mobbdev 1.0.28 → 1.0.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.mjs +25 -7
  2. package/package.json +1 -1
package/dist/index.mjs CHANGED
@@ -125,6 +125,7 @@ var IssueType_Enum = /* @__PURE__ */ ((IssueType_Enum2) => {
125
125
  IssueType_Enum2["DosStringBuilder"] = "DOS_STRING_BUILDER";
126
126
  IssueType_Enum2["ErroneousStringCompare"] = "ERRONEOUS_STRING_COMPARE";
127
127
  IssueType_Enum2["ErrorCondtionWithoutAction"] = "ERROR_CONDTION_WITHOUT_ACTION";
128
+ IssueType_Enum2["FrameableLoginPage"] = "FRAMEABLE_LOGIN_PAGE";
128
129
  IssueType_Enum2["GraphqlDepthLimit"] = "GRAPHQL_DEPTH_LIMIT";
129
130
  IssueType_Enum2["HardcodedDomainInHtml"] = "HARDCODED_DOMAIN_IN_HTML";
130
131
  IssueType_Enum2["HardcodedSecrets"] = "HARDCODED_SECRETS";
@@ -773,7 +774,8 @@ var issueTypeMap = {
773
774
  ["CSRF" /* Csrf */]: "Cross-Site Request Forgery (CSRF)",
774
775
  ["WEAK_ENCRYPTION" /* WeakEncryption */]: "Weak Encryption Mechanism",
775
776
  ["CODE_IN_COMMENT" /* CodeInComment */]: "Code in Comment",
776
- ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout"
777
+ ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: "Regex Missing Timeout",
778
+ ["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: "Frameable Login Page"
777
779
  };
778
780
  var issueTypeZ = z.nativeEnum(IssueType_Enum);
779
781
  var getIssueTypeFriendlyString = (issueType) => {
@@ -1833,7 +1835,8 @@ var fixDetailsData = {
1833
1835
  },
1834
1836
  ["WEAK_ENCRYPTION" /* WeakEncryption */]: void 0,
1835
1837
  ["CODE_IN_COMMENT" /* CodeInComment */]: void 0,
1836
- ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: void 0
1838
+ ["REGEX_MISSING_TIMEOUT" /* RegexMissingTimeout */]: void 0,
1839
+ ["FRAMEABLE_LOGIN_PAGE" /* FrameableLoginPage */]: void 0
1837
1840
  };
1838
1841
 
1839
1842
  // src/features/analysis/scm/shared/src/commitDescriptionMarkup.ts
@@ -3206,11 +3209,26 @@ var openRedirect2 = {
3206
3209
  }
3207
3210
  };
3208
3211
 
3212
+ // src/features/analysis/scm/shared/src/storedQuestionData/python/uncheckedLoopCondition.ts
3213
+ var uncheckedLoopCondition3 = {
3214
+ loopLimit: {
3215
+ content: () => "Please define a maximum loop limit",
3216
+ description: () => `Setting this number to a reasonable value will prevent the vulnerability`,
3217
+ guidance: () => ""
3218
+ },
3219
+ varName: {
3220
+ content: () => "Please define a variable name",
3221
+ description: () => `We need to define a variable to be used as a counter to limit the loop`,
3222
+ guidance: () => ""
3223
+ }
3224
+ };
3225
+
3209
3226
  // src/features/analysis/scm/shared/src/storedQuestionData/python/index.ts
3210
3227
  var vulnerabilities13 = {
3211
3228
  ["CSRF" /* Csrf */]: csrf2,
3212
3229
  ["LOG_FORGING" /* LogForging */]: logForging5,
3213
- ["LOG_FORGING" /* LogForging */]: openRedirect2
3230
+ ["OPEN_REDIRECT" /* OpenRedirect */]: openRedirect2,
3231
+ ["UNCHECKED_LOOP_CONDITION" /* UncheckedLoopCondition */]: uncheckedLoopCondition3
3214
3232
  };
3215
3233
  var python_default2 = vulnerabilities13;
3216
3234
 
@@ -4458,8 +4476,8 @@ var CommitToSameBranchParamsZ = BaseSubmitToScmMessageZ.merge(
4458
4476
  z15.object({
4459
4477
  type: z15.literal(submitToScmMessageType.commitToSameBranch),
4460
4478
  branch: z15.string(),
4461
- commitMessage: z15.string(),
4462
- commitDescription: z15.string().nullish(),
4479
+ commitMessages: z15.array(z15.string()),
4480
+ commitDescriptions: z15.array(z15.string().nullish()),
4463
4481
  githubCommentId: z15.number().nullish()
4464
4482
  })
4465
4483
  );
@@ -4515,11 +4533,11 @@ var GitCommitZ = z15.object({
4515
4533
  commit: z15.string(),
4516
4534
  root: z15.boolean(),
4517
4535
  summary: summarySchemaZ
4518
- }).nullable();
4536
+ });
4519
4537
  var SubmitFixesToSameBranchResponseMessageZ = z15.object({
4520
4538
  type: z15.literal(submitToScmMessageType.commitToSameBranch),
4521
4539
  githubCommentId: z15.number().nullish(),
4522
- commit: GitCommitZ
4540
+ commits: z15.array(GitCommitZ)
4523
4541
  }).merge(SubmitFixesBaseResponseMessageZ);
4524
4542
  var SubmitFixesToDifferentBranchResponseMessageZ = z15.object({
4525
4543
  type: z15.literal(submitToScmMessageType.submitFixesForDifferentBranch),
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "mobbdev",
3
- "version": "1.0.28",
3
+ "version": "1.0.31",
4
4
  "description": "Automated secure code remediation tool",
5
5
  "repository": "git+https://github.com/mobb-dev/bugsy.git",
6
6
  "main": "dist/index.js",