@patrickdk77/office-defuse 0.3.0 → 0.3.1

package/dist/formulas.d.ts

@@ -9,17 +9,17 @@ export declare class Quotes {
     outside(c: string): boolean;
 }
 /** What a function a formula calls does outside the file, or undefined when it does nothing there. */
-export declare function riskyFunction(name: string): 'fetch' | 'run' | undefined;
+export declare function riskyFunction(name: string): 'load' | 'run' | undefined;
 /** The functions, outside quotes, that a formula's text calls and that reach outside the file, as its text arrives. */
 export declare class FunctionCalls {
     private readonly quotes;
     private word;
     private spaced;
-    readonly found: Map<string, "fetch" | "run">;
+    readonly found: Map<string, "load" | "run">;
     write(t: string): void;
 }
 /** The functions a formula's whole text calls that reach outside the file. */
-export declare function formulaCalls(formula: string): Map<string, 'fetch' | 'run'>;
+export declare function formulaCalls(formula: string): Map<string, 'load' | 'run'>;
 /** A name a BIFF formula token refers to: a defined name by index, or an external name through an XTI. */
 export type BiffNameRef = {
     kind: 'name';
@@ -34,7 +34,7 @@ export type BiffNameRef = {
  * add-in and newer ones by the name the formula names them with, such as `_xlfn.WEBSERVICE`. The walk stops at a
  * token it does not know the size of.
  */
-export declare function biffCalls(rgce: Uint8Array, nameOf: (ref: BiffNameRef) => string | undefined): Map<string, 'fetch' | 'run'>;
+export declare function biffCalls(rgce: Uint8Array, nameOf: (ref: BiffNameRef) => string | undefined): Map<string, 'load' | 'run'>;
 /** Whether an OpenDocument formula calls the DDE function. */
 export declare function callsDde(formula: string): boolean;
 /** One word of a Word field code. A switch is an unquoted word that starts with a backslash. */

package/dist/formulas.js

@@ -35,18 +35,18 @@ class Quotes {
 }
 exports.Quotes = Quotes;
 /**
- * Functions that reach outside the file when a formula is calculated: WEBSERVICE and IMAGE fetch a URL, RTD starts a
+ * Functions that reach outside the file when a formula is calculated: WEBSERVICE and IMAGE load a URL, RTD starts a
  * COM server, CALL and REGISTER call into a DLL, and EXEC runs a program. A prefix such as `_xlfn.` or
  * `COM.MICROSOFT.` names the same function.
  */
-const FETCH = ['WEBSERVICE', 'IMAGE'];
+const LOAD = ['WEBSERVICE', 'IMAGE'];
 const RUN = ['RTD', 'CALL', 'REGISTER', 'REGISTER.ID', 'EXEC'];
 /** What a function a formula calls does outside the file, or undefined when it does nothing there. */
 function riskyFunction(name) {
     const n = name.toUpperCase();
     const is = (f) => n === f || n.endsWith(`.${f}`);
-    if (FETCH.some(is))
-        return 'fetch';
+    if (LOAD.some(is))
+        return 'load';
     if (RUN.some(is))
         return 'run';
     return undefined;

package/dist/odf.js

@@ -167,7 +167,7 @@ class EntryRules {
             if ((0, formulas_1.callsDde)(a.value))
                 this.edit(this.report(types_1.OfficeCategory.Dde, types_1.OfficeDetail.Formula, { formula: (0, context_1.clip)(a.value) }), raw, strip);
             for (const [fn, kind] of (0, formulas_1.formulaCalls)(a.value))
-                this.edit(this.report(kind === 'fetch' ? types_1.OfficeCategory.External : types_1.OfficeCategory.Macro, types_1.OfficeDetail.Formula, { function: (0, context_1.clip)(fn), formula: (0, context_1.clip)(a.value) }), raw, strip);
+                this.edit(this.report(kind === 'load' ? types_1.OfficeCategory.External : types_1.OfficeCategory.Macro, types_1.OfficeDetail.Formula, { function: (0, context_1.clip)(fn), formula: (0, context_1.clip)(a.value) }), raw, strip);
         }
         if (href === undefined || (0, links_1.isFragment)(href) || (el.ns === exports.NS.script && el.local === 'event-listener') || (el.ns === exports.NS.presentation && el.local === 'event-listener'))
             return;

package/dist/ooxml.js

@@ -472,7 +472,7 @@ class PartRules {
                 this.remove(this.ctx.report(types_1.OfficeCategory.Dde, types_1.OfficeDetail.Formula, this.part, { formula: (0, context_1.clip)(shown.text), entity: (0, context_1.clip)(entity) }), this.formula);
             if (!this.macroSheet)
                 for (const [fn, kind] of calls.found)
-                    this.remove(this.ctx.report(kind === 'fetch' ? types_1.OfficeCategory.External : types_1.OfficeCategory.Macro, types_1.OfficeDetail.Formula, this.part, { function: (0, context_1.clip)(fn), formula: (0, context_1.clip)(shown.text) }), this.formula);
+                    this.remove(this.ctx.report(kind === 'load' ? types_1.OfficeCategory.External : types_1.OfficeCategory.Macro, types_1.OfficeDetail.Formula, this.part, { function: (0, context_1.clip)(fn), formula: (0, context_1.clip)(shown.text) }), this.formula);
             this.formula = undefined;
         }
         if (ns === VML_EXCEL_NS && el.local === 'FmlaMacro' && this.macroText) {

package/dist/xls.js

@@ -233,7 +233,7 @@ async function sheetRules(ctx, cfb, stream, s, decrypt, location, edits, control
                 continue;
             const cce = b[at] | (b[at + 1] << 8);
             for (const [fn, kind] of (0, formulas_1.biffCalls)(b.subarray(at + 2, at + 2 + cce), nameOf))
-                ctx.report(kind === 'fetch' ? types_1.OfficeCategory.External : types_1.OfficeCategory.Macro, types_1.OfficeDetail.Formula, location, { sheet: (0, context_1.clip)(s.name), function: (0, context_1.clip)(fn) });
+                ctx.report(kind === 'load' ? types_1.OfficeCategory.External : types_1.OfficeCategory.Macro, types_1.OfficeDetail.Formula, location, { sheet: (0, context_1.clip)(s.name), function: (0, context_1.clip)(fn) });
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@patrickdk77/office-defuse",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Inspect Office and OpenDocument files for VBA and Excel 4.0 macros, LibreOffice Basic and scripts, DDE, external templates and links, embedded OLE objects and ActiveX controls, and score the risk. Strict ZIP and XML readers, bounded memory, no runtime dependencies.",
   "license": "MIT",
   "author": "patrickdk77",