@contrast/protect 1.71.0 → 1.72.0

package/lib/input-analysis/index.js

@@ -42,10 +42,6 @@ module.exports = function(core) {
   require('./install/hapi')(core);
   require('./install/restify')(core);
 
-  // no-instrumentation scope wrappers for false positive prevention
-  require('./install/fastify-send')(core);
-  require('./install/send')(core);
-
   // virtual patches
   require('./virtual-patches')(core);
   require('./ip-analysis')(core);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/protect",
-  "version": "1.71.0",
+  "version": "1.72.0",
   "description": "Contrast service providing framework-agnostic Protect support",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -21,16 +21,16 @@
   },
   "dependencies": {
     "@contrast/agent-lib": "^9.1.0",
-    "@contrast/common": "1.38.0",
-    "@contrast/config": "1.54.1",
-    "@contrast/core": "1.59.1",
-    "@contrast/dep-hooks": "1.28.1",
-    "@contrast/esm-hooks": "2.34.1",
-    "@contrast/instrumentation": "1.38.1",
-    "@contrast/logger": "1.32.1",
-    "@contrast/patcher": "1.31.1",
-    "@contrast/rewriter": "1.36.1",
-    "@contrast/scopes": "1.29.1",
+    "@contrast/common": "1.39.0",
+    "@contrast/config": "1.55.0",
+    "@contrast/core": "1.60.0",
+    "@contrast/dep-hooks": "1.29.0",
+    "@contrast/esm-hooks": "2.35.0",
+    "@contrast/instrumentation": "1.39.0",
+    "@contrast/logger": "1.33.0",
+    "@contrast/patcher": "1.32.0",
+    "@contrast/rewriter": "1.37.0",
+    "@contrast/scopes": "1.30.0",
     "async-hook-domain": "^4.0.1",
     "ipaddr.js": "^2.0.1",
     "on-finished": "^2.4.1",

package/lib/input-analysis/install/fastify-send.js

@@ -1,52 +0,0 @@
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-
-'use strict';
-
-const { patchType } = require('../constants');
-
-module.exports = function (core) {
-  const { depHooks, patcher, scopes: { instrumentation } } = core;
-
-  return core.protect.inputAnalysis.fastifySendInstrumentation = {
-    install() {
-      const store = { lock: true, name: 'protect:input-analysis:fastify-send' };
-
-      const around = (next) => {
-        if (!instrumentation.isLocked()) {
-          return instrumentation.run(store, next);
-        }
-
-        return next();
-      };
-
-      depHooks.resolve({ name: '@fastify/send', version: '<3', file: 'lib/SendStream.js' }, (SendStream) => {
-        patcher.patch(SendStream.prototype, 'sendFile', {
-          name: '@fastify/send/lib/SendStream.js',
-          patchType,
-          around,
-        });
-      });
-
-      depHooks.resolve({ name: '@fastify/send', version: '>=3 <5', file: 'lib/send.js' }, (send) => {
-        patcher.patch(send, 'send', {
-          name: '@fastify/send/lib/send.js',
-          patchType,
-          around,
-        });
-      });
-    }
-  };
-};

package/lib/input-analysis/install/send.js

@@ -1,45 +0,0 @@
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-
-'use strict';
-
-const { patchType } = require('../constants');
-
-module.exports = function (core) {
-  const { depHooks, patcher, scopes: { instrumentation } } = core;
-
-  return core.protect.inputAnalysis.sendInstrumentation = {
-    install() {
-      const store = { lock: true, name: 'protect:input-analysis:send' };
-
-      const around = (next) => {
-        if (!instrumentation.isLocked()) {
-          return instrumentation.run(store, next);
-        }
-
-        return next();
-      };
-
-      depHooks.resolve(
-        { name: 'send', version: '<2' },
-        (send) => patcher.patch(send, {
-          name: 'send',
-          patchType,
-          around,
-        })
-      );
-    }
-  };
-};