@contrast/assess 1.1.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/lib/index.js +3 -0
  2. package/package.json +3 -3
  3. package/coverage/lcov-report/base.css +0 -224
  4. package/coverage/lcov-report/block-navigation.js +0 -87
  5. package/coverage/lcov-report/favicon.png +0 -0
  6. package/coverage/lcov-report/index.html +0 -266
  7. package/coverage/lcov-report/lib/dataflow/common.js.html +0 -154
  8. package/coverage/lcov-report/lib/dataflow/event-factory.js.html +0 -598
  9. package/coverage/lcov-report/lib/dataflow/index.html +0 -191
  10. package/coverage/lcov-report/lib/dataflow/index.js.html +0 -190
  11. package/coverage/lcov-report/lib/dataflow/propagation/common.js.html +0 -145
  12. package/coverage/lcov-report/lib/dataflow/propagation/index.html +0 -131
  13. package/coverage/lcov-report/lib/dataflow/propagation/index.js.html +0 -190
  14. package/coverage/lcov-report/lib/dataflow/propagation/install/contrast-methods/index.html +0 -131
  15. package/coverage/lcov-report/lib/dataflow/propagation/install/contrast-methods/index.js.html +0 -184
  16. package/coverage/lcov-report/lib/dataflow/propagation/install/contrast-methods/plus.js.html +0 -397
  17. package/coverage/lcov-report/lib/dataflow/propagation/install/string/concat.js.html +0 -478
  18. package/coverage/lcov-report/lib/dataflow/propagation/install/string/index.html +0 -176
  19. package/coverage/lcov-report/lib/dataflow/propagation/install/string/index.js.html +0 -202
  20. package/coverage/lcov-report/lib/dataflow/propagation/install/string/replace.js.html +0 -496
  21. package/coverage/lcov-report/lib/dataflow/propagation/install/string/substring.js.html +0 -415
  22. package/coverage/lcov-report/lib/dataflow/propagation/install/string/trim.js.html +0 -403
  23. package/coverage/lcov-report/lib/dataflow/signatures.js.html +0 -5923
  24. package/coverage/lcov-report/lib/dataflow/sinks/common.js.html +0 -145
  25. package/coverage/lcov-report/lib/dataflow/sinks/index.html +0 -131
  26. package/coverage/lcov-report/lib/dataflow/sinks/index.js.html +0 -211
  27. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/index.html +0 -146
  28. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/index.js.html +0 -172
  29. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/unvalidated-redirect.js.html +0 -319
  30. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/xss.js.html +0 -721
  31. package/coverage/lcov-report/lib/dataflow/sinks/install/http.js.html +0 -340
  32. package/coverage/lcov-report/lib/dataflow/sinks/install/index.html +0 -116
  33. package/coverage/lcov-report/lib/dataflow/sources/common.js.html +0 -145
  34. package/coverage/lcov-report/lib/dataflow/sources/index.html +0 -131
  35. package/coverage/lcov-report/lib/dataflow/sources/index.js.html +0 -226
  36. package/coverage/lcov-report/lib/dataflow/sources/install/fastify.js.html +0 -379
  37. package/coverage/lcov-report/lib/dataflow/sources/install/http.js.html +0 -502
  38. package/coverage/lcov-report/lib/dataflow/sources/install/index.html +0 -146
  39. package/coverage/lcov-report/lib/dataflow/sources/install/qs.js.html +0 -322
  40. package/coverage/lcov-report/lib/dataflow/tag-utils.js.html +0 -418
  41. package/coverage/lcov-report/lib/dataflow/tracker.js.html +0 -466
  42. package/coverage/lcov-report/lib/dataflow/utils/index.html +0 -116
  43. package/coverage/lcov-report/lib/dataflow/utils/is-vulnerable.js.html +0 -424
  44. package/coverage/lcov-report/lib/index.html +0 -116
  45. package/coverage/lcov-report/lib/index.js.html +0 -193
  46. package/coverage/lcov-report/prettify.css +0 -1
  47. package/coverage/lcov-report/prettify.js +0 -2
  48. package/coverage/lcov-report/sort-arrow-sprite.png +0 -0
  49. package/coverage/lcov-report/sorter.js +0 -196
  50. package/coverage/lcov.info +0 -4856
  51. package/coverage/tmp/coverage-9548-1675168551025-0.json +0 -1
  52. package/coverage/tmp/coverage-9551-1675168550963-0.json +0 -1
  53. package/coverage/tmp/coverage-9552-1675168550969-0.json +0 -1
  54. package/coverage/tmp/coverage-9553-1675168550970-0.json +0 -1
  55. package/coverage/tmp/coverage-9554-1675168550962-0.json +0 -1
  56. package/coverage/tmp/coverage-9555-1675168550965-0.json +0 -1
  57. package/coverage/tmp/coverage-9556-1675168550964-0.json +0 -1
  58. package/coverage/tmp/coverage-9557-1675168550969-0.json +0 -1
  59. package/coverage/tmp/coverage-9558-1675168550964-0.json +0 -1
  60. package/coverage/tmp/coverage-9559-1675168550971-0.json +0 -1
package/coverage/lcov-report/lib/dataflow/sources/install/http.js.html DELETED
@@ -1,502 +0,0 @@
1
-
2
- <!doctype html>
3
- <html lang="en">
4
-
5
- <head>
6
- <title>Code coverage report for lib/dataflow/sources/install/http.js</title>
7
- <meta charset="utf-8" />
8
- <link rel="stylesheet" href="../../../../prettify.css" />
9
- <link rel="stylesheet" href="../../../../base.css" />
10
- <link rel="shortcut icon" type="image/x-icon" href="../../../../favicon.png" />
11
- <meta name="viewport" content="width=device-width, initial-scale=1" />
12
- <style type='text/css'>
13
- .coverage-summary .sorter {
14
- background-image: url(../../../../sort-arrow-sprite.png);
15
- }
16
- </style>
17
- </head>
18
-
19
- <body>
20
- <div class='wrapper'>
21
- <div class='pad1'>
22
- <h1><a href="../../../../index.html">All files</a> / <a href="index.html">lib/dataflow/sources/install</a> http.js</h1>
23
- <div class='clearfix'>
24
-
25
- <div class='fl pad1y space-right2'>
26
- <span class="strong">30.93% </span>
27
- <span class="quiet">Statements</span>
28
- <span class='fraction'>43/139</span>
29
- </div>
30
-
31
-
32
- <div class='fl pad1y space-right2'>
33
- <span class="strong">100% </span>
34
- <span class="quiet">Branches</span>
35
- <span class='fraction'>2/2</span>
36
- </div>
37
-
38
-
39
- <div class='fl pad1y space-right2'>
40
- <span class="strong">25% </span>
41
- <span class="quiet">Functions</span>
42
- <span class='fraction'>1/4</span>
43
- </div>
44
-
45
-
46
- <div class='fl pad1y space-right2'>
47
- <span class="strong">30.93% </span>
48
- <span class="quiet">Lines</span>
49
- <span class='fraction'>43/139</span>
50
- </div>
51
-
52
-
53
- </div>
54
- <p class="quiet">
55
- Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
56
- </p>
57
- <template id="filterTemplate">
58
- <div class="quiet">
59
- Filter:
60
- <input oninput="onInput()" type="search" id="fileSearch">
61
- </div>
62
- </template>
63
- </div>
64
- <div class='status-line low'></div>
65
- <pre><table class="coverage">
66
- <tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
67
- <a name='L2'></a><a href='#L2'>2</a>
68
- <a name='L3'></a><a href='#L3'>3</a>
69
- <a name='L4'></a><a href='#L4'>4</a>
70
- <a name='L5'></a><a href='#L5'>5</a>
71
- <a name='L6'></a><a href='#L6'>6</a>
72
- <a name='L7'></a><a href='#L7'>7</a>
73
- <a name='L8'></a><a href='#L8'>8</a>
74
- <a name='L9'></a><a href='#L9'>9</a>
75
- <a name='L10'></a><a href='#L10'>10</a>
76
- <a name='L11'></a><a href='#L11'>11</a>
77
- <a name='L12'></a><a href='#L12'>12</a>
78
- <a name='L13'></a><a href='#L13'>13</a>
79
- <a name='L14'></a><a href='#L14'>14</a>
80
- <a name='L15'></a><a href='#L15'>15</a>
81
- <a name='L16'></a><a href='#L16'>16</a>
82
- <a name='L17'></a><a href='#L17'>17</a>
83
- <a name='L18'></a><a href='#L18'>18</a>
84
- <a name='L19'></a><a href='#L19'>19</a>
85
- <a name='L20'></a><a href='#L20'>20</a>
86
- <a name='L21'></a><a href='#L21'>21</a>
87
- <a name='L22'></a><a href='#L22'>22</a>
88
- <a name='L23'></a><a href='#L23'>23</a>
89
- <a name='L24'></a><a href='#L24'>24</a>
90
- <a name='L25'></a><a href='#L25'>25</a>
91
- <a name='L26'></a><a href='#L26'>26</a>
92
- <a name='L27'></a><a href='#L27'>27</a>
93
- <a name='L28'></a><a href='#L28'>28</a>
94
- <a name='L29'></a><a href='#L29'>29</a>
95
- <a name='L30'></a><a href='#L30'>30</a>
96
- <a name='L31'></a><a href='#L31'>31</a>
97
- <a name='L32'></a><a href='#L32'>32</a>
98
- <a name='L33'></a><a href='#L33'>33</a>
99
- <a name='L34'></a><a href='#L34'>34</a>
100
- <a name='L35'></a><a href='#L35'>35</a>
101
- <a name='L36'></a><a href='#L36'>36</a>
102
- <a name='L37'></a><a href='#L37'>37</a>
103
- <a name='L38'></a><a href='#L38'>38</a>
104
- <a name='L39'></a><a href='#L39'>39</a>
105
- <a name='L40'></a><a href='#L40'>40</a>
106
- <a name='L41'></a><a href='#L41'>41</a>
107
- <a name='L42'></a><a href='#L42'>42</a>
108
- <a name='L43'></a><a href='#L43'>43</a>
109
- <a name='L44'></a><a href='#L44'>44</a>
110
- <a name='L45'></a><a href='#L45'>45</a>
111
- <a name='L46'></a><a href='#L46'>46</a>
112
- <a name='L47'></a><a href='#L47'>47</a>
113
- <a name='L48'></a><a href='#L48'>48</a>
114
- <a name='L49'></a><a href='#L49'>49</a>
115
- <a name='L50'></a><a href='#L50'>50</a>
116
- <a name='L51'></a><a href='#L51'>51</a>
117
- <a name='L52'></a><a href='#L52'>52</a>
118
- <a name='L53'></a><a href='#L53'>53</a>
119
- <a name='L54'></a><a href='#L54'>54</a>
120
- <a name='L55'></a><a href='#L55'>55</a>
121
- <a name='L56'></a><a href='#L56'>56</a>
122
- <a name='L57'></a><a href='#L57'>57</a>
123
- <a name='L58'></a><a href='#L58'>58</a>
124
- <a name='L59'></a><a href='#L59'>59</a>
125
- <a name='L60'></a><a href='#L60'>60</a>
126
- <a name='L61'></a><a href='#L61'>61</a>
127
- <a name='L62'></a><a href='#L62'>62</a>
128
- <a name='L63'></a><a href='#L63'>63</a>
129
- <a name='L64'></a><a href='#L64'>64</a>
130
- <a name='L65'></a><a href='#L65'>65</a>
131
- <a name='L66'></a><a href='#L66'>66</a>
132
- <a name='L67'></a><a href='#L67'>67</a>
133
- <a name='L68'></a><a href='#L68'>68</a>
134
- <a name='L69'></a><a href='#L69'>69</a>
135
- <a name='L70'></a><a href='#L70'>70</a>
136
- <a name='L71'></a><a href='#L71'>71</a>
137
- <a name='L72'></a><a href='#L72'>72</a>
138
- <a name='L73'></a><a href='#L73'>73</a>
139
- <a name='L74'></a><a href='#L74'>74</a>
140
- <a name='L75'></a><a href='#L75'>75</a>
141
- <a name='L76'></a><a href='#L76'>76</a>
142
- <a name='L77'></a><a href='#L77'>77</a>
143
- <a name='L78'></a><a href='#L78'>78</a>
144
- <a name='L79'></a><a href='#L79'>79</a>
145
- <a name='L80'></a><a href='#L80'>80</a>
146
- <a name='L81'></a><a href='#L81'>81</a>
147
- <a name='L82'></a><a href='#L82'>82</a>
148
- <a name='L83'></a><a href='#L83'>83</a>
149
- <a name='L84'></a><a href='#L84'>84</a>
150
- <a name='L85'></a><a href='#L85'>85</a>
151
- <a name='L86'></a><a href='#L86'>86</a>
152
- <a name='L87'></a><a href='#L87'>87</a>
153
- <a name='L88'></a><a href='#L88'>88</a>
154
- <a name='L89'></a><a href='#L89'>89</a>
155
- <a name='L90'></a><a href='#L90'>90</a>
156
- <a name='L91'></a><a href='#L91'>91</a>
157
- <a name='L92'></a><a href='#L92'>92</a>
158
- <a name='L93'></a><a href='#L93'>93</a>
159
- <a name='L94'></a><a href='#L94'>94</a>
160
- <a name='L95'></a><a href='#L95'>95</a>
161
- <a name='L96'></a><a href='#L96'>96</a>
162
- <a name='L97'></a><a href='#L97'>97</a>
163
- <a name='L98'></a><a href='#L98'>98</a>
164
- <a name='L99'></a><a href='#L99'>99</a>
165
- <a name='L100'></a><a href='#L100'>100</a>
166
- <a name='L101'></a><a href='#L101'>101</a>
167
- <a name='L102'></a><a href='#L102'>102</a>
168
- <a name='L103'></a><a href='#L103'>103</a>
169
- <a name='L104'></a><a href='#L104'>104</a>
170
- <a name='L105'></a><a href='#L105'>105</a>
171
- <a name='L106'></a><a href='#L106'>106</a>
172
- <a name='L107'></a><a href='#L107'>107</a>
173
- <a name='L108'></a><a href='#L108'>108</a>
174
- <a name='L109'></a><a href='#L109'>109</a>
175
- <a name='L110'></a><a href='#L110'>110</a>
176
- <a name='L111'></a><a href='#L111'>111</a>
177
- <a name='L112'></a><a href='#L112'>112</a>
178
- <a name='L113'></a><a href='#L113'>113</a>
179
- <a name='L114'></a><a href='#L114'>114</a>
180
- <a name='L115'></a><a href='#L115'>115</a>
181
- <a name='L116'></a><a href='#L116'>116</a>
182
- <a name='L117'></a><a href='#L117'>117</a>
183
- <a name='L118'></a><a href='#L118'>118</a>
184
- <a name='L119'></a><a href='#L119'>119</a>
185
- <a name='L120'></a><a href='#L120'>120</a>
186
- <a name='L121'></a><a href='#L121'>121</a>
187
- <a name='L122'></a><a href='#L122'>122</a>
188
- <a name='L123'></a><a href='#L123'>123</a>
189
- <a name='L124'></a><a href='#L124'>124</a>
190
- <a name='L125'></a><a href='#L125'>125</a>
191
- <a name='L126'></a><a href='#L126'>126</a>
192
- <a name='L127'></a><a href='#L127'>127</a>
193
- <a name='L128'></a><a href='#L128'>128</a>
194
- <a name='L129'></a><a href='#L129'>129</a>
195
- <a name='L130'></a><a href='#L130'>130</a>
196
- <a name='L131'></a><a href='#L131'>131</a>
197
- <a name='L132'></a><a href='#L132'>132</a>
198
- <a name='L133'></a><a href='#L133'>133</a>
199
- <a name='L134'></a><a href='#L134'>134</a>
200
- <a name='L135'></a><a href='#L135'>135</a>
201
- <a name='L136'></a><a href='#L136'>136</a>
202
- <a name='L137'></a><a href='#L137'>137</a>
203
- <a name='L138'></a><a href='#L138'>138</a>
204
- <a name='L139'></a><a href='#L139'>139</a>
205
- <a name='L140'></a><a href='#L140'>140</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">2x</span>
206
- <span class="cline-any cline-yes">2x</span>
207
- <span class="cline-any cline-yes">2x</span>
208
- <span class="cline-any cline-yes">2x</span>
209
- <span class="cline-any cline-yes">2x</span>
210
- <span class="cline-any cline-yes">2x</span>
211
- <span class="cline-any cline-yes">2x</span>
212
- <span class="cline-any cline-yes">2x</span>
213
- <span class="cline-any cline-yes">2x</span>
214
- <span class="cline-any cline-yes">2x</span>
215
- <span class="cline-any cline-yes">2x</span>
216
- <span class="cline-any cline-yes">2x</span>
217
- <span class="cline-any cline-yes">2x</span>
218
- <span class="cline-any cline-yes">2x</span>
219
- <span class="cline-any cline-yes">2x</span>
220
- <span class="cline-any cline-yes">2x</span>
221
- <span class="cline-any cline-yes">2x</span>
222
- <span class="cline-any cline-yes">2x</span>
223
- <span class="cline-any cline-yes">2x</span>
224
- <span class="cline-any cline-yes">2x</span>
225
- <span class="cline-any cline-yes">2x</span>
226
- <span class="cline-any cline-yes">7x</span>
227
- <span class="cline-any cline-yes">7x</span>
228
- <span class="cline-any cline-yes">7x</span>
229
- <span class="cline-any cline-yes">7x</span>
230
- <span class="cline-any cline-yes">7x</span>
231
- <span class="cline-any cline-yes">7x</span>
232
- <span class="cline-any cline-yes">7x</span>
233
- <span class="cline-any cline-yes">7x</span>
234
- <span class="cline-any cline-yes">7x</span>
235
- <span class="cline-any cline-yes">7x</span>
236
- <span class="cline-any cline-yes">7x</span>
237
- <span class="cline-any cline-yes">7x</span>
238
- <span class="cline-any cline-no">&nbsp;</span>
239
- <span class="cline-any cline-no">&nbsp;</span>
240
- <span class="cline-any cline-no">&nbsp;</span>
241
- <span class="cline-any cline-no">&nbsp;</span>
242
- <span class="cline-any cline-no">&nbsp;</span>
243
- <span class="cline-any cline-no">&nbsp;</span>
244
- <span class="cline-any cline-no">&nbsp;</span>
245
- <span class="cline-any cline-no">&nbsp;</span>
246
- <span class="cline-any cline-no">&nbsp;</span>
247
- <span class="cline-any cline-no">&nbsp;</span>
248
- <span class="cline-any cline-no">&nbsp;</span>
249
- <span class="cline-any cline-no">&nbsp;</span>
250
- <span class="cline-any cline-no">&nbsp;</span>
251
- <span class="cline-any cline-no">&nbsp;</span>
252
- <span class="cline-any cline-no">&nbsp;</span>
253
- <span class="cline-any cline-no">&nbsp;</span>
254
- <span class="cline-any cline-no">&nbsp;</span>
255
- <span class="cline-any cline-no">&nbsp;</span>
256
- <span class="cline-any cline-no">&nbsp;</span>
257
- <span class="cline-any cline-no">&nbsp;</span>
258
- <span class="cline-any cline-no">&nbsp;</span>
259
- <span class="cline-any cline-no">&nbsp;</span>
260
- <span class="cline-any cline-no">&nbsp;</span>
261
- <span class="cline-any cline-no">&nbsp;</span>
262
- <span class="cline-any cline-no">&nbsp;</span>
263
- <span class="cline-any cline-no">&nbsp;</span>
264
- <span class="cline-any cline-no">&nbsp;</span>
265
- <span class="cline-any cline-no">&nbsp;</span>
266
- <span class="cline-any cline-no">&nbsp;</span>
267
- <span class="cline-any cline-no">&nbsp;</span>
268
- <span class="cline-any cline-no">&nbsp;</span>
269
- <span class="cline-any cline-no">&nbsp;</span>
270
- <span class="cline-any cline-no">&nbsp;</span>
271
- <span class="cline-any cline-no">&nbsp;</span>
272
- <span class="cline-any cline-no">&nbsp;</span>
273
- <span class="cline-any cline-no">&nbsp;</span>
274
- <span class="cline-any cline-no">&nbsp;</span>
275
- <span class="cline-any cline-no">&nbsp;</span>
276
- <span class="cline-any cline-no">&nbsp;</span>
277
- <span class="cline-any cline-no">&nbsp;</span>
278
- <span class="cline-any cline-no">&nbsp;</span>
279
- <span class="cline-any cline-no">&nbsp;</span>
280
- <span class="cline-any cline-no">&nbsp;</span>
281
- <span class="cline-any cline-no">&nbsp;</span>
282
- <span class="cline-any cline-no">&nbsp;</span>
283
- <span class="cline-any cline-no">&nbsp;</span>
284
- <span class="cline-any cline-no">&nbsp;</span>
285
- <span class="cline-any cline-no">&nbsp;</span>
286
- <span class="cline-any cline-no">&nbsp;</span>
287
- <span class="cline-any cline-no">&nbsp;</span>
288
- <span class="cline-any cline-no">&nbsp;</span>
289
- <span class="cline-any cline-no">&nbsp;</span>
290
- <span class="cline-any cline-no">&nbsp;</span>
291
- <span class="cline-any cline-no">&nbsp;</span>
292
- <span class="cline-any cline-yes">7x</span>
293
- <span class="cline-any cline-yes">7x</span>
294
- <span class="cline-any cline-no">&nbsp;</span>
295
- <span class="cline-any cline-no">&nbsp;</span>
296
- <span class="cline-any cline-no">&nbsp;</span>
297
- <span class="cline-any cline-no">&nbsp;</span>
298
- <span class="cline-any cline-no">&nbsp;</span>
299
- <span class="cline-any cline-no">&nbsp;</span>
300
- <span class="cline-any cline-no">&nbsp;</span>
301
- <span class="cline-any cline-no">&nbsp;</span>
302
- <span class="cline-any cline-no">&nbsp;</span>
303
- <span class="cline-any cline-no">&nbsp;</span>
304
- <span class="cline-any cline-no">&nbsp;</span>
305
- <span class="cline-any cline-no">&nbsp;</span>
306
- <span class="cline-any cline-no">&nbsp;</span>
307
- <span class="cline-any cline-no">&nbsp;</span>
308
- <span class="cline-any cline-no">&nbsp;</span>
309
- <span class="cline-any cline-no">&nbsp;</span>
310
- <span class="cline-any cline-no">&nbsp;</span>
311
- <span class="cline-any cline-no">&nbsp;</span>
312
- <span class="cline-any cline-no">&nbsp;</span>
313
- <span class="cline-any cline-no">&nbsp;</span>
314
- <span class="cline-any cline-no">&nbsp;</span>
315
- <span class="cline-any cline-no">&nbsp;</span>
316
- <span class="cline-any cline-no">&nbsp;</span>
317
- <span class="cline-any cline-no">&nbsp;</span>
318
- <span class="cline-any cline-no">&nbsp;</span>
319
- <span class="cline-any cline-no">&nbsp;</span>
320
- <span class="cline-any cline-no">&nbsp;</span>
321
- <span class="cline-any cline-no">&nbsp;</span>
322
- <span class="cline-any cline-no">&nbsp;</span>
323
- <span class="cline-any cline-no">&nbsp;</span>
324
- <span class="cline-any cline-no">&nbsp;</span>
325
- <span class="cline-any cline-no">&nbsp;</span>
326
- <span class="cline-any cline-no">&nbsp;</span>
327
- <span class="cline-any cline-no">&nbsp;</span>
328
- <span class="cline-any cline-no">&nbsp;</span>
329
- <span class="cline-any cline-no">&nbsp;</span>
330
- <span class="cline-any cline-no">&nbsp;</span>
331
- <span class="cline-any cline-no">&nbsp;</span>
332
- <span class="cline-any cline-no">&nbsp;</span>
333
- <span class="cline-any cline-no">&nbsp;</span>
334
- <span class="cline-any cline-yes">7x</span>
335
- <span class="cline-any cline-yes">7x</span>
336
- <span class="cline-any cline-no">&nbsp;</span>
337
- <span class="cline-any cline-no">&nbsp;</span>
338
- <span class="cline-any cline-yes">7x</span>
339
- <span class="cline-any cline-yes">7x</span>
340
- <span class="cline-any cline-yes">7x</span>
341
- <span class="cline-any cline-yes">7x</span>
342
- <span class="cline-any cline-yes">7x</span>
343
- <span class="cline-any cline-yes">2x</span>
344
- <span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js">/*
345
- * Copyright: 2022 Contrast Security, Inc
346
- * Contact: support@contrastsecurity.com
347
- * License: Commercial
348
- &nbsp;
349
- * NOTICE: This Software and the patented inventions embodied within may only be
350
- * used as part of Contrast Security’s commercial offerings. Even though it is
351
- * made available through public repositories, use of this Software is subject to
352
- * the applicable End User Licensing Agreement found at
353
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
354
- * between Contrast Security and the End User. The Software may not be reverse
355
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
356
- * way not consistent with the End User License Agreement.
357
- */
358
- &nbsp;
359
- 'use strict';
360
- const { patchType } = require('../common');
361
- &nbsp;
362
- // This is only just initiating an async storage for the http source
363
- // TODO Tracking the user input
364
- module.exports = function(core) {
365
- const {
366
- scopes: { sources },
367
- instrumentation: { instrument }
368
- } = core;
369
- &nbsp;
370
- const logger = core.logger.child('contrast:assess');
371
- &nbsp;
372
- /**
373
- * The around hook for `emit` that
374
- * invokes the protect service to do analysis when appropriate.
375
- */
376
- <span class="fstat-no" title="function not covered" > function around(next, data) {</span>
377
- <span class="cstat-no" title="statement not covered" > const [type] = data.args;</span>
378
- <span class="cstat-no" title="statement not covered" ></span>
379
- <span class="cstat-no" title="statement not covered" > if (type !== 'request') {</span>
380
- <span class="cstat-no" title="statement not covered" > return next();</span>
381
- <span class="cstat-no" title="statement not covered" > }</span>
382
- <span class="cstat-no" title="statement not covered" ></span>
383
- <span class="cstat-no" title="statement not covered" > try {</span>
384
- <span class="cstat-no" title="statement not covered" > const [, req] = data.args;</span>
385
- <span class="cstat-no" title="statement not covered" > const store = sources.getStore();</span>
386
- <span class="cstat-no" title="statement not covered" ></span>
387
- <span class="cstat-no" title="statement not covered" > if (!store) {</span>
388
- <span class="cstat-no" title="statement not covered" > this.logger.debug('cannot acquire store for assess request handling');</span>
389
- <span class="cstat-no" title="statement not covered" > return next();</span>
390
- <span class="cstat-no" title="statement not covered" > }</span>
391
- <span class="cstat-no" title="statement not covered" > let uriPath, queries;</span>
392
- <span class="cstat-no" title="statement not covered" > const ix = req.url.indexOf('?');</span>
393
- <span class="cstat-no" title="statement not covered" ></span>
394
- <span class="cstat-no" title="statement not covered" > if (ix &gt;= 0) {</span>
395
- <span class="cstat-no" title="statement not covered" > uriPath = req.url.slice(0, ix);</span>
396
- <span class="cstat-no" title="statement not covered" > queries = req.url.slice(ix + 1);</span>
397
- <span class="cstat-no" title="statement not covered" > } else {</span>
398
- <span class="cstat-no" title="statement not covered" > uriPath = req.url;</span>
399
- <span class="cstat-no" title="statement not covered" > queries = '';</span>
400
- <span class="cstat-no" title="statement not covered" > }</span>
401
- <span class="cstat-no" title="statement not covered" ></span>
402
- <span class="cstat-no" title="statement not covered" > const headers = {};</span>
403
- <span class="cstat-no" title="statement not covered" ></span>
404
- <span class="cstat-no" title="statement not covered" > for (let i = 0; i &lt; req.rawHeaders.length; i += 2) {</span>
405
- <span class="cstat-no" title="statement not covered" > const header = req.rawHeaders[i].toLowerCase();</span>
406
- <span class="cstat-no" title="statement not covered" > headers[header] = req.rawHeaders[i + 1];</span>
407
- <span class="cstat-no" title="statement not covered" > }</span>
408
- <span class="cstat-no" title="statement not covered" ></span>
409
- <span class="cstat-no" title="statement not covered" > const contentType = headers['content-type']?.toLowerCase();</span>
410
- <span class="cstat-no" title="statement not covered" > const reqData = {</span>
411
- <span class="cstat-no" title="statement not covered" > ip: req.socket.remoteAddress,</span>
412
- <span class="cstat-no" title="statement not covered" > httpVersion: req.httpVersion,</span>
413
- <span class="cstat-no" title="statement not covered" > method: req.method,</span>
414
- <span class="cstat-no" title="statement not covered" > headers,</span>
415
- <span class="cstat-no" title="statement not covered" > uriPath,</span>
416
- <span class="cstat-no" title="statement not covered" > queries,</span>
417
- <span class="cstat-no" title="statement not covered" > contentType,</span>
418
- <span class="cstat-no" title="statement not covered" > };</span>
419
- <span class="cstat-no" title="statement not covered" ></span>
420
- <span class="cstat-no" title="statement not covered" > store.assess = {</span>
421
- <span class="cstat-no" title="statement not covered" > reqData,</span>
422
- <span class="cstat-no" title="statement not covered" > propagationEventsCount: 0,</span>
423
- <span class="cstat-no" title="statement not covered" > findings: {},</span>
424
- <span class="cstat-no" title="statement not covered" > };</span>
425
- <span class="cstat-no" title="statement not covered" > } catch (err) {</span>
426
- <span class="cstat-no" title="statement not covered" > logger.error({ err }, 'Error during assess request handling');</span>
427
- <span class="cstat-no" title="statement not covered" > }</span>
428
- <span class="cstat-no" title="statement not covered" ></span>
429
- <span class="cstat-no" title="statement not covered" > return next();</span>
430
- <span class="cstat-no" title="statement not covered" > }</span>
431
- &nbsp;
432
- <span class="fstat-no" title="function not covered" > function install() {</span>
433
- <span class="cstat-no" title="statement not covered" > [{</span>
434
- <span class="cstat-no" title="statement not covered" > moduleName: 'http'</span>
435
- <span class="cstat-no" title="statement not covered" > },</span>
436
- <span class="cstat-no" title="statement not covered" > {</span>
437
- <span class="cstat-no" title="statement not covered" > moduleName: 'https'</span>
438
- <span class="cstat-no" title="statement not covered" > },</span>
439
- <span class="cstat-no" title="statement not covered" > {</span>
440
- <span class="cstat-no" title="statement not covered" > moduleName: 'spdy'</span>
441
- <span class="cstat-no" title="statement not covered" > },</span>
442
- <span class="cstat-no" title="statement not covered" > {</span>
443
- <span class="cstat-no" title="statement not covered" > moduleName: 'http2',</span>
444
- <span class="cstat-no" title="statement not covered" > patchObjectsProps: [</span>
445
- <span class="cstat-no" title="statement not covered" > {</span>
446
- <span class="cstat-no" title="statement not covered" > methods: ['createServer', 'createSecureServer'],</span>
447
- <span class="cstat-no" title="statement not covered" > patchType,</span>
448
- <span class="cstat-no" title="statement not covered" > patchObjects: [</span>
449
- <span class="cstat-no" title="statement not covered" > {</span>
450
- <span class="cstat-no" title="statement not covered" > name: 'Server.prototype',</span>
451
- <span class="cstat-no" title="statement not covered" > methods: ['emit'],</span>
452
- <span class="cstat-no" title="statement not covered" > patchType,</span>
453
- <span class="cstat-no" title="statement not covered" > around</span>
454
- <span class="cstat-no" title="statement not covered" > }</span>
455
- <span class="cstat-no" title="statement not covered" > ]</span>
456
- <span class="cstat-no" title="statement not covered" > }</span>
457
- <span class="cstat-no" title="statement not covered" > ]</span>
458
- <span class="cstat-no" title="statement not covered" > }].forEach(({ moduleName, patchObjectsProps }) =&gt; {</span>
459
- <span class="cstat-no" title="statement not covered" > const patchObjects = patchObjectsProps || [</span>
460
- <span class="cstat-no" title="statement not covered" > {</span>
461
- <span class="cstat-no" title="statement not covered" > name: 'Server.prototype',</span>
462
- <span class="cstat-no" title="statement not covered" > methods: ['emit'],</span>
463
- <span class="cstat-no" title="statement not covered" > patchType,</span>
464
- <span class="cstat-no" title="statement not covered" > around</span>
465
- <span class="cstat-no" title="statement not covered" > }</span>
466
- <span class="cstat-no" title="statement not covered" > ];</span>
467
- <span class="cstat-no" title="statement not covered" > instrument({</span>
468
- <span class="cstat-no" title="statement not covered" > moduleName,</span>
469
- <span class="cstat-no" title="statement not covered" > patchObjects</span>
470
- <span class="cstat-no" title="statement not covered" > });</span>
471
- <span class="cstat-no" title="statement not covered" > });</span>
472
- <span class="cstat-no" title="statement not covered" > }</span>
473
- &nbsp;
474
- <span class="fstat-no" title="function not covered" > function uninstall() {</span>
475
- <span class="cstat-no" title="statement not covered" > return null;</span>
476
- <span class="cstat-no" title="statement not covered" > }</span>
477
- &nbsp;
478
- return core.assess.dataflow.sources.httpSourcesInstr = {
479
- install,
480
- uninstall
481
- };
482
- };
483
- &nbsp;</pre></td></tr></table></pre>
484
-
485
- <div class='push'></div><!-- for sticky footer -->
486
- </div><!-- /wrapper -->
487
- <div class='footer quiet pad2 space-top1 center small'>
488
- Code coverage generated by
489
- <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
490
- at 2023-01-31T12:35:51.238Z
491
- </div>
492
- <script src="../../../../prettify.js"></script>
493
- <script>
494
- window.onload = function () {
495
- prettyPrint();
496
- };
497
- </script>
498
- <script src="../../../../sorter.js"></script>
499
- <script src="../../../../block-navigation.js"></script>
500
- </body>
501
- </html>
502
-