mobbdev 1.0.28 → 1.0.31
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.mjs +25 -7
- package/package.json +1 -1
package/dist/index.mjs
CHANGED
|
@@ -125,6 +125,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
|
|
|
125
125
|
IssueType_Enum2["DosStringBuilder"] = "DOS_STRING_BUILDER";
|
|
126
126
|
IssueType_Enum2["ErroneousStringCompare"] = "ERRONEOUS_STRING_COMPARE";
|
|
127
127
|
IssueType_Enum2["ErrorCondtionWithoutAction"] = "ERROR_CONDTION_WITHOUT_ACTION";
|
|
128
|
+
IssueType_Enum2["FrameableLoginPage"] = "FRAMEABLE_LOGIN_PAGE";
|
|
128
129
|
IssueType_Enum2["GraphqlDepthLimit"] = "GRAPHQL_DEPTH_LIMIT";
|
|
129
130
|
IssueType_Enum2["HardcodedDomainInHtml"] = "HARDCODED_DOMAIN_IN_HTML";
|
|
130
131
|
IssueType_Enum2["HardcodedSecrets"] = "HARDCODED_SECRETS";
|
|
@@ -773,7 +774,8 @@ var issueTypeMap = {
|
|
|
773
774
|
["CSRF" /* Csrf */]: "Cross-Site Request Forgery (CSRF)",
|
|
774
775
|
["WEAK_ENCRYPTION" /* WeakEncryption */]: "Weak Encryption Mechanism",
|
|
775
776
|
["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment",
|
|
776
|
-
["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout"
|
|
777
|
+
["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout",
|
|
778
|
+
["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: "Frameable Login Page"
|
|
777
779
|
};
|
|
778
780
|
var issueTypeZ = z.nativeEnum(IssueType_Enum);
|
|
779
781
|
var getIssueTypeFriendlyString = (issueType) => {
|
|
@@ -1833,7 +1835,8 @@ var fixDetailsData = {
|
|
|
1833
1835
|
},
|
|
1834
1836
|
["WEAK_ENCRYPTION" /* WeakEncryption */]: void 0,
|
|
1835
1837
|
["CODE_IN_COMMENT" /* CodeInComment */]: void 0,
|
|
1836
|
-
["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: void 0
|
|
1838
|
+
["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: void 0,
|
|
1839
|
+
["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: void 0
|
|
1837
1840
|
};
|
|
1838
1841
|
|
|
1839
1842
|
// src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
|
|
@@ -3206,11 +3209,26 @@ var openRedirect2 = {
|
|
|
3206
3209
|
}
|
|
3207
3210
|
};
|
|
3208
3211
|
|
|
3212
|
+
// src/features/analysis/scm/shared/src/storedQuestionData/python/uncheckedLoopCondition.ts
|
|
3213
|
+
var uncheckedLoopCondition3 = {
|
|
3214
|
+
loopLimit: {
|
|
3215
|
+
content: () => "Please define a maximum loop limit",
|
|
3216
|
+
description: () => `Setting this number to a reasonable value will prevent the vulnerability`,
|
|
3217
|
+
guidance: () => ""
|
|
3218
|
+
},
|
|
3219
|
+
varName: {
|
|
3220
|
+
content: () => "Please define a variable name",
|
|
3221
|
+
description: () => `We need to define a variable to be used as a counter to limit the loop`,
|
|
3222
|
+
guidance: () => ""
|
|
3223
|
+
}
|
|
3224
|
+
};
|
|
3225
|
+
|
|
3209
3226
|
// src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
|
|
3210
3227
|
var vulnerabilities13 = {
|
|
3211
3228
|
["CSRF" /* Csrf */]: csrf2,
|
|
3212
3229
|
["LOG_FORGING" /* LogForging */]: logForging5,
|
|
3213
|
-
["
|
|
3230
|
+
["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect2,
|
|
3231
|
+
["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3
|
|
3214
3232
|
};
|
|
3215
3233
|
var python_default2 = vulnerabilities13;
|
|
3216
3234
|
|
|
@@ -4458,8 +4476,8 @@ var CommitToSameBranchParamsZ = BaseSubmitToScmMessageZ.merge(
|
|
|
4458
4476
|
z15.object({
|
|
4459
4477
|
type: z15.literal(submitToScmMessageType.commitToSameBranch),
|
|
4460
4478
|
branch: z15.string(),
|
|
4461
|
-
|
|
4462
|
-
|
|
4479
|
+
commitMessages: z15.array(z15.string()),
|
|
4480
|
+
commitDescriptions: z15.array(z15.string().nullish()),
|
|
4463
4481
|
githubCommentId: z15.number().nullish()
|
|
4464
4482
|
})
|
|
4465
4483
|
);
|
|
@@ -4515,11 +4533,11 @@ var GitCommitZ = z15.object({
|
|
|
4515
4533
|
commit: z15.string(),
|
|
4516
4534
|
root: z15.boolean(),
|
|
4517
4535
|
summary: summarySchemaZ
|
|
4518
|
-
})
|
|
4536
|
+
});
|
|
4519
4537
|
var SubmitFixesToSameBranchResponseMessageZ = z15.object({
|
|
4520
4538
|
type: z15.literal(submitToScmMessageType.commitToSameBranch),
|
|
4521
4539
|
githubCommentId: z15.number().nullish(),
|
|
4522
|
-
|
|
4540
|
+
commits: z15.array(GitCommitZ)
|
|
4523
4541
|
}).merge(SubmitFixesBaseResponseMessageZ);
|
|
4524
4542
|
var SubmitFixesToDifferentBranchResponseMessageZ = z15.object({
|
|
4525
4543
|
type: z15.literal(submitToScmMessageType.submitFixesForDifferentBranch),
|