.js +0 -641
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/async_iterator.js +0 -180
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/buffer_list.js +0 -183
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/destroy.js +0 -96
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/end-of-stream.js +0 -86
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/from-browser.js +0 -3
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/from.js +0 -52
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/pipeline.js +0 -86
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/state.js +0 -22
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/stream-browser.js +0 -1
- package/node_modules/winston-transport/node_modules/readable-stream/lib/internal/streams/stream.js +0 -1
- package/node_modules/winston-transport/node_modules/readable-stream/package.json +0 -72
- package/node_modules/winston-transport/node_modules/readable-stream/readable-browser.js +0 -9
- package/node_modules/winston-transport/node_modules/readable-stream/readable.js +0 -16
- package/node_modules/winston-transport/package.json +0 -56
- package/perf-logs.js +0 -155
- package/system-diagnostics.js +0 -199
|
@@ -1,1682 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"rules": {
|
|
3
|
-
"ssrf": {
|
|
4
|
-
"enabled": true,
|
|
5
|
-
"type": "hook",
|
|
6
|
-
"sinks": {
|
|
7
|
-
"axios": {
|
|
8
|
-
"type": "dataflow",
|
|
9
|
-
"enabled": true,
|
|
10
|
-
"conditions": {
|
|
11
|
-
"mode": "or",
|
|
12
|
-
"args": [
|
|
13
|
-
{
|
|
14
|
-
"index": 0,
|
|
15
|
-
"depth": 1,
|
|
16
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
17
|
-
"requiredTags": ["untrusted"]
|
|
18
|
-
}
|
|
19
|
-
]
|
|
20
|
-
}
|
|
21
|
-
},
|
|
22
|
-
"axios.request": {
|
|
23
|
-
"type": "dataflow",
|
|
24
|
-
"enabled": true,
|
|
25
|
-
"conditions": {
|
|
26
|
-
"mode": "or",
|
|
27
|
-
"args": [
|
|
28
|
-
{
|
|
29
|
-
"index": 0,
|
|
30
|
-
"depth": 1,
|
|
31
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
32
|
-
"requiredTags": ["untrusted"]
|
|
33
|
-
}
|
|
34
|
-
]
|
|
35
|
-
}
|
|
36
|
-
},
|
|
37
|
-
"axios.get": {
|
|
38
|
-
"type": "dataflow",
|
|
39
|
-
"enabled": true,
|
|
40
|
-
"conditions": {
|
|
41
|
-
"mode": "or",
|
|
42
|
-
"args": [
|
|
43
|
-
{
|
|
44
|
-
"index": 0,
|
|
45
|
-
"provider": "./sinks/ssrf-url.js",
|
|
46
|
-
"requiredTags": ["untrusted"],
|
|
47
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
48
|
-
},
|
|
49
|
-
{
|
|
50
|
-
"index": 1,
|
|
51
|
-
"depth": 1,
|
|
52
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
53
|
-
"requiredTags": ["untrusted"]
|
|
54
|
-
}
|
|
55
|
-
]
|
|
56
|
-
}
|
|
57
|
-
},
|
|
58
|
-
"axios.delete": {
|
|
59
|
-
"type": "dataflow",
|
|
60
|
-
"enabled": true,
|
|
61
|
-
"conditions": {
|
|
62
|
-
"mode": "or",
|
|
63
|
-
"args": [
|
|
64
|
-
{
|
|
65
|
-
"index": 0,
|
|
66
|
-
"provider": "./sinks/ssrf-url.js",
|
|
67
|
-
"requiredTags": ["untrusted"],
|
|
68
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
69
|
-
},
|
|
70
|
-
{
|
|
71
|
-
"index": 1,
|
|
72
|
-
"depth": 1,
|
|
73
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
74
|
-
"requiredTags": ["untrusted"]
|
|
75
|
-
}
|
|
76
|
-
]
|
|
77
|
-
}
|
|
78
|
-
},
|
|
79
|
-
"axios.head": {
|
|
80
|
-
"type": "dataflow",
|
|
81
|
-
"enabled": true,
|
|
82
|
-
"conditions": {
|
|
83
|
-
"mode": "or",
|
|
84
|
-
"args": [
|
|
85
|
-
{
|
|
86
|
-
"index": 0,
|
|
87
|
-
"provider": "./sinks/ssrf-url.js",
|
|
88
|
-
"requiredTags": ["untrusted"],
|
|
89
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
90
|
-
},
|
|
91
|
-
{
|
|
92
|
-
"index": 1,
|
|
93
|
-
"depth": 1,
|
|
94
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
95
|
-
"requiredTags": ["untrusted"]
|
|
96
|
-
}
|
|
97
|
-
]
|
|
98
|
-
}
|
|
99
|
-
},
|
|
100
|
-
"axios.options": {
|
|
101
|
-
"type": "dataflow",
|
|
102
|
-
"enabled": true,
|
|
103
|
-
"conditions": {
|
|
104
|
-
"mode": "or",
|
|
105
|
-
"args": [
|
|
106
|
-
{
|
|
107
|
-
"index": 0,
|
|
108
|
-
"provider": "./sinks/ssrf-url.js",
|
|
109
|
-
"requiredTags": ["untrusted"],
|
|
110
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
111
|
-
},
|
|
112
|
-
{
|
|
113
|
-
"index": 1,
|
|
114
|
-
"depth": 1,
|
|
115
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
116
|
-
"requiredTags": ["untrusted"]
|
|
117
|
-
}
|
|
118
|
-
]
|
|
119
|
-
}
|
|
120
|
-
},
|
|
121
|
-
"axios.post": {
|
|
122
|
-
"type": "dataflow",
|
|
123
|
-
"enabled": true,
|
|
124
|
-
"conditions": {
|
|
125
|
-
"mode": "or",
|
|
126
|
-
"args": [
|
|
127
|
-
{
|
|
128
|
-
"index": 0,
|
|
129
|
-
"provider": "./sinks/ssrf-url.js",
|
|
130
|
-
"requiredTags": ["untrusted"],
|
|
131
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
132
|
-
},
|
|
133
|
-
{
|
|
134
|
-
"index": 2,
|
|
135
|
-
"depth": 1,
|
|
136
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
137
|
-
"requiredTags": ["untrusted"]
|
|
138
|
-
}
|
|
139
|
-
]
|
|
140
|
-
}
|
|
141
|
-
},
|
|
142
|
-
"axios.put": {
|
|
143
|
-
"type": "dataflow",
|
|
144
|
-
"enabled": true,
|
|
145
|
-
"conditions": {
|
|
146
|
-
"mode": "or",
|
|
147
|
-
"args": [
|
|
148
|
-
{
|
|
149
|
-
"index": 0,
|
|
150
|
-
"provider": "./sinks/ssrf-url.js",
|
|
151
|
-
"requiredTags": ["untrusted"],
|
|
152
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
153
|
-
},
|
|
154
|
-
{
|
|
155
|
-
"index": 2,
|
|
156
|
-
"depth": 1,
|
|
157
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
158
|
-
"requiredTags": ["untrusted"]
|
|
159
|
-
}
|
|
160
|
-
]
|
|
161
|
-
}
|
|
162
|
-
},
|
|
163
|
-
"axios.patch": {
|
|
164
|
-
"type": "dataflow",
|
|
165
|
-
"enabled": true,
|
|
166
|
-
"conditions": {
|
|
167
|
-
"mode": "or",
|
|
168
|
-
"args": [
|
|
169
|
-
{
|
|
170
|
-
"index": 0,
|
|
171
|
-
"provider": "./sinks/ssrf-url.js",
|
|
172
|
-
"requiredTags": ["untrusted"],
|
|
173
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
174
|
-
},
|
|
175
|
-
{
|
|
176
|
-
"index": 2,
|
|
177
|
-
"depth": 1,
|
|
178
|
-
"exclusiveKeys": ["method", "url", "baseURL"],
|
|
179
|
-
"requiredTags": ["untrusted"]
|
|
180
|
-
}
|
|
181
|
-
]
|
|
182
|
-
}
|
|
183
|
-
},
|
|
184
|
-
"http.get": {
|
|
185
|
-
"type": "dataflow",
|
|
186
|
-
"enabled": true,
|
|
187
|
-
"stackTrustedLibs": ["axios"],
|
|
188
|
-
"conditions": {
|
|
189
|
-
"mode": "or",
|
|
190
|
-
"args": [
|
|
191
|
-
{
|
|
192
|
-
"index": 0,
|
|
193
|
-
"provider": "./sinks/ssrf-url.js",
|
|
194
|
-
"requiredTags": ["untrusted"],
|
|
195
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
196
|
-
},
|
|
197
|
-
{
|
|
198
|
-
"index": 0,
|
|
199
|
-
"depth": 1,
|
|
200
|
-
"exclusiveKeys": ["host", "hostname", "protocol"],
|
|
201
|
-
"requiredTags": ["untrusted"]
|
|
202
|
-
},
|
|
203
|
-
{
|
|
204
|
-
"index": 1,
|
|
205
|
-
"depth": 1,
|
|
206
|
-
"exclusiveKeys": ["host", "hostname", "protocol"],
|
|
207
|
-
"requiredTags": ["untrusted"]
|
|
208
|
-
}
|
|
209
|
-
]
|
|
210
|
-
}
|
|
211
|
-
},
|
|
212
|
-
"https.get": {
|
|
213
|
-
"type": "dataflow",
|
|
214
|
-
"enabled": true,
|
|
215
|
-
"stackTrustedLibs": ["axios"],
|
|
216
|
-
"conditions": {
|
|
217
|
-
"mode": "or",
|
|
218
|
-
"args": [
|
|
219
|
-
{
|
|
220
|
-
"index": 0,
|
|
221
|
-
"provider": "./sinks/ssrf-url.js",
|
|
222
|
-
"requiredTags": ["untrusted"],
|
|
223
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
224
|
-
},
|
|
225
|
-
{
|
|
226
|
-
"index": 0,
|
|
227
|
-
"depth": 1,
|
|
228
|
-
"exclusiveKeys": ["host", "hostname", "protocol"],
|
|
229
|
-
"requiredTags": ["untrusted"]
|
|
230
|
-
},
|
|
231
|
-
{
|
|
232
|
-
"index": 1,
|
|
233
|
-
"depth": 1,
|
|
234
|
-
"exclusiveKeys": ["host", "hostname", "protocol"],
|
|
235
|
-
"requiredTags": ["untrusted"]
|
|
236
|
-
}
|
|
237
|
-
]
|
|
238
|
-
}
|
|
239
|
-
},
|
|
240
|
-
"http.request": {
|
|
241
|
-
"type": "dataflow",
|
|
242
|
-
"enabled": true,
|
|
243
|
-
"stackTrustedLibs": ["^(?!.*(newrelic)).*http.*$", "axios"],
|
|
244
|
-
"conditions": {
|
|
245
|
-
"mode": "or",
|
|
246
|
-
"args": [
|
|
247
|
-
{
|
|
248
|
-
"index": 0,
|
|
249
|
-
"provider": "./sinks/ssrf-url.js",
|
|
250
|
-
"requiredTags": ["untrusted"],
|
|
251
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
252
|
-
},
|
|
253
|
-
{
|
|
254
|
-
"index": 0,
|
|
255
|
-
"depth": 1,
|
|
256
|
-
"exclusiveKeys": [
|
|
257
|
-
"host",
|
|
258
|
-
"hostname",
|
|
259
|
-
"localAddress",
|
|
260
|
-
"protocol"
|
|
261
|
-
],
|
|
262
|
-
"requiredTags": ["untrusted"]
|
|
263
|
-
},
|
|
264
|
-
{
|
|
265
|
-
"index": 1,
|
|
266
|
-
"depth": 1,
|
|
267
|
-
"exclusiveKeys": [
|
|
268
|
-
"host",
|
|
269
|
-
"hostname",
|
|
270
|
-
"localAddress",
|
|
271
|
-
"protocol"
|
|
272
|
-
],
|
|
273
|
-
"requiredTags": ["untrusted"]
|
|
274
|
-
}
|
|
275
|
-
]
|
|
276
|
-
}
|
|
277
|
-
},
|
|
278
|
-
"https.request": {
|
|
279
|
-
"type": "dataflow",
|
|
280
|
-
"enabled": true,
|
|
281
|
-
"stackTrustedLibs": ["^(?!.*(newrelic)).*http.*$", "axios"],
|
|
282
|
-
"conditions": {
|
|
283
|
-
"mode": "or",
|
|
284
|
-
"args": [
|
|
285
|
-
{
|
|
286
|
-
"index": 0,
|
|
287
|
-
"provider": "./sinks/ssrf-url.js",
|
|
288
|
-
"requiredTags": ["untrusted"],
|
|
289
|
-
"disallowedTags": ["source-type:querystring", "source-type:path"]
|
|
290
|
-
},
|
|
291
|
-
{
|
|
292
|
-
"index": 0,
|
|
293
|
-
"depth": 1,
|
|
294
|
-
"exclusiveKeys": [
|
|
295
|
-
"host",
|
|
296
|
-
"hostname",
|
|
297
|
-
"localAddress",
|
|
298
|
-
"protocol"
|
|
299
|
-
],
|
|
300
|
-
"requiredTags": ["untrusted"]
|
|
301
|
-
},
|
|
302
|
-
{
|
|
303
|
-
"index": 1,
|
|
304
|
-
"depth": 1,
|
|
305
|
-
"exclusiveKeys": [
|
|
306
|
-
"host",
|
|
307
|
-
"hostname",
|
|
308
|
-
"localAddress",
|
|
309
|
-
"protocol"
|
|
310
|
-
],
|
|
311
|
-
"requiredTags": ["untrusted"]
|
|
312
|
-
}
|
|
313
|
-
]
|
|
314
|
-
}
|
|
315
|
-
},
|
|
316
|
-
"http.ClientRequest.prototype.end": {
|
|
317
|
-
"type": "dataflow",
|
|
318
|
-
"enabled": false,
|
|
319
|
-
"__note": "FIXME(CONTRAST-35300. This is called by http/s. This should wait for end and inspect its own properties to ensure host, path, and protocol are not user controlled.)",
|
|
320
|
-
"stackTrustedLibs": ["^(?!.*(newrelic)).*http.*$", "^(?!.*(newrelic)).*https.*$"]
|
|
321
|
-
}
|
|
322
|
-
}
|
|
323
|
-
},
|
|
324
|
-
"sql-injection": {
|
|
325
|
-
"enabled": true,
|
|
326
|
-
"type": "hook",
|
|
327
|
-
"sinks": {
|
|
328
|
-
"sequelize.prototype.query": {
|
|
329
|
-
"type": "dataflow",
|
|
330
|
-
"enabled": true,
|
|
331
|
-
"conditions": {
|
|
332
|
-
"mode": "or",
|
|
333
|
-
"args": [
|
|
334
|
-
{
|
|
335
|
-
"index": 0,
|
|
336
|
-
"requiredTags": ["untrusted"],
|
|
337
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
338
|
-
}
|
|
339
|
-
]
|
|
340
|
-
}
|
|
341
|
-
},
|
|
342
|
-
"typeorm.Repository.prototype.query": {
|
|
343
|
-
"type": "dataflow",
|
|
344
|
-
"enabled": true,
|
|
345
|
-
"conditions": {
|
|
346
|
-
"mode": "or",
|
|
347
|
-
"args": [
|
|
348
|
-
{
|
|
349
|
-
"index": 0,
|
|
350
|
-
"requiredTags": ["untrusted"],
|
|
351
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
352
|
-
}
|
|
353
|
-
]
|
|
354
|
-
}
|
|
355
|
-
},
|
|
356
|
-
"typeorm.Connection.prototype.query": {
|
|
357
|
-
"type": "dataflow",
|
|
358
|
-
"enabled": true,
|
|
359
|
-
"conditions": {
|
|
360
|
-
"mode": "or",
|
|
361
|
-
"args": [
|
|
362
|
-
{
|
|
363
|
-
"index": 0,
|
|
364
|
-
"requiredTags": ["untrusted"],
|
|
365
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
366
|
-
}
|
|
367
|
-
]
|
|
368
|
-
}
|
|
369
|
-
},
|
|
370
|
-
"mysql/lib/Connection.query": {
|
|
371
|
-
"type": "dataflow",
|
|
372
|
-
"enabled": true,
|
|
373
|
-
"conditions": {
|
|
374
|
-
"mode": "or",
|
|
375
|
-
"args": [
|
|
376
|
-
{
|
|
377
|
-
"index": 0,
|
|
378
|
-
"requiredTags": ["untrusted"],
|
|
379
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
380
|
-
},
|
|
381
|
-
{
|
|
382
|
-
"index": 0,
|
|
383
|
-
"depth": 1,
|
|
384
|
-
"exclusiveKeys": ["sql"],
|
|
385
|
-
"requiredTags": ["untrusted"],
|
|
386
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
387
|
-
}
|
|
388
|
-
]
|
|
389
|
-
}
|
|
390
|
-
},
|
|
391
|
-
"mysql2/lib/connection.Connection.query": {
|
|
392
|
-
"type": "dataflow",
|
|
393
|
-
"enabled": true,
|
|
394
|
-
"conditions": {
|
|
395
|
-
"mode": "or",
|
|
396
|
-
"args": [
|
|
397
|
-
{
|
|
398
|
-
"index": 0,
|
|
399
|
-
"requiredTags": ["untrusted"],
|
|
400
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
401
|
-
},
|
|
402
|
-
{
|
|
403
|
-
"index": 0,
|
|
404
|
-
"depth": 1,
|
|
405
|
-
"exclusiveKeys": ["sql"],
|
|
406
|
-
"requiredTags": ["untrusted"],
|
|
407
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
408
|
-
}
|
|
409
|
-
]
|
|
410
|
-
}
|
|
411
|
-
},
|
|
412
|
-
"mysql2/lib/connection.Connection.execute": {
|
|
413
|
-
"type": "dataflow",
|
|
414
|
-
"enabled": true,
|
|
415
|
-
"conditions": {
|
|
416
|
-
"mode": "or",
|
|
417
|
-
"args": [
|
|
418
|
-
{
|
|
419
|
-
"index": 0,
|
|
420
|
-
"requiredTags": ["untrusted"],
|
|
421
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
422
|
-
},
|
|
423
|
-
{
|
|
424
|
-
"index": 0,
|
|
425
|
-
"depth": 1,
|
|
426
|
-
"exclusiveKeys": ["sql"],
|
|
427
|
-
"requiredTags": ["untrusted"],
|
|
428
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
429
|
-
}
|
|
430
|
-
]
|
|
431
|
-
}
|
|
432
|
-
},
|
|
433
|
-
"pg.Connection.prototype.query": {
|
|
434
|
-
"type": "dataflow",
|
|
435
|
-
"enabled": true,
|
|
436
|
-
"conditions": {
|
|
437
|
-
"mode": "or",
|
|
438
|
-
"args": [
|
|
439
|
-
{
|
|
440
|
-
"index": 0,
|
|
441
|
-
"requiredTags": ["untrusted"],
|
|
442
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
443
|
-
},
|
|
444
|
-
{
|
|
445
|
-
"index": 0,
|
|
446
|
-
"depth": 1,
|
|
447
|
-
"exclusiveKeys": ["text"],
|
|
448
|
-
"requiredTags": ["untrusted"],
|
|
449
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
450
|
-
}
|
|
451
|
-
]
|
|
452
|
-
}
|
|
453
|
-
},
|
|
454
|
-
"pg/lib/client.prototype.query": {
|
|
455
|
-
"type": "dataflow",
|
|
456
|
-
"enabled": true,
|
|
457
|
-
"conditions": {
|
|
458
|
-
"mode": "or",
|
|
459
|
-
"args": [
|
|
460
|
-
{
|
|
461
|
-
"index": 0,
|
|
462
|
-
"requiredTags": ["untrusted"],
|
|
463
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
464
|
-
},
|
|
465
|
-
{
|
|
466
|
-
"index": 0,
|
|
467
|
-
"depth": 1,
|
|
468
|
-
"exclusiveKeys": ["text"],
|
|
469
|
-
"requiredTags": ["untrusted"],
|
|
470
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
471
|
-
}
|
|
472
|
-
]
|
|
473
|
-
}
|
|
474
|
-
},
|
|
475
|
-
"sqlite3.Database.prototype.all": {
|
|
476
|
-
"type": "dataflow",
|
|
477
|
-
"enabled": true,
|
|
478
|
-
"conditions": {
|
|
479
|
-
"mode": "or",
|
|
480
|
-
"args": [
|
|
481
|
-
{
|
|
482
|
-
"index": 0,
|
|
483
|
-
"requiredTags": ["untrusted"],
|
|
484
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
485
|
-
}
|
|
486
|
-
]
|
|
487
|
-
}
|
|
488
|
-
},
|
|
489
|
-
"sqlite3.Database.prototype.run": {
|
|
490
|
-
"type": "dataflow",
|
|
491
|
-
"enabled": true,
|
|
492
|
-
"conditions": {
|
|
493
|
-
"mode": "or",
|
|
494
|
-
"args": [
|
|
495
|
-
{
|
|
496
|
-
"index": 0,
|
|
497
|
-
"requiredTags": ["untrusted"],
|
|
498
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
499
|
-
}
|
|
500
|
-
]
|
|
501
|
-
}
|
|
502
|
-
},
|
|
503
|
-
"sqlite3.Database.prototype.get": {
|
|
504
|
-
"type": "dataflow",
|
|
505
|
-
"enabled": true,
|
|
506
|
-
"conditions": {
|
|
507
|
-
"mode": "or",
|
|
508
|
-
"args": [
|
|
509
|
-
{
|
|
510
|
-
"index": 0,
|
|
511
|
-
"requiredTags": ["untrusted"],
|
|
512
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
513
|
-
}
|
|
514
|
-
]
|
|
515
|
-
}
|
|
516
|
-
},
|
|
517
|
-
"sqlite3.Database.prototype.each": {
|
|
518
|
-
"type": "dataflow",
|
|
519
|
-
"enabled": true,
|
|
520
|
-
"conditions": {
|
|
521
|
-
"mode": "or",
|
|
522
|
-
"args": [
|
|
523
|
-
{
|
|
524
|
-
"index": 0,
|
|
525
|
-
"requiredTags": ["untrusted"],
|
|
526
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
527
|
-
}
|
|
528
|
-
]
|
|
529
|
-
}
|
|
530
|
-
},
|
|
531
|
-
"sqlite3.Database.prototype.exec": {
|
|
532
|
-
"type": "dataflow",
|
|
533
|
-
"enabled": true,
|
|
534
|
-
"conditions": {
|
|
535
|
-
"mode": "or",
|
|
536
|
-
"args": [
|
|
537
|
-
{
|
|
538
|
-
"index": 0,
|
|
539
|
-
"requiredTags": ["untrusted"],
|
|
540
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
541
|
-
}
|
|
542
|
-
]
|
|
543
|
-
}
|
|
544
|
-
},
|
|
545
|
-
"sqlite3.Database.prototype.prepare": {
|
|
546
|
-
"type": "dataflow",
|
|
547
|
-
"enabled": true,
|
|
548
|
-
"conditions": {
|
|
549
|
-
"mode": "or",
|
|
550
|
-
"args": [
|
|
551
|
-
{
|
|
552
|
-
"index": 0,
|
|
553
|
-
"requiredTags": ["untrusted"],
|
|
554
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
555
|
-
}
|
|
556
|
-
]
|
|
557
|
-
}
|
|
558
|
-
},
|
|
559
|
-
"mssql/lib/base/prepared-statement.prototype.prepare": {
|
|
560
|
-
"type": "dataflow",
|
|
561
|
-
"enabled": true,
|
|
562
|
-
"conditions": {
|
|
563
|
-
"mode": "or",
|
|
564
|
-
"args": [
|
|
565
|
-
{
|
|
566
|
-
"index": 0,
|
|
567
|
-
"requiredTags": ["untrusted"],
|
|
568
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
569
|
-
}
|
|
570
|
-
]
|
|
571
|
-
}
|
|
572
|
-
},
|
|
573
|
-
"mssql/lib/base/request.prototype.batch": {
|
|
574
|
-
"type": "dataflow",
|
|
575
|
-
"enabled": true,
|
|
576
|
-
"conditions": {
|
|
577
|
-
"mode": "or",
|
|
578
|
-
"args": [
|
|
579
|
-
{
|
|
580
|
-
"index": 0,
|
|
581
|
-
"requiredTags": ["untrusted"],
|
|
582
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
583
|
-
}
|
|
584
|
-
]
|
|
585
|
-
}
|
|
586
|
-
},
|
|
587
|
-
"mssql/lib/base/request.prototype.query": {
|
|
588
|
-
"type": "dataflow",
|
|
589
|
-
"enabled": true,
|
|
590
|
-
"conditions": {
|
|
591
|
-
"mode": "or",
|
|
592
|
-
"args": [
|
|
593
|
-
{
|
|
594
|
-
"index": 0,
|
|
595
|
-
"requiredTags": ["untrusted"],
|
|
596
|
-
"disallowedTags": ["sql-encoded", "limited-chars"]
|
|
597
|
-
}
|
|
598
|
-
]
|
|
599
|
-
}
|
|
600
|
-
}
|
|
601
|
-
}
|
|
602
|
-
},
|
|
603
|
-
"path-traversal": {
|
|
604
|
-
"enabled": true,
|
|
605
|
-
"type": "hook",
|
|
606
|
-
"sinks": {
|
|
607
|
-
"fs.access": {
|
|
608
|
-
"type": "dataflow",
|
|
609
|
-
"enabled": true,
|
|
610
|
-
"conditions": {
|
|
611
|
-
"mode": "or",
|
|
612
|
-
"args": [
|
|
613
|
-
{
|
|
614
|
-
"index": 0,
|
|
615
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
616
|
-
"requiredTags": ["untrusted"]
|
|
617
|
-
}
|
|
618
|
-
]
|
|
619
|
-
}
|
|
620
|
-
},
|
|
621
|
-
"fs.accessSync": {
|
|
622
|
-
"type": "dataflow",
|
|
623
|
-
"enabled": true,
|
|
624
|
-
"conditions": {
|
|
625
|
-
"mode": "or",
|
|
626
|
-
"args": [
|
|
627
|
-
{
|
|
628
|
-
"index": 0,
|
|
629
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
630
|
-
"requiredTags": ["untrusted"]
|
|
631
|
-
}
|
|
632
|
-
]
|
|
633
|
-
}
|
|
634
|
-
},
|
|
635
|
-
"fs.copyFile": {
|
|
636
|
-
"type": "dataflow",
|
|
637
|
-
"enabled": true,
|
|
638
|
-
"conditions": {
|
|
639
|
-
"mode": "or",
|
|
640
|
-
"args": [
|
|
641
|
-
{
|
|
642
|
-
"index": 0,
|
|
643
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
644
|
-
"requiredTags": ["untrusted"]
|
|
645
|
-
},
|
|
646
|
-
{
|
|
647
|
-
"index": 1,
|
|
648
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
649
|
-
"requiredTags": ["untrusted"]
|
|
650
|
-
}
|
|
651
|
-
]
|
|
652
|
-
}
|
|
653
|
-
},
|
|
654
|
-
"fs.copyFileSync": {
|
|
655
|
-
"type": "dataflow",
|
|
656
|
-
"enabled": true,
|
|
657
|
-
"conditions": {
|
|
658
|
-
"mode": "or",
|
|
659
|
-
"args": [
|
|
660
|
-
{
|
|
661
|
-
"index": 0,
|
|
662
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
663
|
-
"requiredTags": ["untrusted"]
|
|
664
|
-
},
|
|
665
|
-
{
|
|
666
|
-
"index": 1,
|
|
667
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
668
|
-
"requiredTags": ["untrusted"]
|
|
669
|
-
}
|
|
670
|
-
]
|
|
671
|
-
}
|
|
672
|
-
},
|
|
673
|
-
"fs.appendFile": {
|
|
674
|
-
"type": "dataflow",
|
|
675
|
-
"enabled": true,
|
|
676
|
-
"conditions": {
|
|
677
|
-
"mode": "or",
|
|
678
|
-
"args": [
|
|
679
|
-
{
|
|
680
|
-
"index": 0,
|
|
681
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
682
|
-
"requiredTags": ["untrusted"]
|
|
683
|
-
}
|
|
684
|
-
]
|
|
685
|
-
}
|
|
686
|
-
},
|
|
687
|
-
"fs.appendFileSync": {
|
|
688
|
-
"hookPhase": "pre",
|
|
689
|
-
"type": "dataflow",
|
|
690
|
-
"enabled": true,
|
|
691
|
-
"conditions": {
|
|
692
|
-
"mode": "or",
|
|
693
|
-
"args": [
|
|
694
|
-
{
|
|
695
|
-
"index": 0,
|
|
696
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
697
|
-
"requiredTags": ["untrusted"]
|
|
698
|
-
}
|
|
699
|
-
]
|
|
700
|
-
}
|
|
701
|
-
},
|
|
702
|
-
"fs.writeFile": {
|
|
703
|
-
"type": "dataflow",
|
|
704
|
-
"enabled": true,
|
|
705
|
-
"conditions": {
|
|
706
|
-
"mode": "or",
|
|
707
|
-
"args": [
|
|
708
|
-
{
|
|
709
|
-
"index": 0,
|
|
710
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
711
|
-
"requiredTags": ["untrusted"]
|
|
712
|
-
}
|
|
713
|
-
]
|
|
714
|
-
}
|
|
715
|
-
},
|
|
716
|
-
"fs.writeFileSync": {
|
|
717
|
-
"hookPhase": "pre",
|
|
718
|
-
"type": "dataflow",
|
|
719
|
-
"enabled": true,
|
|
720
|
-
"conditions": {
|
|
721
|
-
"mode": "or",
|
|
722
|
-
"args": [
|
|
723
|
-
{
|
|
724
|
-
"index": 0,
|
|
725
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
726
|
-
"requiredTags": ["untrusted"]
|
|
727
|
-
}
|
|
728
|
-
]
|
|
729
|
-
}
|
|
730
|
-
},
|
|
731
|
-
"fs.createWriteStream": {
|
|
732
|
-
"type": "dataflow",
|
|
733
|
-
"enabled": true,
|
|
734
|
-
"conditions": {
|
|
735
|
-
"mode": "or",
|
|
736
|
-
"args": [
|
|
737
|
-
{
|
|
738
|
-
"index": 0,
|
|
739
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
740
|
-
"requiredTags": ["untrusted"]
|
|
741
|
-
}
|
|
742
|
-
]
|
|
743
|
-
}
|
|
744
|
-
},
|
|
745
|
-
"fs.createReadStream": {
|
|
746
|
-
"type": "dataflow",
|
|
747
|
-
"enabled": true,
|
|
748
|
-
"conditions": {
|
|
749
|
-
"mode": "or",
|
|
750
|
-
"args": [
|
|
751
|
-
{
|
|
752
|
-
"index": 0,
|
|
753
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
754
|
-
"requiredTags": ["untrusted"]
|
|
755
|
-
}
|
|
756
|
-
]
|
|
757
|
-
}
|
|
758
|
-
},
|
|
759
|
-
"fs.unlink": {
|
|
760
|
-
"type": "dataflow",
|
|
761
|
-
"enabled": true,
|
|
762
|
-
"conditions": {
|
|
763
|
-
"mode": "or",
|
|
764
|
-
"args": [
|
|
765
|
-
{
|
|
766
|
-
"index": 0,
|
|
767
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
768
|
-
"requiredTags": ["untrusted"]
|
|
769
|
-
}
|
|
770
|
-
]
|
|
771
|
-
}
|
|
772
|
-
},
|
|
773
|
-
"fs.unlinkSync": {
|
|
774
|
-
"hookPhase": "pre",
|
|
775
|
-
"type": "dataflow",
|
|
776
|
-
"enabled": true,
|
|
777
|
-
"conditions": {
|
|
778
|
-
"mode": "or",
|
|
779
|
-
"args": [
|
|
780
|
-
{
|
|
781
|
-
"index": 0,
|
|
782
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
783
|
-
"requiredTags": ["untrusted"]
|
|
784
|
-
}
|
|
785
|
-
]
|
|
786
|
-
}
|
|
787
|
-
},
|
|
788
|
-
"fs.truncate": {
|
|
789
|
-
"type": "dataflow",
|
|
790
|
-
"enabled": true,
|
|
791
|
-
"conditions": {
|
|
792
|
-
"mode": "or",
|
|
793
|
-
"args": [
|
|
794
|
-
{
|
|
795
|
-
"index": 0,
|
|
796
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
797
|
-
"requiredTags": ["untrusted"]
|
|
798
|
-
}
|
|
799
|
-
]
|
|
800
|
-
}
|
|
801
|
-
},
|
|
802
|
-
"fs.truncateSync": {
|
|
803
|
-
"hookPhase": "pre",
|
|
804
|
-
"type": "dataflow",
|
|
805
|
-
"enabled": true,
|
|
806
|
-
"conditions": {
|
|
807
|
-
"mode": "or",
|
|
808
|
-
"args": [
|
|
809
|
-
{
|
|
810
|
-
"index": 0,
|
|
811
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
812
|
-
"requiredTags": ["untrusted"]
|
|
813
|
-
}
|
|
814
|
-
]
|
|
815
|
-
}
|
|
816
|
-
},
|
|
817
|
-
"fs.rmdir": {
|
|
818
|
-
"type": "dataflow",
|
|
819
|
-
"enabled": true,
|
|
820
|
-
"conditions": {
|
|
821
|
-
"mode": "or",
|
|
822
|
-
"args": [
|
|
823
|
-
{
|
|
824
|
-
"index": 0,
|
|
825
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
826
|
-
"requiredTags": ["untrusted"]
|
|
827
|
-
}
|
|
828
|
-
]
|
|
829
|
-
}
|
|
830
|
-
},
|
|
831
|
-
"fs.rmdirSync": {
|
|
832
|
-
"hookPhase": "pre",
|
|
833
|
-
"type": "dataflow",
|
|
834
|
-
"enabled": true,
|
|
835
|
-
"conditions": {
|
|
836
|
-
"mode": "or",
|
|
837
|
-
"args": [
|
|
838
|
-
{
|
|
839
|
-
"index": 0,
|
|
840
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
841
|
-
"requiredTags": ["untrusted"]
|
|
842
|
-
}
|
|
843
|
-
]
|
|
844
|
-
}
|
|
845
|
-
},
|
|
846
|
-
"fs.rename": {
|
|
847
|
-
"type": "dataflow",
|
|
848
|
-
"enabled": true,
|
|
849
|
-
"conditions": {
|
|
850
|
-
"mode": "or",
|
|
851
|
-
"args": [
|
|
852
|
-
{
|
|
853
|
-
"index": 0,
|
|
854
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
855
|
-
"requiredTags": ["untrusted"]
|
|
856
|
-
},
|
|
857
|
-
{
|
|
858
|
-
"index": 1,
|
|
859
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
860
|
-
"requiredTags": ["untrusted"]
|
|
861
|
-
}
|
|
862
|
-
]
|
|
863
|
-
}
|
|
864
|
-
},
|
|
865
|
-
"fs.renameSync": {
|
|
866
|
-
"hookPhase": "pre",
|
|
867
|
-
"type": "dataflow",
|
|
868
|
-
"enabled": true,
|
|
869
|
-
"conditions": {
|
|
870
|
-
"mode": "or",
|
|
871
|
-
"args": [
|
|
872
|
-
{
|
|
873
|
-
"index": 0,
|
|
874
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
875
|
-
"requiredTags": ["untrusted"]
|
|
876
|
-
},
|
|
877
|
-
{
|
|
878
|
-
"index": 1,
|
|
879
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
880
|
-
"requiredTags": ["untrusted"]
|
|
881
|
-
}
|
|
882
|
-
]
|
|
883
|
-
}
|
|
884
|
-
},
|
|
885
|
-
"fs.readFile": {
|
|
886
|
-
"type": "dataflow",
|
|
887
|
-
"enabled": true,
|
|
888
|
-
"conditions": {
|
|
889
|
-
"mode": "or",
|
|
890
|
-
"args": [
|
|
891
|
-
{
|
|
892
|
-
"index": 0,
|
|
893
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
894
|
-
"requiredTags": ["untrusted"]
|
|
895
|
-
}
|
|
896
|
-
]
|
|
897
|
-
}
|
|
898
|
-
},
|
|
899
|
-
"fs.readFileSync": {
|
|
900
|
-
"hookPhase": "pre",
|
|
901
|
-
"type": "dataflow",
|
|
902
|
-
"enabled": true,
|
|
903
|
-
"conditions": {
|
|
904
|
-
"mode": "or",
|
|
905
|
-
"args": [
|
|
906
|
-
{
|
|
907
|
-
"index": 0,
|
|
908
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
909
|
-
"requiredTags": ["untrusted"]
|
|
910
|
-
}
|
|
911
|
-
]
|
|
912
|
-
}
|
|
913
|
-
},
|
|
914
|
-
"fs.readdir": {
|
|
915
|
-
"type": "dataflow",
|
|
916
|
-
"enabled": true,
|
|
917
|
-
"conditions": {
|
|
918
|
-
"mode": "or",
|
|
919
|
-
"args": [
|
|
920
|
-
{
|
|
921
|
-
"index": 0,
|
|
922
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
923
|
-
"requiredTags": ["untrusted"]
|
|
924
|
-
}
|
|
925
|
-
]
|
|
926
|
-
}
|
|
927
|
-
},
|
|
928
|
-
"fs.readdirSync": {
|
|
929
|
-
"hookPhase": "pre",
|
|
930
|
-
"type": "dataflow",
|
|
931
|
-
"enabled": true,
|
|
932
|
-
"conditions": {
|
|
933
|
-
"mode": "or",
|
|
934
|
-
"args": [
|
|
935
|
-
{
|
|
936
|
-
"index": 0,
|
|
937
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
938
|
-
"requiredTags": ["untrusted"]
|
|
939
|
-
}
|
|
940
|
-
]
|
|
941
|
-
}
|
|
942
|
-
},
|
|
943
|
-
"fs.open": {
|
|
944
|
-
"type": "dataflow",
|
|
945
|
-
"enabled": true,
|
|
946
|
-
"conditions": {
|
|
947
|
-
"mode": "or",
|
|
948
|
-
"args": [
|
|
949
|
-
{
|
|
950
|
-
"index": 0,
|
|
951
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
952
|
-
"requiredTags": ["untrusted"]
|
|
953
|
-
}
|
|
954
|
-
]
|
|
955
|
-
}
|
|
956
|
-
},
|
|
957
|
-
"fs.openSync": {
|
|
958
|
-
"hookPhase": "pre",
|
|
959
|
-
"type": "dataflow",
|
|
960
|
-
"enabled": true,
|
|
961
|
-
"conditions": {
|
|
962
|
-
"mode": "or",
|
|
963
|
-
"args": [
|
|
964
|
-
{
|
|
965
|
-
"index": 0,
|
|
966
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
967
|
-
"requiredTags": ["untrusted"]
|
|
968
|
-
}
|
|
969
|
-
]
|
|
970
|
-
}
|
|
971
|
-
},
|
|
972
|
-
"fs.mkdir": {
|
|
973
|
-
"enabled": true,
|
|
974
|
-
"type": "dataflow",
|
|
975
|
-
"conditions": {
|
|
976
|
-
"mode": "or",
|
|
977
|
-
"args": [
|
|
978
|
-
{
|
|
979
|
-
"index": 0,
|
|
980
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
981
|
-
"requiredTags": ["untrusted"]
|
|
982
|
-
}
|
|
983
|
-
]
|
|
984
|
-
}
|
|
985
|
-
},
|
|
986
|
-
"fs.mkdirSync": {
|
|
987
|
-
"hookPhase": "pre",
|
|
988
|
-
"enabled": true,
|
|
989
|
-
"type": "dataflow",
|
|
990
|
-
"conditions": {
|
|
991
|
-
"mode": "or",
|
|
992
|
-
"args": [
|
|
993
|
-
{
|
|
994
|
-
"index": 0,
|
|
995
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
996
|
-
"requiredTags": ["untrusted"]
|
|
997
|
-
}
|
|
998
|
-
]
|
|
999
|
-
}
|
|
1000
|
-
},
|
|
1001
|
-
"fs.readlink": {
|
|
1002
|
-
"type": "dataflow",
|
|
1003
|
-
"enabled": true,
|
|
1004
|
-
"conditions": {
|
|
1005
|
-
"mode": "or",
|
|
1006
|
-
"args": [
|
|
1007
|
-
{
|
|
1008
|
-
"index": 0,
|
|
1009
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1010
|
-
"requiredTags": ["untrusted"]
|
|
1011
|
-
}
|
|
1012
|
-
]
|
|
1013
|
-
}
|
|
1014
|
-
},
|
|
1015
|
-
"fs.readlinkSync": {
|
|
1016
|
-
"hookPhase": "pre",
|
|
1017
|
-
"type": "dataflow",
|
|
1018
|
-
"enabled": true,
|
|
1019
|
-
"conditions": {
|
|
1020
|
-
"mode": "or",
|
|
1021
|
-
"args": [
|
|
1022
|
-
{
|
|
1023
|
-
"index": 0,
|
|
1024
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1025
|
-
"requiredTags": ["untrusted"]
|
|
1026
|
-
}
|
|
1027
|
-
]
|
|
1028
|
-
}
|
|
1029
|
-
},
|
|
1030
|
-
"fs.symlink": {
|
|
1031
|
-
"type": "dataflow",
|
|
1032
|
-
"enabled": true,
|
|
1033
|
-
"conditions": {
|
|
1034
|
-
"mode": "or",
|
|
1035
|
-
"args": [
|
|
1036
|
-
{
|
|
1037
|
-
"index": 0,
|
|
1038
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1039
|
-
"requiredTags": ["untrusted"]
|
|
1040
|
-
},
|
|
1041
|
-
{
|
|
1042
|
-
"index": 1,
|
|
1043
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1044
|
-
"requiredTags": ["untrusted"]
|
|
1045
|
-
}
|
|
1046
|
-
]
|
|
1047
|
-
}
|
|
1048
|
-
},
|
|
1049
|
-
"fs.symlinkSync": {
|
|
1050
|
-
"hookPhase": "pre",
|
|
1051
|
-
"type": "dataflow",
|
|
1052
|
-
"enabled": true,
|
|
1053
|
-
"conditions": {
|
|
1054
|
-
"mode": "or",
|
|
1055
|
-
"args": [
|
|
1056
|
-
{
|
|
1057
|
-
"index": 0,
|
|
1058
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1059
|
-
"requiredTags": ["untrusted"]
|
|
1060
|
-
},
|
|
1061
|
-
{
|
|
1062
|
-
"index": 1,
|
|
1063
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1064
|
-
"requiredTags": ["untrusted"]
|
|
1065
|
-
}
|
|
1066
|
-
]
|
|
1067
|
-
}
|
|
1068
|
-
},
|
|
1069
|
-
"fs.chmod": {
|
|
1070
|
-
"type": "dataflow",
|
|
1071
|
-
"enabled": true,
|
|
1072
|
-
"conditions": {
|
|
1073
|
-
"mode": "or",
|
|
1074
|
-
"args": [
|
|
1075
|
-
{
|
|
1076
|
-
"index": 0,
|
|
1077
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1078
|
-
"requiredTags": ["untrusted"]
|
|
1079
|
-
}
|
|
1080
|
-
]
|
|
1081
|
-
}
|
|
1082
|
-
},
|
|
1083
|
-
"fs.chmodSync": {
|
|
1084
|
-
"hookPhase": "pre",
|
|
1085
|
-
"type": "dataflow",
|
|
1086
|
-
"enabled": true,
|
|
1087
|
-
"conditions": {
|
|
1088
|
-
"mode": "or",
|
|
1089
|
-
"args": [
|
|
1090
|
-
{
|
|
1091
|
-
"index": 0,
|
|
1092
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1093
|
-
"requiredTags": ["untrusted"]
|
|
1094
|
-
}
|
|
1095
|
-
]
|
|
1096
|
-
}
|
|
1097
|
-
},
|
|
1098
|
-
"fs.lchmod": {
|
|
1099
|
-
"type": "dataflow",
|
|
1100
|
-
"enabled": true,
|
|
1101
|
-
"conditions": {
|
|
1102
|
-
"mode": "or",
|
|
1103
|
-
"args": [
|
|
1104
|
-
{
|
|
1105
|
-
"index": 0,
|
|
1106
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1107
|
-
"requiredTags": ["untrusted"]
|
|
1108
|
-
}
|
|
1109
|
-
]
|
|
1110
|
-
}
|
|
1111
|
-
},
|
|
1112
|
-
"fs.lchmodSync": {
|
|
1113
|
-
"hookPhase": "pre",
|
|
1114
|
-
"type": "dataflow",
|
|
1115
|
-
"enabled": true,
|
|
1116
|
-
"conditions": {
|
|
1117
|
-
"mode": "or",
|
|
1118
|
-
"args": [
|
|
1119
|
-
{
|
|
1120
|
-
"index": 0,
|
|
1121
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1122
|
-
"requiredTags": ["untrusted"]
|
|
1123
|
-
}
|
|
1124
|
-
]
|
|
1125
|
-
}
|
|
1126
|
-
},
|
|
1127
|
-
"fs.chown": {
|
|
1128
|
-
"type": "dataflow",
|
|
1129
|
-
"enabled": true,
|
|
1130
|
-
"conditions": {
|
|
1131
|
-
"mode": "or",
|
|
1132
|
-
"args": [
|
|
1133
|
-
{
|
|
1134
|
-
"index": 0,
|
|
1135
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1136
|
-
"requiredTags": ["untrusted"]
|
|
1137
|
-
}
|
|
1138
|
-
]
|
|
1139
|
-
}
|
|
1140
|
-
},
|
|
1141
|
-
"fs.chownSync": {
|
|
1142
|
-
"hookPhase": "pre",
|
|
1143
|
-
"type": "dataflow",
|
|
1144
|
-
"enabled": true,
|
|
1145
|
-
"conditions": {
|
|
1146
|
-
"mode": "or",
|
|
1147
|
-
"args": [
|
|
1148
|
-
{
|
|
1149
|
-
"index": 0,
|
|
1150
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1151
|
-
"requiredTags": ["untrusted"]
|
|
1152
|
-
}
|
|
1153
|
-
]
|
|
1154
|
-
}
|
|
1155
|
-
},
|
|
1156
|
-
"fs.lchown": {
|
|
1157
|
-
"type": "dataflow",
|
|
1158
|
-
"enabled": true,
|
|
1159
|
-
"conditions": {
|
|
1160
|
-
"mode": "or",
|
|
1161
|
-
"args": [
|
|
1162
|
-
{
|
|
1163
|
-
"index": 0,
|
|
1164
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1165
|
-
"requiredTags": ["untrusted"]
|
|
1166
|
-
}
|
|
1167
|
-
]
|
|
1168
|
-
}
|
|
1169
|
-
},
|
|
1170
|
-
"fs.lchownSync": {
|
|
1171
|
-
"hookPhase": "pre",
|
|
1172
|
-
"type": "dataflow",
|
|
1173
|
-
"enabled": true,
|
|
1174
|
-
"conditions": {
|
|
1175
|
-
"mode": "or",
|
|
1176
|
-
"args": [
|
|
1177
|
-
{
|
|
1178
|
-
"index": 0,
|
|
1179
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen", "safe-path"],
|
|
1180
|
-
"requiredTags": ["untrusted"]
|
|
1181
|
-
}
|
|
1182
|
-
]
|
|
1183
|
-
}
|
|
1184
|
-
}
|
|
1185
|
-
}
|
|
1186
|
-
},
|
|
1187
|
-
"unvalidated-redirect": {
|
|
1188
|
-
"enabled": true,
|
|
1189
|
-
"type": "hook",
|
|
1190
|
-
"sinks": {
|
|
1191
|
-
"express.response.redirect": {
|
|
1192
|
-
"type": "dataflow",
|
|
1193
|
-
"enabled": true,
|
|
1194
|
-
"conditions": {
|
|
1195
|
-
"mode": "or",
|
|
1196
|
-
"args": [
|
|
1197
|
-
{
|
|
1198
|
-
"index": -1,
|
|
1199
|
-
"disallowedTags": ["url-encoded", "html-encoded", "limited-chars", "alphanum-space-hyphen"],
|
|
1200
|
-
"requiredTags": ["untrusted"]
|
|
1201
|
-
}
|
|
1202
|
-
]
|
|
1203
|
-
}
|
|
1204
|
-
},
|
|
1205
|
-
"express.response.location": {
|
|
1206
|
-
"type": "dataflow",
|
|
1207
|
-
"enabled": true,
|
|
1208
|
-
"conditions": {
|
|
1209
|
-
"mode": "or",
|
|
1210
|
-
"args": [
|
|
1211
|
-
{
|
|
1212
|
-
"index": 0,
|
|
1213
|
-
"disallowedTags": ["url-encoded", "html-encoded", "limited-chars", "alphanum-space-hyphen"],
|
|
1214
|
-
"requiredTags": ["untrusted"]
|
|
1215
|
-
}
|
|
1216
|
-
]
|
|
1217
|
-
}
|
|
1218
|
-
}
|
|
1219
|
-
}
|
|
1220
|
-
},
|
|
1221
|
-
"nosql-injection-mongodb": {
|
|
1222
|
-
"enabled": true,
|
|
1223
|
-
"type": "http",
|
|
1224
|
-
"provider": "./sinks/mongodb.js"
|
|
1225
|
-
},
|
|
1226
|
-
"nosql-injection-dynamodb": {
|
|
1227
|
-
"enabled": true,
|
|
1228
|
-
"type": "http",
|
|
1229
|
-
"provider": "./sinks/dynamo.js"
|
|
1230
|
-
},
|
|
1231
|
-
"nosql-injection": {
|
|
1232
|
-
"enabled": true,
|
|
1233
|
-
"type": "hook",
|
|
1234
|
-
"sinks": {
|
|
1235
|
-
"mongodb.Collection.prototype.rename": {
|
|
1236
|
-
"type": "dataflow",
|
|
1237
|
-
"enabled": true,
|
|
1238
|
-
"stackTrustedLibs": [],
|
|
1239
|
-
"conditions": {
|
|
1240
|
-
"mode": "or",
|
|
1241
|
-
"args": [
|
|
1242
|
-
{
|
|
1243
|
-
"index": 0,
|
|
1244
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen", "custom-validated-nosql-injection"],
|
|
1245
|
-
"requiredTags": ["untrusted"]
|
|
1246
|
-
}
|
|
1247
|
-
]
|
|
1248
|
-
}
|
|
1249
|
-
},
|
|
1250
|
-
"mongodb.Db.prototype.eval": {
|
|
1251
|
-
"type": "dataflow",
|
|
1252
|
-
"enabled": true,
|
|
1253
|
-
"stackTrustedLibs": [],
|
|
1254
|
-
"conditions": {
|
|
1255
|
-
"mode": "or",
|
|
1256
|
-
"args": [
|
|
1257
|
-
{
|
|
1258
|
-
"index": 0,
|
|
1259
|
-
"disallowedTags": ["custom-validated-nosql-injection"],
|
|
1260
|
-
"requiredTags": ["untrusted"]
|
|
1261
|
-
}
|
|
1262
|
-
]
|
|
1263
|
-
}
|
|
1264
|
-
},
|
|
1265
|
-
"marsdb.Collection.prototype.find": {
|
|
1266
|
-
"tested": "track-order",
|
|
1267
|
-
"type": "dataflow",
|
|
1268
|
-
"enabled": true,
|
|
1269
|
-
"stackTrustedLibs": [],
|
|
1270
|
-
"conditions": {
|
|
1271
|
-
"mode": "or",
|
|
1272
|
-
"args": [
|
|
1273
|
-
{
|
|
1274
|
-
"index": 0,
|
|
1275
|
-
"depth": 5,
|
|
1276
|
-
"disallowedTags": ["string-type-checked"],
|
|
1277
|
-
"requiredTags": ["untrusted"]
|
|
1278
|
-
}
|
|
1279
|
-
]
|
|
1280
|
-
}
|
|
1281
|
-
},
|
|
1282
|
-
"marsdb.Collection.prototype.findOne": {
|
|
1283
|
-
"type": "dataflow",
|
|
1284
|
-
"enabled": true,
|
|
1285
|
-
"stackTrustedLibs": [],
|
|
1286
|
-
"conditions": {
|
|
1287
|
-
"mode": "or",
|
|
1288
|
-
"args": [
|
|
1289
|
-
{
|
|
1290
|
-
"index": 0,
|
|
1291
|
-
"depth": 5,
|
|
1292
|
-
"disallowedTags": [],
|
|
1293
|
-
"requiredTags": ["untrusted"]
|
|
1294
|
-
}
|
|
1295
|
-
]
|
|
1296
|
-
}
|
|
1297
|
-
},
|
|
1298
|
-
"marsdb.Collection.prototype.update": {
|
|
1299
|
-
"type": "dataflow",
|
|
1300
|
-
"enabled": true,
|
|
1301
|
-
"stackTrustedLibs": [],
|
|
1302
|
-
"conditions": {
|
|
1303
|
-
"mode": "or",
|
|
1304
|
-
"args": [
|
|
1305
|
-
{
|
|
1306
|
-
"index": 0,
|
|
1307
|
-
"depth": 5,
|
|
1308
|
-
"disallowedTags": ["string-type-checked"],
|
|
1309
|
-
"requiredTags": ["untrusted"]
|
|
1310
|
-
},
|
|
1311
|
-
{
|
|
1312
|
-
"index": 1,
|
|
1313
|
-
"depth": 5,
|
|
1314
|
-
"disallowedTags": ["string-type-checked"],
|
|
1315
|
-
"requiredTags": ["untrusted"]
|
|
1316
|
-
}
|
|
1317
|
-
]
|
|
1318
|
-
}
|
|
1319
|
-
},
|
|
1320
|
-
"marsdb.Collection.prototype.insert": {
|
|
1321
|
-
"type": "dataflow",
|
|
1322
|
-
"enabled": true,
|
|
1323
|
-
"stackTrustedLibs": [],
|
|
1324
|
-
"conditions": {
|
|
1325
|
-
"mode": "or",
|
|
1326
|
-
"args": [
|
|
1327
|
-
{
|
|
1328
|
-
"index": 0,
|
|
1329
|
-
"depth": 5,
|
|
1330
|
-
"disallowedTags": ["string-type-checked"],
|
|
1331
|
-
"requiredTags": ["untrusted"]
|
|
1332
|
-
}
|
|
1333
|
-
]
|
|
1334
|
-
}
|
|
1335
|
-
},
|
|
1336
|
-
"rethinkdb.js": {
|
|
1337
|
-
"type": "dataflow",
|
|
1338
|
-
"enabled": true,
|
|
1339
|
-
"stackTrustedLibs": [],
|
|
1340
|
-
"conditions": {
|
|
1341
|
-
"mode": "or",
|
|
1342
|
-
"args": [
|
|
1343
|
-
{
|
|
1344
|
-
"index": 0,
|
|
1345
|
-
"disallowedTags": [],
|
|
1346
|
-
"requiredTags": ["untrusted"]
|
|
1347
|
-
}
|
|
1348
|
-
]
|
|
1349
|
-
}
|
|
1350
|
-
}
|
|
1351
|
-
}
|
|
1352
|
-
},
|
|
1353
|
-
"unsafe-code-execution": {
|
|
1354
|
-
"enabled": true,
|
|
1355
|
-
"type": "hook",
|
|
1356
|
-
"sinks": {
|
|
1357
|
-
"Function": {
|
|
1358
|
-
"type": "dataflow",
|
|
1359
|
-
"enabled": true,
|
|
1360
|
-
"stackTrustedLibs": [],
|
|
1361
|
-
"conditions": {
|
|
1362
|
-
"mode": "or",
|
|
1363
|
-
"args": [
|
|
1364
|
-
{
|
|
1365
|
-
"index": 0,
|
|
1366
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen"],
|
|
1367
|
-
"requiredTags": ["untrusted"]
|
|
1368
|
-
}
|
|
1369
|
-
]
|
|
1370
|
-
}
|
|
1371
|
-
},
|
|
1372
|
-
"eval": {
|
|
1373
|
-
"type": "dataflow",
|
|
1374
|
-
"enabled": true,
|
|
1375
|
-
"stackTrustedLibs": [],
|
|
1376
|
-
"conditions": {
|
|
1377
|
-
"mode": "or",
|
|
1378
|
-
"args": [
|
|
1379
|
-
{
|
|
1380
|
-
"index": 0,
|
|
1381
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen"],
|
|
1382
|
-
"requiredTags": ["untrusted"]
|
|
1383
|
-
}
|
|
1384
|
-
]
|
|
1385
|
-
}
|
|
1386
|
-
},
|
|
1387
|
-
"notevil": {
|
|
1388
|
-
"hookPhase": "pre",
|
|
1389
|
-
"type": "dataflow",
|
|
1390
|
-
"enabled": true,
|
|
1391
|
-
"conditions": {
|
|
1392
|
-
"mode": "or",
|
|
1393
|
-
"args": [
|
|
1394
|
-
{
|
|
1395
|
-
"index": 0,
|
|
1396
|
-
"depth": 1,
|
|
1397
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen"],
|
|
1398
|
-
"requiredTags": ["untrusted"]
|
|
1399
|
-
}
|
|
1400
|
-
]
|
|
1401
|
-
}
|
|
1402
|
-
},
|
|
1403
|
-
"vm.runInContext": {
|
|
1404
|
-
"hookPhase": "pre",
|
|
1405
|
-
"type": "dataflow",
|
|
1406
|
-
"enabled": true,
|
|
1407
|
-
"stackTrustedLibs": [],
|
|
1408
|
-
"conditions": {
|
|
1409
|
-
"mode": "or",
|
|
1410
|
-
"args": [
|
|
1411
|
-
{
|
|
1412
|
-
"index": 0,
|
|
1413
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen"],
|
|
1414
|
-
"requiredTags": ["untrusted"]
|
|
1415
|
-
}
|
|
1416
|
-
]
|
|
1417
|
-
}
|
|
1418
|
-
},
|
|
1419
|
-
"vm.runInNewContext": {
|
|
1420
|
-
"hookPhase": "pre",
|
|
1421
|
-
"type": "dataflow",
|
|
1422
|
-
"enabled": true,
|
|
1423
|
-
"stackTrustedLibs": [],
|
|
1424
|
-
"conditions": {
|
|
1425
|
-
"mode": "or",
|
|
1426
|
-
"args": [
|
|
1427
|
-
{
|
|
1428
|
-
"index": 0,
|
|
1429
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen"],
|
|
1430
|
-
"requiredTags": ["untrusted"]
|
|
1431
|
-
}
|
|
1432
|
-
]
|
|
1433
|
-
}
|
|
1434
|
-
},
|
|
1435
|
-
"vm.runInThisContext": {
|
|
1436
|
-
"hookPhase": "pre",
|
|
1437
|
-
"type": "dataflow",
|
|
1438
|
-
"enabled": true,
|
|
1439
|
-
"stackTrustedLibs": [],
|
|
1440
|
-
"conditions": {
|
|
1441
|
-
"mode": "or",
|
|
1442
|
-
"args": [
|
|
1443
|
-
{
|
|
1444
|
-
"index": 0,
|
|
1445
|
-
"disallowedTags": ["limited-chars", "alphanum-space-hyphen"],
|
|
1446
|
-
"requiredTags": ["untrusted"]
|
|
1447
|
-
}
|
|
1448
|
-
]
|
|
1449
|
-
}
|
|
1450
|
-
}
|
|
1451
|
-
}
|
|
1452
|
-
},
|
|
1453
|
-
"reflected-xss_hapi16": {
|
|
1454
|
-
"enabled": true,
|
|
1455
|
-
"type": "http",
|
|
1456
|
-
"provider": "./sinks/hapi-16-xss"
|
|
1457
|
-
},
|
|
1458
|
-
"reflected-xss_dustjs-linkedin": {
|
|
1459
|
-
"enabled": true,
|
|
1460
|
-
"type": "http",
|
|
1461
|
-
"provider": "./sinks/dustjs-linkedin-xss"
|
|
1462
|
-
},
|
|
1463
|
-
"nosql-injection-rethinkdb": {
|
|
1464
|
-
"enabled": true,
|
|
1465
|
-
"type": "http",
|
|
1466
|
-
"provider": "./sinks/rethinkdb-nosql-injection"
|
|
1467
|
-
},
|
|
1468
|
-
"reflected-xss": {
|
|
1469
|
-
"enabled": true,
|
|
1470
|
-
"type": "hook",
|
|
1471
|
-
"sinks": {
|
|
1472
|
-
"express.response.send": {
|
|
1473
|
-
"type": "dataflow",
|
|
1474
|
-
"enabled": true,
|
|
1475
|
-
"stackTrustedLibs": [],
|
|
1476
|
-
"conditions": {
|
|
1477
|
-
"mode": "or",
|
|
1478
|
-
"args": [
|
|
1479
|
-
{
|
|
1480
|
-
"index": 0,
|
|
1481
|
-
"disallowedTags": [
|
|
1482
|
-
"cookie",
|
|
1483
|
-
"header",
|
|
1484
|
-
"limited-chars",
|
|
1485
|
-
"alphanum-space-hyphen",
|
|
1486
|
-
"html-encoded",
|
|
1487
|
-
"sql-encoded",
|
|
1488
|
-
"url-encoded",
|
|
1489
|
-
"weak-url-encoded"
|
|
1490
|
-
],
|
|
1491
|
-
"requiredTags": ["untrusted"]
|
|
1492
|
-
}
|
|
1493
|
-
]
|
|
1494
|
-
}
|
|
1495
|
-
},
|
|
1496
|
-
"express.response.push": {
|
|
1497
|
-
"type": "dataflow",
|
|
1498
|
-
"enabled": true,
|
|
1499
|
-
"stackTrustedLibs": [],
|
|
1500
|
-
"conditions": {
|
|
1501
|
-
"mode": "or",
|
|
1502
|
-
"args": [
|
|
1503
|
-
{
|
|
1504
|
-
"index": 0,
|
|
1505
|
-
"disallowedTags": [
|
|
1506
|
-
"cookie",
|
|
1507
|
-
"header",
|
|
1508
|
-
"limited-chars",
|
|
1509
|
-
"alphanum-space-hyphen",
|
|
1510
|
-
"html-encoded",
|
|
1511
|
-
"sql-encoded",
|
|
1512
|
-
"url-encoded",
|
|
1513
|
-
"weak-url-encoded"
|
|
1514
|
-
],
|
|
1515
|
-
"requiredTags": ["untrusted"]
|
|
1516
|
-
}
|
|
1517
|
-
]
|
|
1518
|
-
}
|
|
1519
|
-
},
|
|
1520
|
-
"swig.compile": {
|
|
1521
|
-
"type": "dataflow",
|
|
1522
|
-
"enabled": true,
|
|
1523
|
-
"stackTrustedLibs": [],
|
|
1524
|
-
"conditions": {
|
|
1525
|
-
"mode": "or",
|
|
1526
|
-
"args": [
|
|
1527
|
-
{
|
|
1528
|
-
"index": 1,
|
|
1529
|
-
"depth": 1,
|
|
1530
|
-
"disallowedTags": [
|
|
1531
|
-
"cookie",
|
|
1532
|
-
"header",
|
|
1533
|
-
"limited-chars",
|
|
1534
|
-
"alphanum-space-hyphen",
|
|
1535
|
-
"html-encoded",
|
|
1536
|
-
"sql-encoded",
|
|
1537
|
-
"url-encoded",
|
|
1538
|
-
"weak-url-encoded"
|
|
1539
|
-
],
|
|
1540
|
-
"requiredTags": ["untrusted"]
|
|
1541
|
-
}
|
|
1542
|
-
]
|
|
1543
|
-
}
|
|
1544
|
-
}
|
|
1545
|
-
}
|
|
1546
|
-
},
|
|
1547
|
-
"cmd-injection": {
|
|
1548
|
-
"enabled": true,
|
|
1549
|
-
"type": "hook",
|
|
1550
|
-
"sinks": {
|
|
1551
|
-
"child_process.spawnSync": {
|
|
1552
|
-
"hookPhase": "pre",
|
|
1553
|
-
"type": "dataflow",
|
|
1554
|
-
"enabled": true,
|
|
1555
|
-
"stackTrustedLibs": [],
|
|
1556
|
-
"conditions": {
|
|
1557
|
-
"mode": "or",
|
|
1558
|
-
"args": [
|
|
1559
|
-
{
|
|
1560
|
-
"index": 0,
|
|
1561
|
-
"disallowedTags": [],
|
|
1562
|
-
"requiredTags": ["untrusted"]
|
|
1563
|
-
}
|
|
1564
|
-
]
|
|
1565
|
-
}
|
|
1566
|
-
},
|
|
1567
|
-
"child_process.spawn": {
|
|
1568
|
-
"type": "dataflow",
|
|
1569
|
-
"enabled": true,
|
|
1570
|
-
"stackTrustedLibs": [],
|
|
1571
|
-
"conditions": {
|
|
1572
|
-
"mode": "or",
|
|
1573
|
-
"args": [
|
|
1574
|
-
{
|
|
1575
|
-
"index": 0,
|
|
1576
|
-
"disallowedTags": [],
|
|
1577
|
-
"requiredTags": ["untrusted"]
|
|
1578
|
-
}
|
|
1579
|
-
]
|
|
1580
|
-
}
|
|
1581
|
-
},
|
|
1582
|
-
"child_process.exec": {
|
|
1583
|
-
"type": "dataflow",
|
|
1584
|
-
"enabled": true,
|
|
1585
|
-
"stackTrustedLibs": [],
|
|
1586
|
-
"conditions": {
|
|
1587
|
-
"mode": "or",
|
|
1588
|
-
"args": [
|
|
1589
|
-
{
|
|
1590
|
-
"index": 0,
|
|
1591
|
-
"disallowedTags": [],
|
|
1592
|
-
"requiredTags": ["untrusted"]
|
|
1593
|
-
}
|
|
1594
|
-
]
|
|
1595
|
-
}
|
|
1596
|
-
},
|
|
1597
|
-
"child_process.execSync": {
|
|
1598
|
-
"hookPhase": "pre",
|
|
1599
|
-
"type": "dataflow",
|
|
1600
|
-
"enabled": true,
|
|
1601
|
-
"stackTrustedLibs": [],
|
|
1602
|
-
"conditions": {
|
|
1603
|
-
"mode": "or",
|
|
1604
|
-
"args": [
|
|
1605
|
-
{
|
|
1606
|
-
"index": 0,
|
|
1607
|
-
"disallowedTags": [],
|
|
1608
|
-
"requiredTags": ["untrusted"]
|
|
1609
|
-
}
|
|
1610
|
-
]
|
|
1611
|
-
}
|
|
1612
|
-
}
|
|
1613
|
-
}
|
|
1614
|
-
},
|
|
1615
|
-
"xpath-injection": {
|
|
1616
|
-
"enabled": true,
|
|
1617
|
-
"type": "hook",
|
|
1618
|
-
"sinks": {
|
|
1619
|
-
"xpath.select": {
|
|
1620
|
-
"type": "dataflow",
|
|
1621
|
-
"enabled": true,
|
|
1622
|
-
"conditions": {
|
|
1623
|
-
"mode": "or",
|
|
1624
|
-
"args": [
|
|
1625
|
-
{
|
|
1626
|
-
"index": 0,
|
|
1627
|
-
"disallowedTags": ["url-encoded", "limited-chars", "alphanum-space-hyphen"],
|
|
1628
|
-
"requiredTags": ["untrusted"]
|
|
1629
|
-
}
|
|
1630
|
-
]
|
|
1631
|
-
}
|
|
1632
|
-
}
|
|
1633
|
-
}
|
|
1634
|
-
},
|
|
1635
|
-
"xxe": {
|
|
1636
|
-
"enabled": true,
|
|
1637
|
-
"type": "hook",
|
|
1638
|
-
"sinks": {
|
|
1639
|
-
"libxmljs.parseXmlString": {
|
|
1640
|
-
"type": "dataflow",
|
|
1641
|
-
"enabled": true,
|
|
1642
|
-
"provider": "./sinks/libxmljs-xxe.js"
|
|
1643
|
-
},
|
|
1644
|
-
"libxmljs.parseXml": {
|
|
1645
|
-
"type": "dataflow",
|
|
1646
|
-
"enabled": true,
|
|
1647
|
-
"provider": "./sinks/libxmljs-xxe.js"
|
|
1648
|
-
},
|
|
1649
|
-
"libxmljs2.parseXmlString": {
|
|
1650
|
-
"type": "dataflow",
|
|
1651
|
-
"enabled": true,
|
|
1652
|
-
"provider": "./sinks/libxmljs-xxe.js"
|
|
1653
|
-
},
|
|
1654
|
-
"libxmljs2.parseXml": {
|
|
1655
|
-
"type": "dataflow",
|
|
1656
|
-
"enabled": true,
|
|
1657
|
-
"provider": "./sinks/libxmljs-xxe.js"
|
|
1658
|
-
}
|
|
1659
|
-
}
|
|
1660
|
-
},
|
|
1661
|
-
"untrusted-deserialization": {
|
|
1662
|
-
"enabled": true,
|
|
1663
|
-
"type": "hook",
|
|
1664
|
-
"sinks": {
|
|
1665
|
-
"node-serialize.unserialize": {
|
|
1666
|
-
"type": "dataflow",
|
|
1667
|
-
"enabled": true,
|
|
1668
|
-
"conditions": {
|
|
1669
|
-
"mode": "or",
|
|
1670
|
-
"args": [
|
|
1671
|
-
{
|
|
1672
|
-
"index": 0,
|
|
1673
|
-
"disallowedTags": [],
|
|
1674
|
-
"requiredTags": ["untrusted"]
|
|
1675
|
-
}
|
|
1676
|
-
]
|
|
1677
|
-
}
|
|
1678
|
-
}
|
|
1679
|
-
}
|
|
1680
|
-
}
|
|
1681
|
-
}
|
|
1682
|
-
}
|