@contrast/common 1.39.0 → 1.40.0

package/LICENSE

@@ -1,4 +1,4 @@
-Copyright: 2025 Contrast Security, Inc
+Copyright: 2026 Contrast Security, Inc
 Contact: support@contrastsecurity.com
 License: Commercial
 

package/lib/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 

package/lib/index.d.ts

@@ -38,4 +38,11 @@ export declare function safeConsoleError(...args: Parameters<typeof console.erro
 /** Suppresses output to stderr when installed by the universal agent */
 export declare function safeConsoleWarn(...args: Parameters<typeof console.warn>): void;
 export declare function normalizeURI(uri: string): string;
+export interface FrameInfo {
+    file: string;
+    lineNumber: number;
+    method: string;
+    type: string | null;
+}
+export declare function parseStackTraceLines(lines: string[]): null | FrameInfo[];
 //# sourceMappingURL=index.d.ts.map

package/lib/index.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 
@@ -43,6 +43,7 @@ exports.set = set;
 exports.safeConsoleError = safeConsoleError;
 exports.safeConsoleWarn = safeConsoleWarn;
 exports.normalizeURI = normalizeURI;
+exports.parseStackTraceLines = parseStackTraceLines;
 const constants_1 = require("./constants");
 const primordials_1 = require("./primordials");
 __exportStar(require("./constants"), exports);
@@ -192,8 +193,7 @@ function groupResultsMap(resultsMap) {
 }
 function get(obj, name) {
     let target = obj;
-    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-    // @ts-ignore
+    // @ts-expect-error ts does not handle method overloads well
     const props = StringPrototypeSplit.call(name, '.');
     for (const prop of props) {
         target = target?.[prop];
@@ -203,8 +203,7 @@ function get(obj, name) {
     return target;
 }
 function set(obj, name, value) {
-    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-    // @ts-ignore
+    // @ts-expect-error ts does not handle method overloads well
     const props = StringPrototypeSplit.call(name, '.');
     const lastProp = props.pop();
     for (const p of props) {
@@ -229,10 +228,37 @@ function safeConsoleWarn(...args) {
 function normalizeURI(uri) {
     let normalizedUri = uri;
     constants_1.URI_REGEXES.forEach(({ rx, rp }) => {
-        //@ts-ignore
+        // @ts-expect-error ts does not handle method overloads well
         normalizedUri = StringPrototypeReplaceAll.call(normalizedUri, rx, rp);
     });
     return normalizedUri;
 }
-;
+const STACK_FRAME_LINE_PARSER = /^\s*at\s+(?:(?<async>async\s+)?(?<caller>.+?)\s+\()?(?<file>.+?):(?<line>\d+):(?<column>\d+)\)?$/;
+function parseStackTraceLines(lines) {
+    const ret = [];
+    for (const line of lines) {
+        const match = line.match(STACK_FRAME_LINE_PARSER);
+        // don't include if we can't parse
+        if (!match?.groups)
+            continue;
+        const { caller, file, line: lineNumber } = match.groups;
+        let method = caller;
+        let typeName = null;
+        if (!method) {
+            method = '<anonymous>';
+        }
+        else if (method.indexOf('.') > 0) {
+            const methodIdx = method.lastIndexOf('.');
+            typeName = primordials_1.primordials.StringPrototypeSubstring.call(method, 0, methodIdx);
+            method = primordials_1.primordials.StringPrototypeSubstring.call(method, methodIdx + 1);
+        }
+        ret.push({
+            method: method || '<anonymous>',
+            file,
+            lineNumber: Number(lineNumber),
+            type: typeName
+        });
+    }
+    return ret;
+}
 //# sourceMappingURL=index.js.map

package/lib/primordials.d.ts

@@ -57,6 +57,8 @@ export declare const primordials: {
     };
     UtilInspect: typeof inspect;
     PathBasename: (path: string, ext?: string) => string;
+    PathResolve: (...paths: string[]) => string;
+    PathJoin: (...paths: string[]) => string;
     FsOpen: typeof fs.open;
     FsOpenSync: typeof fs.openSync;
     FsReadFile: typeof fs.readFile;

package/lib/primordials.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 
@@ -19,17 +19,17 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.primordials = void 0;
 const util_1 = require("util");
-const path_1 = require("path");
+const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
 const promises_1 = __importDefault(require("fs/promises"));
 exports.primordials = {
-    // arrays
+    // Array
     ArrayPrototypeJoin: Array.prototype.join,
     ArrayPrototypeSlice: Array.prototype.slice,
-    //buffers,
+    // Buffer
     BufferFrom: Buffer.from,
     BufferPrototypeToString: Buffer.prototype.toString,
-    //strings
+    // String
     StringPrototypeConcat: String.prototype.concat,
     StringPrototypeMatch: String.prototype.match,
     StringPrototypeMatchAll: String.prototype.matchAll,
@@ -44,16 +44,20 @@ exports.primordials = {
     StringPrototypeToLocaleLowerCase: String.prototype.toLocaleLowerCase,
     StringPrototypeToLocaleUpperCase: String.prototype.toLocaleUpperCase,
     StringPrototypeTrim: String.prototype.trim,
-    //regex,
+    // RegExp
     RegExpPrototypeTest: RegExp.prototype.test,
     RegExpPrototypeExec: RegExp.prototype.exec,
-    //function
+    // Function
     FunctionPrototypeToString: Function.prototype.toString,
-    // misc
+    // JSON
     JSONParse: JSON.parse,
     JSONStringify: JSON.stringify,
+    // util
     UtilInspect: util_1.inspect,
-    PathBasename: path_1.basename,
+    // path
+    PathBasename: path_1.default.basename,
+    PathResolve: path_1.default.resolve,
+    PathJoin: path_1.default.join,
     // fs
     FsOpen: fs_1.default.open,
     FsOpenSync: fs_1.default.openSync,

package/lib/types.d.ts

@@ -143,6 +143,7 @@ export type HardeningRules = Rule.UNTRUSTED_DESERIALIZATION;
 export interface Result {
     blocked: boolean;
     exploitMetadata?: any[] | any;
+    exploited?: boolean;
     idsList?: string[];
     inputType: string;
     key?: string;

package/lib/types.js

@@ -1,6 +1,6 @@
 "use strict";
 /*
- * Copyright: 2025 Contrast Security, Inc
+ * Copyright: 2026 Contrast Security, Inc
  * Contact: support@contrastsecurity.com
  * License: Commercial
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/common",
-  "version": "1.39.0",
+  "version": "1.40.0",
   "description": "Shared constants and utilities for all Contrast Agent modules",
   "license": "UNLICENSED",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",