@contrast/core 1.37.0 → 1.39.0

package/lib/app-info.js

@@ -18,9 +18,9 @@
 const os = require('os');
 const fs = require('fs');
 const path = require('path');
-const semver = require('semver'); // eslint-disable-line node/no-extraneous-require
+const semver = require('semver');
 const process = require('process');
-const { IntentionalError } = require('@contrast/common');
+const { IntentionalError, primordials: { ArrayPrototypeJoin } } = require('@contrast/common');
 const { findPackageJsonSync } = require('@contrast/find-package-json');
 
 /**
@@ -98,7 +98,7 @@ module.exports = function (core) {
    */
   function getCommand() {
     const args = [process.argv0, ...process.argv].map((a) => path.basename(a));
-    const cmd = Array.from(new Set(args)).join(' ');
+    const cmd = ArrayPrototypeJoin.call(Array.from(new Set(args)), ' ');
     const message = 'application command matches cmd_ignore_list config option';
 
     if (cmd_ignore_list) {

package/lib/capture-stacktrace.js

@@ -17,6 +17,7 @@
 
 const process = require('process');
 const fnInspect = require('@contrast/fn-inspect');
+const { primordials: { StringPrototypeReplace, RegExpPrototypeExec } } = require('@contrast/common');
 
 /** @typedef {import('.').Frame} Frame */
 /** @typedef {import('.').CreateSnapshotOpts} CreateSnapshotOpts */
@@ -186,7 +187,7 @@ class StacktraceFactory {
 
     if (callsite.isEval()) {
       evalOrigin = StacktraceFactory.formatFileName(callsite.getEvalOrigin());
-      const matches = EVAL_ORIGIN_REGEX.exec(evalOrigin);
+      const matches = RegExpPrototypeExec.call(EVAL_ORIGIN_REGEX, evalOrigin);
       if (matches) {
         file = matches[1];
         lineNumber = parseInt(matches[2]);
@@ -215,7 +216,7 @@ class StacktraceFactory {
     const idx = fileName.indexOf(cwd);
 
     if (idx > -1) {
-      return fileName.replace(cwd, ''); // + 1 to remove /
+      return StringPrototypeReplace.call(fileName, cwd, ''); // + 1 to remove /
     }
     return fileName;
   }

package/lib/contrast-methods.js

@@ -15,12 +15,13 @@
 
 'use strict';
 
+const { primordials: { StringPrototypeSlice } } = require('@contrast/common');
+
 module.exports = function (core) {
   const { logger, patcher } = core;
 
   const getOrig = (v) => patcher.unwrap(v);
-  const slice = patcher.unwrap(String.prototype.slice);
-  const toUntrackedString = (v) => slice.call(` ${v}`, 1);
+  const toUntrackedString = (v) => StringPrototypeSlice.call(` ${v}`, 1);
 
   /**
    * Components e.g. Assess, Protect, can

package/lib/index.d.ts

@@ -46,4 +46,5 @@ export interface Core {
   sensitiveDataMasking: any;
 
   getSystemInfo(): Promise<SystemInfo>;
+  Perf: any;
 }

package/lib/messages.js

@@ -18,5 +18,10 @@
 const EventEmitter = require('events');
 
 module.exports = function init(core) {
-  core.messages = new EventEmitter();
+  const messages = new EventEmitter();
+
+  // pad for number of components that listen for server-settings-update messages
+  messages.setMaxListeners(20);
+
+  return core.messages = messages;
 };

package/lib/sensitive-data-masking/index.js

@@ -15,7 +15,7 @@
 
 'use strict';
 
-const { traverseKeys } = require('@contrast/common');
+const { traverseKeys, primordials: { StringPrototypeToLowerCase } } = require('@contrast/common');
 const { CONTRAST_REDACTED } = require('./constants');
 
 module.exports = function(core) {
@@ -23,7 +23,7 @@ module.exports = function(core) {
   const keywordSets = [];
 
   function getRedactedText(key) {
-    key = key.toLowerCase();
+    key = StringPrototypeToLowerCase.call(key);
     for (const set of keywordSets) {
       if (set.has(key)) {
         return `${CONTRAST_REDACTED}-${idMap.get(set)}`;

package/lib/sensitive-data-masking/protect-listener.js

@@ -16,7 +16,7 @@
 'use strict';
 
 const { URLSearchParams } = require('url');
-const { Event } = require('@contrast/common');
+const { Event, primordials: { StringPrototypeReplace } } = require('@contrast/common');
 
 const { CONTRAST_REDACTED } = require('./constants');
 
@@ -50,9 +50,10 @@ module.exports = function (core) {
         const redactedText = getRedactedText(key);
         if (redactedText) {
           const encoded = encodeURIComponent(value);
-          msg.protect.reqData.uriPath = msg.protect.reqData.uriPath.replace(
+          msg.protect.reqData.uriPath = StringPrototypeReplace.call(
+            msg.protect.reqData.uriPath,
             encoded,
-            redactedText,
+            redactedText
           );
           msg.protect.parsedParams[key] = redactedText;
         }

package/lib/system-info/index.js

@@ -18,6 +18,7 @@
 const fs = require('fs/promises');
 const os = require('os');
 const { getCloudProviderMetadata } = require('./cloud-provider-metadata');
+const { primordials: { StringPrototypeConcat, StringPrototypeMatch } } = require('@contrast/common');
 
 const MOUNTINFO_REGEX = /\/docker\/containers\/(.*?)\//;
 const CGROUP_REGEX = /:\/docker\/([^/]+)$/;
@@ -36,7 +37,7 @@ async function isDocker() {
   try {
     const result = await fs.readFile('/proc/self/mountinfo', 'utf8');
     // @ts-expect-error readFile with encoding returns a string, not a Buffer
-    const matches = result.match(MOUNTINFO_REGEX);
+    const matches = StringPrototypeMatch.call(result, MOUNTINFO_REGEX);
     if (matches) return { isDocker: true, containerID: matches[1] };
   } catch (err) {
     // else check /proc/self/cgroup
@@ -45,7 +46,7 @@ async function isDocker() {
   try {
     const result = await fs.readFile('/proc/self/cgroup', 'utf8');
     // @ts-expect-error readFile with encoding returns a string, not a Buffer
-    const matches = result.match(CGROUP_REGEX);
+    const matches = StringPrototypeMatch.call(result, CGROUP_REGEX);
     if (matches) return { isDocker: true, containerID: matches[1] };
   } catch (err) {
     // else check /.dockerenv
@@ -114,9 +115,9 @@ module.exports = function(core) {
         Docker: await isDocker(),
         PM2: isUsingPM2(appInfo.pkg),
         Memory: {
-          Total: (totalmem / 1e6).toFixed(0).concat(' MB'),
-          Free: (freemem / 1e6).toFixed(0).concat(' MB'),
-          Used: ((totalmem - freemem) / 1e6).toFixed(0).concat(' MB'),
+          Total: StringPrototypeConcat.call((totalmem / 1e6).toFixed(0), ' MB'),
+          Free: StringPrototypeConcat.call((freemem / 1e6).toFixed(0), ' MB'),
+          Used: StringPrototypeConcat.call(((totalmem - freemem) / 1e6).toFixed(0), ' MB'),
         }
       },
       Application: appInfo.pkg,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/core",
-  "version": "1.37.0",
+  "version": "1.39.0",
   "description": "Preconfigured Contrast agent core services and models",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -16,12 +16,13 @@
     "test": "../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/common": "1.25.0",
-    "@contrast/config": "1.33.0",
+    "@contrast/common": "1.26.0",
+    "@contrast/config": "1.34.0",
     "@contrast/find-package-json": "^1.1.0",
     "@contrast/fn-inspect": "^4.3.0",
-    "@contrast/logger": "1.10.0",
-    "@contrast/patcher": "1.9.0",
-    "axios": "^1.7.4"
+    "@contrast/logger": "1.12.0",
+    "@contrast/patcher": "1.11.0",
+    "axios": "^1.7.4",
+    "semver": "^7.6.0"
   }
 }