mobbdev 1.0.121 → 1.0.125

package/dist/index.mjs

@@ -1440,6 +1440,7 @@ var Language = /* @__PURE__ */ ((Language2) => {
   Language2["Cpp"] = "CPP";
   Language2["Csharp"] = "CSHARP";
   Language2["Default"] = "DEFAULT";
+  Language2["Dockerfile"] = "DOCKERFILE";
   Language2["Go"] = "GO";
   Language2["Java"] = "JAVA";
   Language2["Js"] = "JS";
@@ -1493,6 +1494,7 @@ var IssueLanguage_Enum = /* @__PURE__ */ ((IssueLanguage_Enum2) => {
   IssueLanguage_Enum2["CSharp"] = "CSharp";
   IssueLanguage_Enum2["Cpp"] = "Cpp";
   IssueLanguage_Enum2["Default"] = "Default";
+  IssueLanguage_Enum2["Dockerfile"] = "Dockerfile";
   IssueLanguage_Enum2["Go"] = "Go";
   IssueLanguage_Enum2["Java"] = "Java";
   IssueLanguage_Enum2["JavaScript"] = "JavaScript";
@@ -1513,6 +1515,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["CmDiRelativePathCommand"] = "CMDi_relative_path_command";
   IssueType_Enum2["CodeInComment"] = "CODE_IN_COMMENT";
   IssueType_Enum2["ConfusingNaming"] = "CONFUSING_NAMING";
+  IssueType_Enum2["CredentialDisclosure"] = "CREDENTIAL_DISCLOSURE";
   IssueType_Enum2["Csrf"] = "CSRF";
   IssueType_Enum2["DangerousFunctionOverflow"] = "DANGEROUS_FUNCTION_OVERFLOW";
   IssueType_Enum2["DeadCodeUnusedField"] = "DEAD_CODE_UNUSED_FIELD";
@@ -1548,6 +1551,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["InformationExposureViaHeaders"] = "INFORMATION_EXPOSURE_VIA_HEADERS";
   IssueType_Enum2["InsecureBinderConfiguration"] = "INSECURE_BINDER_CONFIGURATION";
   IssueType_Enum2["InsecureCookie"] = "INSECURE_COOKIE";
+  IssueType_Enum2["InsecurePostmessage"] = "INSECURE_POSTMESSAGE";
   IssueType_Enum2["InsecureRandomness"] = "INSECURE_RANDOMNESS";
   IssueType_Enum2["InsecureTmpFile"] = "INSECURE_TMP_FILE";
   IssueType_Enum2["InsecureUuidVersion"] = "INSECURE_UUID_VERSION";
@@ -1562,6 +1566,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
   IssueType_Enum2["MissingEqualsOrHashcode"] = "MISSING_EQUALS_OR_HASHCODE";
   IssueType_Enum2["MissingHstsHeader"] = "MISSING_HSTS_HEADER";
   IssueType_Enum2["MissingSslMinversion"] = "MISSING_SSL_MINVERSION";
+  IssueType_Enum2["MissingUser"] = "MISSING_USER";
   IssueType_Enum2["MissingWhitespace"] = "MISSING_WHITESPACE";
   IssueType_Enum2["ModifiedDefaultParam"] = "MODIFIED_DEFAULT_PARAM";
   IssueType_Enum2["NonFinalPublicStaticField"] = "NON_FINAL_PUBLIC_STATIC_FIELD";
@@ -2634,7 +2639,13 @@ var fixDetailsData = {
     issueDescription: "HTTP Parameter Pollution occurs when an attacker can manipulate the parameters of an HTTP request to change the behavior of the server.",
     fixInstructions: "Implement proper input validation and bounds checking to prevent HTTP parameter pollution. Use safe string manipulation functions and ensure that the buffer size is properly managed."
   },
-  ["INCOMPLETE_SANITIZATION" /* IncompleteSanitization */]: void 0
+  ["INCOMPLETE_SANITIZATION" /* IncompleteSanitization */]: void 0,
+  ["CREDENTIAL_DISCLOSURE" /* CredentialDisclosure */]: void 0,
+  ["INSECURE_POSTMESSAGE" /* InsecurePostmessage */]: void 0,
+  ["MISSING_USER" /* MissingUser */]: {
+    issueDescription: "Missing User occurs when a user is not specified in the Dockerfile, leading to security vulnerabilities.",
+    fixInstructions: "Specify a user in the Dockerfile to prevent security vulnerabilities."
+  }
 };
 
 // src/features/analysis/scm/shared/src/getIssueType.ts
@@ -2752,7 +2763,10 @@ var issueTypeMap = {
   ["BUFFER_OVERFLOW" /* BufferOverflow */]: "Buffer Overflow",
   ["STRING_TERMINATION_ERROR" /* StringTerminationError */]: "String Termination Error",
   ["HTTP_PARAMETER_POLLUTION" /* HttpParameterPollution */]: "HTTP Parameter Pollution",
-  ["INCOMPLETE_SANITIZATION" /* IncompleteSanitization */]: "Incomplete Sanitization"
+  ["INCOMPLETE_SANITIZATION" /* IncompleteSanitization */]: "Incomplete Sanitization",
+  ["CREDENTIAL_DISCLOSURE" /* CredentialDisclosure */]: "Credential Disclosure",
+  ["INSECURE_POSTMESSAGE" /* InsecurePostmessage */]: "Insecure Postmessage",
+  ["MISSING_USER" /* MissingUser */]: "Missing User"
 };
 var issueTypeZ = z.nativeEnum(IssueType_Enum);
 var getIssueTypeFriendlyString = (issueType) => {
@@ -2949,9 +2963,13 @@ var vulnerabilities = {
 };
 var csharp_default = vulnerabilities;
 
-// src/features/analysis/scm/shared/src/storedFixData/go/index.ts
+// src/features/analysis/scm/shared/src/storedFixData/dockerfile/index.ts
 var vulnerabilities2 = {};
-var go_default = vulnerabilities2;
+var dockerfile_default = vulnerabilities2;
+
+// src/features/analysis/scm/shared/src/storedFixData/go/index.ts
+var vulnerabilities3 = {};
+var go_default = vulnerabilities3;
 
 // src/features/analysis/scm/shared/src/storedFixData/java/sqlInjection.ts
 var sqlInjection = {
@@ -2978,12 +2996,12 @@ var systemInformationLeak = {
 };
 
 // src/features/analysis/scm/shared/src/storedFixData/java/index.ts
-var vulnerabilities3 = {
+var vulnerabilities4 = {
   ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment,
   ["SQL_Injection" /* SqlInjection */]: sqlInjection,
   ["SYSTEM_INFORMATION_LEAK" /* SystemInformationLeak */]: systemInformationLeak
 };
-var java_default = vulnerabilities3;
+var java_default = vulnerabilities4;
 
 // src/features/analysis/scm/shared/src/storedFixData/python/csrf.ts
 var csrf = {
@@ -3026,18 +3044,18 @@ var ssrf = {
 };
 
 // src/features/analysis/scm/shared/src/storedFixData/javascript/index.ts
-var vulnerabilities4 = {
+var vulnerabilities5 = {
   ["SSRF" /* Ssrf */]: ssrf,
   ["HARDCODED_SECRETS" /* HardcodedSecrets */]: hardcodedSecrets,
   ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment,
   ["NO_LIMITS_OR_THROTTLING" /* NoLimitsOrThrottling */]: noLimitsOrThrottling,
   ["CSRF" /* Csrf */]: csrf
 };
-var javascript_default = vulnerabilities4;
+var javascript_default = vulnerabilities5;
 
 // src/features/analysis/scm/shared/src/storedFixData/php/index.ts
-var vulnerabilities5 = {};
-var php_default = vulnerabilities5;
+var vulnerabilities6 = {};
+var php_default = vulnerabilities6;
 
 // src/features/analysis/scm/shared/src/storedFixData/python/autoEscapeFalse.ts
 var autoEscapeFalse = {
@@ -3059,11 +3077,11 @@ See more information [here](https://jinja.palletsprojects.com/en/3.1.x/templates
 };
 
 // src/features/analysis/scm/shared/src/storedFixData/python/index.ts
-var vulnerabilities6 = {
+var vulnerabilities7 = {
   ["AUTO_ESCAPE_FALSE" /* AutoEscapeFalse */]: autoEscapeFalse,
   ["CSRF" /* Csrf */]: csrf
 };
-var python_default = vulnerabilities6;
+var python_default = vulnerabilities7;
 
 // src/features/analysis/scm/shared/src/storedFixData/sql/defaultRightsInObjDefinition.ts
 var defaultRightsInObjDefinition = {
@@ -3071,16 +3089,16 @@ var defaultRightsInObjDefinition = {
 };
 
 // src/features/analysis/scm/shared/src/storedFixData/sql/index.ts
-var vulnerabilities7 = {
+var vulnerabilities8 = {
   ["DEFAULT_RIGHTS_IN_OBJ_DEFINITION" /* DefaultRightsInObjDefinition */]: defaultRightsInObjDefinition
 };
-var sql_default = vulnerabilities7;
+var sql_default = vulnerabilities8;
 
 // src/features/analysis/scm/shared/src/storedFixData/xml/index.ts
-var vulnerabilities8 = {
+var vulnerabilities9 = {
   ["PASSWORD_IN_COMMENT" /* PasswordInComment */]: passwordInComment
 };
-var xml_default = vulnerabilities8;
+var xml_default = vulnerabilities9;
 
 // src/features/analysis/scm/shared/src/storedFixData/index.ts
 var StoredFixDataItemZ = z3.object({
@@ -3094,7 +3112,8 @@ var languages = {
   ["XML" /* Xml */]: xml_default,
   ["Python" /* Python */]: python_default,
   ["PHP" /* Php */]: php_default,
-  ["Go" /* Go */]: go_default
+  ["Go" /* Go */]: go_default,
+  ["Dockerfile" /* Dockerfile */]: dockerfile_default
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/index.ts
@@ -3384,7 +3403,7 @@ var xxe = {
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/csharp/index.ts
-var vulnerabilities9 = {
+var vulnerabilities10 = {
   ["LOG_FORGING" /* LogForging */]: logForging,
   ["SSRF" /* Ssrf */]: ssrf2,
   ["XXE" /* Xxe */]: xxe,
@@ -3404,7 +3423,7 @@ var vulnerabilities9 = {
   ["INSUFFICIENT_LOGGING" /* InsufficientLogging */]: insufficientLogging,
   ["SQL_Injection" /* SqlInjection */]: sqlInjection2
 };
-var csharp_default2 = vulnerabilities9;
+var csharp_default2 = vulnerabilities10;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/go/logForging.ts
 var logForging2 = {
@@ -3434,12 +3453,12 @@ var websocketMissingOriginCheck = {
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/go/index.ts
-var vulnerabilities10 = {
+var vulnerabilities11 = {
   ["LOG_FORGING" /* LogForging */]: logForging2,
   ["MISSING_SSL_MINVERSION" /* MissingSslMinversion */]: missingSslMinversion,
   ["WEBSOCKET_MISSING_ORIGIN_CHECK" /* WebsocketMissingOriginCheck */]: websocketMissingOriginCheck
 };
-var go_default2 = vulnerabilities10;
+var go_default2 = vulnerabilities11;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/java/commandInjection.ts
 var commandInjection = {
@@ -3893,7 +3912,7 @@ var xxe2 = {
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/java/index.ts
-var vulnerabilities11 = {
+var vulnerabilities12 = {
   ["SQL_Injection" /* SqlInjection */]: sqlInjection3,
   ["CMDi_relative_path_command" /* CmDiRelativePathCommand */]: relativePathCommand,
   ["CMDi" /* CmDi */]: commandInjection,
@@ -3919,7 +3938,7 @@ var vulnerabilities11 = {
   ["ERRONEOUS_STRING_COMPARE" /* ErroneousStringCompare */]: erroneousStringCompare,
   ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: duplicatedStrings
 };
-var java_default2 = vulnerabilities11;
+var java_default2 = vulnerabilities12;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/python/csrf.ts
 var csrf2 = {
@@ -4227,7 +4246,7 @@ var xss3 = {
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/js/index.ts
-var vulnerabilities12 = {
+var vulnerabilities13 = {
   ["CMDi" /* CmDi */]: commandInjection2,
   ["GRAPHQL_DEPTH_LIMIT" /* GraphqlDepthLimit */]: graphqlDepthLimit,
   ["INSECURE_RANDOMNESS" /* InsecureRandomness */]: insecureRandomness2,
@@ -4249,7 +4268,7 @@ var vulnerabilities12 = {
   ["HARDCODED_DOMAIN_IN_HTML" /* HardcodedDomainInHtml */]: hardcodedDomainInHtml,
   ["CSRF" /* Csrf */]: csrf2
 };
-var js_default = vulnerabilities12;
+var js_default = vulnerabilities13;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/python/duplicatedStrings.ts
 var duplicatedStrings2 = {
@@ -4300,14 +4319,14 @@ var uncheckedLoopCondition3 = {
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
-var vulnerabilities13 = {
+var vulnerabilities14 = {
   ["CSRF" /* Csrf */]: csrf2,
   ["LOG_FORGING" /* LogForging */]: logForging5,
   ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect3,
   ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3,
   ["DUPLICATED_STRINGS" /* DuplicatedStrings */]: duplicatedStrings2
 };
-var python_default2 = vulnerabilities13;
+var python_default2 = vulnerabilities14;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/xml/unboundedOccurrences.ts
 var unboundedOccurrences = {
@@ -4321,10 +4340,10 @@ A value too high will cause performance issues up to and including denial of ser
 };
 
 // src/features/analysis/scm/shared/src/storedQuestionData/xml/index.ts
-var vulnerabilities14 = {
+var vulnerabilities15 = {
   ["WEAK_XML_SCHEMA_UNBOUNDED_OCCURRENCES" /* WeakXmlSchemaUnboundedOccurrences */]: unboundedOccurrences
 };
-var xml_default2 = vulnerabilities14;
+var xml_default2 = vulnerabilities15;
 
 // src/features/analysis/scm/shared/src/storedQuestionData/index.ts
 var StoredQuestionDataItemZ = z4.object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mobbdev",
-  "version": "1.0.121",
+  "version": "1.0.125",
   "description": "Automated secure code remediation tool",
   "repository": "git+https://github.com/mobb-dev/bugsy.git",
   "main": "dist/index.js",