@contrast/common 1.8.0 → 1.10.0

package/src/signatures/index.ts

@@ -13,10 +13,15 @@
  * way not consistent with the End User License Agreement.
  */
 
+import mongodb from './mongodb';
 import mssql from './mssql';
+import fs from './fs';
+import { Signature } from '../types';
 
-export const signatures: Map<string, any> = new Map(
+export const signatures = new Map<string, Signature>(
   [
+    ...fs,
+    ...mongodb,
     ...mssql,
     [
       'Url.prototype.parse',
@@ -414,15 +419,6 @@ export const signatures: Map<string, any> = new Map(
         isModule: true,
       }
     ],
-    [
-      'mongodb.Collection.prototype.rename',
-      {
-        moduleName: 'mongodb',
-        version: '>=3.3.0',
-        methodName: 'Collection.prototype.rename',
-        isModule: true,
-      }
-    ],
     [
       'marsdb.Collection.prototype.find',
       {
@@ -601,6 +597,22 @@ export const signatures: Map<string, any> = new Map(
         isModule: true,
       }
     ],
+    [
+      'child_process.execFile',
+      {
+        moduleName: 'child_process',
+        methodName: 'execFile',
+        isModule: true,
+      }
+    ],
+    [
+      'child_process.execFileSync',
+      {
+        moduleName: 'child_process',
+        methodName: 'execFileSync',
+        isModule: true,
+      }
+    ],
     [
       'Math.random',
       {
@@ -1292,310 +1304,6 @@ export const signatures: Map<string, any> = new Map(
         target: 'R',
       }
     ],
-    [
-      'fs.access',
-      {
-        moduleName: 'fs',
-        methodName: 'access',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.accessSync',
-      {
-        moduleName: 'fs',
-        methodName: 'accessSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.copyFile',
-      {
-        moduleName: 'fs',
-        methodName: 'copyFile',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.copyFileSync',
-      {
-        moduleName: 'fs',
-        methodName: 'copyFileSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.appendFile',
-      {
-        moduleName: 'fs',
-        methodName: 'appendFile',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.appendFileSync',
-      {
-        moduleName: 'fs',
-        methodName: 'appendFileSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.writeFile',
-      {
-        moduleName: 'fs',
-        methodName: 'writeFile',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.writeFileSync',
-      {
-        moduleName: 'fs',
-        methodName: 'writeFileSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.createWriteStream',
-      {
-        moduleName: 'fs',
-        methodName: 'createWriteStream',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.createReadStream',
-      {
-        moduleName: 'fs',
-        methodName: 'createReadStream',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.unlink',
-      {
-        moduleName: 'fs',
-        methodName: 'unlink',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.unlinkSync',
-      {
-        moduleName: 'fs',
-        methodName: 'unlinkSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.truncate',
-      {
-        moduleName: 'fs',
-        methodName: 'truncate',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.truncateSync',
-      {
-        moduleName: 'fs',
-        methodName: 'truncateSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.rmdir',
-      {
-        moduleName: 'fs',
-        methodName: 'rmdir',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.rmdirSync',
-      {
-        moduleName: 'fs',
-        methodName: 'rmdirSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.rename',
-      {
-        moduleName: 'fs',
-        methodName: 'rename',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.renameSync',
-      {
-        moduleName: 'fs',
-        methodName: 'renameSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.readFile',
-      {
-        moduleName: 'fs',
-        methodName: 'readFile',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.readFileSync',
-      {
-        moduleName: 'fs',
-        methodName: 'readFileSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.readdir',
-      {
-        moduleName: 'fs',
-        methodName: 'readdir',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.readdirSync',
-      {
-        moduleName: 'fs',
-        methodName: 'readdirSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.open',
-      {
-        moduleName: 'fs',
-        methodName: 'open',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.openSync',
-      {
-        moduleName: 'fs',
-        methodName: 'openSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.mkdir',
-      {
-        moduleName: 'fs',
-        methodName: 'mkdir',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.mkdirSync',
-      {
-        moduleName: 'fs',
-        methodName: 'mkdirSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.readlink',
-      {
-        moduleName: 'fs',
-        methodName: 'readlink',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.readlinkSync',
-      {
-        moduleName: 'fs',
-        methodName: 'readlinkSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.symlink',
-      {
-        moduleName: 'fs',
-        methodName: 'symlink',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.symlinkSync',
-      {
-        moduleName: 'fs',
-        methodName: 'symlinkSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.chmod',
-      {
-        moduleName: 'fs',
-        methodName: 'chmod',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.chmodSync',
-      {
-        moduleName: 'fs',
-        methodName: 'chmodSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.lchmod',
-      {
-        moduleName: 'fs',
-        methodName: 'lchmod',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.lchmodSync',
-      {
-        moduleName: 'fs',
-        methodName: 'lchmodSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.chown',
-      {
-        moduleName: 'fs',
-        methodName: 'chown',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.chownSync',
-      {
-        moduleName: 'fs',
-        methodName: 'chownSync',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.lchown',
-      {
-        moduleName: 'fs',
-        methodName: 'lchown',
-        isModule: true,
-      }
-    ],
-    [
-      'fs.lchownSync',
-      {
-        moduleName: 'fs',
-        methodName: 'lchownSync',
-        isModule: true,
-      }
-    ],
     [
       'querystring.escape',
       {
@@ -2404,6 +2112,15 @@ export const signatures: Map<string, any> = new Map(
         isModule: true,
       }
     ],
+    [
+      'Express.Response.location',
+      {
+        moduleName: 'express',
+        version: '>=4.0.0 <5.0.0',
+        methodName: 'Response.location',
+        isModule: true,
+      }
+    ],
     [
       'serve-static',
       {
@@ -2412,5 +2129,5 @@ export const signatures: Map<string, any> = new Map(
         isModule: true,
       }
     ]
-  ]
+  ] as [string, Signature][]
 );

package/src/signatures/mongodb.ts

@@ -0,0 +1,59 @@
+/*
+ * Copyright: 2022 Contrast Security, Inc
+ * Contact: support@contrastsecurity.com
+ * License: Commercial
+
+ * NOTICE: This Software and the patented inventions embodied within may only be
+ * used as part of Contrast Security’s commercial offerings. Even though it is
+ * made available through public repositories, use of this Software is subject to
+ * the applicable End User Licensing Agreement found at
+ * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+ * between Contrast Security and the End User. The Software may not be reverse
+ * engineered, modified, repackaged, sold, redistributed or otherwise used in a
+ * way not consistent with the End User License Agreement.
+ */
+
+const collectionSignatures: [string, any][] = [
+  'find',
+  'findOne',
+  'findAndModify',
+  'findOneAndDelete',
+  'findOneAndReplace',
+  'findOneAndUpdate',
+  'remove',
+  'removeOne',
+  'replaceOne',
+  'removeMany',
+  'save',
+  'update',
+  'updateOne',
+  'updateMany',
+  'deleteOne',
+  'deleteMany',
+].map((method) => [
+  `mongodb.Collection.prototype.${method}`,
+  {
+    moduleName: 'mongodb',
+    methodName: `Collection.prototype.${method}`,
+    isModule: true,
+  }
+]);
+
+const dbSignatures: [string, any][] = [
+  'command',
+  'eval'
+].map((method) => [
+  `mongodb.Db.prototype.${method}`,
+  {
+    moduleName: 'mongodb',
+    methodName: `Db.prototype.${method}`,
+    isModule: true,
+  }
+]);
+
+const mongodb: Map<string, any> = new Map([
+  ...collectionSignatures,
+  ...dbSignatures
+]);
+
+export default mongodb;

package/src/signatures/mssql.ts

@@ -13,14 +13,16 @@
  * way not consistent with the End User License Agreement.
  */
 
+import { Signature } from '../types';
 
-const mssql: Map<string, any> = new Map([
+
+const mssql = new Map<string, Signature>([
   [
     'mssql/lib/base/prepared-statement.prototype.prepare',
     {
       moduleName: 'mssql',
       version: '>=6.4.0',
-      filename: 'lib/base/prepared-statement.js',
+      fileName: 'lib/base/prepared-statement.js',
       methodName: 'PreparedStatement.prototype.prepare',
       isModule: true,
     },
@@ -30,7 +32,7 @@ const mssql: Map<string, any> = new Map([
     {
       moduleName: 'mssql',
       version: '>=6.4.0',
-      filename: 'lib/base/request.js',
+      fileName: 'lib/base/request.js',
       methodName: 'Request.prototype.batch',
       isModule: true,
     },
@@ -40,11 +42,11 @@ const mssql: Map<string, any> = new Map([
     {
       moduleName: 'mssql',
       version: '>=6.4.0',
-      filename: 'lib/base/request.js',
+      fileName: 'lib/base/request.js',
       methodName: 'Request.prototype.query',
       isModule: true,
     },
   ],
-]);
+] as [string, Signature][]);
 
 export default mssql;

package/src/types.ts

@@ -21,6 +21,17 @@ export interface Installable {
   uninstall?(): void | Promise<void>;
 }
 
+export interface Signature {
+  moduleName: string;
+  methodName: string;
+  fileName?: string;
+  version?: string;
+  isModule: boolean;
+  isConstructor?: boolean;
+  source?: 'O' | 'P' | 'R';
+  target?: 'O' | 'P' | 'R';
+}
+
 export interface AppInfo {
   os: {
     type: string;
@@ -40,6 +51,7 @@ export interface AppInfo {
   serverName: string;
   serverEnvironment: string;
   version: string;
+  session_id: string | null;
 }
 
 export type CommonRules =