@contrast/assess 1.41.0 → 1.43.0

package/lib/session-configuration/install/express-session.js

@@ -41,7 +41,7 @@ module.exports = function (core) {
   const expressSession = core.assess.sessionConfiguration.expressSession = {};
 
   expressSession.install = function () {
-    return depHooks.resolve({ name: 'express-session' }, (session) => {
+    return depHooks.resolve({ name: 'express-session', version: '<2' }, (session) => {
       // Return the hooked function as the export.
       const hooked = patcher.patch(session, {
         name: 'express.hookedSessionConstructor',

package/lib/session-configuration/install/express-session.test.js

@@ -16,9 +16,7 @@ describe('assess session-configuration http', function () {
 
   beforeEach(function () {
     ({ core, simulateRequestScope } = initAssessFixture());
-    core.depHooks.resolve
-      .withArgs({ name: 'express-session' })
-      .yields(ExpressSession);
+    core.depHooks.resolve.yields(ExpressSession);
 
     sinon.spy(core.assess.sessionConfiguration, 'handleHttpOnly');
     sinon.spy(core.assess.sessionConfiguration, 'handleSecure');

package/lib/session-configuration/install/fastify-cookie.js

@@ -40,7 +40,7 @@ module.exports = function (core) {
 
   return core.assess.sessionConfiguration.fastifyCookie = {
     install () {
-      depHooks.resolve({ name: '@fastify/cookie' }, (_export) => {
+      depHooks.resolve({ name: '@fastify/cookie', version: '<12' }, (_export) => {
         const patched = patcher.patch(_export, {
           name: 'express.hookedSessionConstructor',
           patchType,

package/lib/session-configuration/install/fastify-cookie.test.js

@@ -26,9 +26,7 @@ describe('assess session-configuration @fastify/cookie', function () {
       addHook: sinon.stub().yields({}, reply),
     };
 
-    core.depHooks.resolve
-      .withArgs({ name: '@fastify/cookie' })
-      .yields(mockExport);
+    core.depHooks.resolve.yields(mockExport);
 
     sinon.stub(core.assess.sessionConfiguration, 'reportFindings');
     core.assess.sessionConfiguration.fastifyCookie.install();

package/lib/session-configuration/install/koa.js

@@ -39,7 +39,7 @@ module.exports = function (core) {
 
   return core.assess.sessionConfiguration.koa = {
     install () {
-      depHooks.resolve({ name: 'koa', version: '>=2.3.0' }, (Koa) => {
+      depHooks.resolve({ name: 'koa', version: '>=2.3.0 <3' }, (Koa) => {
         patcher.patch(Koa.prototype, 'use', {
           name: 'Koa.Application',
           patchType,

package/lib/session-configuration/install/koa.test.js

@@ -30,7 +30,7 @@ describe('assess sessionConfiguration Koa', function () {
     ctxMock.cookies = { set: sinon.stub() };
 
     core.depHooks.resolve
-      .withArgs({ name: 'koa', version: '>=2.3.0' })
+      .withArgs({ name: 'koa', version: '>=2.3.0 <3' })
       .yields(koaMock);
 
     sinon.stub(core.assess.sessionConfiguration, 'reportFindings');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/assess",
-  "version": "1.41.0",
+  "version": "1.43.0",
   "description": "Contrast service providing framework-agnostic Assess support",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -17,17 +17,17 @@
     "test": "../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.26.0",
-    "@contrast/config": "1.36.0",
-    "@contrast/core": "1.41.1",
-    "@contrast/dep-hooks": "1.10.0",
+    "@contrast/common": "1.28.0",
+    "@contrast/config": "1.38.0",
+    "@contrast/core": "1.43.0",
+    "@contrast/dep-hooks": "1.12.0",
     "@contrast/distringuish": "^5.1.0",
-    "@contrast/instrumentation": "1.20.0",
-    "@contrast/logger": "1.14.0",
-    "@contrast/patcher": "1.13.0",
-    "@contrast/rewriter": "1.17.1",
-    "@contrast/route-coverage": "1.31.0",
-    "@contrast/scopes": "1.11.0",
+    "@contrast/instrumentation": "1.22.0",
+    "@contrast/logger": "1.16.0",
+    "@contrast/patcher": "1.15.0",
+    "@contrast/rewriter": "1.19.0",
+    "@contrast/route-coverage": "1.33.0",
+    "@contrast/scopes": "1.13.0",
     "semver": "^7.6.0"
   }
 }

package/lib/constants.js

@@ -1,26 +0,0 @@
-/*
- * Copyright: 2024 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-
-'use strict';
-
-const InstrumentationType = {
-  SOURCE: 'SOURCE',
-  PROPAGATOR: 'PROPAGATOR',
-  RULE: 'RULE',
-};
-
-module.exports = {
-  InstrumentationType,
-};