@contrast/agent 4.36.1 → 4.36.2

package/lib/assess/response-scanning/headers/xxssprotection-header-disabled.js

@@ -12,6 +12,8 @@ Copyright: 2023 Contrast Security, Inc
   engineered, modified, repackaged, sold, redistributed or otherwise used in a
   way not consistent with the End User License Agreement.
 */
+'use strict';
+
 const agentEmitter = require('../../../agent-emitter');
 
 const RULE_ID = 'xxssprotection-header-disabled';
@@ -23,14 +25,11 @@ module.exports = ({ common }) => {
   rule.check = function check(responseHeaders) {
     const header = responseHeaders[HEADER_NAME];
 
-    // This header is set by default, so `header` should always be present.
-    if (header && header.startsWith('1')) {
-      return;
+    if (header && !header.startsWith('1')) {
+      return {
+        data: header
+      };
     }
-
-    return {
-      data: header
-    };
   };
 
   rule.handle = function handle() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/agent",
-  "version": "4.36.1",
+  "version": "4.36.2",
   "description": "Node.js security instrumentation by Contrast Security",
   "keywords": [
     "security",