@contrast/assess 1.67.0 → 1.67.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (174) hide show
  1. package/LICENSE +1 -1
  2. package/lib/configuration-analysis/common.js +1 -1
  3. package/lib/configuration-analysis/handlers.js +1 -1
  4. package/lib/configuration-analysis/index.js +1 -1
  5. package/lib/configuration-analysis/install/apollo-server.js +1 -1
  6. package/lib/configuration-analysis/install/express-session.js +1 -1
  7. package/lib/configuration-analysis/install/fastify-cookie.js +1 -1
  8. package/lib/configuration-analysis/install/graphql-yoga.js +1 -1
  9. package/lib/configuration-analysis/install/hapi.js +1 -1
  10. package/lib/configuration-analysis/install/koa.js +1 -1
  11. package/lib/crypto-analysis/common.js +1 -1
  12. package/lib/crypto-analysis/index.js +1 -1
  13. package/lib/crypto-analysis/install/crypto.js +1 -1
  14. package/lib/crypto-analysis/install/math.js +1 -1
  15. package/lib/dataflow/index.js +1 -1
  16. package/lib/dataflow/propagation/common.js +1 -1
  17. package/lib/dataflow/propagation/index.js +1 -1
  18. package/lib/dataflow/propagation/install/JSON/index.js +1 -1
  19. package/lib/dataflow/propagation/install/JSON/parse-fn.js +1 -1
  20. package/lib/dataflow/propagation/install/JSON/parse.js +1 -1
  21. package/lib/dataflow/propagation/install/JSON/stringify.js +1 -1
  22. package/lib/dataflow/propagation/install/array-prototype-join.js +1 -1
  23. package/lib/dataflow/propagation/install/buffer.js +1 -1
  24. package/lib/dataflow/propagation/install/contrast-methods/add.js +1 -1
  25. package/lib/dataflow/propagation/install/contrast-methods/index.js +1 -1
  26. package/lib/dataflow/propagation/install/contrast-methods/number.js +1 -1
  27. package/lib/dataflow/propagation/install/contrast-methods/string.js +1 -1
  28. package/lib/dataflow/propagation/install/contrast-methods/tag.js +1 -1
  29. package/lib/dataflow/propagation/install/decode-uri-component.js +1 -1
  30. package/lib/dataflow/propagation/install/ejs/escape-xml.js +1 -1
  31. package/lib/dataflow/propagation/install/ejs/index.js +1 -1
  32. package/lib/dataflow/propagation/install/ejs/template.js +1 -1
  33. package/lib/dataflow/propagation/install/encode-uri.js +1 -1
  34. package/lib/dataflow/propagation/install/escape-html.js +1 -1
  35. package/lib/dataflow/propagation/install/escape.js +1 -1
  36. package/lib/dataflow/propagation/install/handlebars-utils-escape-expression.js +1 -1
  37. package/lib/dataflow/propagation/install/isnumeric-0.js +1 -1
  38. package/lib/dataflow/propagation/install/joi/any.js +1 -1
  39. package/lib/dataflow/propagation/install/joi/boolean.js +1 -1
  40. package/lib/dataflow/propagation/install/joi/expression.js +1 -1
  41. package/lib/dataflow/propagation/install/joi/index.js +1 -1
  42. package/lib/dataflow/propagation/install/joi/keys.js +1 -1
  43. package/lib/dataflow/propagation/install/joi/number.js +1 -1
  44. package/lib/dataflow/propagation/install/joi/object.js +1 -1
  45. package/lib/dataflow/propagation/install/joi/string-schema.js +1 -1
  46. package/lib/dataflow/propagation/install/joi/utils.js +1 -1
  47. package/lib/dataflow/propagation/install/joi/values.js +1 -1
  48. package/lib/dataflow/propagation/install/mongoose/common.js +1 -1
  49. package/lib/dataflow/propagation/install/mongoose/index.js +1 -1
  50. package/lib/dataflow/propagation/install/mongoose/schema-map.js +1 -1
  51. package/lib/dataflow/propagation/install/mongoose/schema-mixed.js +1 -1
  52. package/lib/dataflow/propagation/install/mongoose/schema-string.js +1 -1
  53. package/lib/dataflow/propagation/install/mustache-escape.js +1 -1
  54. package/lib/dataflow/propagation/install/mysql-connection-escape.js +1 -1
  55. package/lib/dataflow/propagation/install/parse-int.js +1 -1
  56. package/lib/dataflow/propagation/install/path/basename.js +1 -1
  57. package/lib/dataflow/propagation/install/path/common.js +1 -1
  58. package/lib/dataflow/propagation/install/path/dirname.js +1 -1
  59. package/lib/dataflow/propagation/install/path/extname.js +1 -1
  60. package/lib/dataflow/propagation/install/path/format.js +1 -1
  61. package/lib/dataflow/propagation/install/path/index.js +1 -1
  62. package/lib/dataflow/propagation/install/path/join-and-resolve.js +1 -1
  63. package/lib/dataflow/propagation/install/path/normalize.js +1 -1
  64. package/lib/dataflow/propagation/install/path/parse.js +1 -1
  65. package/lib/dataflow/propagation/install/path/relative.js +1 -1
  66. package/lib/dataflow/propagation/install/path/toNamespacedPath.js +1 -1
  67. package/lib/dataflow/propagation/install/pug/index.js +1 -1
  68. package/lib/dataflow/propagation/install/pug-runtime-escape.js +1 -1
  69. package/lib/dataflow/propagation/install/querystring/escape.js +1 -1
  70. package/lib/dataflow/propagation/install/querystring/index.js +1 -1
  71. package/lib/dataflow/propagation/install/querystring/parse.js +1 -1
  72. package/lib/dataflow/propagation/install/querystring/stringify.js +1 -1
  73. package/lib/dataflow/propagation/install/reg-exp-prototype-exec.js +1 -1
  74. package/lib/dataflow/propagation/install/sequelize/index.js +1 -1
  75. package/lib/dataflow/propagation/install/sequelize/query-generator.js +1 -1
  76. package/lib/dataflow/propagation/install/sequelize/sql-string.js +1 -1
  77. package/lib/dataflow/propagation/install/sql-template-strings.js +1 -1
  78. package/lib/dataflow/propagation/install/string/concat.js +2 -2
  79. package/lib/dataflow/propagation/install/string/format-methods.js +1 -1
  80. package/lib/dataflow/propagation/install/string/html-methods.js +1 -1
  81. package/lib/dataflow/propagation/install/string/index.js +1 -1
  82. package/lib/dataflow/propagation/install/string/match-all.js +1 -1
  83. package/lib/dataflow/propagation/install/string/match.js +1 -1
  84. package/lib/dataflow/propagation/install/string/replace.js +1 -1
  85. package/lib/dataflow/propagation/install/string/slice.js +1 -1
  86. package/lib/dataflow/propagation/install/string/split.js +1 -1
  87. package/lib/dataflow/propagation/install/string/substring.js +1 -1
  88. package/lib/dataflow/propagation/install/string/trim.js +1 -1
  89. package/lib/dataflow/propagation/install/unescape.js +1 -1
  90. package/lib/dataflow/propagation/install/url/domain-parsers.js +1 -1
  91. package/lib/dataflow/propagation/install/url/index.js +1 -1
  92. package/lib/dataflow/propagation/install/url/parse.js +1 -1
  93. package/lib/dataflow/propagation/install/url/searchParams.js +1 -1
  94. package/lib/dataflow/propagation/install/url/url.js +1 -1
  95. package/lib/dataflow/propagation/install/util-format.js +1 -1
  96. package/lib/dataflow/propagation/install/validator/hooks.js +1 -1
  97. package/lib/dataflow/propagation/install/validator/index.js +1 -1
  98. package/lib/dataflow/propagation/install/validator/methods.js +1 -1
  99. package/lib/dataflow/sinks/common.js +1 -1
  100. package/lib/dataflow/sinks/index.js +1 -1
  101. package/lib/dataflow/sinks/install/child-process.js +1 -1
  102. package/lib/dataflow/sinks/install/eval.js +1 -1
  103. package/lib/dataflow/sinks/install/express/index.js +1 -1
  104. package/lib/dataflow/sinks/install/express/reflected-xss.js +1 -1
  105. package/lib/dataflow/sinks/install/express/unvalidated-redirect.js +1 -1
  106. package/lib/dataflow/sinks/install/fastify/index.js +1 -1
  107. package/lib/dataflow/sinks/install/fastify/unvalidated-redirect.js +1 -1
  108. package/lib/dataflow/sinks/install/fs.js +1 -1
  109. package/lib/dataflow/sinks/install/function.js +1 -1
  110. package/lib/dataflow/sinks/install/hapi/index.js +1 -1
  111. package/lib/dataflow/sinks/install/hapi/unvalidated-redirect.js +1 -1
  112. package/lib/dataflow/sinks/install/http/index.js +1 -1
  113. package/lib/dataflow/sinks/install/http/request.js +1 -1
  114. package/lib/dataflow/sinks/install/http/server-response.js +1 -1
  115. package/lib/dataflow/sinks/install/koa/index.js +1 -1
  116. package/lib/dataflow/sinks/install/koa/unvalidated-redirect.js +1 -1
  117. package/lib/dataflow/sinks/install/libxmljs.js +1 -1
  118. package/lib/dataflow/sinks/install/marsdb.js +1 -1
  119. package/lib/dataflow/sinks/install/mongodb.js +1 -1
  120. package/lib/dataflow/sinks/install/mssql.js +1 -1
  121. package/lib/dataflow/sinks/install/mysql.js +1 -1
  122. package/lib/dataflow/sinks/install/node-serialize.js +1 -1
  123. package/lib/dataflow/sinks/install/postgres.js +1 -1
  124. package/lib/dataflow/sinks/install/restify.js +1 -1
  125. package/lib/dataflow/sinks/install/sequelize.js +1 -1
  126. package/lib/dataflow/sinks/install/sqlite3.js +1 -1
  127. package/lib/dataflow/sinks/install/vm.js +1 -1
  128. package/lib/dataflow/sources/common.js +1 -1
  129. package/lib/dataflow/sources/handler.js +1 -1
  130. package/lib/dataflow/sources/index.js +1 -1
  131. package/lib/dataflow/sources/install/body-parser.js +1 -1
  132. package/lib/dataflow/sources/install/busboy.js +1 -1
  133. package/lib/dataflow/sources/install/cookie-parser1.js +1 -1
  134. package/lib/dataflow/sources/install/express/index.js +1 -1
  135. package/lib/dataflow/sources/install/express/params.js +1 -1
  136. package/lib/dataflow/sources/install/express/parsedUrl.js +1 -1
  137. package/lib/dataflow/sources/install/fastify/fastify.js +1 -1
  138. package/lib/dataflow/sources/install/fastify/index.js +1 -1
  139. package/lib/dataflow/sources/install/formidable1.js +1 -1
  140. package/lib/dataflow/sources/install/graphql-http.js +1 -1
  141. package/lib/dataflow/sources/install/hapi/hapi.js +1 -1
  142. package/lib/dataflow/sources/install/hapi/index.js +1 -1
  143. package/lib/dataflow/sources/install/http.js +1 -1
  144. package/lib/dataflow/sources/install/koa/index.js +1 -1
  145. package/lib/dataflow/sources/install/koa/koa-bodyparsers.js +1 -1
  146. package/lib/dataflow/sources/install/koa/koa-multer.js +1 -1
  147. package/lib/dataflow/sources/install/koa/koa-routers.js +1 -1
  148. package/lib/dataflow/sources/install/koa/koa.js +1 -1
  149. package/lib/dataflow/sources/install/multer1.js +1 -1
  150. package/lib/dataflow/sources/install/qs6.js +1 -1
  151. package/lib/dataflow/sources/install/querystring.js +1 -1
  152. package/lib/dataflow/sources/install/restify/fieldedTextBodyParser.js +1 -1
  153. package/lib/dataflow/sources/install/restify/index.js +1 -1
  154. package/lib/dataflow/sources/install/restify/jsonBodyParser.js +1 -1
  155. package/lib/dataflow/sources/install/restify/router.js +1 -1
  156. package/lib/dataflow/sources/install/socket.io.js +1 -1
  157. package/lib/dataflow/tag-utils.js +1 -1
  158. package/lib/dataflow/tracker.js +1 -1
  159. package/lib/dataflow/utils/is-safe-content-type.js +1 -1
  160. package/lib/dataflow/utils/is-vulnerable.js +1 -1
  161. package/lib/event-factory.js +1 -1
  162. package/lib/get-source-context.js +1 -1
  163. package/lib/index.d.ts +1 -1
  164. package/lib/index.js +1 -1
  165. package/lib/make-source-context.js +1 -1
  166. package/lib/policy.js +1 -1
  167. package/lib/response-scanning/handlers/index.js +1 -1
  168. package/lib/response-scanning/handlers/utils.js +1 -1
  169. package/lib/response-scanning/index.js +1 -1
  170. package/lib/response-scanning/install/http.js +1 -1
  171. package/lib/rule-scopes.js +1 -1
  172. package/lib/sampler/common.js +1 -1
  173. package/lib/sampler/index.js +1 -1
  174. package/package.json +3 -3
package/lib/dataflow/sources/install/restify/jsonBodyParser.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/dataflow/sources/install/restify/router.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/dataflow/sources/install/socket.io.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/dataflow/tag-utils.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/dataflow/tracker.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/dataflow/utils/is-safe-content-type.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/dataflow/utils/is-vulnerable.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/event-factory.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/get-source-context.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/index.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/make-source-context.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/policy.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/response-scanning/handlers/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/response-scanning/handlers/utils.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/response-scanning/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/response-scanning/install/http.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/rule-scopes.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/sampler/common.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/lib/sampler/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  /*
2
- * Copyright: 2025 Contrast Security, Inc
2
+ * Copyright: 2026 Contrast Security, Inc
3
3
  * Contact: support@contrastsecurity.com
4
4
  * License: Commercial
5
5
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@contrast/assess",
3
- "version": "1.67.0",
3
+ "version": "1.67.1",
4
4
  "description": "Contrast service providing framework-agnostic Assess support",
5
5
  "license": "SEE LICENSE IN LICENSE",
6
6
  "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -28,8 +28,8 @@
28
28
  "@contrast/instrumentation": "1.39.0",
29
29
  "@contrast/logger": "1.33.0",
30
30
  "@contrast/patcher": "1.32.0",
31
- "@contrast/rewriter": "1.37.0",
32
- "@contrast/route-coverage": "1.53.0",
31
+ "@contrast/rewriter": "1.37.1",
32
+ "@contrast/route-coverage": "1.53.1",
33
33
  "@contrast/scopes": "1.30.0",
34
34
  "@contrast/sources": "1.6.0",
35
35
  "semver": "^7.6.0"