@contrast/protect 1.53.1 → 1.54.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -235,6 +235,7 @@ describe('protect input-tracing handlers', function () {
|
|
|
235
235
|
describe('handleSqlInjection()', function () {
|
|
236
236
|
const sinkContextPositive = {
|
|
237
237
|
name: 'mysql.query',
|
|
238
|
+
// 0123456789*123456789*123456789*123456789*123456789*123456789*1234567890123
|
|
238
239
|
value: 'select * from foo where col = """ and 1 = 1; --" or col = "" and 1 = 1; --',
|
|
239
240
|
stack: [],
|
|
240
241
|
};
|
|
@@ -244,9 +245,9 @@ describe('protect input-tracing handlers', function () {
|
|
|
244
245
|
stack: [],
|
|
245
246
|
};
|
|
246
247
|
const findings = {
|
|
247
|
-
boundaryIndex:
|
|
248
|
+
boundaryIndex: 58,
|
|
248
249
|
endIndex: 74,
|
|
249
|
-
overrunIndex:
|
|
250
|
+
overrunIndex: 60,
|
|
250
251
|
startIndex: 59,
|
|
251
252
|
};
|
|
252
253
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@contrast/protect",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.54.0",
|
|
4
4
|
"description": "Contrast service providing framework-agnostic Protect support",
|
|
5
5
|
"license": "SEE LICENSE IN LICENSE",
|
|
6
6
|
"author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
|
|
@@ -17,16 +17,16 @@
|
|
|
17
17
|
"test": "../scripts/test.sh"
|
|
18
18
|
},
|
|
19
19
|
"dependencies": {
|
|
20
|
-
"@contrast/agent-lib": "^
|
|
20
|
+
"@contrast/agent-lib": "^9.0.0",
|
|
21
21
|
"@contrast/common": "1.29.1",
|
|
22
22
|
"@contrast/config": "1.40.1",
|
|
23
23
|
"@contrast/core": "1.45.1",
|
|
24
24
|
"@contrast/dep-hooks": "1.14.1",
|
|
25
|
-
"@contrast/esm-hooks": "2.19.
|
|
25
|
+
"@contrast/esm-hooks": "2.19.2",
|
|
26
26
|
"@contrast/instrumentation": "1.24.1",
|
|
27
27
|
"@contrast/logger": "1.18.1",
|
|
28
28
|
"@contrast/patcher": "1.17.1",
|
|
29
|
-
"@contrast/rewriter": "1.21.
|
|
29
|
+
"@contrast/rewriter": "1.21.2",
|
|
30
30
|
"@contrast/scopes": "1.15.1",
|
|
31
31
|
"async-hook-domain": "^4.0.1",
|
|
32
32
|
"ipaddr.js": "^2.0.1",
|