@nodesecure/js-x-ray 9.2.0 → 10.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (86) hide show
  1. package/dist/AstAnalyser.d.ts +19 -4
  2. package/dist/AstAnalyser.d.ts.map +1 -1
  3. package/dist/AstAnalyser.js +43 -25
  4. package/dist/AstAnalyser.js.map +1 -1
  5. package/dist/ProbeRunner.d.ts +21 -16
  6. package/dist/ProbeRunner.d.ts.map +1 -1
  7. package/dist/ProbeRunner.js +46 -16
  8. package/dist/ProbeRunner.js.map +1 -1
  9. package/dist/SourceFile.d.ts +2 -19
  10. package/dist/SourceFile.d.ts.map +1 -1
  11. package/dist/SourceFile.js +1 -30
  12. package/dist/SourceFile.js.map +1 -1
  13. package/dist/index.d.ts +1 -0
  14. package/dist/index.d.ts.map +1 -1
  15. package/dist/index.js +1 -0
  16. package/dist/index.js.map +1 -1
  17. package/dist/pipelines/Runner.class.d.ts +11 -0
  18. package/dist/pipelines/Runner.class.d.ts.map +1 -0
  19. package/dist/pipelines/Runner.class.js +20 -0
  20. package/dist/pipelines/Runner.class.js.map +1 -0
  21. package/dist/pipelines/deobfuscate.d.ts +8 -0
  22. package/dist/pipelines/deobfuscate.d.ts.map +1 -0
  23. package/dist/pipelines/deobfuscate.js +33 -0
  24. package/dist/pipelines/deobfuscate.js.map +1 -0
  25. package/dist/pipelines/index.d.ts +8 -0
  26. package/dist/pipelines/index.d.ts.map +1 -0
  27. package/dist/pipelines/index.js +8 -0
  28. package/dist/pipelines/index.js.map +1 -0
  29. package/dist/probes/data-exfiltration.d.ts +19 -0
  30. package/dist/probes/data-exfiltration.d.ts.map +1 -0
  31. package/dist/probes/data-exfiltration.js +84 -0
  32. package/dist/probes/data-exfiltration.js.map +1 -0
  33. package/dist/probes/isFetch.d.ts +5 -5
  34. package/dist/probes/isFetch.d.ts.map +1 -1
  35. package/dist/probes/isFetch.js +12 -4
  36. package/dist/probes/isFetch.js.map +1 -1
  37. package/dist/probes/isLiteral.js +1 -1
  38. package/dist/probes/isLiteral.js.map +1 -1
  39. package/dist/probes/isRequire/RequireCallExpressionWalker.d.ts.map +1 -1
  40. package/dist/probes/isRequire/RequireCallExpressionWalker.js +32 -35
  41. package/dist/probes/isRequire/RequireCallExpressionWalker.js.map +1 -1
  42. package/dist/probes/isRequire/isRequire.d.ts +4 -9
  43. package/dist/probes/isRequire/isRequire.d.ts.map +1 -1
  44. package/dist/probes/isRequire/isRequire.js +7 -9
  45. package/dist/probes/isRequire/isRequire.js.map +1 -1
  46. package/dist/probes/isSerializeEnv.d.ts +4 -6
  47. package/dist/probes/isSerializeEnv.d.ts.map +1 -1
  48. package/dist/probes/isSerializeEnv.js +13 -11
  49. package/dist/probes/isSerializeEnv.js.map +1 -1
  50. package/dist/probes/isSyncIO.d.ts +4 -6
  51. package/dist/probes/isSyncIO.d.ts.map +1 -1
  52. package/dist/probes/isSyncIO.js +6 -7
  53. package/dist/probes/isSyncIO.js.map +1 -1
  54. package/dist/probes/isUnsafeCallee.d.ts +2 -5
  55. package/dist/probes/isUnsafeCallee.d.ts.map +1 -1
  56. package/dist/probes/isUnsafeCallee.js +5 -7
  57. package/dist/probes/isUnsafeCallee.js.map +1 -1
  58. package/dist/probes/isUnsafeCommand.d.ts +2 -5
  59. package/dist/probes/isUnsafeCommand.d.ts.map +1 -1
  60. package/dist/probes/isUnsafeCommand.js +19 -9
  61. package/dist/probes/isUnsafeCommand.js.map +1 -1
  62. package/dist/probes/isWeakCrypto.d.ts +4 -6
  63. package/dist/probes/isWeakCrypto.d.ts.map +1 -1
  64. package/dist/probes/isWeakCrypto.js +7 -7
  65. package/dist/probes/isWeakCrypto.js.map +1 -1
  66. package/dist/types/estree.d.ts +4 -3
  67. package/dist/types/estree.d.ts.map +1 -1
  68. package/dist/types/estree.js +11 -0
  69. package/dist/types/estree.js.map +1 -1
  70. package/dist/walker/index.d.ts +9 -0
  71. package/dist/walker/index.d.ts.map +1 -0
  72. package/dist/walker/index.js +10 -0
  73. package/dist/walker/index.js.map +1 -0
  74. package/dist/walker/walker.base.d.ts +17 -0
  75. package/dist/walker/walker.base.d.ts.map +1 -0
  76. package/dist/walker/walker.base.js +45 -0
  77. package/dist/walker/walker.base.js.map +1 -0
  78. package/dist/walker/walker.sync.d.ts +15 -0
  79. package/dist/walker/walker.sync.d.ts.map +1 -0
  80. package/dist/walker/walker.sync.js +87 -0
  81. package/dist/walker/walker.sync.js.map +1 -0
  82. package/dist/warnings.d.ts +6 -1
  83. package/dist/warnings.d.ts.map +1 -1
  84. package/dist/warnings.js +8 -3
  85. package/dist/warnings.js.map +1 -1
  86. package/package.json +5 -6
package/dist/warnings.js CHANGED
@@ -52,17 +52,22 @@ export const warnings = Object.freeze({
52
52
  experimental: false
53
53
  },
54
54
  "unsafe-command": {
55
- i18n: "sast_warnings.unsafe-command",
55
+ i18n: "sast_warnings.unsafe_command",
56
56
  severity: "Warning",
57
57
  experimental: true
58
58
  },
59
59
  "synchronous-io": {
60
- i18n: "sast_warnings.synchronous-io",
60
+ i18n: "sast_warnings.synchronous_io",
61
61
  severity: "Warning",
62
62
  experimental: true
63
63
  },
64
64
  "serialize-environment": {
65
- i18n: "sast_warnings.serialize-environment",
65
+ i18n: "sast_warnings.serialize_environment",
66
+ severity: "Warning",
67
+ experimental: false
68
+ },
69
+ "data-exfiltration": {
70
+ i18n: "sast_warnings.data_exfiltration",
66
71
  severity: "Warning",
67
72
  experimental: false
68
73
  }
package/dist/warnings.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"warnings.js","sourceRoot":"","sources":["../src/warnings.ts"],"names":[],"mappings":"AAGA,+BAA+B;AAC/B,OAAO,EACL,eAAe,EACf,YAAY,EAEb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAgCnE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,eAAe,EAAE;QACf,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,aAAa;KACxB;IACD,eAAe,EAAE;QACf,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;KACpB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,SAAS;KACpB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,SAAS;KACpB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,aAAa;KACxB;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,SAAS;KACpB;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,kCAAkC;QACxC,QAAQ,EAAE,SAAS;KACpB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,KAAK;KACpB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,IAAI;KACnB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,KAAK;KACpB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,KAAK;KACpB;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,IAAI;KACnB;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,IAAI;KACnB;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,qCAAqC;QAC3C,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,KAAK;KACpB;CACF,CAAoF,CAAC;AAStF,MAAM,UAAU,eAAe,CAC7B,IAAO,EACP,OAA+B;IAE/B,MAAM,EACJ,IAAI,GAAG,IAAI,EACX,KAAK,EACL,MAAM,GAAG,UAAU,EACpB,GAAG,OAAO,CAAC;IACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;IAEpD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI;YACJ,KAAK;YACL,QAAQ,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM;YACN,GAAG,QAAQ,CAAC,IAAI,CAAC;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,MAAM;QACN,GAAG,QAAQ,CAAC,IAAI,CAAC;QACjB,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"warnings.js","sourceRoot":"","sources":["../src/warnings.ts"],"names":[],"mappings":"AAGA,+BAA+B;AAC/B,OAAO,EACL,eAAe,EACf,YAAY,EAEb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAiCnE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,eAAe,EAAE;QACf,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,aAAa;KACxB;IACD,eAAe,EAAE;QACf,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;KACpB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,SAAS;KACpB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,SAAS;KACpB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,aAAa;KACxB;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,SAAS;KACpB;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,kCAAkC;QACxC,QAAQ,EAAE,SAAS;KACpB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,KAAK;KACpB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,IAAI;KACnB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,KAAK;KACpB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,KAAK;KACpB;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,IAAI;KACnB;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,IAAI;KACnB;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,qCAAqC;QAC3C,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,KAAK;KACpB;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE,KAAK;KACpB;CACF,CAAoF,CAAC;AAStF,MAAM,UAAU,eAAe,CAC7B,IAAO,EACP,OAA+B;IAE/B,MAAM,EACJ,IAAI,GAAG,IAAI,EACX,KAAK,EACL,MAAM,GAAG,UAAU,EACpB,GAAG,OAAO,CAAC;IACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;IAEpD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI;YACJ,KAAK;YACL,QAAQ,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM;YACN,GAAG,QAAQ,CAAC,IAAI,CAAC;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,MAAM;QACN,GAAG,QAAQ,CAAC,IAAI,CAAC;QACjB,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@nodesecure/js-x-ray",
3
- "version": "9.2.0",
3
+ "version": "10.1.0",
4
4
  "description": "JavaScript AST XRay analysis",
5
5
  "type": "module",
6
6
  "exports": {
@@ -45,12 +45,11 @@
45
45
  },
46
46
  "homepage": "https://github.com/NodeSecure/js-x-ray#readme",
47
47
  "dependencies": {
48
- "@nodesecure/estree-ast-utils": "^4.1.0",
49
- "@nodesecure/sec-literal": "^1.2.0",
50
- "@nodesecure/tracer": "^2.0.0",
48
+ "@nodesecure/estree-ast-utils": "^4.2.0",
49
+ "@nodesecure/sec-literal": "^1.3.0",
50
+ "@nodesecure/tracer": "^3.0.0",
51
51
  "digraph-js": "^2.2.3",
52
- "estree-walker": "^3.0.1",
53
- "frequency-set": "^1.0.2",
52
+ "frequency-set": "^2.1.0",
54
53
  "is-minified-code": "^2.0.0",
55
54
  "meriyah": "^6.0.0",
56
55
  "safe-regex": "^2.1.1",