@contrast/agent 4.35.0 → 4.36.1

package/lib/assess/policy/rules.json

@@ -881,7 +881,8 @@
                 "requiredTags": ["untrusted"]
               }
             ]
-          }
+          },
+          "stackTrustedLibs": ["i18n"]
         },
         "fs.readFile": {
           "type": "dataflow",
@@ -939,7 +940,8 @@
                 "requiredTags": ["untrusted"]
               }
             ]
-          }
+          },
+          "stackTrustedLibs": ["i18n"]
         },
         "fs.open": {
           "type": "dataflow",
@@ -998,7 +1000,8 @@
                 "requiredTags": ["untrusted"]
               }
             ]
-          }
+          },
+          "stackTrustedLibs": ["i18n"]
         },
         "fs.readlink": {
           "type": "dataflow",

package/lib/assess/propagators/string-prototype-split.js

@@ -46,11 +46,7 @@ function shouldSkip(data) {
 
   // split just returns the original string
   // if not passed an argument
-  if (data.args.length === 0) {
-    return true;
-  }
-
-  return false;
+  return data.args.length === 0;
 }
 
 /**
@@ -111,6 +107,10 @@ module.exports.handle = {
     } else {
       for (let i = 0; i < result.length; i++) {
         const stringPart = result[i];
+        if (!stringPart) {
+          continue;
+        }
+
         const stringPartLength = stringPart.length - 1;
 
         let stringStart = origString.indexOf(stringPart);
@@ -130,10 +130,6 @@ module.exports.handle = {
 
         indexOfFounds.add(stringStart + stringPartLength);
 
-        if (stringPart.length === 0) {
-          continue;
-        }
-
         const newTagRanges = [];
         oldTagRanges.forEach((tag) => {
           const relation = new TagRange(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/agent",
-  "version": "4.35.0",
+  "version": "4.36.1",
   "description": "Node.js security instrumentation by Contrast Security",
   "keywords": [
     "security",