shield360 1.1.0 → 1.2.1

package/dist/rasp/__tests__/capture-context.test.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Capture runs inside the request's context (README "Custom rules: when rules
+ * run"): a custom finding rule that reads request fields must see the request
+ * when a virtual patch or an upload check fires during capture, whichever
+ * entry point captured it (raspHttp, raspExpress, raspFastify, raspKoa,
+ * withRasp, the zero-code http capture, late body capture).
+ */
+const http_1 = require("http");
+const auto_http_1 = require("../auto-http");
+const capture_1 = require("../capture");
+const context_1 = require("../context");
+const custom_rules_1 = require("../custom-rules");
+const engine_1 = require("../engine");
+const middleware_1 = require("../middleware");
+const types_1 = require("../types");
+const vpatch_1 = require("../vpatch");
+const corpus_1 = require("./corpus");
+const exampleRule = vpatch_1.BUILT_IN_RULES.find((r) => r.example);
+const shape = (0, corpus_1.requestFor)(exampleRule);
+const headers = shape.headers;
+const path = shape.path;
+let events = [];
+/** Virtual patches and uploads monitor; a finding rule on the request path blocks. */
+function config() {
+    return {
+        version: 'v1',
+        exp: Math.floor(Date.now() / 1000) + 3600,
+        killSwitch: false,
+        snippets: false,
+        mode: 'monitor',
+        attacks: { custom_rule: 'block' },
+        rules: null,
+        customRules: [
+            { id: 'vp-on-path', expression: `attack.type == "virtual_patch" && request.path == ${JSON.stringify(path)}`, action: 'block', enabled: true },
+            { id: 'upload-on-path', expression: 'attack.type == "file_write" && request.path == "/upload"', action: 'block', enabled: true },
+        ],
+    };
+}
+beforeEach(() => {
+    (0, custom_rules_1.resetCustomRuleWarnings)();
+    events = [];
+    (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', env: {} });
+    (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+    (0, engine_1.setRemoteConfig)(config());
+});
+afterEach(() => {
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.setRemoteConfig)(undefined);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'default', env: {} });
+});
+const customRule = () => events.filter((e) => e.attrs['shield360.rasp.attack'] === 'custom_rule').map((e) => e.attrs['shield360.rasp.rule']);
+function res() {
+    const r = { statusCode: 0, headersSent: false, writableEnded: false, body: '', setHeader: () => undefined };
+    r.end = (b) => ((r.body = b), (r.writableEnded = true));
+    return r;
+}
+describe('a finding rule sees the request during capture', () => {
+    it('raspHttp', () => {
+        const handler = jest.fn();
+        const r = res();
+        (0, middleware_1.raspHttp)(handler)({ method: 'GET', url: path, headers, socket: { remoteAddress: '127.0.0.1' } }, r);
+        expect(handler).not.toHaveBeenCalled();
+        expect(r.statusCode).toBe(403);
+        expect(JSON.parse(r.body)).toMatchObject({ attack: 'custom_rule', rule: 'custom.vp-on-path' });
+    });
+    it('raspExpress', () => {
+        const next = jest.fn();
+        const r = res();
+        (0, middleware_1.raspExpress)()({ method: 'GET', url: path, originalUrl: path, headers, query: {}, params: {} }, r, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(r.statusCode).toBe(403);
+        expect(customRule()).toEqual(['custom.vp-on-path']);
+    });
+    it('raspFastify', () => {
+        const hooks = {};
+        (0, middleware_1.raspFastify)({ addHook: (name, fn) => (hooks[name] = fn) }, {}, () => undefined);
+        const reply = { status: 0, code: (n) => ((reply.status = n), reply), header: () => reply, send: (b) => (reply.sent = b) };
+        const next = jest.fn();
+        hooks.onRequest({ method: 'GET', url: path, headers }, reply, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(reply.status).toBe(403);
+        expect(customRule()).toEqual(['custom.vp-on-path']);
+    });
+    it('raspKoa', async () => {
+        const k = { method: 'GET', url: path, originalUrl: path, path, headers, query: {}, request: {}, set: jest.fn() };
+        const next = jest.fn(async () => undefined);
+        await (0, middleware_1.raspKoa)()(k, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(k.status).toBe(403);
+        expect(customRule()).toEqual(['custom.vp-on-path']);
+    });
+    it('withRasp (Next.js route handlers)', async () => {
+        const res = await (0, middleware_1.withRasp)(async () => new Response('ran'))(new Request(`http://localhost${path}`, { headers }), {});
+        expect(res.status).toBe(403);
+        expect((await res.json()).rule).toBe('custom.vp-on-path');
+    });
+    it('the zero-code http capture', async () => {
+        (0, auto_http_1.installAutoHttpCapture)();
+        const server = (0, http_1.createServer)((_req, r) => r.end('ran'));
+        await new Promise((ok) => server.listen(0, '127.0.0.1', () => ok()));
+        try {
+            const { port } = server.address();
+            const status = await new Promise((ok, fail) => {
+                (0, http_1.request)(`http://127.0.0.1:${port}${path}`, { headers }, (r) => {
+                    r.resume();
+                    r.on('end', () => ok(r.statusCode || 0));
+                })
+                    .on('error', fail)
+                    .end();
+            });
+            expect(status).toBe(403);
+            expect(customRule()).toEqual(['custom.vp-on-path']);
+        }
+        finally {
+            server.closeAllConnections();
+            await new Promise((ok) => server.close(ok));
+            (0, auto_http_1.uninstallAutoHttpCapture)();
+        }
+    });
+    it('an upload checked when the body is captured', () => {
+        const ctx = (0, capture_1.captureRequest)({ framework: 'test', method: 'POST', url: '/upload', headers: {} });
+        expect(() => (0, capture_1.captureBody)(ctx, { body: {}, files: [{ fieldname: 'f', originalname: 'shell.php' }] })).toThrow(types_1.RaspBlockedError);
+        expect(customRule()).toEqual(['custom.upload-on-path']);
+    });
+    it('late body capture, from inside another context', () => {
+        const ctx = (0, capture_1.captureRequest)({ framework: 'test', method: 'POST', url: '/upload', headers: {} });
+        (0, capture_1.captureLater)(ctx, () => ({ body: {}, files: [{ fieldname: 'f', originalname: 'shell.php' }] }));
+        const other = (0, capture_1.captureRequest)({ framework: 'test', method: 'GET', url: '/elsewhere', headers: {} });
+        expect(() => context_1.storage.run(other, () => ctx.late?.())).toThrow(types_1.RaspBlockedError);
+        expect(customRule()).toEqual(['custom.upload-on-path']);
+    });
+});
+//# sourceMappingURL=capture-context.test.js.map

package/dist/rasp/__tests__/capture-context.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-context.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/capture-context.test.ts"],"names":[],"mappings":";;AAAA;;;;;;GAMG;AACH,+BAAyE;AAEzE,4CAAgF;AAChF,wCAAuE;AACvE,wCAAqC;AACrC,kDAA0D;AAC1D,sCAA8F;AAC9F,8CAAsF;AACtF,oCAA4C;AAC5C,sCAA2C;AAC3C,qCAAsC;AAEtC,MAAM,WAAW,GAAG,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAE,CAAC;AAC3D,MAAM,KAAK,GAAG,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;AACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAiC,CAAC;AACxD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;AAGxB,IAAI,MAAM,GAAY,EAAE,CAAC;AAEzB,sFAAsF;AACtF,SAAS,MAAM;IACb,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;QACzC,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE;QACjC,KAAK,EAAE,IAAI;QACX,WAAW,EAAE;YACX,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;YAC7I,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,0DAA0D,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;SACjI;KACF,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,IAAA,sCAAuB,GAAE,CAAC;IAC1B,MAAM,GAAG,EAAE,CAAC;IACZ,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAA,wBAAe,EAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAC;IAC3B,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAE7I,SAAS,GAAG;IACV,MAAM,CAAC,GAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IACjH,CAAC,CAAC,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAA,qBAAQ,EAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAS,EAAE,CAAC,CAAC,CAAC;QAC3G,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAA,wBAAW,GAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAS,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/G,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACrB,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,IAAA,wBAAW,EAAC,EAAE,OAAO,EAAE,CAAC,IAAY,EAAE,EAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAS,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpG,MAAM,KAAK,GAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAChJ,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACvB,MAAM,CAAC,GAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QACtH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,IAAA,oBAAO,GAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,IAAA,qBAAQ,EAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,mBAAmB,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,IAAA,kCAAsB,GAAE,CAAC;QACzB,MAAM,MAAM,GAAW,IAAA,mBAAY,EAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;gBACpD,IAAA,cAAW,EAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;oBAChE,CAAC,CAAC,MAAM,EAAE,CAAC;oBACX,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC;qBACC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;qBACjB,GAAG,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5C,IAAA,oCAAwB,GAAE,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,IAAA,wBAAc,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,qBAAW,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAC/H,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,IAAA,wBAAc,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAA,sBAAY,EAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,KAAK,GAAG,IAAA,wBAAc,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAC/E,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/code-hook.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/code-hook.test.js

@@ -0,0 +1,218 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vm = require("vm");
+const http = require("http");
+const hooks = __importStar(require("../hooks/code"));
+const detect = __importStar(require("../detect"));
+const engine_1 = require("../engine");
+const context_1 = require("../context");
+const types_1 = require("../types");
+const taint = (value, fn) => (0, context_1.runWithInputs)([{ value, key: 'query.q', source: 'request' }], fn, { inRequest: true });
+const mode = (value = 'block') => (0, engine_1.configureEngine)({ enabled: true, applicationName: 'a', mode: value, env: {} });
+beforeEach(() => { mode(); (0, engine_1.setEventSink)({ add: () => undefined }); });
+afterEach(() => {
+    hooks.uninstallCodeHooks();
+    jest.restoreAllMocks();
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+});
+test('vm blocks before original and monitor evaluates harmless code', () => {
+    const original = jest.spyOn(vm, 'runInNewContext');
+    hooks.installCodeHooks();
+    expect(() => taint('1 + 2', () => vm.runInNewContext('1 + 2'))).toThrow(types_1.RaspBlockedError);
+    expect(original).not.toHaveBeenCalled();
+    mode('monitor');
+    const events = jest.fn();
+    (0, engine_1.setEventSink)({ add: events });
+    expect(taint('1 + 2', () => vm.runInNewContext('1 + 2'))).toBe(3);
+    expect(events).toHaveBeenCalledTimes(1);
+    expect(vm.runInNewContext('2 + 3')).toBe(5);
+});
+test('vm Script and Function preserve prototypes and constructor behavior', () => {
+    const descriptor = Object.getOwnPropertyDescriptor(globalThis, 'Function');
+    hooks.installCodeHooks();
+    expect(new vm.Script('1 + 2')).toBeInstanceOf(vm.Script);
+    expect(() => taint('1 + 2', () => new vm.Script('1 + 2'))).toThrow(types_1.RaspBlockedError);
+    const fn = new Function('a', 'return a + 1');
+    expect(fn).toBeInstanceOf(Function);
+    expect(fn(2)).toBe(3);
+    expect(Function('return 3')()).toBe(3);
+    expect(() => taint('return a + 1', () => new Function('a', 'return a + 1'))).toThrow(types_1.RaspBlockedError);
+    hooks.uninstallCodeHooks();
+    expect(Object.getOwnPropertyDescriptor(globalThis, 'Function')).toEqual(descriptor);
+});
+test('eval is left alone, so direct eval keeps the caller scope', () => {
+    const original = globalThis.eval;
+    hooks.installCodeHooks();
+    expect(globalThis.eval).toBe(original);
+    const local = 41;
+    // Direct eval: only possible while eval is the built-in itself.
+    expect(taint('local + 1', () => eval('local + 1'))).toBe(local + 1);
+});
+test('code run by vm is still checked when it builds code itself', () => {
+    hooks.installCodeHooks();
+    // The vm-run code is untainted; the Function call it makes carries the input.
+    const run = () => vm.runInNewContext('make(body)', { make: (b) => new Function(b), body: 'return a + 1' });
+    expect(() => taint('return a + 1', run)).toThrow(types_1.RaspBlockedError);
+});
+test('response write/end are added on ServerResponse only and removed again', () => {
+    const proto = http.ServerResponse.prototype;
+    expect(Object.prototype.hasOwnProperty.call(proto, 'end')).toBe(false);
+    hooks.installCodeHooks();
+    expect(Object.prototype.hasOwnProperty.call(proto, 'end')).toBe(true);
+    expect(Object.prototype.hasOwnProperty.call(http.ClientRequest.prototype, 'end')).toBe(false);
+    hooks.uninstallCodeHooks();
+    expect(Object.prototype.hasOwnProperty.call(proto, 'write')).toBe(false);
+    expect(Object.prototype.hasOwnProperty.call(proto, 'end')).toBe(false);
+});
+test('node-serialize and funcster are checked before harmless fake originals', () => {
+    const module = { unserialize: jest.fn((..._args) => 'result') };
+    const funcster = { deepDeserialize: jest.fn((..._args) => 'result') };
+    hooks.patchNodeSerialize(module);
+    hooks.patchFuncster(funcster);
+    const data = '{"fixture":"_$$ND_FUNC$$_description only"}';
+    expect(() => taint(data, () => module.unserialize(data))).toThrow(types_1.RaspBlockedError);
+    expect(module.unserialize).not.toHaveBeenCalled();
+    expect(taint('fixture', () => module.unserialize('fixture'))).toBe('result');
+    const object = { __js_function: 'description only' };
+    expect(() => taint(JSON.stringify(object), () => funcster.deepDeserialize(object))).toThrow(types_1.RaspBlockedError);
+});
+test.each(['3.14.0', '4.1.0'])('js-yaml %s checks unsafe schemas, including loadAll', version => {
+    const original = jest.fn((..._args) => 'result');
+    const module = { load: original, loadAll: original, DEFAULT_SCHEMA: {}, DEFAULT_FULL_SCHEMA: {}, CORE_SCHEMA: {}, JSON_SCHEMA: {}, FAILSAFE_SCHEMA: {} };
+    hooks.patchJsYaml(module, version);
+    const text = '!!js/function description-only';
+    const unsafe = version.startsWith('3') ? module.DEFAULT_FULL_SCHEMA : {};
+    expect(() => taint(text, () => module.load(text, { schema: unsafe }))).toThrow(types_1.RaspBlockedError);
+    expect(original).not.toHaveBeenCalled();
+    expect(() => taint(text, () => module.loadAll(text, () => undefined, { schema: unsafe }))).toThrow(types_1.RaspBlockedError);
+    expect(taint(text, () => module.load(text, { schema: module.CORE_SCHEMA }))).toBe('result');
+});
+test.each([hooks.patchLibxmljs, hooks.patchLibxmljs2])('XML resolving parser blocks before fake original', patch => {
+    const original = jest.fn((..._args) => 'result');
+    const module = { parseXml: original, parseXmlString: original };
+    patch(module);
+    const xml = '<!DOCTYPE fixture SYSTEM "file:///srv/app/fixtures/example.txt"><fixture/>';
+    expect(() => taint(xml, () => module.parseXml(xml, { noent: true }))).toThrow(types_1.RaspBlockedError);
+    expect(original).not.toHaveBeenCalled();
+    const detector = jest.spyOn(detect, 'detectXml').mockReturnValue(null);
+    expect(taint(xml, () => module.parseXmlString(xml, {}))).toBe('result');
+    expect(detector).toHaveBeenCalledWith(xml, expect.any(Array), false);
+});
+test('own registry patches under shimmer metadata and disables under a later wrapper', () => {
+    const original = jest.fn((..._args) => 'result');
+    const tracing = Object.assign((...args) => original(...args), { __wrapped: true, __unwrap: jest.fn() });
+    const module = { unserialize: tracing };
+    hooks.patchNodeSerialize(module);
+    const wrapper = module.unserialize;
+    hooks.patchNodeSerialize(module);
+    expect(module.unserialize).toBe(wrapper);
+    expect(wrapper.__wrapped).toBeUndefined();
+    const text = '_$$ND_FUNC$$_description only';
+    expect(() => taint(text, () => module.unserialize(text))).toThrow(types_1.RaspBlockedError);
+    module.unserialize = (...args) => wrapper(...args);
+    const outer = module.unserialize;
+    hooks.unpatchNodeSerialize(module);
+    expect(module.unserialize).toBe(outer);
+    expect(taint(text, () => module.unserialize(text))).toBe('result');
+});
+test('unpatch restores library identity', () => {
+    const original = (..._args) => 'result';
+    const module = { unserialize: original };
+    hooks.patchNodeSerialize(module);
+    hooks.unpatchNodeSerialize(module);
+    expect(module.unserialize).toBe(original);
+});
+test('install and uninstall preserve builtin descriptors exactly', () => {
+    const entries = [
+        ...['runInThisContext', 'runInNewContext', 'runInContext', 'compileFunction', 'Script'].map(key => ({ owner: vm, key })),
+        ...['Function', 'eval'].map(key => ({ owner: globalThis, key })),
+    ].map(entry => ({ ...entry, descriptor: Object.getOwnPropertyDescriptor(entry.owner, entry.key) }));
+    expect(hooks.installCodeHooks()).toBe(true);
+    const wrapper = vm.Script;
+    expect(hooks.installCodeHooks()).toBe(true);
+    expect(vm.Script).toBe(wrapper);
+    hooks.uninstallCodeHooks();
+    hooks.uninstallCodeHooks();
+    for (const { owner, key, descriptor } of entries)
+        expect(Object.getOwnPropertyDescriptor(owner, key)).toEqual(descriptor);
+});
+test.each(['html', 'plain', 'oversize'])('response %s arrives unchanged; XSS is monitor only', async (kind) => {
+    const input = '<script>alert(1)</script>xyz';
+    const body = kind === 'oversize' ? 'a'.repeat(1024 * 1024) + input : input;
+    const events = [];
+    (0, engine_1.setEventSink)({ add: (event) => { events.push(event); } });
+    const server = http.createServer((_req, res) => {
+        taint(input, () => {
+            res.setHeader('content-type', kind === 'plain' ? 'text/plain' : 'text/html');
+            res.write(body.slice(0, 10));
+        });
+        // The hook must use the first write's captured context here.
+        res.end(body.slice(10));
+    });
+    hooks.installCodeHooks();
+    await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
+    try {
+        const received = await new Promise((resolve, reject) => {
+            http.get(`http://127.0.0.1:${server.address().port}/`, response => {
+                const chunks = [];
+                response.on('data', chunk => chunks.push(Buffer.from(chunk)));
+                response.on('end', () => resolve(Buffer.concat(chunks).toString()));
+                response.on('error', reject);
+            }).on('error', reject);
+        });
+        expect(received).toBe(body);
+        const reflected = events.filter(event => event.attrs['shield360.rasp.sink'] === 'http.response');
+        expect(reflected).toHaveLength(kind === 'html' ? 1 : 0);
+        if (kind === 'html')
+            expect(reflected[0].attrs['shield360.rasp.decision']).toBe('monitored');
+    }
+    finally {
+        server.closeAllConnections();
+        await new Promise(resolve => server.close(() => resolve()));
+    }
+});
+test('off skips evaluation checks and detector failures fail open', () => {
+    const detector = jest.spyOn(detect, 'detectCode');
+    hooks.installCodeHooks();
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+    expect(taint('1 + 2', () => vm.runInNewContext('1 + 2'))).toBe(3);
+    expect(detector).not.toHaveBeenCalled();
+    mode();
+    detector.mockImplementation(() => { throw new Error('unavailable'); });
+    expect(taint('1 + 2', () => vm.runInNewContext('1 + 2'))).toBe(3);
+});
+//# sourceMappingURL=code-hook.test.js.map

package/dist/rasp/__tests__/code-hook.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-hook.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/code-hook.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yBAA0B;AAC1B,6BAA8B;AAE9B,qDAAuC;AACvC,kDAAoC;AACpC,sCAA0D;AAC1D,wCAA2C;AAC3C,oCAA4C;AAC5C,MAAM,KAAK,GAAG,CAAI,KAAa,EAAE,EAAW,EAAK,EAAE,CAAC,IAAA,uBAAa,EAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3I,MAAM,IAAI,GAAG,CAAC,QAA6B,OAAO,EAAE,EAAE,CAAC,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AACtI,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC3B,IAAI,CAAC,eAAe,EAAE,CAAC;IACvB,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACnD,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IAC1F,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC3E,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACrF,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACvG,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC3B,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;IACjC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,gEAAgE;IAChE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,8EAA8E;IAC9E,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACnH,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;IAC5C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC3B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjF,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,6CAA6C,CAAC;IAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACpF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACrD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;AAChH,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,qDAAqD,EAAE,OAAO,CAAC,EAAE;IAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACzJ,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,gCAAgC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACjG,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACrH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,kDAAkD,EAAE,KAAK,CAAC,EAAE;IACjH,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAChE,KAAK,CAAC,MAAM,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,4EAA4E,CAAC;IACzF,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IAChG,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,OAA0C,EAAE,CAAC;IAC3E,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC;IACnC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,CAAE,OAA8C,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,+BAA+B,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACpF,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;IAC7C,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC;IACnD,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACzC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACxH,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;KACjE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpG,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC3B,KAAK,CAAC,kBAAkB,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC5H,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,oDAAoD,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;IAC1G,MAAM,KAAK,GAAG,8BAA8B,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,MAAM,MAAM,GAAwC,EAAE,CAAC;IACvD,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,KAAwC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC7C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE;YAChB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7E,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,6DAA6D;QAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,IAAI,CAAC,GAAG,CAAC,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,GAAG,EAAE,QAAQ,CAAC,EAAE;gBACjF,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACpE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,eAAe,CAAC,CAAC;QACjG,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAClD,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,IAAI,EAAE,CAAC;IACP,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/config-client.test.d.ts

@@ -0,0 +1 @@
+export {};