prebid.js 10.14.0 → 10.16.0

package/.github/codeql/queries/autogen_fpDOMMethod.qll

@@ -0,0 +1,23 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class DOMMethod extends string {
+
+  float weight; 
+  string type; 
+  
+  DOMMethod() {
+      
+      ( this = "getChannelData"  and weight = 827.19  and type = "AudioBuffer" )
+       or 
+      ( this = "toDataURL"  and weight = 27.15  and type = "HTMLCanvasElement" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getType() {
+    result = type
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpEventProperty.qll

@@ -0,0 +1,35 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class EventProperty extends string {
+
+  float weight; 
+  string event; 
+  
+  EventProperty() {
+      
+      ( this = "accelerationIncludingGravity"  and weight = 149.23  and event = "devicemotion" )
+       or 
+      ( this = "beta"  and weight = 1075.3  and event = "deviceorientation" )
+       or 
+      ( this = "gamma"  and weight = 395.62  and event = "deviceorientation" )
+       or 
+      ( this = "alpha"  and weight = 366.53  and event = "deviceorientation" )
+       or 
+      ( this = "candidate"  and weight = 69.63  and event = "icecandidate" )
+       or 
+      ( this = "acceleration"  and weight = 58.05  and event = "devicemotion" )
+       or 
+      ( this = "rotationRate"  and weight = 57.59  and event = "devicemotion" )
+       or 
+      ( this = "absolute"  and weight = 387.12  and event = "deviceorientation" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getEvent() {
+    result = event
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpGlobalConstructor.qll

@@ -0,0 +1,24 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class GlobalConstructor extends string {
+
+  float weight; 
+  
+  GlobalConstructor() {
+      
+      ( this = "SharedWorker"  and weight = 78.14 )
+       or 
+      ( this = "OfflineAudioContext"  and weight = 1135.77 )
+       or 
+      ( this = "RTCPeerConnection"  and weight = 49.44 )
+       or 
+      ( this = "Gyroscope"  and weight = 142.79 )
+       or 
+      ( this = "AudioWorkletNode"  and weight = 17.63 )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpGlobalObjectProperty0.qll

@@ -0,0 +1,71 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class GlobalObjectProperty0 extends string {
+
+  float weight; 
+  string global0; 
+  
+  GlobalObjectProperty0() {
+      
+      ( this = "availHeight"  and weight = 70.68  and global0 = "screen" )
+       or 
+      ( this = "availWidth"  and weight = 65.56  and global0 = "screen" )
+       or 
+      ( this = "colorDepth"  and weight = 34.27  and global0 = "screen" )
+       or 
+      ( this = "deviceMemory"  and weight = 75.06  and global0 = "navigator" )
+       or 
+      ( this = "availTop"  and weight = 1240.09  and global0 = "screen" )
+       or 
+      ( this = "cookieEnabled"  and weight = 15.3  and global0 = "navigator" )
+       or 
+      ( this = "pixelDepth"  and weight = 37.72  and global0 = "screen" )
+       or 
+      ( this = "availLeft"  and weight = 547.54  and global0 = "screen" )
+       or 
+      ( this = "orientation"  and weight = 35.82  and global0 = "screen" )
+       or 
+      ( this = "vendorSub"  and weight = 1791.96  and global0 = "navigator" )
+       or 
+      ( this = "productSub"  and weight = 482.29  and global0 = "navigator" )
+       or 
+      ( this = "webkitTemporaryStorage"  and weight = 40.79  and global0 = "navigator" )
+       or 
+      ( this = "hardwareConcurrency"  and weight = 67.85  and global0 = "navigator" )
+       or 
+      ( this = "appCodeName"  and weight = 143.58  and global0 = "navigator" )
+       or 
+      ( this = "onLine"  and weight = 19.76  and global0 = "navigator" )
+       or 
+      ( this = "webdriver"  and weight = 31.25  and global0 = "navigator" )
+       or 
+      ( this = "keyboard"  and weight = 957.44  and global0 = "navigator" )
+       or 
+      ( this = "mediaDevices"  and weight = 121.74  and global0 = "navigator" )
+       or 
+      ( this = "storage"  and weight = 151.33  and global0 = "navigator" )
+       or 
+      ( this = "mediaCapabilities"  and weight = 126.07  and global0 = "navigator" )
+       or 
+      ( this = "permissions"  and weight = 66.75  and global0 = "navigator" )
+       or 
+      ( this = "permission"  and weight = 22.02  and global0 = "Notification" )
+       or 
+      ( this = "getBattery"  and weight = 114.16  and global0 = "navigator" )
+       or 
+      ( this = "webkitPersistentStorage"  and weight = 150.79  and global0 = "navigator" )
+       or 
+      ( this = "requestMediaKeySystemAccess"  and weight = 17.34  and global0 = "navigator" )
+       or 
+      ( this = "getGamepads"  and weight = 235.72  and global0 = "navigator" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getGlobal0() {
+    result = global0
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpGlobalObjectProperty1.qll

@@ -0,0 +1,26 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class GlobalObjectProperty1 extends string {
+
+  float weight; 
+  string global0; 
+  string global1; 
+  
+  GlobalObjectProperty1() {
+      
+      ( this = "enumerateDevices"  and weight = 301.74  and global0 = "navigator"  and global1 = "mediaDevices" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getGlobal0() {
+    result = global0
+  }
+  
+  string getGlobal1() {
+    result = global1
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpGlobalTypeProperty0.qll

@@ -0,0 +1,25 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class GlobalTypeProperty0 extends string {
+
+  float weight; 
+  string global0; 
+  
+  GlobalTypeProperty0() {
+      
+      ( this = "x"  and weight = 5043.14  and global0 = "Gyroscope" )
+       or 
+      ( this = "y"  and weight = 5043.14  and global0 = "Gyroscope" )
+       or 
+      ( this = "z"  and weight = 5043.14  and global0 = "Gyroscope" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getGlobal0() {
+    result = global0
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpGlobalTypeProperty1.qll

@@ -0,0 +1,26 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class GlobalTypeProperty1 extends string {
+
+  float weight; 
+  string global0; 
+  string global1; 
+  
+  GlobalTypeProperty1() {
+      
+      ( this = "resolvedOptions"  and weight = 17.99  and global0 = "Intl"  and global1 = "DateTimeFormat" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getGlobal0() {
+    result = global0
+  }
+  
+  string getGlobal1() {
+    result = global1
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpGlobalVar.qll

@@ -0,0 +1,32 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class GlobalVar extends string {
+
+  float weight; 
+  
+  GlobalVar() {
+      
+      ( this = "devicePixelRatio"  and weight = 19.42 )
+       or 
+      ( this = "screenX"  and weight = 319.5 )
+       or 
+      ( this = "screenY"  and weight = 303.5 )
+       or 
+      ( this = "outerWidth"  and weight = 102.66 )
+       or 
+      ( this = "outerHeight"  and weight = 183.94 )
+       or 
+      ( this = "screenLeft"  and weight = 315.55 )
+       or 
+      ( this = "screenTop"  and weight = 313.8 )
+       or 
+      ( this = "indexedDB"  and weight = 17.79 )
+       or 
+      ( this = "openDatabase"  and weight = 143.97 )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpRenderingContextProperty.qll

@@ -0,0 +1,49 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class RenderingContextProperty extends string {
+
+  float weight; 
+  string contextType; 
+  
+  RenderingContextProperty() {
+      
+      ( this = "getExtension"  and weight = 20.11  and contextType = "webgl" )
+       or 
+      ( this = "getParameter"  and weight = 22.92  and contextType = "webgl" )
+       or 
+      ( this = "getImageData"  and weight = 40.74  and contextType = "2d" )
+       or 
+      ( this = "getParameter"  and weight = 41.44  and contextType = "webgl2" )
+       or 
+      ( this = "getShaderPrecisionFormat"  and weight = 108.95  and contextType = "webgl2" )
+       or 
+      ( this = "getExtension"  and weight = 44.59  and contextType = "webgl2" )
+       or 
+      ( this = "getContextAttributes"  and weight = 187.09  and contextType = "webgl2" )
+       or 
+      ( this = "getSupportedExtensions"  and weight = 535.91  and contextType = "webgl2" )
+       or 
+      ( this = "measureText"  and weight = 45.5  and contextType = "2d" )
+       or 
+      ( this = "getShaderPrecisionFormat"  and weight = 632.69  and contextType = "webgl" )
+       or 
+      ( this = "getContextAttributes"  and weight = 1404.12  and contextType = "webgl" )
+       or 
+      ( this = "getSupportedExtensions"  and weight = 968.57  and contextType = "webgl" )
+       or 
+      ( this = "readPixels"  and weight = 21.25  and contextType = "webgl" )
+       or 
+      ( this = "isPointInPath"  and weight = 5043.14  and contextType = "2d" )
+       or 
+      ( this = "readPixels"  and weight = 68.7  and contextType = "webgl2" )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+  string getContextType() {
+    result = contextType
+  }
+  
+} 

package/.github/codeql/queries/autogen_fpSensorProperty.qll

@@ -0,0 +1,16 @@
+// this file is autogenerated, see fingerprintApis.mjs
+
+class SensorProperty extends string {
+
+  float weight; 
+  
+  SensorProperty() {
+      
+      ( this = "start"  and weight = 123.75 )
+  }  
+
+  float getWeight() {
+    result = weight
+  }
+  
+} 

package/.github/codeql/queries/fpEventProperty.ql

@@ -0,0 +1,58 @@
+/**
+ * @id prebid/fp-event-property
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds property access on event objects (e.g. `.addEventListener('someEvent', (event) => event.someProperty)`)
+
+import prebid
+import autogen_fpEventProperty
+
+/*
+ Tracks event objects through `addEventListener`
+ (1st argument to the 2nd argument passed to an `addEventListener`)
+*/
+SourceNode eventListener(TypeTracker t, string event) {
+  t.start() and
+  (
+    exists(MethodCallNode addEventListener |
+      addEventListener.getMethodName() = "addEventListener" and
+      addEventListener.getArgument(0).mayHaveStringValue(event) and
+      result = addEventListener.getArgument(1).(FunctionNode).getParameter(0)
+    )
+  )
+  or
+  exists(TypeTracker t2 |
+    result = eventListener(t2, event).track(t2, t)
+  )
+}
+
+/*
+  Tracks event objects through 'onevent' property assignments
+  (1st argument of the assignment's right hand)
+*/
+SourceNode eventSetter(TypeTracker t, string eventSetter) {
+  t.start() and
+  exists(PropWrite write |
+    write.getPropertyName() = eventSetter and
+    result = write.getRhs().(FunctionNode).getParameter(0)
+  ) or
+  exists(TypeTracker t2 |
+   result = eventSetter(t2, eventSetter).track(t2, t)
+  )
+}
+
+bindingset[event]
+SourceNode event(string event) {
+  result = eventListener(TypeTracker::end(), event) or
+  result = eventSetter(TypeTracker::end(), "on" + event.toLowerCase())
+}
+
+
+from EventProperty prop, SourceNode use
+where
+   use = event(prop.getEvent()).getAPropertyRead(prop)
+select use, prop.getEvent() + "event ." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/fpGlobalConstructors.ql

@@ -0,0 +1,17 @@
+/**
+ * @id prebid/fp-global-constructors
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds uses of global constructors (e.g. `new SomeConstructor()`)
+
+import prebid
+import autogen_fpGlobalConstructor
+
+from GlobalConstructor ctor, SourceNode use
+where
+  use = callTo(global(ctor))
+select use, ctor + " is an indicator of fingerprinting; weight: " + ctor.getWeight()

package/.github/codeql/queries/fpGlobalVariable.ql

@@ -0,0 +1,18 @@
+/**
+ * @id prebid/fp-global-var
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds use of global variables (e.g. `someVariable`)
+
+import prebid
+import autogen_fpGlobalVar
+
+
+from GlobalVar var, SourceNode use
+where
+   use = windowPropertyRead(var)
+select use, var + " is an indicator of fingerprinting; weight: " + var.getWeight()

package/.github/codeql/queries/fpMethod.ql

@@ -0,0 +1,19 @@
+/**
+ * @id prebid/fp-method
+ * @name Possible use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds calls to a given method name (e.g. object.someMethod())
+
+import prebid
+import autogen_fpDOMMethod
+
+
+from DOMMethod meth, MethodCallNode use
+where
+   use.getMethodName() = meth
+   // there's no easy way to check the method call is on the right type
+select use, meth + " is an indicator of fingerprinting if used on " + meth.getType() +"; weight: " + meth.getWeight()

package/.github/codeql/queries/fpOneDeepObjectProperty.ql

@@ -0,0 +1,17 @@
+/**
+ * @id prebid/fp-one-deep-object-prop
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+*/
+
+// Finds property access on instances of objects reachable 1 level down from a global (e.g. `someName.someObject.someProperty`)
+
+import prebid
+import autogen_fpGlobalObjectProperty1
+
+from GlobalObjectProperty1 prop, SourceNode use
+where
+   use = oneDeepGlobal(prop.getGlobal0(), prop.getGlobal1()).getAPropertyRead(prop)
+select use, prop.getGlobal0() + "." + prop.getGlobal1() + "." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/fpOneDeepTypeProperty.ql

@@ -0,0 +1,26 @@
+/**
+ * @id prebid/fp-one-deep-constructor-prop
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+*/
+
+// Finds property access on instances of types reachable 1 level down from a global (e.g. `new SomeName.SomeType().someProperty`)
+
+import prebid
+import autogen_fpGlobalTypeProperty1
+
+SourceNode oneDeepType(TypeTracker t, string parent, string ctor) {
+  t.start() and (
+    result = callTo(oneDeepGlobal(parent, ctor))
+  ) or exists(TypeTracker t2 |
+    result = oneDeepType(t2, parent, ctor).track(t2, t)
+  )
+}
+
+
+from GlobalTypeProperty1 prop, SourceNode use
+where
+   use = oneDeepType(TypeTracker::end(), prop.getGlobal0(), prop.getGlobal1()).getAPropertyRead(prop)
+select use, prop.getGlobal0() + "." + prop.getGlobal1() + "." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/fpRenderingContextProperty.ql

@@ -0,0 +1,30 @@
+/**
+ * @id prebid/fp-rendering-context-property
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds use of rendering context properties (e.g. canvas.getContext().someProperty)
+
+import prebid
+import autogen_fpRenderingContextProperty
+
+/*
+  Tracks objects returned by a call to `.getContext()`
+*/
+SourceNode renderingContext(TypeTracker t, string contextType) {
+  t.start() and exists(MethodCallNode invocation |
+    invocation.getMethodName() = "getContext" and
+    invocation.getArgument(0).mayHaveStringValue(contextType) and
+    result = invocation
+  ) or exists(TypeTracker t2 |
+    result = renderingContext(t2, contextType).track(t2, t)
+  )
+}
+
+from RenderingContextProperty prop, SourceNode use
+where
+   use = renderingContext(TypeTracker::end(), prop.getContextType()).getAPropertyRead(prop)
+select use, "canvas.getContext()." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/fpSensorProperty.ql

@@ -0,0 +1,36 @@
+/**
+ * @id prebid/fp-sensor-property
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds property access on sensor objects (e.g. `new Gyroscope().someProperty`)
+
+import prebid
+import autogen_fpSensorProperty
+
+SourceNode sensor(TypeTracker t) {
+  t.start() and exists(string variant |
+    variant in [
+      // Sensor subtypes, https://developer.mozilla.org/en-US/docs/Web/API/Sensor_APIs
+      "Gyroscope",
+      "Accelerometer",
+      "GravitySensor",
+      "LinearAccelerationSensor",
+      "AbsoluteOrientationSensor",
+      "RelativeOrientationSensor",
+      "Magnetometer",
+      "AmbientLightSensor"
+    ] and
+    result = callTo(global(variant))
+  ) or exists(TypeTracker t2 |
+    result = sensor(t2).track(t2, t)
+  )
+}
+
+from SensorProperty prop, SourceNode use
+where
+   use = sensor(TypeTracker::end()).getAPropertyRead(prop)
+select use, "Sensor." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/fpTopLevelObjectProperty.ql

@@ -0,0 +1,17 @@
+/**
+ * @id prebid/fp-top-level-object-prop
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds property access on top-level global objects (e.g. `someObject.someProperty`)
+
+import prebid
+import autogen_fpGlobalObjectProperty0
+
+from GlobalObjectProperty0 prop, SourceNode use
+where
+   use = global(prop.getGlobal0()).getAPropertyRead(prop)
+select use, prop.getGlobal0() + "." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/fpTopLevelTypeProperty.ql

@@ -0,0 +1,26 @@
+/**
+ * @id prebid/fp-top-level-type-prop
+ * @name Use of browser API associated with fingerprinting
+ * @kind problem
+ * @problem.severity warning
+ * @description Usage of browser APIs associated with fingerprinting
+ */
+
+// Finds property access on instances of top-level types (e.g. `new SomeType().someProperty`)
+
+import prebid
+import autogen_fpGlobalTypeProperty0
+
+SourceNode topLevelType(TypeTracker t, string ctor) {
+  t.start() and (
+    result = callTo(global(ctor))
+  ) or exists(TypeTracker t2 |
+    result = topLevelType(t2, ctor).track(t2, t)
+  )
+}
+
+
+from GlobalTypeProperty0 prop, SourceNode use
+where
+   use = topLevelType(TypeTracker::end(), prop.getGlobal0()).getAPropertyRead(prop)
+select use, prop.getGlobal0() + "." + prop + " is an indicator of fingerprinting; weight: " + prop.getWeight()

package/.github/codeql/queries/prebid.qll

@@ -63,22 +63,41 @@ SourceNode windowPropertyRead(string prop) {
   result = windowPropertyRead(TypeTracker::end(), prop)
 }
 
-SourceNode callTo(string globalVar) {
-   exists(SourceNode fn |
-     fn = windowPropertyRead(globalVar) and
-     (
-       result = fn.getAnInstantiation() or
-       result = fn.getAnInvocation()
-     )
-   )
+/**
+ Matches both invocations and instantiations of fn.
+*/
+SourceNode callTo(SourceNode fn) {
+   result = fn.getAnInstantiation() or
+   result = fn.getAnInvocation()
 }
 
-SourceNode callTo(string globalVar, string name) {
-   exists(SourceNode fn |
-      fn = windowPropertyRead(globalVar).getAPropertyRead(name) and
-      (
-      result = fn.getAnInstantiation() or
-      result = fn.getAnInvocation()
-      )
+SourceNode global(TypeTracker t, string name) {
+   t.start() and (
+     result = windowPropertyRead(name)
+   ) or exists(TypeTracker t2 |
+     result = global(t2, name).track(t2, t)
    )
 }
+
+
+/**
+ Tracks a global (name reachable from a window object).
+*/
+SourceNode global(string name) {
+   result = global(TypeTracker::end(), name)
+}
+
+SourceNode oneDeepGlobal(TypeTracker t, string parent, string name) {
+  t.start() and (
+     result = global(parent).getAPropertyRead(name)
+  ) or exists(TypeTracker t2 |
+     result = oneDeepGlobal(t2, parent, name).track(t2, t)
+  )
+}
+
+/*
+ Tracks a name reachable 1 level down from the global (e.g. `Intl.DateTimeFormat`).
+*/
+SourceNode oneDeepGlobal(string parent, string name) {
+  result = oneDeepGlobal(TypeTracker::end(), parent, name)
+}