pentest-tool-lite 3.9.3 → 3.10.8

package/dist/security/PermissionsPolicy.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Test_1 = __importDefault(require("../Test"));
+const request_1 = __importDefault(require("../request"));
+const logger_1 = __importDefault(require("../logger"));
+/**
+ *
+ * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
+ */
+class PermissionsPolicy extends Test_1.default {
+    name = 'Permissions-Policy';
+    async test({ url }) {
+        logger_1.default.info('Starting PermissionsPolicy test...');
+        const response = await request_1.default.get(url);
+        if (!Object.prototype.hasOwnProperty.call(response.headers, 'permissions-policy')) {
+            return {
+                status: 'ERROR',
+                title: 'Permissions-Policy',
+                description: 'Response headers does not contain permissions-policy header!',
+            };
+        }
+        const permissionsArray = ['accelerometer', 'geolocation', 'midi', 'notifications', 'push', 'sync-xhr',
+            'microphone', 'camera', 'magnetometer', 'gyroscope', 'speaker', 'vibrate', 'fullscreen', 'payment', 'usb'];
+        const attributesList = response.headers['permissions-policy'];
+        const subChecks = this.checkPermissions(permissionsArray, attributesList);
+        return {
+            status: subChecks.some(check => check.status === 'WARNING') ? 'WARNING' : 'SUCCESS',
+            title: 'Permissions-Policy',
+            description: '',
+            results: subChecks,
+        };
+    }
+    checkPermissions(permissions, attributes) {
+        return permissions.map((permission) => {
+            if (!attributes.includes(permission)) {
+                return {
+                    status: 'WARNING',
+                    title: permission,
+                    description: `Permission ${permission} is missing.`,
+                };
+            }
+            return {
+                status: 'SUCCESS',
+                title: permission,
+                description: `Permission ${permission} is present.`,
+            };
+        });
+    }
+}
+exports.default = PermissionsPolicy;

package/dist/security/Redirect.d.ts

@@ -0,0 +1,6 @@
+import Test, { TestParameters, Result } from '../Test';
+declare class Redirect extends Test {
+    name: string;
+    test({ url }: TestParameters): Promise<Result>;
+}
+export default Redirect;

package/dist/security/Redirect.js

@@ -0,0 +1,37 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Test_1 = __importDefault(require("../Test"));
+const request_1 = __importDefault(require("../request"));
+const logger_1 = __importDefault(require("../logger"));
+class Redirect extends Test_1.default {
+    name = 'Redirect';
+    async test({ url }) {
+        logger_1.default.info('Starting Redirect test...');
+        const response = await request_1.default.get(url, { redirect: 'follow' });
+        if (response.response.redirected) {
+            const originalUrl = new URL(url);
+            const finalUrl = new URL(response.response.url);
+            if (originalUrl.hostname !== finalUrl.hostname) {
+                return {
+                    status: 'ERROR',
+                    title: this.name,
+                    description: 'URL redirects to different hostname!',
+                };
+            }
+            return {
+                status: 'SUCCESS',
+                title: this.name,
+                description: 'Request was redirected but to the same hostname.',
+            };
+        }
+        return {
+            status: 'SUCCESS',
+            title: this.name,
+            description: 'Request was not redirected.',
+        };
+    }
+}
+exports.default = Redirect;

package/dist/security/ReferrerPolicy.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Test_1 = __importDefault(require("../Test"));
+const request_1 = __importDefault(require("../request"));
+const logger_1 = __importDefault(require("../logger"));
+/**
+ *
+ * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ */
+class ReferrerPolicy extends Test_1.default {
+    name = 'Referrer-Policy';
+    async test({ url }) {
+        logger_1.default.info('Starting ReferrerPolicy test...');
+        const response = await request_1.default.get(url);
+        if (!Object.prototype.hasOwnProperty.call(response.headers, 'referrer-policy')) {
+            return {
+                status: 'WARNING',
+                title: 'Referrer-Policy',
+                description: 'Response headers does not contain referrer-policy header!',
+            };
+        }
+        return {
+            status: 'SUCCESS',
+            title: 'Referrer-Policy',
+            description: `The value of referrer-policy header is ${response.headers['referrer-policy']}.`,
+        };
+    }
+}
+exports.default = ReferrerPolicy;

package/dist/security/RobotsTXT.js

@@ -0,0 +1,28 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Test_1 = __importDefault(require("../Test"));
+const request_1 = __importDefault(require("../request"));
+const logger_1 = __importDefault(require("../logger"));
+class RobotsTXT extends Test_1.default {
+    name = 'Robots.txt';
+    async test({ url }) {
+        logger_1.default.info('Starting robotstxt test...');
+        const response = await request_1.default.get(url + '/robots.txt');
+        if (response !== null && response.statusCode === 200) {
+            return {
+                status: 'SUCCESS',
+                title: 'Robots.txt',
+                description: 'Site does contain robots.txt',
+            };
+        }
+        return {
+            status: 'ERROR',
+            title: 'Robots.txt',
+            description: 'Site does not contain robots.txt',
+        };
+    }
+}
+exports.default = RobotsTXT;

package/dist/security/SSL.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const ssl_checker_1 = __importDefault(require("ssl-checker"));
+const Test_1 = __importDefault(require("../Test"));
+const logger_1 = __importDefault(require("../logger"));
+class SSL extends Test_1.default {
+    name = 'SSL';
+    async test({ url }) {
+        logger_1.default.info('Starting SSL test...');
+        const hostname = (new URL(url)).hostname;
+        const sslDetails = await (0, ssl_checker_1.default)(hostname);
+        if (!sslDetails.valid) {
+            return {
+                status: 'ERROR',
+                title: this.name,
+                description: 'SSL certificate is not valid!',
+            };
+        }
+        if (sslDetails.daysRemaining <= 7) {
+            return {
+                status: 'WARNING',
+                title: this.name,
+                description: 'SSL certificate is valid for 7 or less days!',
+            };
+        }
+        return {
+            status: 'SUCCESS',
+            title: this.name,
+            description: `SSL certificate is valid until ${sslDetails.validTo}.`,
+        };
+    }
+}
+exports.default = SSL;

package/dist/security/XFrameOptions.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Test_1 = __importDefault(require("../Test"));
+const request_1 = __importDefault(require("../request"));
+const logger_1 = __importDefault(require("../logger"));
+/**
+ *
+ * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
+ */
+class XFrameOptions extends Test_1.default {
+    name = 'X-Frame-Options';
+    async test({ url }) {
+        logger_1.default.info('Starting X-Frame-Options test...');
+        const response = await request_1.default.get(url);
+        if (!Object.prototype.hasOwnProperty.call(response.headers, 'x-frame-options')) {
+            return {
+                status: 'ERROR',
+                title: 'X-Frame-Options',
+                description: 'Response headers does not contain x-frame-options header!',
+            };
+        }
+        return {
+            status: 'SUCCESS',
+            title: 'X-Frame-Options',
+            description: `The value of x-frame-options header is ${response.headers['x-frame-options']}.`,
+        };
+    }
+}
+exports.default = XFrameOptions;

package/dist/security/XXSSProtection.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Test_1 = __importDefault(require("../Test"));
+const request_1 = __importDefault(require("../request"));
+const logger_1 = __importDefault(require("../logger"));
+/**
+ *
+ * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
+ */
+class XXSSProtection extends Test_1.default {
+    name = 'X-XSS-Protection';
+    async test({ url }) {
+        logger_1.default.info('Starting X-XSS-Protection test...');
+        const response = await request_1.default.get(url);
+        if (!Object.prototype.hasOwnProperty.call(response.headers, 'x-xss-protection')) {
+            return {
+                status: 'ERROR',
+                title: 'X-XSS-Protection',
+                description: 'Response headers does not contain x-xss-protection header!',
+            };
+        }
+        return {
+            status: 'SUCCESS',
+            title: 'X-XSS-Protection',
+            description: `The value of x-xss-protection header is ${response.headers['x-xss-protection']}.`,
+        };
+    }
+}
+exports.default = XXSSProtection;

package/{src → dist}/security/__TESTS__/ContentSecurityPolicy.test.js

@@ -1,22 +1,14 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const ContentSecurityPolicy_1 = __importDefault(require("../ContentSecurityPolicy"));
 const request_1 = __importDefault(require("../../request"));
-test('Content-Security-Policy test with correct header', () => __awaiter(void 0, void 0, void 0, function* () {
+test('Content-Security-Policy test with correct header', async () => {
     const pentest = new ContentSecurityPolicy_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {
@@ -24,21 +16,22 @@ test('Content-Security-Policy test with correct header', () => __awaiter(void 0,
                 },
             });
         });
-    }));
-    const result = yield pentest.run({ url: 'https://juffalow.com' });
+    });
+    const result = await pentest.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('SUCCESS');
     mock.mockRestore();
-}));
-test('Content-Security-Policy test with missing Content-Security-Policy header', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('Content-Security-Policy test with missing Content-Security-Policy header', async () => {
     const pentest = new ContentSecurityPolicy_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {}
             });
         });
-    }));
-    const result = yield pentest.run({ url: 'https://juffalow.com' });
+    });
+    const result = await pentest.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
+});

package/{src → dist}/security/__TESTS__/FingerPrint.test.js

@@ -1,22 +1,14 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const FingerPrint_1 = __importDefault(require("../FingerPrint"));
 const request_1 = __importDefault(require("../../request"));
-test('FingerPrint test without any finger print header present', () => __awaiter(void 0, void 0, void 0, function* () {
+test('FingerPrint test without any finger print header present', async () => {
     const fingerPrint = new FingerPrint_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {
@@ -24,14 +16,15 @@ test('FingerPrint test without any finger print header present', () => __awaiter
                 },
             });
         });
-    }));
-    const result = yield fingerPrint.run({ url: 'https://juffalow.com' });
+    });
+    const result = await fingerPrint.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('SUCCESS');
     mock.mockRestore();
-}));
-test('FingerPrint test with finger print header present', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('FingerPrint test with finger print header present', async () => {
     const fingerPrint = new FingerPrint_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {
@@ -39,8 +32,8 @@ test('FingerPrint test with finger print header present', () => __awaiter(void 0
                 },
             });
         });
-    }));
-    const result = yield fingerPrint.run({ url: 'https://juffalow.com' });
+    });
+    const result = await fingerPrint.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
+});

package/{src → dist}/security/__TESTS__/HSTS.test.js

@@ -1,22 +1,14 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const HSTS_1 = __importDefault(require("../HSTS"));
 const request_1 = __importDefault(require("../../request"));
-test('HSTS test with correct header', () => __awaiter(void 0, void 0, void 0, function* () {
+test('HSTS test with correct header', async () => {
     const hsts = new HSTS_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {
@@ -24,14 +16,15 @@ test('HSTS test with correct header', () => __awaiter(void 0, void 0, void 0, fu
                 },
             });
         });
-    }));
-    const result = yield hsts.run({ url: 'https://juffalow.com' });
+    });
+    const result = await hsts.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('SUCCESS');
     mock.mockRestore();
-}));
-test('HSTS test with low max age value', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('HSTS test with low max age value', async () => {
     const hsts = new HSTS_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {
@@ -39,21 +32,22 @@ test('HSTS test with low max age value', () => __awaiter(void 0, void 0, void 0,
                 },
             });
         });
-    }));
-    const result = yield hsts.run({ url: 'https://juffalow.com' });
+    });
+    const result = await hsts.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
-test('HSTS test with missing HSTS header', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('HSTS test with missing HSTS header', async () => {
     const hsts = new HSTS_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {},
             });
         });
-    }));
-    const result = yield hsts.run({ url: 'https://juffalow.com' });
+    });
+    const result = await hsts.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
+});

package/{src → dist}/security/__TESTS__/HTTPS.test.js

@@ -1,22 +1,14 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const HTTPS_1 = __importDefault(require("../HTTPS"));
 const request_1 = __importDefault(require("../../request"));
-test('HTTPS test with correct statusCode and location header', () => __awaiter(void 0, void 0, void 0, function* () {
+test('HTTPS test with correct statusCode and location header', async () => {
     const https = new HTTPS_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 statusCode: 301,
@@ -25,28 +17,30 @@ test('HTTPS test with correct statusCode and location header', () => __awaiter(v
                 },
             });
         });
-    }));
-    const result = yield https.run({ url: 'https://juffalow.com' });
+    });
+    const result = await https.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('SUCCESS');
     mock.mockRestore();
-}));
-test('HTTPS test with wrong statusCode', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('HTTPS test with wrong statusCode', async () => {
     const https = new HTTPS_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 statusCode: 200,
                 headers: {}
             });
         });
-    }));
-    const result = yield https.run({ url: 'https://juffalow.com' });
+    });
+    const result = await https.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
-test('HTTPS test with correct statusCode but wrong redirect location', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('HTTPS test with correct statusCode but wrong redirect location', async () => {
     const https = new HTTPS_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 statusCode: 301,
@@ -55,8 +49,8 @@ test('HTTPS test with correct statusCode but wrong redirect location', () => __a
                 }
             });
         });
-    }));
-    const result = yield https.run({ url: 'https://juffalow.com' });
+    });
+    const result = await https.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
+});

package/dist/security/__TESTS__/XFrameOptions.test.js

@@ -0,0 +1,37 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const XFrameOptions_1 = __importDefault(require("../XFrameOptions"));
+const request_1 = __importDefault(require("../../request"));
+test('X-Frame-Options test with correct header', async () => {
+    const pentest = new XFrameOptions_1.default();
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
+        return new Promise((resolve) => {
+            resolve({
+                headers: {
+                    'x-frame-options': 'deny',
+                },
+            });
+        });
+    });
+    const result = await pentest.run({ url: 'https://juffalow.com' });
+    expect(result.status).toEqual('SUCCESS');
+    mock.mockRestore();
+});
+test('X-Frame-Options test with missing X-Frame-Options header', async () => {
+    const pentest = new XFrameOptions_1.default();
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
+        return new Promise((resolve) => {
+            resolve({
+                headers: {}
+            });
+        });
+    });
+    const result = await pentest.run({ url: 'https://juffalow.com' });
+    expect(result.status).toEqual('ERROR');
+    mock.mockRestore();
+});

package/{src → dist}/security/__TESTS__/XXSSProtection.test.js

@@ -1,22 +1,14 @@
 "use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const XXSSProtection_1 = __importDefault(require("../XXSSProtection"));
 const request_1 = __importDefault(require("../../request"));
-test('X-XSS-Protection test with correct header', () => __awaiter(void 0, void 0, void 0, function* () {
+test('X-XSS-Protection test with correct header', async () => {
     const pentest = new XXSSProtection_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {
@@ -24,21 +16,22 @@ test('X-XSS-Protection test with correct header', () => __awaiter(void 0, void 0
                 },
             });
         });
-    }));
-    const result = yield pentest.run({ url: 'https://juffalow.com' });
+    });
+    const result = await pentest.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('SUCCESS');
     mock.mockRestore();
-}));
-test('X-XSS-Protection test with missing X-XSS-Protection header', () => __awaiter(void 0, void 0, void 0, function* () {
+});
+test('X-XSS-Protection test with missing X-XSS-Protection header', async () => {
     const pentest = new XXSSProtection_1.default();
-    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(() => __awaiter(void 0, void 0, void 0, function* () {
+    /* eslint-disable-next-line  @typescript-eslint/no-explicit-any */
+    const mock = jest.spyOn(request_1.default, 'get').mockImplementation(async () => {
         return new Promise((resolve) => {
             resolve({
                 headers: {}
             });
         });
-    }));
-    const result = yield pentest.run({ url: 'https://juffalow.com' });
+    });
+    const result = await pentest.run({ url: 'https://juffalow.com' });
     expect(result.status).toEqual('ERROR');
     mock.mockRestore();
-}));
+});