@contrast/assess 1.1.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/lib/index.js +3 -0
  2. package/package.json +3 -3
  3. package/coverage/lcov-report/base.css +0 -224
  4. package/coverage/lcov-report/block-navigation.js +0 -87
  5. package/coverage/lcov-report/favicon.png +0 -0
  6. package/coverage/lcov-report/index.html +0 -266
  7. package/coverage/lcov-report/lib/dataflow/common.js.html +0 -154
  8. package/coverage/lcov-report/lib/dataflow/event-factory.js.html +0 -598
  9. package/coverage/lcov-report/lib/dataflow/index.html +0 -191
  10. package/coverage/lcov-report/lib/dataflow/index.js.html +0 -190
  11. package/coverage/lcov-report/lib/dataflow/propagation/common.js.html +0 -145
  12. package/coverage/lcov-report/lib/dataflow/propagation/index.html +0 -131
  13. package/coverage/lcov-report/lib/dataflow/propagation/index.js.html +0 -190
  14. package/coverage/lcov-report/lib/dataflow/propagation/install/contrast-methods/index.html +0 -131
  15. package/coverage/lcov-report/lib/dataflow/propagation/install/contrast-methods/index.js.html +0 -184
  16. package/coverage/lcov-report/lib/dataflow/propagation/install/contrast-methods/plus.js.html +0 -397
  17. package/coverage/lcov-report/lib/dataflow/propagation/install/string/concat.js.html +0 -478
  18. package/coverage/lcov-report/lib/dataflow/propagation/install/string/index.html +0 -176
  19. package/coverage/lcov-report/lib/dataflow/propagation/install/string/index.js.html +0 -202
  20. package/coverage/lcov-report/lib/dataflow/propagation/install/string/replace.js.html +0 -496
  21. package/coverage/lcov-report/lib/dataflow/propagation/install/string/substring.js.html +0 -415
  22. package/coverage/lcov-report/lib/dataflow/propagation/install/string/trim.js.html +0 -403
  23. package/coverage/lcov-report/lib/dataflow/signatures.js.html +0 -5923
  24. package/coverage/lcov-report/lib/dataflow/sinks/common.js.html +0 -145
  25. package/coverage/lcov-report/lib/dataflow/sinks/index.html +0 -131
  26. package/coverage/lcov-report/lib/dataflow/sinks/index.js.html +0 -211
  27. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/index.html +0 -146
  28. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/index.js.html +0 -172
  29. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/unvalidated-redirect.js.html +0 -319
  30. package/coverage/lcov-report/lib/dataflow/sinks/install/fastify/xss.js.html +0 -721
  31. package/coverage/lcov-report/lib/dataflow/sinks/install/http.js.html +0 -340
  32. package/coverage/lcov-report/lib/dataflow/sinks/install/index.html +0 -116
  33. package/coverage/lcov-report/lib/dataflow/sources/common.js.html +0 -145
  34. package/coverage/lcov-report/lib/dataflow/sources/index.html +0 -131
  35. package/coverage/lcov-report/lib/dataflow/sources/index.js.html +0 -226
  36. package/coverage/lcov-report/lib/dataflow/sources/install/fastify.js.html +0 -379
  37. package/coverage/lcov-report/lib/dataflow/sources/install/http.js.html +0 -502
  38. package/coverage/lcov-report/lib/dataflow/sources/install/index.html +0 -146
  39. package/coverage/lcov-report/lib/dataflow/sources/install/qs.js.html +0 -322
  40. package/coverage/lcov-report/lib/dataflow/tag-utils.js.html +0 -418
  41. package/coverage/lcov-report/lib/dataflow/tracker.js.html +0 -466
  42. package/coverage/lcov-report/lib/dataflow/utils/index.html +0 -116
  43. package/coverage/lcov-report/lib/dataflow/utils/is-vulnerable.js.html +0 -424
  44. package/coverage/lcov-report/lib/index.html +0 -116
  45. package/coverage/lcov-report/lib/index.js.html +0 -193
  46. package/coverage/lcov-report/prettify.css +0 -1
  47. package/coverage/lcov-report/prettify.js +0 -2
  48. package/coverage/lcov-report/sort-arrow-sprite.png +0 -0
  49. package/coverage/lcov-report/sorter.js +0 -196
  50. package/coverage/lcov.info +0 -4856
  51. package/coverage/tmp/coverage-9548-1675168551025-0.json +0 -1
  52. package/coverage/tmp/coverage-9551-1675168550963-0.json +0 -1
  53. package/coverage/tmp/coverage-9552-1675168550969-0.json +0 -1
  54. package/coverage/tmp/coverage-9553-1675168550970-0.json +0 -1
  55. package/coverage/tmp/coverage-9554-1675168550962-0.json +0 -1
  56. package/coverage/tmp/coverage-9555-1675168550965-0.json +0 -1
  57. package/coverage/tmp/coverage-9556-1675168550964-0.json +0 -1
  58. package/coverage/tmp/coverage-9557-1675168550969-0.json +0 -1
  59. package/coverage/tmp/coverage-9558-1675168550964-0.json +0 -1
  60. package/coverage/tmp/coverage-9559-1675168550971-0.json +0 -1
package/coverage/lcov-report/lib/dataflow/event-factory.js.html DELETED
@@ -1,598 +0,0 @@
1
-
2
- <!doctype html>
3
- <html lang="en">
4
-
5
- <head>
6
- <title>Code coverage report for lib/dataflow/event-factory.js</title>
7
- <meta charset="utf-8" />
8
- <link rel="stylesheet" href="../../prettify.css" />
9
- <link rel="stylesheet" href="../../base.css" />
10
- <link rel="shortcut icon" type="image/x-icon" href="../../favicon.png" />
11
- <meta name="viewport" content="width=device-width, initial-scale=1" />
12
- <style type='text/css'>
13
- .coverage-summary .sorter {
14
- background-image: url(../../sort-arrow-sprite.png);
15
- }
16
- </style>
17
- </head>
18
-
19
- <body>
20
- <div class='wrapper'>
21
- <div class='pad1'>
22
- <h1><a href="../../index.html">All files</a> / <a href="index.html">lib/dataflow</a> event-factory.js</h1>
23
- <div class='clearfix'>
24
-
25
- <div class='fl pad1y space-right2'>
26
- <span class="strong">100% </span>
27
- <span class="quiet">Statements</span>
28
- <span class='fraction'>171/171</span>
29
- </div>
30
-
31
-
32
- <div class='fl pad1y space-right2'>
33
- <span class="strong">100% </span>
34
- <span class="quiet">Branches</span>
35
- <span class='fraction'>18/18</span>
36
- </div>
37
-
38
-
39
- <div class='fl pad1y space-right2'>
40
- <span class="strong">100% </span>
41
- <span class="quiet">Functions</span>
42
- <span class='fraction'>4/4</span>
43
- </div>
44
-
45
-
46
- <div class='fl pad1y space-right2'>
47
- <span class="strong">100% </span>
48
- <span class="quiet">Lines</span>
49
- <span class='fraction'>171/171</span>
50
- </div>
51
-
52
-
53
- </div>
54
- <p class="quiet">
55
- Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
56
- </p>
57
- <template id="filterTemplate">
58
- <div class="quiet">
59
- Filter:
60
- <input oninput="onInput()" type="search" id="fileSearch">
61
- </div>
62
- </template>
63
- </div>
64
- <div class='status-line high'></div>
65
- <pre><table class="coverage">
66
- <tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
67
- <a name='L2'></a><a href='#L2'>2</a>
68
- <a name='L3'></a><a href='#L3'>3</a>
69
- <a name='L4'></a><a href='#L4'>4</a>
70
- <a name='L5'></a><a href='#L5'>5</a>
71
- <a name='L6'></a><a href='#L6'>6</a>
72
- <a name='L7'></a><a href='#L7'>7</a>
73
- <a name='L8'></a><a href='#L8'>8</a>
74
- <a name='L9'></a><a href='#L9'>9</a>
75
- <a name='L10'></a><a href='#L10'>10</a>
76
- <a name='L11'></a><a href='#L11'>11</a>
77
- <a name='L12'></a><a href='#L12'>12</a>
78
- <a name='L13'></a><a href='#L13'>13</a>
79
- <a name='L14'></a><a href='#L14'>14</a>
80
- <a name='L15'></a><a href='#L15'>15</a>
81
- <a name='L16'></a><a href='#L16'>16</a>
82
- <a name='L17'></a><a href='#L17'>17</a>
83
- <a name='L18'></a><a href='#L18'>18</a>
84
- <a name='L19'></a><a href='#L19'>19</a>
85
- <a name='L20'></a><a href='#L20'>20</a>
86
- <a name='L21'></a><a href='#L21'>21</a>
87
- <a name='L22'></a><a href='#L22'>22</a>
88
- <a name='L23'></a><a href='#L23'>23</a>
89
- <a name='L24'></a><a href='#L24'>24</a>
90
- <a name='L25'></a><a href='#L25'>25</a>
91
- <a name='L26'></a><a href='#L26'>26</a>
92
- <a name='L27'></a><a href='#L27'>27</a>
93
- <a name='L28'></a><a href='#L28'>28</a>
94
- <a name='L29'></a><a href='#L29'>29</a>
95
- <a name='L30'></a><a href='#L30'>30</a>
96
- <a name='L31'></a><a href='#L31'>31</a>
97
- <a name='L32'></a><a href='#L32'>32</a>
98
- <a name='L33'></a><a href='#L33'>33</a>
99
- <a name='L34'></a><a href='#L34'>34</a>
100
- <a name='L35'></a><a href='#L35'>35</a>
101
- <a name='L36'></a><a href='#L36'>36</a>
102
- <a name='L37'></a><a href='#L37'>37</a>
103
- <a name='L38'></a><a href='#L38'>38</a>
104
- <a name='L39'></a><a href='#L39'>39</a>
105
- <a name='L40'></a><a href='#L40'>40</a>
106
- <a name='L41'></a><a href='#L41'>41</a>
107
- <a name='L42'></a><a href='#L42'>42</a>
108
- <a name='L43'></a><a href='#L43'>43</a>
109
- <a name='L44'></a><a href='#L44'>44</a>
110
- <a name='L45'></a><a href='#L45'>45</a>
111
- <a name='L46'></a><a href='#L46'>46</a>
112
- <a name='L47'></a><a href='#L47'>47</a>
113
- <a name='L48'></a><a href='#L48'>48</a>
114
- <a name='L49'></a><a href='#L49'>49</a>
115
- <a name='L50'></a><a href='#L50'>50</a>
116
- <a name='L51'></a><a href='#L51'>51</a>
117
- <a name='L52'></a><a href='#L52'>52</a>
118
- <a name='L53'></a><a href='#L53'>53</a>
119
- <a name='L54'></a><a href='#L54'>54</a>
120
- <a name='L55'></a><a href='#L55'>55</a>
121
- <a name='L56'></a><a href='#L56'>56</a>
122
- <a name='L57'></a><a href='#L57'>57</a>
123
- <a name='L58'></a><a href='#L58'>58</a>
124
- <a name='L59'></a><a href='#L59'>59</a>
125
- <a name='L60'></a><a href='#L60'>60</a>
126
- <a name='L61'></a><a href='#L61'>61</a>
127
- <a name='L62'></a><a href='#L62'>62</a>
128
- <a name='L63'></a><a href='#L63'>63</a>
129
- <a name='L64'></a><a href='#L64'>64</a>
130
- <a name='L65'></a><a href='#L65'>65</a>
131
- <a name='L66'></a><a href='#L66'>66</a>
132
- <a name='L67'></a><a href='#L67'>67</a>
133
- <a name='L68'></a><a href='#L68'>68</a>
134
- <a name='L69'></a><a href='#L69'>69</a>
135
- <a name='L70'></a><a href='#L70'>70</a>
136
- <a name='L71'></a><a href='#L71'>71</a>
137
- <a name='L72'></a><a href='#L72'>72</a>
138
- <a name='L73'></a><a href='#L73'>73</a>
139
- <a name='L74'></a><a href='#L74'>74</a>
140
- <a name='L75'></a><a href='#L75'>75</a>
141
- <a name='L76'></a><a href='#L76'>76</a>
142
- <a name='L77'></a><a href='#L77'>77</a>
143
- <a name='L78'></a><a href='#L78'>78</a>
144
- <a name='L79'></a><a href='#L79'>79</a>
145
- <a name='L80'></a><a href='#L80'>80</a>
146
- <a name='L81'></a><a href='#L81'>81</a>
147
- <a name='L82'></a><a href='#L82'>82</a>
148
- <a name='L83'></a><a href='#L83'>83</a>
149
- <a name='L84'></a><a href='#L84'>84</a>
150
- <a name='L85'></a><a href='#L85'>85</a>
151
- <a name='L86'></a><a href='#L86'>86</a>
152
- <a name='L87'></a><a href='#L87'>87</a>
153
- <a name='L88'></a><a href='#L88'>88</a>
154
- <a name='L89'></a><a href='#L89'>89</a>
155
- <a name='L90'></a><a href='#L90'>90</a>
156
- <a name='L91'></a><a href='#L91'>91</a>
157
- <a name='L92'></a><a href='#L92'>92</a>
158
- <a name='L93'></a><a href='#L93'>93</a>
159
- <a name='L94'></a><a href='#L94'>94</a>
160
- <a name='L95'></a><a href='#L95'>95</a>
161
- <a name='L96'></a><a href='#L96'>96</a>
162
- <a name='L97'></a><a href='#L97'>97</a>
163
- <a name='L98'></a><a href='#L98'>98</a>
164
- <a name='L99'></a><a href='#L99'>99</a>
165
- <a name='L100'></a><a href='#L100'>100</a>
166
- <a name='L101'></a><a href='#L101'>101</a>
167
- <a name='L102'></a><a href='#L102'>102</a>
168
- <a name='L103'></a><a href='#L103'>103</a>
169
- <a name='L104'></a><a href='#L104'>104</a>
170
- <a name='L105'></a><a href='#L105'>105</a>
171
- <a name='L106'></a><a href='#L106'>106</a>
172
- <a name='L107'></a><a href='#L107'>107</a>
173
- <a name='L108'></a><a href='#L108'>108</a>
174
- <a name='L109'></a><a href='#L109'>109</a>
175
- <a name='L110'></a><a href='#L110'>110</a>
176
- <a name='L111'></a><a href='#L111'>111</a>
177
- <a name='L112'></a><a href='#L112'>112</a>
178
- <a name='L113'></a><a href='#L113'>113</a>
179
- <a name='L114'></a><a href='#L114'>114</a>
180
- <a name='L115'></a><a href='#L115'>115</a>
181
- <a name='L116'></a><a href='#L116'>116</a>
182
- <a name='L117'></a><a href='#L117'>117</a>
183
- <a name='L118'></a><a href='#L118'>118</a>
184
- <a name='L119'></a><a href='#L119'>119</a>
185
- <a name='L120'></a><a href='#L120'>120</a>
186
- <a name='L121'></a><a href='#L121'>121</a>
187
- <a name='L122'></a><a href='#L122'>122</a>
188
- <a name='L123'></a><a href='#L123'>123</a>
189
- <a name='L124'></a><a href='#L124'>124</a>
190
- <a name='L125'></a><a href='#L125'>125</a>
191
- <a name='L126'></a><a href='#L126'>126</a>
192
- <a name='L127'></a><a href='#L127'>127</a>
193
- <a name='L128'></a><a href='#L128'>128</a>
194
- <a name='L129'></a><a href='#L129'>129</a>
195
- <a name='L130'></a><a href='#L130'>130</a>
196
- <a name='L131'></a><a href='#L131'>131</a>
197
- <a name='L132'></a><a href='#L132'>132</a>
198
- <a name='L133'></a><a href='#L133'>133</a>
199
- <a name='L134'></a><a href='#L134'>134</a>
200
- <a name='L135'></a><a href='#L135'>135</a>
201
- <a name='L136'></a><a href='#L136'>136</a>
202
- <a name='L137'></a><a href='#L137'>137</a>
203
- <a name='L138'></a><a href='#L138'>138</a>
204
- <a name='L139'></a><a href='#L139'>139</a>
205
- <a name='L140'></a><a href='#L140'>140</a>
206
- <a name='L141'></a><a href='#L141'>141</a>
207
- <a name='L142'></a><a href='#L142'>142</a>
208
- <a name='L143'></a><a href='#L143'>143</a>
209
- <a name='L144'></a><a href='#L144'>144</a>
210
- <a name='L145'></a><a href='#L145'>145</a>
211
- <a name='L146'></a><a href='#L146'>146</a>
212
- <a name='L147'></a><a href='#L147'>147</a>
213
- <a name='L148'></a><a href='#L148'>148</a>
214
- <a name='L149'></a><a href='#L149'>149</a>
215
- <a name='L150'></a><a href='#L150'>150</a>
216
- <a name='L151'></a><a href='#L151'>151</a>
217
- <a name='L152'></a><a href='#L152'>152</a>
218
- <a name='L153'></a><a href='#L153'>153</a>
219
- <a name='L154'></a><a href='#L154'>154</a>
220
- <a name='L155'></a><a href='#L155'>155</a>
221
- <a name='L156'></a><a href='#L156'>156</a>
222
- <a name='L157'></a><a href='#L157'>157</a>
223
- <a name='L158'></a><a href='#L158'>158</a>
224
- <a name='L159'></a><a href='#L159'>159</a>
225
- <a name='L160'></a><a href='#L160'>160</a>
226
- <a name='L161'></a><a href='#L161'>161</a>
227
- <a name='L162'></a><a href='#L162'>162</a>
228
- <a name='L163'></a><a href='#L163'>163</a>
229
- <a name='L164'></a><a href='#L164'>164</a>
230
- <a name='L165'></a><a href='#L165'>165</a>
231
- <a name='L166'></a><a href='#L166'>166</a>
232
- <a name='L167'></a><a href='#L167'>167</a>
233
- <a name='L168'></a><a href='#L168'>168</a>
234
- <a name='L169'></a><a href='#L169'>169</a>
235
- <a name='L170'></a><a href='#L170'>170</a>
236
- <a name='L171'></a><a href='#L171'>171</a>
237
- <a name='L172'></a><a href='#L172'>172</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">4x</span>
238
- <span class="cline-any cline-yes">4x</span>
239
- <span class="cline-any cline-yes">4x</span>
240
- <span class="cline-any cline-yes">4x</span>
241
- <span class="cline-any cline-yes">4x</span>
242
- <span class="cline-any cline-yes">4x</span>
243
- <span class="cline-any cline-yes">4x</span>
244
- <span class="cline-any cline-yes">4x</span>
245
- <span class="cline-any cline-yes">4x</span>
246
- <span class="cline-any cline-yes">4x</span>
247
- <span class="cline-any cline-yes">4x</span>
248
- <span class="cline-any cline-yes">4x</span>
249
- <span class="cline-any cline-yes">4x</span>
250
- <span class="cline-any cline-yes">4x</span>
251
- <span class="cline-any cline-yes">4x</span>
252
- <span class="cline-any cline-yes">4x</span>
253
- <span class="cline-any cline-yes">4x</span>
254
- <span class="cline-any cline-yes">4x</span>
255
- <span class="cline-any cline-yes">4x</span>
256
- <span class="cline-any cline-yes">4x</span>
257
- <span class="cline-any cline-yes">13x</span>
258
- <span class="cline-any cline-yes">13x</span>
259
- <span class="cline-any cline-yes">13x</span>
260
- <span class="cline-any cline-yes">13x</span>
261
- <span class="cline-any cline-yes">13x</span>
262
- <span class="cline-any cline-yes">13x</span>
263
- <span class="cline-any cline-yes">13x</span>
264
- <span class="cline-any cline-yes">13x</span>
265
- <span class="cline-any cline-yes">13x</span>
266
- <span class="cline-any cline-yes">13x</span>
267
- <span class="cline-any cline-yes">13x</span>
268
- <span class="cline-any cline-yes">13x</span>
269
- <span class="cline-any cline-yes">13x</span>
270
- <span class="cline-any cline-yes">1x</span>
271
- <span class="cline-any cline-yes">1x</span>
272
- <span class="cline-any cline-yes">1x</span>
273
- <span class="cline-any cline-yes">1x</span>
274
- <span class="cline-any cline-yes">1x</span>
275
- <span class="cline-any cline-yes">1x</span>
276
- <span class="cline-any cline-yes">13x</span>
277
- <span class="cline-any cline-yes">13x</span>
278
- <span class="cline-any cline-yes">8x</span>
279
- <span class="cline-any cline-yes">8x</span>
280
- <span class="cline-any cline-yes">8x</span>
281
- <span class="cline-any cline-yes">8x</span>
282
- <span class="cline-any cline-yes">8x</span>
283
- <span class="cline-any cline-yes">8x</span>
284
- <span class="cline-any cline-yes">8x</span>
285
- <span class="cline-any cline-yes">8x</span>
286
- <span class="cline-any cline-yes">8x</span>
287
- <span class="cline-any cline-yes">8x</span>
288
- <span class="cline-any cline-yes">8x</span>
289
- <span class="cline-any cline-yes">8x</span>
290
- <span class="cline-any cline-yes">8x</span>
291
- <span class="cline-any cline-yes">8x</span>
292
- <span class="cline-any cline-yes">8x</span>
293
- <span class="cline-any cline-yes">8x</span>
294
- <span class="cline-any cline-yes">1x</span>
295
- <span class="cline-any cline-yes">1x</span>
296
- <span class="cline-any cline-yes">1x</span>
297
- <span class="cline-any cline-yes">7x</span>
298
- <span class="cline-any cline-yes">8x</span>
299
- <span class="cline-any cline-yes">1x</span>
300
- <span class="cline-any cline-yes">1x</span>
301
- <span class="cline-any cline-yes">1x</span>
302
- <span class="cline-any cline-yes">6x</span>
303
- <span class="cline-any cline-yes">6x</span>
304
- <span class="cline-any cline-yes">6x</span>
305
- <span class="cline-any cline-yes">6x</span>
306
- <span class="cline-any cline-yes">8x</span>
307
- <span class="cline-any cline-yes">8x</span>
308
- <span class="cline-any cline-yes">8x</span>
309
- <span class="cline-any cline-yes">3x</span>
310
- <span class="cline-any cline-yes">8x</span>
311
- <span class="cline-any cline-yes">4x</span>
312
- <span class="cline-any cline-yes">4x</span>
313
- <span class="cline-any cline-yes">4x</span>
314
- <span class="cline-any cline-yes">2x</span>
315
- <span class="cline-any cline-yes">2x</span>
316
- <span class="cline-any cline-yes">8x</span>
317
- <span class="cline-any cline-yes">1x</span>
318
- <span class="cline-any cline-yes">1x</span>
319
- <span class="cline-any cline-yes">1x</span>
320
- <span class="cline-any cline-yes">1x</span>
321
- <span class="cline-any cline-yes">2x</span>
322
- <span class="cline-any cline-yes">2x</span>
323
- <span class="cline-any cline-yes">2x</span>
324
- <span class="cline-any cline-yes">2x</span>
325
- <span class="cline-any cline-yes">2x</span>
326
- <span class="cline-any cline-yes">2x</span>
327
- <span class="cline-any cline-yes">2x</span>
328
- <span class="cline-any cline-yes">2x</span>
329
- <span class="cline-any cline-yes">2x</span>
330
- <span class="cline-any cline-yes">2x</span>
331
- <span class="cline-any cline-yes">2x</span>
332
- <span class="cline-any cline-yes">2x</span>
333
- <span class="cline-any cline-yes">2x</span>
334
- <span class="cline-any cline-yes">2x</span>
335
- <span class="cline-any cline-yes">2x</span>
336
- <span class="cline-any cline-yes">2x</span>
337
- <span class="cline-any cline-yes">2x</span>
338
- <span class="cline-any cline-yes">2x</span>
339
- <span class="cline-any cline-yes">2x</span>
340
- <span class="cline-any cline-yes">2x</span>
341
- <span class="cline-any cline-yes">13x</span>
342
- <span class="cline-any cline-yes">13x</span>
343
- <span class="cline-any cline-yes">1x</span>
344
- <span class="cline-any cline-yes">1x</span>
345
- <span class="cline-any cline-yes">1x</span>
346
- <span class="cline-any cline-yes">1x</span>
347
- <span class="cline-any cline-yes">1x</span>
348
- <span class="cline-any cline-yes">1x</span>
349
- <span class="cline-any cline-yes">13x</span>
350
- <span class="cline-any cline-yes">13x</span>
351
- <span class="cline-any cline-yes">4x</span>
352
- <span class="cline-any cline-yes">4x</span>
353
- <span class="cline-any cline-yes">4x</span>
354
- <span class="cline-any cline-yes">4x</span>
355
- <span class="cline-any cline-yes">4x</span>
356
- <span class="cline-any cline-yes">4x</span>
357
- <span class="cline-any cline-yes">4x</span>
358
- <span class="cline-any cline-yes">4x</span>
359
- <span class="cline-any cline-yes">4x</span>
360
- <span class="cline-any cline-yes">4x</span>
361
- <span class="cline-any cline-yes">4x</span>
362
- <span class="cline-any cline-yes">4x</span>
363
- <span class="cline-any cline-yes">4x</span>
364
- <span class="cline-any cline-yes">4x</span>
365
- <span class="cline-any cline-yes">4x</span>
366
- <span class="cline-any cline-yes">4x</span>
367
- <span class="cline-any cline-yes">4x</span>
368
- <span class="cline-any cline-yes">4x</span>
369
- <span class="cline-any cline-yes">4x</span>
370
- <span class="cline-any cline-yes">4x</span>
371
- <span class="cline-any cline-yes">4x</span>
372
- <span class="cline-any cline-yes">4x</span>
373
- <span class="cline-any cline-yes">4x</span>
374
- <span class="cline-any cline-yes">4x</span>
375
- <span class="cline-any cline-yes">4x</span>
376
- <span class="cline-any cline-yes">4x</span>
377
- <span class="cline-any cline-yes">4x</span>
378
- <span class="cline-any cline-yes">4x</span>
379
- <span class="cline-any cline-yes">4x</span>
380
- <span class="cline-any cline-yes">4x</span>
381
- <span class="cline-any cline-yes">4x</span>
382
- <span class="cline-any cline-yes">4x</span>
383
- <span class="cline-any cline-yes">4x</span>
384
- <span class="cline-any cline-yes">4x</span>
385
- <span class="cline-any cline-yes">4x</span>
386
- <span class="cline-any cline-yes">4x</span>
387
- <span class="cline-any cline-yes">4x</span>
388
- <span class="cline-any cline-yes">4x</span>
389
- <span class="cline-any cline-yes">4x</span>
390
- <span class="cline-any cline-yes">4x</span>
391
- <span class="cline-any cline-yes">4x</span>
392
- <span class="cline-any cline-yes">4x</span>
393
- <span class="cline-any cline-yes">4x</span>
394
- <span class="cline-any cline-yes">4x</span>
395
- <span class="cline-any cline-yes">4x</span>
396
- <span class="cline-any cline-yes">4x</span>
397
- <span class="cline-any cline-yes">4x</span>
398
- <span class="cline-any cline-yes">4x</span>
399
- <span class="cline-any cline-yes">4x</span>
400
- <span class="cline-any cline-yes">4x</span>
401
- <span class="cline-any cline-yes">4x</span>
402
- <span class="cline-any cline-yes">4x</span>
403
- <span class="cline-any cline-yes">4x</span>
404
- <span class="cline-any cline-yes">4x</span>
405
- <span class="cline-any cline-yes">4x</span>
406
- <span class="cline-any cline-yes">4x</span>
407
- <span class="cline-any cline-yes">4x</span>
408
- <span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js">/*
409
- * Copyright: 2022 Contrast Security, Inc
410
- * Contact: support@contrastsecurity.com
411
- * License: Commercial
412
- &nbsp;
413
- * NOTICE: This Software and the patented inventions embodied within may only be
414
- * used as part of Contrast Security’s commercial offerings. Even though it is
415
- * made available through public repositories, use of this Software is subject to
416
- * the applicable End User Licensing Agreement found at
417
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
418
- * between Contrast Security and the End User. The Software may not be reverse
419
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
420
- * way not consistent with the End User License Agreement.
421
- */
422
- &nbsp;
423
- 'use strict';
424
- &nbsp;
425
- const annotationRegExp = /^(A|O|R|P\d+)$/;
426
- &nbsp;
427
- module.exports = function(core) {
428
- const {
429
- createSnapshot,
430
- config,
431
- logger,
432
- scopes: { sources },
433
- assess: {
434
- dataflow: { signatures }
435
- }
436
- } = core;
437
- const eventFactory = core.assess.dataflow.eventFactory = {};
438
- &nbsp;
439
- eventFactory.createdEvents = new WeakSet();
440
- &nbsp;
441
- /* c8 ignore next 5 */
442
- eventFactory.createSourceEvent = function(event) {
443
- // TODO NODE-2859
444
- eventFactory.createdEvents.add(event);
445
- return event;
446
- };
447
- &nbsp;
448
- eventFactory.createPropagationEvent = function(data) {
449
- const {
450
- name = '',
451
- history = [],
452
- object = { value: {}, isTracked: false },
453
- args = [],
454
- result = { value: null, isTracked: false },
455
- tags = {},
456
- addedTags = [],
457
- removedTags = [],
458
- source,
459
- target,
460
- stacktraceData
461
- } = data;
462
- const { assess: sourceContext } = sources.getStore();
463
- &nbsp;
464
- if (!sourceContext) {
465
- logger.debug('No sourceContext found during Propagation event creation');
466
- return null;
467
- }
468
- &nbsp;
469
- if (sourceContext.propagationEventsCount &gt;= config.assess.max_propagation_events) {
470
- logger.debug('Maximum number of Propagation events reached. Event not created');
471
- return null;
472
- }
473
- &nbsp;
474
- const signature = signatures.get(name);
475
- &nbsp;
476
- if (
477
- !signature ||
478
- !history.length ||
479
- ((source &amp;&amp; !source.match(annotationRegExp)) || !signature.source) ||
480
- ((target &amp;&amp; !target.match(annotationRegExp)) || !signature.target)
481
- ) {
482
- logger.debug({ data }, 'Wrong propagation event data submited. Propagation event not created');
483
- return null;
484
- }
485
- &nbsp;
486
- let stack;
487
- if (config.assess.stacktraces === 'ALL') {
488
- stack = createSnapshot(stacktraceData);
489
- } else {
490
- stack = [];
491
- }
492
- &nbsp;
493
- const event = {
494
- time: Date.now(),
495
- history,
496
- name,
497
- object,
498
- args,
499
- result,
500
- tags,
501
- addedTags,
502
- removedTags,
503
- source,
504
- target,
505
- stack
506
- };
507
- &nbsp;
508
- eventFactory.createdEvents.add(event);
509
- sourceContext.propagationEventsCount++;
510
- &nbsp;
511
- return event;
512
- };
513
- &nbsp;
514
- /* c8 ignore next 5 */
515
- eventFactory.createSinkEvent = function(event) {
516
- // TODO 2860
517
- eventFactory.createdEvents.add(event);
518
- return event;
519
- };
520
- &nbsp;
521
- return eventFactory;
522
- };
523
- &nbsp;
524
- &nbsp;
525
- // Sample event data
526
- // const e = {
527
- // // we need the time the event occurred
528
- // time: '1234',
529
- // history: ['argsTrackedInfo'],
530
- // name: 'ContrastMethods.plus', // as this method is used to rewrite not only `+` but `+=` too
531
- // context: {
532
- // obj: null,
533
- // args: ['...args'],
534
- // resultTracked: 'result'
535
- // },
536
- // stack: 'createSnapshot()',
537
- // tags: 'newTags',
538
- // // we need a property with add/removed tags
539
- // addedTags: [],
540
- // removedTags: [],
541
- // // we need info for the source and the targeto
542
- // source: 'A | P | O | R',
543
- // target: 'A | P | O | R',
544
- // // optional code property for the propagation through the ContrastMethods
545
- // code: 'const a = b + c',
546
- // // we need a signature property
547
- // signature: {
548
- // // in v4 we are storing all the signatures in a json file,
549
- // // so we get the values from there and format them accordingly
550
- // }
551
- // };
552
- &nbsp;
553
- // Sample payload for a discovered vulnerability
554
- // const payload = {
555
- // created: Date.now(),
556
- // events: [
557
- // {
558
- // action: e.addedTags.length || e.removedTags.length ? 'TAG' : `${e.source}2${e.target}`,
559
- // args: e.context.args, // they will be "expanded" before reporting
560
- // code: e.code,
561
- // eventSources: [], // only for SourceEvents
562
- // fieldName: '', // we don't set it in v4
563
- // object: e.context.obj, // again it will be expanded later
564
- // parentObjectsIds: [], // we don't set it in v4
565
- // properties: [], // not needed for dataflow
566
- // ret: e.context.resultTracked,
567
- // signature: e.signature,
568
- // source: e.source,
569
- // stacktrace: e.stack,
570
- // tags: e.addedTags.join(), // in v4 we set all tags here, idk why
571
- // taintRanges: e.tags.map(), // the tag ranges we want highlighted in ContrastUI
572
- // target: e.target,
573
- // thread: process.pid,
574
- // time: e.time,
575
- // type: e.addedTags.length || e.removedTags.length ? 'TAG' : 'PROPAGATION'
576
- // }
577
- // ]
578
- // };
579
- &nbsp;</pre></td></tr></table></pre>
580
-
581
- <div class='push'></div><!-- for sticky footer -->
582
- </div><!-- /wrapper -->
583
- <div class='footer quiet pad2 space-top1 center small'>
584
- Code coverage generated by
585
- <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
586
- at 2023-01-31T12:35:51.238Z
587
- </div>
588
- <script src="../../prettify.js"></script>
589
- <script>
590
- window.onload = function () {
591
- prettyPrint();
592
- };
593
- </script>
594
- <script src="../../sorter.js"></script>
595
- <script src="../../block-navigation.js"></script>
596
- </body>
597
- </html>
598
-