@contrast/protect 1.53.1 → 1.54.1

package/lib/semantic-analysis/utils/xml-analysis.test.js

@@ -1,156 +0,0 @@
-'use strict';
-
-const { expect } = require('chai');
-
-const {
-  findExternalEntities,
-  isExternalEntity
-} = require('./xml-analysis');
-
-const XML = `
-<!DOCTYPE doc [
-  <!ENTITY ent SYSTEM "file:///tmp/marker">
-  <!ENTITY ent2 not_external "hoohoo">
-  <!ENTITY ent3 PUBLIC "http://www.google.com/marker">
-  <!ENTITY ent4 not_either "hehehe">
-  <!ENTITY ent5 PUBLIC "entity-public-id" "http://www.google.com/marker-1">
-]>
-<root>
-  <element>&ent;</element>
-  <element>&ent2;</element>
-</root>`;
-
-const XML_PROLOG = `
-<!DOCTYPE doc [
-  <!ENTITY ent SYSTEM "file:///tmp/marker">
-  <!ENTITY ent2 not_external "hoohoo">
-  <!ENTITY ent3 PUBLIC "http://www.google.com/marker">
-  <!ENTITY ent4 not_either "hehehe">
-  <!ENTITY ent5 PUBLIC "entity-public-id" "http://www.google.com/marker-1">`;
-
-describe('protect semantic-analysis utils xml-analysis', function() {
-  describe('findExternalEntities', function() {
-    it('should instantiate a xml finder properly', function() {
-      const finder = findExternalEntities(XML);
-
-      expect(finder).to.have.property('prolog', XML_PROLOG);
-      expect(finder)
-        .to.have.property('entities')
-        .that.deep.equals([
-          {
-            finish: 60,
-            start: 19,
-            type: 'SYSTEM',
-            uri: 'file:///tmp/marker'
-          },
-          {
-            finish: 267,
-            start: 194,
-            type: 'PUBLIC',
-            uri: 'http://www.google.com/marker-1'
-          }
-        ]);
-    });
-
-    it('should default xml to empty string if undefined', function() {
-      const finder = findExternalEntities();
-      expect(finder).to.eql({
-        entities: [],
-        prolog: null
-      });
-    });
-  });
-
-  describe('isExternalEntity', function() {
-    it('handles undefined properly', function() {
-      expect(isExternalEntity()).to.be.false;
-    });
-
-    it('can determine external http', function() {
-      const uri = 'http://something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine external https', function() {
-      const uri = 'https://something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine external http - ignore dtd', function() {
-      const uri = 'http://something.dtd';
-      expect(isExternalEntity(uri)).to.be.false;
-    });
-
-    it('can determine external https - ignore dtd', function() {
-      const uri = 'https://something.dtd';
-      expect(isExternalEntity(uri)).to.be.false;
-    });
-
-    it('can determine external file', function() {
-      const uri = 'file://something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine external ftp', function() {
-      const uri = 'ftp://something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine external gopher', function() {
-      const uri = 'gopher://something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine external jar', function() {
-      const uri = 'jar://something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine slash start', function() {
-      const uri = '/something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine period start', function() {
-      const uri = './something.com';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can determine up dir', function() {
-      const posixUri = '../something.com';
-      expect(isExternalEntity(posixUri)).to.be.true;
-
-      const windowsUri = '..\\something.com';
-      expect(isExternalEntity(windowsUri)).to.be.true;
-    });
-
-    it('can determine windows files', function() {
-      const uri = '\\\\c:foo';
-      expect(isExternalEntity(uri)).to.be.true;
-    });
-
-    it('can find system entities', function() {
-      const declaration = '<!ENTITY ent SYSTEM "file:///tmp/marker">';
-      expect(findExternalEntities(declaration)).to.have.nested.property(
-        'entities[0].uri',
-        'file:///tmp/marker'
-      );
-    });
-
-    it('can find system entities using single quotes too', function() {
-      const declaration = "<!ENTITY ent SYSTEM 'file:///tmp/marker'>";
-      expect(findExternalEntities(declaration)).to.have.nested.property(
-        'entities[0].uri',
-        'file:///tmp/marker'
-      );
-    });
-
-    it('can find named public entities', function() {
-      const declaration = '<!ENTITY ent PUBLIC "asdf" "file:///tmp/marker">';
-      expect(findExternalEntities(declaration)).to.have.nested.property(
-        'entities[0].uri',
-        'file:///tmp/marker'
-      );
-    });
-  });
-});

package/lib/throw-security-exception.test.js

@@ -1,37 +0,0 @@
-'use strict';
-
-const { expect } = require('chai');
-const sinon = require('sinon');
-const mocks = require('@contrast/test/mocks');
-
-describe('protect throw-security-exception', function () {
-  let core, protect, sourceContext;
-
-  beforeEach(function () {
-    core = mocks.core();
-    core.logger = mocks.logger();
-    protect = core.protect = mocks.protect();
-    sourceContext = {
-      block: sinon.stub(),
-      securityException: ['block', 'cmd-injection']
-    };
-    require('./throw-security-exception')(core);
-  });
-
-  it('will throw a security exception if source context is provided', function () {
-    expect(function () {
-      protect.throwSecurityException(sourceContext);
-    }).to.throw('SecurityException');
-    expect(core.logger.debug).to.have.been.calledWith(sinon.match({
-      ruleId: 'cmd-injection',
-      mode: 'block',
-    }));
-  });
-
-  it('method is noop if source context is not provided', function () {
-    expect(function () {
-      protect.throwSecurityException();
-      expect(sourceContext.block).not.to.have.been.called;
-    }).not.to.throw('SecurityException');
-  });
-});