@contrast/assess 1.58.0 → 1.58.2

package/lib/crypto-analysis/install/math.js

@@ -52,6 +52,7 @@ module.exports = function (core) {
           if (!getSinkContext(ruleId)) return;
 
           const event = eventFactory.createCryptoAnalysisEvent({
+            args: [],
             context: 'Math.random()',
             methodName: 'random',
             moduleName: 'global.Math',

package/lib/dataflow/propagation/install/string/replace.js

@@ -288,10 +288,13 @@ module.exports = function(core) {
             source: data._objInfo ? (data._history.size > 1 ? 'A' : 'O') : 'P',
             target: 'R',
           });
-          if (!event) return null;
 
-          const { extern } = tracker.track(result, event);
-          return extern;
+          if (event) {
+            const { extern } = tracker.track(result, event);
+            return extern;
+          }
+
+          return result;
         }
       });
     },

package/lib/dataflow/sources/index.js

@@ -26,7 +26,7 @@ module.exports = function (core) {
   require('./install/hapi')(core);
   require('./install/koa')(core);
   require('./install/restify')(core);
-  require('./install/body-parser1')(core);
+  require('./install/body-parser')(core);
   require('./install/busboy')(core);
   require('./install/cookie-parser1')(core);
   require('./install/formidable1')(core);

package/lib/dataflow/sources/install/{body-parser1.js → body-parser.js}

@@ -97,7 +97,7 @@ module.exports = function init(core) {
   core.assess.dataflow.sources.bodyParser1Instrumentation = {
     install() {
       depHooks.resolve(
-        { name: 'body-parser', version: '>=1 <2' },
+        { name: 'body-parser', version: '>=1 <3' },
         /** @param {import('body-parser').BodyParser} bodyParser */
         (bodyParser) => {
           bodyParser = patcher.patch(bodyParser, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/assess",
-  "version": "1.58.0",
+  "version": "1.58.2",
   "description": "Contrast service providing framework-agnostic Assess support",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -20,17 +20,17 @@
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.34.0",
-    "@contrast/config": "1.49.0",
-    "@contrast/core": "1.54.0",
-    "@contrast/dep-hooks": "1.23.0",
+    "@contrast/common": "1.34.2",
+    "@contrast/config": "1.49.2",
+    "@contrast/core": "1.54.2",
+    "@contrast/dep-hooks": "1.23.2",
     "@contrast/distringuish": "^5.1.0",
-    "@contrast/instrumentation": "1.33.0",
-    "@contrast/logger": "1.27.0",
-    "@contrast/patcher": "1.26.0",
-    "@contrast/rewriter": "1.30.0",
-    "@contrast/route-coverage": "1.45.0",
-    "@contrast/scopes": "1.24.0",
+    "@contrast/instrumentation": "1.33.2",
+    "@contrast/logger": "1.27.2",
+    "@contrast/patcher": "1.26.2",
+    "@contrast/rewriter": "1.30.2",
+    "@contrast/route-coverage": "1.45.2",
+    "@contrast/scopes": "1.24.2",
     "semver": "^7.6.0"
   }
 }