@mitre/inspec-objects 2.0.4 → 2.1.0

package/lib/parsers/oval.js

@@ -19,7 +19,7 @@ const logging_1 = require("../utilities/logging");
  *         will be returned
 */
 function searchTree(aTree, fCompair, bGreedy) {
-    let oNode; // always the current node  
+    let oNode; // always the current node
     const aInnerTree = []; // will contain the inner children
     const aReturnNodes = []; // the nodes array which will returned
     // 1. loop through all root nodes, store tree content locally so we don't touch the tree structure
@@ -39,7 +39,7 @@ function searchTree(aTree, fCompair, bGreedy) {
             // find other objects, 1. check all properties of the node if they are arrays
             for (const keysNode in oNode) {
                 // true if the property is an array
-                if (oNode[keysNode] instanceof Array) {
+                if (Array.isArray(oNode[keysNode])) {
                     // 2. push all array object to aInnerTree to search in those later
                     for (let i = 0; i < oNode[keysNode].length; i++) {
                         aInnerTree.push(oNode[keysNode][i]);
@@ -62,17 +62,17 @@ function searchTree(aTree, fCompair, bGreedy) {
  */
 function extractAllCriteriaRefs(initialCriteria) {
     const criteriaRefs = [];
-    initialCriteria.forEach(criteria => {
-        var _a;
-        (_a = criteria.criterion) === null || _a === void 0 ? void 0 : _a.forEach((criterion) => {
-            if (criterion['@_test_ref']) {
-                criteriaRefs.push(criterion['@_test_ref']);
+    for (const criteria of initialCriteria) {
+        if (criteria.criterion)
+            for (const criterion of criteria.criterion) {
+                if (criterion['@_test_ref']) {
+                    criteriaRefs.push(criterion['@_test_ref']);
+                }
             }
-        });
         if (criteria.criteria) {
             criteriaRefs.push(...extractAllCriteriaRefs(criteria.criteria));
         }
-    });
+    }
     return criteriaRefs;
 }
 /**
@@ -94,7 +94,6 @@ function extractAllCriteriaRefs(initialCriteria) {
  *  criteria references and resolved values, or `undefined` if no OVAL string is provided.
  */
 function processOVAL(oval) {
-    var _a;
     const logger = (0, logging_1.createWinstonLogger)('ts-inspec-objects');
     if (!oval) {
         return undefined;
@@ -106,18 +105,15 @@ function processOVAL(oval) {
             for (const definition of definitionList.definition) {
                 extractedDefinitions[definition['@_id']] = definition;
                 extractedDefinitions[definition['@_id']].criteriaRefs = extractAllCriteriaRefs(definition.criteria);
-                extractedDefinitions[definition['@_id']].resolvedValues = (_a = extractedDefinitions[definition['@_id']].criteriaRefs) === null || _a === void 0 ? void 0 : _a.map((criteriaRef) => {
+                extractedDefinitions[definition['@_id']].resolvedValues = extractedDefinitions[definition['@_id']].criteriaRefs?.map((criteriaRef) => {
                     // Extract the original criteria from the oval file
                     const foundCriteriaRefererence = searchTree(parsed.oval_definitions[0].tests, (oNode) => oNode['@_id'] === criteriaRef, false)[0];
                     const foundObjects = [];
                     const foundStates = [];
                     if (foundCriteriaRefererence) {
                         if (foundCriteriaRefererence.object) {
-                            foundCriteriaRefererence.object.forEach((object) => {
-                                if (!object['@_object_ref']) {
-                                    logger.warn(`Found object without object_ref in test ${criteriaRef}`);
-                                }
-                                else {
+                            for (const object of foundCriteriaRefererence.object) {
+                                if (object['@_object_ref']) {
                                     const objectRef = object['@_object_ref'];
                                     const foundObjectReference = searchTree(parsed.oval_definitions[0].objects, (oNode) => oNode['@_id'] === objectRef, false)[0];
                                     if (foundObjectReference) {
@@ -127,14 +123,14 @@ function processOVAL(oval) {
                                         logger.warn(`Could not find object ${objectRef} for test ${criteriaRef}`);
                                     }
                                 }
-                            });
+                                else {
+                                    logger.warn(`Found object without object_ref in test ${criteriaRef}`);
+                                }
+                            }
                         }
                         if (foundCriteriaRefererence.state) {
-                            foundCriteriaRefererence.state.forEach((state) => {
-                                if (!state['@_state_ref']) {
-                                    logger.warn(`Found state without state_ref in test ${criteriaRef}`);
-                                }
-                                else {
+                            for (const state of foundCriteriaRefererence.state) {
+                                if (state['@_state_ref']) {
                                     const stateRef = state['@_state_ref'];
                                     const foundStateReference = searchTree(parsed.oval_definitions[0].states, (oNode) => oNode['@_id'] === stateRef, false)[0];
                                     if (foundStateReference) {
@@ -144,11 +140,14 @@ function processOVAL(oval) {
                                         logger.warn(`Could not find state ${stateRef} for test ${criteriaRef}`);
                                     }
                                 }
-                            });
+                                else {
+                                    logger.warn(`Found state without state_ref in test ${criteriaRef}`);
+                                }
+                            }
                         }
                     }
                     return { ...foundCriteriaRefererence, resolvedObjects: foundObjects, resolvedStates: foundStates };
-                }).filter((value) => value);
+                }).filter(Boolean);
             }
         }
     }

package/lib/parsers/xccdf.d.ts

@@ -1,6 +1,6 @@
 import Profile from '../objects/profile';
-import { BenchmarkGroup, BenchmarkRule, RuleComplexCheck } from '../types/xccdf';
 import { OvalDefinitionValue } from '../types/oval';
+import { BenchmarkGroup, BenchmarkRule, RuleComplexCheck } from '../types/xccdf';
 export type GroupContextualizedRule = BenchmarkRule & {
     group: Omit<BenchmarkGroup, 'Rule' | 'Group'>;
 };

package/lib/parsers/xccdf.js

@@ -4,13 +4,13 @@ exports.extractAllRules = extractAllRules;
 exports.extractAllComplexChecks = extractAllComplexChecks;
 exports.processXCCDF = processXCCDF;
 const tslib_1 = require("tslib");
-const profile_1 = tslib_1.__importDefault(require("../objects/profile"));
-const xccdf_1 = require("../utilities/xccdf");
-const control_1 = tslib_1.__importDefault(require("../objects/control"));
+const htmlfy_1 = require("htmlfy");
 const lodash_1 = tslib_1.__importDefault(require("lodash"));
-const CciNistMappingData_1 = require("../mappings/CciNistMappingData");
-const pretty_1 = tslib_1.__importDefault(require("pretty"));
+const cci_nist_mapping_data_1 = require("../mappings/cci-nist-mapping-data");
+const control_1 = tslib_1.__importDefault(require("../objects/control"));
+const profile_1 = tslib_1.__importDefault(require("../objects/profile"));
 const logging_1 = require("../utilities/logging");
+const xccdf_1 = require("../utilities/xccdf");
 /**
  * Extracts all rules from the given benchmark groups, including nested groups.
  *
@@ -19,19 +19,19 @@ const logging_1 = require("../utilities/logging");
  */
 function extractAllRules(groups) {
     const rules = [];
-    groups.forEach((group) => {
+    for (const group of groups) {
         if (group.Rule) {
             rules.push(...(group.Rule.map((rule) => {
                 return {
                     ...rule,
-                    group: lodash_1.default.omit(group, ['Rule', 'Group'])
+                    group: lodash_1.default.omit(group, ['Rule', 'Group']),
                 };
             })));
         }
         if (group.Group) {
             rules.push(...extractAllRules(group.Group));
         }
-    });
+    }
     return rules;
 }
 /**
@@ -47,10 +47,10 @@ function extractAllRules(groups) {
 function extractAllComplexChecks(complexCheck) {
     const complexChecks = [lodash_1.default.omit(complexCheck, 'complex-check')];
     if (complexCheck['complex-check']) {
-        complexChecks.push(...complexCheck['complex-check'].map((subComplexCheck) => lodash_1.default.omit(subComplexCheck, 'complex-check')));
-        complexCheck['complex-check'].forEach((subComplexCheck) => {
+        complexChecks.push(...complexCheck['complex-check'].map(subComplexCheck => lodash_1.default.omit(subComplexCheck, 'complex-check')));
+        for (const subComplexCheck of complexCheck['complex-check']) {
             complexChecks.push(...extractAllComplexChecks(subComplexCheck));
-        });
+        }
     }
     return complexChecks;
 }
@@ -70,9 +70,9 @@ function extractAllComplexChecks(complexCheck) {
 function ensureDecodedXMLStringValue(input, defaultValue) {
     return lodash_1.default.isString(input)
         ? input
-        : lodash_1.default.isArray(input)
+        : (lodash_1.default.isArray(input)
             ? lodash_1.default.get(input, '[0].#text', defaultValue)
-            : lodash_1.default.get(input, '#text', defaultValue);
+            : lodash_1.default.get(input, '#text', defaultValue));
 }
 /**
  * Processes an XCCDF (Extensible Configuration Checklist Description Format) XML
@@ -101,31 +101,31 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
     // Variable used to store the profile data.
     // The name is the benchmark Id, title and summary are from benchmark.
     const profile = new profile_1.default({
-        //name: parsedXML.Benchmark[0]['@_id'],
+        // name: parsedXML.Benchmark[0]['@_id'],
         // title: (parsedXML.Benchmark[0].title[0] as FrontMatter)['#text'],
         // summary: (parsedXML.Benchmark[0].description[0] as RationaleElement)['#text']
         name: Array.isArray(parsedXML.Benchmark[0]['@_id'])
-            ? parsedXML.Benchmark[0]['@_id'].map(n => n['@_id']).join(' ') === ''
+            ? (parsedXML.Benchmark[0]['@_id'].map(n => n['@_id']).join(' ') === ''
                 ? parsedXML.Benchmark[0]['@_id'].map(n => n).join(' ')
-                : parsedXML.Benchmark[0]['@_id'].join(' ')
+                : parsedXML.Benchmark[0]['@_id'].join(' '))
             : parsedXML.Benchmark[0]['@_id'],
         title: Array.isArray(parsedXML.Benchmark[0].title)
-            ? parsedXML.Benchmark[0].title.map(t => t['#text']).join(' ') === ''
+            ? (parsedXML.Benchmark[0].title.map(t => t['#text']).join(' ') === ''
                 ? parsedXML.Benchmark[0].title.map(t => t).join(' ')
-                : parsedXML.Benchmark[0].title.map(t => t['#text']).join(' ')
+                : parsedXML.Benchmark[0].title.map(t => t['#text']).join(' '))
             : parsedXML.Benchmark[0].title,
         summary: Array.isArray(parsedXML.Benchmark[0].description)
             ? parsedXML.Benchmark[0].description.map(d => d['#text']).join(' ') === ''
+                // eslint-disable-next-line unicorn/no-nested-ternary
                 ? parsedXML.Benchmark[0].description.map(d => d['p'] || '').join(' ') === ''
                     ? parsedXML.Benchmark[0].description.map(d => d).join(' ')
                     : parsedXML.Benchmark[0].description.map(d => d['p'] || '').join(' ')
                 : parsedXML.Benchmark[0].description.map(d => d['#text']).join(' ')
-            : parsedXML.Benchmark[0].description
+            : parsedXML.Benchmark[0].description,
     });
     // Process each rule, extracting the necessary
     // data and save it to the profile variable.
-    rules.forEach(rule => {
-        var _a, _b, _c;
+    for (const rule of rules) {
         // The description tag contains the following tags:
         //   "FalsePositives", "FalseNegatives", "Documentable", "Mitigations",
         //   "SeverityOverrideGuidance", "PotentialImpacts", "ThirdPartyTools",
@@ -137,12 +137,12 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
             }
             else {
                 if (typeof lodash_1.default.get(rule.description, '[0].p') === 'string') {
-                    extractedDescription = (0, pretty_1.default)(lodash_1.default.get(rule.description, '[0].p'));
+                    extractedDescription = (0, htmlfy_1.prettify)(lodash_1.default.get(rule.description, '[0].p'));
                 }
                 else {
                     if (Array.isArray(lodash_1.default.get(rule.description, '[0].p'))) {
                         const joinedDescriptions = lodash_1.default.get(rule.description, '[0].p');
-                        extractedDescription = (0, pretty_1.default)(joinedDescriptions.join('\n\n'));
+                        extractedDescription = (0, htmlfy_1.prettify)(joinedDescriptions.join('\n\n'));
                         extractedDescription = (0, xccdf_1.removeHtmlTags)(extractedDescription).replace('\n', ' ');
                     }
                     else if (Array.isArray(rule.description)) {
@@ -161,25 +161,23 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
         const control = new control_1.default();
         // Update the control Id with the appropriate value based on the rule id.
         switch (useRuleId) {
-            case 'group':
+            case 'group': {
                 control.id = rule.group['@_id'].toString();
                 break;
-            case 'rule':
-                if (rule['@_id'][0].toLowerCase().startsWith('sv')) {
-                    control.id = rule['@_id'][0].split('r')[0];
-                }
-                else {
-                    control.id = rule['@_id'][0];
-                }
+            }
+            case 'rule': {
+                control.id = rule['@_id'][0].toLowerCase().startsWith('sv') ? rule['@_id'][0].split('r')[0] : rule['@_id'][0];
                 break;
-            case 'version':
-                if (rule.version !== undefined) {
-                    control.id = (lodash_1.default.isArray(rule.version)) ? rule.version[0] : rule.version;
+            }
+            case 'version': {
+                if (rule.version === undefined) {
+                    throw new Error('The rule type "version" did not provide an identification (Id) value');
                 }
                 else {
-                    throw new Error('The rule type "version" did not provide an identification (Id) value');
+                    control.id = (lodash_1.default.isArray(rule.version)) ? rule.version[0] : rule.version;
                 }
                 break;
+            }
             case 'cis': {
                 // Regex explained
                 // \d:
@@ -203,8 +201,9 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
                 }
                 break;
             }
-            default:
+            default: {
                 throw new Error('useRuleId must be one of "group", "rule", "version" for STIG benchmarks, or "cis" for CIS benchmarks');
+            }
         }
         if (!(lodash_1.default.isArray(rule.title) && rule.title.length === 1)) {
             throw new Error('Rule title is not an array of length 1. Investigate if the file is in the proper format.');
@@ -217,7 +216,7 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
             : `[[[MISSING SEVERITY or WEIGHT FROM BENCHMARK]]] ${ensureDecodedXMLStringValue(rule.title[0], 'undefined title')}`);
         // Update the control description (desc) with the extracted description content
         if (typeof extractedDescription === 'object' && !Array.isArray(extractedDescription)) {
-            control.desc = ((_a = extractedDescription.VulnDiscussion) === null || _a === void 0 ? void 0 : _a.split('Satisfies: ')[0]) || '';
+            control.desc = extractedDescription.VulnDiscussion?.split('Satisfies: ')[0] || '';
         }
         else if (typeof extractedDescription === 'object') {
             control.desc = JSON.stringify(extractedDescription);
@@ -236,11 +235,11 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
         }
         // Update the control descriptions (descs) check with the check text from the rule,
         if (rule.check) {
-            if (rule.check.some((ruleValue) => 'check-content' in ruleValue)) {
+            if (rule.check.some(ruleValue => 'check-content' in ruleValue)) {
                 control.descs.check = (0, xccdf_1.removeXMLSpecialCharacters)(rule.check ? rule.check[0]['check-content'][0] : 'Missing description');
                 control.tags.check_id = rule.check[0]['@_system'];
             }
-            else if (rule.check.some((ruleValue) => 'check-content-ref' in ruleValue) && ovalDefinitions) {
+            else if (rule.check.some(ruleValue => 'check-content-ref' in ruleValue) && ovalDefinitions) {
                 let referenceID = null;
                 for (const checkContent of rule.check) {
                     if ('check-content-ref' in checkContent && checkContent['@_system'].includes('oval')) {
@@ -261,30 +260,28 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
                 }
             }
         }
-        // Very CIS specific
-        else if (rule['complex-check']) {
+        else if (rule['complex-check']) { // Very CIS specific
             const checkTexts = [];
             for (const complexChecks of rule['complex-check']) {
                 const allComplexChecks = extractAllComplexChecks(complexChecks);
                 if (control.id === '1.1.1.5') {
                     logger.info(allComplexChecks);
                 }
-                allComplexChecks.forEach((complexCheck) => {
+                for (const complexCheck of allComplexChecks) {
                     if (complexCheck.check) {
-                        complexCheck.check.forEach((check) => {
-                            var _a;
-                            if ((_a = check['@_system']) === null || _a === void 0 ? void 0 : _a.toString().toLowerCase().includes('oval')) {
+                        for (const check of complexCheck.check) {
+                            if (check['@_system']?.toString().toLowerCase().includes('oval')) {
                                 const ovalReference = check['check-content-ref'][0]['@_name'];
                                 if (!ovalDefinitions) {
                                     logger.warn(`Missing OVAL definitions! Unable to process OVAL reference: ${ovalReference}`);
                                 }
                                 else if (ovalReference && ovalReference in ovalDefinitions) {
-                                    ovalDefinitions[ovalReference].resolvedValues.forEach((resolvedValue) => {
+                                    for (const resolvedValue of ovalDefinitions[ovalReference].resolvedValues) {
                                         const comment = resolvedValue['@_comment'];
                                         if (comment) {
                                             checkTexts.push(comment + '\n');
                                         }
-                                        resolvedValue.resolvedObjects.forEach((resolvedObject) => {
+                                        for (const resolvedObject of resolvedValue.resolvedObjects) {
                                             // Try to find the associated state for a resolved object
                                             const resolvedId = resolvedObject['@_id'].split(':')[resolvedValue['@_id'].split(':').length - 1];
                                             if (resolvedId) {
@@ -294,18 +291,18 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
                                                 }
                                             }
                                             checkTexts.push(JSON.stringify(lodash_1.default.pickBy(resolvedObject, (value, key) => !key.startsWith('@_')), null, 2));
-                                        });
-                                    });
+                                        }
+                                    }
                                 }
                             }
                             else {
                                 logger.warn(`Found external reference to unknown system: ${check['@_system']}, only OVAL is supported`);
                             }
-                        });
+                        }
                     }
-                });
+                }
             }
-            if (checkTexts.length >= 1) {
+            if (checkTexts.length > 0) {
                 control.descs.check = checkTexts.join('\n');
             }
         }
@@ -314,7 +311,7 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
         if (lodash_1.default.get(rule.fixtext, '[0]["#text"]')) {
             control.descs.fix = (0, xccdf_1.removeXMLSpecialCharacters)(rule.fixtext[0]['#text']);
         }
-        else if (typeof rule.fixtext === 'undefined') {
+        else if (rule.fixtext === undefined) {
             if (rule.fix && rule.fix[0]) {
                 control.descs.fix = (0, xccdf_1.removeHtmlTags)(rule.fix[0]['#text'] || 'Missing fix text');
             }
@@ -323,19 +320,11 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
             control.descs.fix = (0, xccdf_1.removeHtmlTags)(rule.fixtext[0]);
         }
         else if (typeof rule.fixtext[0] === 'object') {
-            if (Array.isArray(rule.fixtext[0])) {
-                control.descs.fix = (0, xccdf_1.removeHtmlTags)((0, pretty_1.default)((0, xccdf_1.convertJsonIntoXML)(rule.fixtext[0].map((fixtext) => {
-                    if (fixtext.div) {
-                        return fixtext.div;
-                    }
-                    else {
-                        return fixtext;
-                    }
-                }))));
-            }
-            else {
-                control.descs.fix = (0, xccdf_1.removeHtmlTags)((0, xccdf_1.removeXMLSpecialCharacters)((0, pretty_1.default)((0, xccdf_1.convertJsonIntoXML)(rule.fixtext)))).replace('\n', ' ').trim();
-            }
+            control.descs.fix = Array.isArray(rule.fixtext[0])
+                ? (0, xccdf_1.removeHtmlTags)((0, htmlfy_1.prettify)((0, xccdf_1.convertJsonIntoXML)(rule.fixtext[0].map((fixtext) => {
+                    return fixtext.div || fixtext;
+                }))))
+                : (0, xccdf_1.removeHtmlTags)((0, xccdf_1.removeXMLSpecialCharacters)((0, htmlfy_1.prettify)((0, xccdf_1.convertJsonIntoXML)(rule.fixtext)))).replace('\n', ' ').trim();
         }
         else {
             control.descs.fix = 'Missing fix text';
@@ -365,8 +354,8 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
         //   "SeverityOverrideGuidance", "PotentialImpacts", "ThirdPartyTools",
         //   "MitigationControl", "Responsibility", "IAControls"
         if (typeof extractedDescription === 'object') {
-            control.tags.satisfies =
-                ((_b = extractedDescription.VulnDiscussion) === null || _b === void 0 ? void 0 : _b.includes('Satisfies: ')) && extractedDescription.VulnDiscussion.split('Satisfies: ').length >= 1
+            control.tags.satisfies
+                = extractedDescription.VulnDiscussion?.includes('Satisfies: ') && extractedDescription.VulnDiscussion.split('Satisfies: ').length > 0
                     ? extractedDescription.VulnDiscussion.split('Satisfies: ')[1].split(',').map(satisfaction => satisfaction.trim())
                     : undefined;
             control.tags.false_negatives = extractedDescription.FalseNegatives || undefined;
@@ -384,7 +373,7 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
             control.tags.ia_controls = extractedDescription.IAControls || undefined;
         }
         // Ensure that tags inside the tags array are not an array
-        control.tags = lodash_1.default.mapValues(lodash_1.default.omitBy(control.tags, (value) => value === undefined), (value) => {
+        control.tags = lodash_1.default.mapValues(lodash_1.default.omitBy(control.tags, value => value === undefined), (value) => {
             if (value && Array.isArray(value)) {
                 if (Array.isArray(value[0])) {
                     return (0, xccdf_1.removeXMLSpecialCharacters)(value[0][0]);
@@ -405,110 +394,106 @@ function processXCCDF(xml, removeNewlines, useRuleId, ovalDefinitions) {
         });
         // Get all identifiers from the rule; cci, nist, and legacy
         if (rule.ident) {
-            rule.ident.forEach((identifier) => {
-                var _a, _b, _c;
+            for (const identifier of rule.ident) {
                 // Get CCIs
                 if (identifier['@_system'][0].toLowerCase().includes('cci')) {
                     if (!('cci' in control.tags)) {
                         control.tags.cci = [];
                     }
-                    (_a = control.tags.cci) === null || _a === void 0 ? void 0 : _a.push(identifier['#text']);
+                    control.tags.cci?.push(identifier['#text']);
                 }
-                // Get legacy identifiers
-                else if (identifier['@_system'][0].toLowerCase().includes('legacy')) {
+                else if (identifier['@_system'][0].toLowerCase().includes('legacy')) { // Get legacy identifiers
                     if (!('legacy' in control.tags)) {
                         control.tags.legacy = [];
                     }
-                    (_b = control.tags.legacy) === null || _b === void 0 ? void 0 : _b.push(identifier['#text']);
+                    control.tags.legacy?.push(identifier['#text']);
                 }
-                // Get NIST identifiers
-                else if (identifier['@_system'].toString().toLowerCase().includes('nist')) {
+                else if (identifier['@_system'].toString().toLowerCase().includes('nist')) { // Get NIST identifiers
                     if (!('nist' in control.tags)) {
                         control.tags.nist = [];
                     }
-                    (_c = control.tags.nist) === null || _c === void 0 ? void 0 : _c.push(identifier['#text']);
+                    control.tags.nist?.push(identifier['#text']);
                 }
-            });
+            }
         }
         // Update control references with content from the benchmark rule object
-        (_c = rule.reference) === null || _c === void 0 ? void 0 : _c.forEach((reference) => {
-            var _a, _b, _c, _d, _e;
-            if (lodash_1.default.get(reference, '@_href') === '') {
-                (_a = control.refs) === null || _a === void 0 ? void 0 : _a.push(lodash_1.default.get(reference, '#text', 'undefined href'));
-            }
-            else {
-                try {
-                    const referenceText = lodash_1.default.get(reference, '#text') || '';
-                    const referenceURL = lodash_1.default.get(reference, '@_href') || '';
-                    if (referenceURL) {
-                        const parsedURL = new URL(lodash_1.default.get(reference, '@_href', 'undefined href'));
-                        if (parsedURL.protocol.toLowerCase().includes('http') || parsedURL.protocol.toLowerCase().includes('https')) {
-                            (_b = control.refs) === null || _b === void 0 ? void 0 : _b.push({
-                                ref: referenceText,
-                                url: referenceURL
-                            });
-                        }
-                        else {
-                            (_c = control.refs) === null || _c === void 0 ? void 0 : _c.push({
-                                ref: referenceText,
-                                uri: referenceURL
-                            });
-                        }
-                    }
-                    else {
-                        if ('title' in reference) {
-                            const title = lodash_1.default.get(reference, 'title');
-                            if (Array.isArray(title)) {
-                                (_d = control.refs) === null || _d === void 0 ? void 0 : _d.push(title[0]);
+        if (rule.reference)
+            for (const reference of rule.reference) {
+                if (lodash_1.default.get(reference, '@_href') === '') {
+                    control.refs?.push(lodash_1.default.get(reference, '#text', 'undefined href'));
+                }
+                else {
+                    try {
+                        const referenceText = lodash_1.default.get(reference, '#text') || '';
+                        const referenceURL = lodash_1.default.get(reference, '@_href') || '';
+                        if (referenceURL) {
+                            const parsedURL = new URL(lodash_1.default.get(reference, '@_href', 'undefined href'));
+                            if (parsedURL.protocol.toLowerCase().includes('http') || parsedURL.protocol.toLowerCase().includes('https')) {
+                                control.refs?.push({
+                                    ref: referenceText,
+                                    url: referenceURL,
+                                });
                             }
                             else {
-                                (_e = control.refs) === null || _e === void 0 ? void 0 : _e.push(lodash_1.default.get(reference, 'title'));
+                                control.refs?.push({
+                                    ref: referenceText,
+                                    uri: referenceURL,
+                                });
                             }
                         }
-                    }
-                    // Add the reference to the control tags when separated by §
-                    if (typeof referenceText === 'string' && referenceText.indexOf('§') !== -1) {
-                        const referenceParts = referenceText.split('§');
-                        if (referenceParts.length == 2) {
-                            // eslint-disable-next-line  prefer-const
-                            let [identifierType, identifier] = referenceText.split('§');
-                            identifierType = identifierType.toLowerCase();
-                            if (!(identifierType in control.tags)) {
-                                control.tags[identifierType] = [identifier];
+                        else {
+                            if ('title' in reference) {
+                                const title = lodash_1.default.get(reference, 'title');
+                                if (Array.isArray(title)) {
+                                    control.refs?.push(title[0]);
+                                }
+                                else {
+                                    control.refs?.push(lodash_1.default.get(reference, 'title'));
+                                }
                             }
-                            else if (Array.isArray(control.tags[identifierType])) {
-                                control.tags[identifierType] = lodash_1.default.union(control.tags[identifierType], [identifier]);
+                        }
+                        // Add the reference to the control tags when separated by §
+                        if (typeof referenceText === 'string' && referenceText.includes('§')) {
+                            const referenceParts = referenceText.split('§');
+                            if (referenceParts.length == 2) {
+                                // eslint-disable-next-line  prefer-const
+                                let [identifierType, identifier] = referenceText.split('§');
+                                identifierType = identifierType.toLowerCase();
+                                if (!(identifierType in control.tags)) {
+                                    control.tags[identifierType] = [identifier];
+                                }
+                                else if (Array.isArray(control.tags[identifierType])) {
+                                    control.tags[identifierType] = lodash_1.default.union(control.tags[identifierType], [identifier]);
+                                }
+                                else {
+                                    logger.warn(`Attempted to push identifier to control tags when identifier already exists: ${identifierType}: ${identifier}`);
+                                }
                             }
                             else {
-                                logger.warn(`Attempted to push identifier to control tags when identifier already exists: ${identifierType}: ${identifier}`);
+                                logger.warn('Reference parts of invalid length: ', referenceParts);
                             }
                         }
-                        else {
-                            logger.warn('Reference parts of invalid length: ', referenceParts);
-                        }
                     }
-                }
-                catch (e) {
-                    logger.warn(`Error parsing ref for control ${control.id}: `);
-                    logger.warn(JSON.stringify(reference, null, 2));
-                    logger.warn(e);
+                    catch (error) {
+                        logger.warn(`Error parsing ref for control ${control.id}: `);
+                        logger.warn(JSON.stringify(reference, null, 2));
+                        logger.warn(error);
+                    }
                 }
             }
-        });
         // Associate any CCIs with NIST tags
         if (control.tags.cci) {
-            control.tags.cci.forEach((cci) => {
-                var _a;
+            for (const cci of control.tags.cci) {
                 if (!('nist' in control.tags)) {
                     control.tags.nist = [];
                 }
-                if (cci in CciNistMappingData_1.data) {
-                    (_a = control.tags.nist) === null || _a === void 0 ? void 0 : _a.push(lodash_1.default.get(CciNistMappingData_1.data, cci));
+                if (cci in cci_nist_mapping_data_1.data) {
+                    control.tags.nist?.push(lodash_1.default.get(cci_nist_mapping_data_1.data, cci));
                 }
-            });
+            }
         }
         profile.controls.push(control);
-    });
+    }
     profile.controls = lodash_1.default.sortBy(profile.controls, 'id');
     return profile.toUnformattedObject();
 }