lighthouse 9.6.7 → 10.0.0

package/lighthouse-core/lib/cdt/generated/SourceMap.js

@@ -1,346 +0,0 @@
-// @ts-nocheck
-// generated by yarn build-cdt-lib
-const Platform = require('../Platform.js');
-"use strict";
-/*
- * Copyright (C) 2012 Google Inc. All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions are
- * met:
- *
- *     * Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- *     * Redistributions in binary form must reproduce the above
- * copyright notice, this list of conditions and the following disclaimer
- * in the documentation and/or other materials provided with the
- * distribution.
- *     * Neither the name of Google Inc. nor the names of its
- * contributors may be used to endorse or promote products derived from
- * this software without specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
- * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
- * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
- * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
- * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
- * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
- * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TextSourceMap = exports.SourceMapEntry = exports.Offset = exports.Section = exports.SourceMapV3 = void 0;
-;
-;
-;
-;
-;
-;
-;
-;
-;
-class SourceMapV3 {
-    constructor() {
-    }
-}
-exports.SourceMapV3 = SourceMapV3;
-class Section {
-    constructor() {
-    }
-}
-exports.Section = Section;
-class Offset {
-    constructor() {
-    }
-}
-exports.Offset = Offset;
-class SourceMapEntry {
-    constructor(lineNumber, columnNumber, sourceURL, sourceLineNumber, sourceColumnNumber, name) {
-        this.lineNumber = lineNumber;
-        this.columnNumber = columnNumber;
-        this.sourceURL = sourceURL;
-        this.sourceLineNumber = sourceLineNumber;
-        this.sourceColumnNumber = sourceColumnNumber;
-        this.name = name;
-    }
-    static compare(entry1, entry2) {
-        if (entry1.lineNumber !== entry2.lineNumber) {
-            return entry1.lineNumber - entry2.lineNumber;
-        }
-        return entry1.columnNumber - entry2.columnNumber;
-    }
-}
-exports.SourceMapEntry = SourceMapEntry;
-const base64Digits = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
-const base64Map = new Map();
-for (let i = 0; i < base64Digits.length; ++i) {
-    base64Map.set(base64Digits.charAt(i), i);
-}
-const sourceMapToSourceList = new WeakMap();
-class TextSourceMap {
-    /**
-     * Implements Source Map V3 model. See https://github.com/google/closure-compiler/wiki/Source-Maps
-     * for format description.
-     */
-    constructor(compiledURL, sourceMappingURL, payload, initiator) {
-        this.initiator = initiator;
-        this.json = payload;
-        this.compiledURLInternal = compiledURL;
-        this.sourceMappingURL = sourceMappingURL;
-        this.baseURL = sourceMappingURL.startsWith('data:') ? compiledURL : sourceMappingURL;
-        this.mappingsInternal = null;
-        this.sourceInfos = new Map();
-        if (this.json.sections) {
-            const sectionWithURL = Boolean(this.json.sections.find(section => Boolean(section.url)));
-            if (sectionWithURL) {
-                console.warn(`SourceMap "${sourceMappingURL}" contains unsupported "URL" field in one of its sections.`);
-            }
-        }
-        this.eachSection(this.parseSources.bind(this));
-    }
-    compiledURL() {
-        return this.compiledURLInternal;
-    }
-    url() {
-        return this.sourceMappingURL;
-    }
-    sourceURLs() {
-        return [...this.sourceInfos.keys()];
-    }
-    embeddedContentByURL(sourceURL) {
-        const entry = this.sourceInfos.get(sourceURL);
-        if (!entry) {
-            return null;
-        }
-        return entry.content;
-    }
-    findEntry(lineNumber, columnNumber) {
-        const mappings = this.mappings();
-        const index = Platform.ArrayUtilities.upperBound(mappings, undefined, (unused, entry) => lineNumber - entry.lineNumber || columnNumber - entry.columnNumber);
-        return index ? mappings[index - 1] : null;
-    }
-    sourceLineMapping(sourceURL, lineNumber, columnNumber) {
-        const mappings = this.reversedMappings(sourceURL);
-        const first = Platform.ArrayUtilities.lowerBound(mappings, lineNumber, lineComparator);
-        const last = Platform.ArrayUtilities.upperBound(mappings, lineNumber, lineComparator);
-        if (first >= mappings.length || mappings[first].sourceLineNumber !== lineNumber) {
-            return null;
-        }
-        const columnMappings = mappings.slice(first, last);
-        if (!columnMappings.length) {
-            return null;
-        }
-        const index = Platform.ArrayUtilities.lowerBound(columnMappings, columnNumber, (columnNumber, mapping) => columnNumber - mapping.sourceColumnNumber);
-        return index >= columnMappings.length ? columnMappings[columnMappings.length - 1] : columnMappings[index];
-        function lineComparator(lineNumber, mapping) {
-            return lineNumber - mapping.sourceLineNumber;
-        }
-    }
-    findReverseEntries(sourceURL, lineNumber, columnNumber) {
-        const mappings = this.reversedMappings(sourceURL);
-        const endIndex = Platform.ArrayUtilities.upperBound(mappings, undefined, (unused, entry) => lineNumber - entry.sourceLineNumber || columnNumber - entry.sourceColumnNumber);
-        let startIndex = endIndex;
-        while (startIndex > 0 && mappings[startIndex - 1].sourceLineNumber === mappings[endIndex - 1].sourceLineNumber &&
-            mappings[startIndex - 1].sourceColumnNumber === mappings[endIndex - 1].sourceColumnNumber) {
-            --startIndex;
-        }
-        return mappings.slice(startIndex, endIndex);
-    }
-    /** @return {Array<{lineNumber: number, columnNumber: number, sourceURL?: string, sourceLineNumber, sourceColumnNumber: number, name?: string, lastColumnNumber?: number}>} */
-mappings() {
-        if (this.mappingsInternal === null) {
-            this.mappingsInternal = [];
-            this.eachSection(this.parseMap.bind(this));
-            this.json = null;
-        }
-        return /** @type {!Array<!SourceMapEntry>} */ this.mappingsInternal;
-    }
-    reversedMappings(sourceURL) {
-        const info = this.sourceInfos.get(sourceURL);
-        if (!info) {
-            return [];
-        }
-        const mappings = this.mappings();
-        if (info.reverseMappings === null) {
-            info.reverseMappings = mappings.filter(mapping => mapping.sourceURL === sourceURL).sort(sourceMappingComparator);
-        }
-        return info.reverseMappings;
-        function sourceMappingComparator(a, b) {
-            if (a.sourceLineNumber !== b.sourceLineNumber) {
-                return a.sourceLineNumber - b.sourceLineNumber;
-            }
-            if (a.sourceColumnNumber !== b.sourceColumnNumber) {
-                return a.sourceColumnNumber - b.sourceColumnNumber;
-            }
-            if (a.lineNumber !== b.lineNumber) {
-                return a.lineNumber - b.lineNumber;
-            }
-            return a.columnNumber - b.columnNumber;
-        }
-    }
-    eachSection(callback) {
-        if (!this.json) {
-            return;
-        }
-        if (!this.json.sections) {
-            callback(this.json, 0, 0);
-            return;
-        }
-        for (const section of this.json.sections) {
-            callback(section.map, section.offset.line, section.offset.column);
-        }
-    }
-    parseSources(sourceMap) {
-        const sourcesList = [];
-        let sourceRoot = sourceMap.sourceRoot || '';
-        if (sourceRoot && !sourceRoot.endsWith('/')) {
-            sourceRoot += '/';
-        }
-        for (let i = 0; i < sourceMap.sources.length; ++i) {
-            const href = sourceRoot + sourceMap.sources[i];
-            let url = '' || href;
-            const source = sourceMap.sourcesContent && sourceMap.sourcesContent[i];
-            if (url === this.compiledURLInternal && source) {
-            }
-            this.sourceInfos.set(url, new TextSourceMap.SourceInfo(source || null, null));
-            sourcesList.push(url);
-        }
-        sourceMapToSourceList.set(sourceMap, sourcesList);
-    }
-    parseMap(map, lineNumber, columnNumber) {
-        let sourceIndex = 0;
-        let sourceLineNumber = 0;
-        let sourceColumnNumber = 0;
-        let nameIndex = 0;
-        // TODO(crbug.com/1011811): refactor away map.
-        // `sources` can be undefined if it wasn't previously
-        // processed and added to the list. However, that
-        // is not WAI and we should make sure that we can
-        // only reach this point when we are certain
-        // we have the list available.
-        const sources = sourceMapToSourceList.get(map);
-        const names = map.names || [];
-        const stringCharIterator = new TextSourceMap.StringCharIterator(map.mappings);
-        let sourceURL = sources && sources[sourceIndex];
-        while (true) {
-            if (stringCharIterator.peek() === ',') {
-                stringCharIterator.next();
-            }
-            else {
-                while (stringCharIterator.peek() === ';') {
-                    lineNumber += 1;
-                    columnNumber = 0;
-                    stringCharIterator.next();
-                }
-                if (!stringCharIterator.hasNext()) {
-                    break;
-                }
-            }
-            columnNumber += this.decodeVLQ(stringCharIterator);
-            if (!stringCharIterator.hasNext() || this.isSeparator(stringCharIterator.peek())) {
-                this.mappings().push(new SourceMapEntry(lineNumber, columnNumber));
-                continue;
-            }
-            const sourceIndexDelta = this.decodeVLQ(stringCharIterator);
-            if (sourceIndexDelta) {
-                sourceIndex += sourceIndexDelta;
-                if (sources) {
-                    sourceURL = sources[sourceIndex];
-                }
-            }
-            sourceLineNumber += this.decodeVLQ(stringCharIterator);
-            sourceColumnNumber += this.decodeVLQ(stringCharIterator);
-            if (!stringCharIterator.hasNext() || this.isSeparator(stringCharIterator.peek())) {
-                this.mappings().push(new SourceMapEntry(lineNumber, columnNumber, sourceURL, sourceLineNumber, sourceColumnNumber));
-                continue;
-            }
-            nameIndex += this.decodeVLQ(stringCharIterator);
-            this.mappings().push(new SourceMapEntry(lineNumber, columnNumber, sourceURL, sourceLineNumber, sourceColumnNumber, names[nameIndex]));
-        }
-        // As per spec, mappings are not necessarily sorted.
-        this.mappings().sort(SourceMapEntry.compare);
-    }
-    isSeparator(char) {
-        return char === ',' || char === ';';
-    }
-    decodeVLQ(stringCharIterator) {
-        // Read unsigned value.
-        let result = 0;
-        let shift = 0;
-        let digit = TextSourceMap._VLQ_CONTINUATION_MASK;
-        while (digit & TextSourceMap._VLQ_CONTINUATION_MASK) {
-            digit = base64Map.get(stringCharIterator.next()) || 0;
-            result += (digit & TextSourceMap._VLQ_BASE_MASK) << shift;
-            shift += TextSourceMap._VLQ_BASE_SHIFT;
-        }
-        // Fix the sign.
-        const negative = result & 1;
-        result >>= 1;
-        return negative ? -result : result;
-    }
-    reverseMapTextRange(url, textRange) {
-        function comparator(position, mapping) {
-            if (position.lineNumber !== mapping.sourceLineNumber) {
-                return position.lineNumber - mapping.sourceLineNumber;
-            }
-            return position.columnNumber - mapping.sourceColumnNumber;
-        }
-        const mappings = this.reversedMappings(url);
-        if (!mappings.length) {
-            return null;
-        }
-        const startIndex = Platform.ArrayUtilities.lowerBound(mappings, { lineNumber: textRange.startLine, columnNumber: textRange.startColumn }, comparator);
-        const endIndex = Platform.ArrayUtilities.upperBound(mappings, { lineNumber: textRange.endLine, columnNumber: textRange.endColumn }, comparator);
-        const startMapping = mappings[startIndex];
-        const endMapping = mappings[endIndex];
-        return new TextUtils.TextRange.TextRange(startMapping.lineNumber, startMapping.columnNumber, endMapping.lineNumber, endMapping.columnNumber);
-    }
-    mapsOrigin() {
-        const mappings = this.mappings();
-        if (mappings.length > 0) {
-            const firstEntry = mappings[0];
-            return (firstEntry === null || firstEntry === void 0 ? void 0 : firstEntry.lineNumber) === 0 || firstEntry.columnNumber === 0;
-        }
-        return false;
-    }
-}
-exports.TextSourceMap = TextSourceMap;
-(function (TextSourceMap) {
-    // TODO(crbug.com/1172300) Ignored during the jsdoc to ts migration
-    // eslint-disable-next-line @typescript-eslint/naming-convention
-    TextSourceMap._VLQ_BASE_SHIFT = 5;
-    // TODO(crbug.com/1172300) Ignored during the jsdoc to ts migration
-    // eslint-disable-next-line @typescript-eslint/naming-convention
-    TextSourceMap._VLQ_BASE_MASK = (1 << 5) - 1;
-    // TODO(crbug.com/1172300) Ignored during the jsdoc to ts migration
-    // eslint-disable-next-line @typescript-eslint/naming-convention
-    TextSourceMap._VLQ_CONTINUATION_MASK = 1 << 5;
-    class StringCharIterator {
-        constructor(string) {
-            this.string = string;
-            this.position = 0;
-        }
-        next() {
-            return this.string.charAt(this.position++);
-        }
-        peek() {
-            return this.string.charAt(this.position);
-        }
-        hasNext() {
-            return this.position < this.string.length;
-        }
-    }
-    TextSourceMap.StringCharIterator = StringCharIterator;
-    class SourceInfo {
-        constructor(content, reverseMappings) {
-            this.content = content;
-            this.reverseMappings = reverseMappings;
-        }
-    }
-    TextSourceMap.SourceInfo = SourceInfo;
-})(TextSourceMap = exports.TextSourceMap || (exports.TextSourceMap = {}));
-
-module.exports = TextSourceMap;

package/lighthouse-core/lib/csp-evaluator.js

@@ -1,173 +0,0 @@
-/**
- * @license Copyright 2021 The Lighthouse Authors. All Rights Reserved.
- * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
- * Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
- */
-'use strict';
-
-/** @typedef {import('csp_evaluator/finding').Finding} Finding */
-
-const {
-  evaluateForFailure,
-  evaluateForSyntaxErrors,
-  evaluateForWarnings,
-} = require('csp_evaluator/dist/lighthouse/lighthouse_checks.js');
-const {Type} = require('csp_evaluator/dist/finding.js');
-const {CspParser} = require('csp_evaluator/dist/parser.js');
-const {Directive} = require('csp_evaluator/dist/csp.js');
-
-const log = require('lighthouse-logger');
-const i18n = require('../lib/i18n/i18n.js');
-const {isIcuMessage} = require('../../shared/localization/format.js');
-
-const UIStrings = {
-  /** Message shown when a CSP does not have a base-uri directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "base-uri", "'none'", and "'self'" do not need to be translated. */
-  missingBaseUri: 'Missing base-uri allows injected <base> tags to set the base URL for all ' +
-    'relative URLs (e.g. scripts) to an attacker controlled domain. ' +
-    'Consider setting base-uri to \'none\' or \'self\'.',
-  /** Message shown when a CSP does not have a script-src directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "script-src" does not need to be translated. */
-  missingScriptSrc: 'script-src directive is missing. ' +
-    'This can allow the execution of unsafe scripts.',
-  /** Message shown when a CSP does not have a script-src directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "object-src" and "'none'" do not need to be translated. */
-  missingObjectSrc: 'Missing object-src allows the injection of plugins ' +
-    'that execute unsafe scripts. Consider setting object-src to \'none\' if you can.',
-  /** Message shown when a CSP uses a domain allowlist to filter out malicious scripts. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "CSP", "'strict-dynamic'", "nonces", and "hashes" do not need to be translated. "allowlists" can be interpreted as "whitelist". */
-  strictDynamic: 'Host allowlists can frequently be bypassed. Consider using ' +
-    'CSP nonces or hashes instead, along with \'strict-dynamic\' if necessary.',
-  /** Message shown when a CSP allows inline scripts to be run in the page. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "CSP", "'unsafe-inline'", "nonces", and "hashes" do not need to be translated. */
-  unsafeInline: '\'unsafe-inline\' allows the execution of unsafe in-page scripts ' +
-    'and event handlers. Consider using CSP nonces or hashes to allow scripts individually.',
-  /** Message shown when a CSP is not backwards compatible with browsers that do not support CSP nonces/hashes. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "'unsafe-inline'", "nonces", and "hashes" do not need to be translated. */
-  unsafeInlineFallback: 'Consider adding \'unsafe-inline\' (ignored by browsers supporting ' +
-    'nonces/hashes) to be backward compatible with older browsers.',
-  /** Message shown when a CSP is not backwards compatible with browsers that do not support the 'strict-dynamic' keyword. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "http:", "https:", and "'strict-dynamic'" do not need to be translated. */
-  allowlistFallback: 'Consider adding https: and http: URL schemes (ignored by browsers ' +
-    'supporting \'strict-dynamic\') to be backward compatible with older browsers.',
-  /** Message shown when a CSP only provides a reporting destination through the report-to directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "report-to", "report-uri", and "Chromium" do not need to be translated. */
-  reportToOnly: 'The reporting destination is only configured via the report-to directive. ' +
-    'This directive is only supported in Chromium-based browsers so it is ' +
-    'recommended to also use a report-uri directive.',
-  /** Message shown when a CSP does not provide a reporting destination. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "CSP" does not need to be translated. */
-  reportingDestinationMissing: 'No CSP configures a reporting destination. ' +
-    'This makes it difficult to maintain the CSP over time and monitor for any breakages.',
-  /** Message shown when a CSP nonce has less than 8 characters. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "Nonces" does not need to be translated. */
-  nonceLength: 'Nonces should be at least 8 characters long.',
-  /** Message shown when a CSP nonce does not use teh base64 charset. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "Nonces" and "base84" do not need to be translated. "charset" can be interpreted as "a set of characters". */
-  nonceCharset: 'Nonces should use the base64 charset.',
-  /**
-   * @description Message shown when a CSP is missing a semicolon. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy".
-   * @example {'object-src'} keyword
-   */
-  missingSemicolon: 'Did you forget the semicolon? ' +
-    '{keyword} seems to be a directive, not a keyword.',
-  /** Message shown when a CSP contains an unknown keyword. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "CSP" does not need to be translated. */
-  unknownDirective: 'Unknown CSP directive.',
-  /**
-   * @description Message shown when a CSP contains an invalid keyword. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy".
-   * @example {'invalid-keyword'} keyword
-   */
-  unknownKeyword: '{keyword} seems to be an invalid keyword.',
-  /** Message shown when a CSP uses the deprecated reflected-xss directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "reflected-xss", "CSP2" and "X-XSS-Protection" do not need to be translated. */
-  deprecatedReflectedXSS: 'reflected-xss is deprecated since CSP2. ' +
-    'Please, use the X-XSS-Protection header instead.',
-  /** Message shown when a CSP uses the deprecated referrer directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "referrer", "CSP2" and "Referrer-Policy" do not need to be translated. */
-  deprecatedReferrer: 'referrer is deprecated since CSP2. ' +
-    'Please, use the Referrer-Policy header instead.',
-  /** Message shown when a CSP uses the deprecated disown-opener directive. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy". "disown-opener", "CSP3" and "Cross-Origin-Opener-Policy" do not need to be translated. */
-  deprecatedDisownOpener: 'disown-opener is deprecated since CSP3. ' +
-    'Please, use the Cross-Origin-Opener-Policy header instead.',
-  /**
-   * @description Message shown when a CSP wildcard allows unsafe scripts to be run in the page. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy".
-   *  @example {*} keyword
-   */
-  plainWildcards: 'Avoid using plain wildcards ({keyword}) in this directive. ' +
-    'Plain wildcards allow scripts to be sourced from an unsafe domain.',
-  /**
-   * @description Message shown when a CSP URL scheme allows unsafe scripts to be run in the page. Shown in a table with a list of other CSP vulnerabilities and suggestions. "CSP" stands for "Content Security Policy".
-   *  @example {https:} keyword
-   */
-  plainUrlScheme: 'Avoid using plain URL schemes ({keyword}) in this directive. ' +
-    'Plain URL schemes allow scripts to be sourced from an unsafe domain.',
-};
-
-const str_ = i18n.createMessageInstanceIdFn(__filename, UIStrings);
-
-/** @type {Record<number, string|LH.IcuMessage|Record<string, LH.IcuMessage>>} */
-const FINDING_TO_UI_STRING = {
-  [Type.MISSING_SEMICOLON]: UIStrings.missingSemicolon,
-  [Type.UNKNOWN_DIRECTIVE]: str_(UIStrings.unknownDirective),
-  [Type.INVALID_KEYWORD]: UIStrings.unknownKeyword,
-  [Type.MISSING_DIRECTIVES]: {
-    [Directive.BASE_URI]: str_(UIStrings.missingBaseUri),
-    [Directive.SCRIPT_SRC]: str_(UIStrings.missingScriptSrc),
-    [Directive.OBJECT_SRC]: str_(UIStrings.missingObjectSrc),
-  },
-  [Type.SCRIPT_UNSAFE_INLINE]: str_(UIStrings.unsafeInline),
-  [Type.PLAIN_WILDCARD]: UIStrings.plainWildcards,
-  [Type.PLAIN_URL_SCHEMES]: UIStrings.plainUrlScheme,
-  [Type.NONCE_LENGTH]: str_(UIStrings.nonceLength),
-  [Type.NONCE_CHARSET]: str_(UIStrings.nonceCharset),
-  [Type.DEPRECATED_DIRECTIVE]: {
-    [Directive.REFLECTED_XSS]: str_(UIStrings.deprecatedReflectedXSS),
-    [Directive.REFERRER]: str_(UIStrings.deprecatedReferrer),
-    [Directive.DISOWN_OPENER]: str_(UIStrings.deprecatedDisownOpener),
-  },
-  [Type.STRICT_DYNAMIC]: str_(UIStrings.strictDynamic),
-  [Type.UNSAFE_INLINE_FALLBACK]: str_(UIStrings.unsafeInlineFallback),
-  [Type.ALLOWLIST_FALLBACK]: str_(UIStrings.allowlistFallback),
-  [Type.REPORTING_DESTINATION_MISSING]: str_(UIStrings.reportingDestinationMissing),
-  [Type.REPORT_TO_ONLY]: str_(UIStrings.reportToOnly),
-};
-
-/**
- * @param {Finding} finding
- * @return {LH.IcuMessage|string}
- */
-function getTranslatedDescription(finding) {
-  let result = FINDING_TO_UI_STRING[finding.type];
-  if (!result) {
-    log.warn('CSP Evaluator', `No translation found for description: ${finding.description}`);
-    return finding.description;
-  }
-
-  // Return if translated result found.
-  if (isIcuMessage(result)) return result;
-
-  // If result was not translated, that means `finding.value` is included in the UI string.
-  if (typeof result === 'string') return str_(result, {keyword: finding.value || ''});
-
-  // Result is a record object, UI string depends on the directive.
-  result = result[finding.directive];
-  if (!result) {
-    log.warn('CSP Evaluator', `No translation found for description: ${finding.description}`);
-    return finding.description;
-  }
-
-  return result;
-}
-
-/**
- * @param {string} rawCsp
- */
-function parseCsp(rawCsp) {
-  return new CspParser(rawCsp).csp;
-}
-
-/**
- * @param {string[]} rawCsps
- * @return {{bypasses: Finding[], warnings: Finding[], syntax: Finding[][]}}
- */
-function evaluateRawCspsForXss(rawCsps) {
-  const parsedCsps = rawCsps.map(parseCsp);
-  const bypasses = evaluateForFailure(parsedCsps);
-  const warnings = evaluateForWarnings(parsedCsps);
-  const syntax = evaluateForSyntaxErrors(parsedCsps);
-  return {bypasses, warnings, syntax};
-}
-
-module.exports = {
-  getTranslatedDescription,
-  evaluateRawCspsForXss,
-  parseCsp,
-  UIStrings,
-};