@contrast/common - npm Package Compare versions

Comparing version 1.4.1 to 1.5.0

lib/constants.d.ts

@@ -9,2 +9,3 @@ export declare enum Event {
     ASSESS_DATAFLOW_FINDING = "assess-dataflow-findings",
+    ASSESS_RESPONSE_SCANNING_FINDING = "assess-response-scanning-findings",
     ROUTE_COVERAGE_DISCOVERY = "route-coverage-discovery",
@@ -39,2 +40,14 @@ ROUTE_COVERAGE_OBSERVATION = "route-coverage-observation"
 }
+export declare enum ResponseScanningRule {
+    AUTOCOMPLETE_MISSING = "autocomplete-missing",
+    CACHE_CONTROLS_MISSING = "cache-controls-missing",
+    CLICKJACKING_CONTROL_MISSING = "clickjacking-control-missing",
+    PARAMETER_POLLUTION = "parameter-pollution",
+    CSP_HEADER_MISSING = "csp-header-missing",
+    CSP_HEADER_INSECURE = "csp-header-insecure",
+    HSTS_HEADER_MISSING = "hsts-header-missing",
+    POWERED_BY_HEADER = "powered-by-header",
+    XCONTENTTYPE_HEADER_MISSING = "xcontenttype-header-missing",
+    XXSPROTECTION_HEADER_DISABLED = "xxssprotection-header-disabled"
+}
 export declare enum InputType {
@@ -41,0 +54,0 @@ UNDEFINED_TYPE = "UNDEFINED_TYPE",

lib/constants.js

@@ -17,3 +17,3 @@ "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BLOCKING_MODES = exports.InputType = exports.Rule = exports.ProtectRuleMode = exports.Event = void 0;
+exports.BLOCKING_MODES = exports.InputType = exports.ResponseScanningRule = exports.Rule = exports.ProtectRuleMode = exports.Event = void 0;
 var Event;
@@ -28,2 +28,3 @@ (function (Event) {
     Event["ASSESS_DATAFLOW_FINDING"] = "assess-dataflow-findings";
+    Event["ASSESS_RESPONSE_SCANNING_FINDING"] = "assess-response-scanning-findings";
     Event["ROUTE_COVERAGE_DISCOVERY"] = "route-coverage-discovery";
@@ -60,2 +61,15 @@ Event["ROUTE_COVERAGE_OBSERVATION"] = "route-coverage-observation";
 })(Rule = exports.Rule || (exports.Rule = {}));
+var ResponseScanningRule;
+(function (ResponseScanningRule) {
+    ResponseScanningRule["AUTOCOMPLETE_MISSING"] = "autocomplete-missing";
+    ResponseScanningRule["CACHE_CONTROLS_MISSING"] = "cache-controls-missing";
+    ResponseScanningRule["CLICKJACKING_CONTROL_MISSING"] = "clickjacking-control-missing";
+    ResponseScanningRule["PARAMETER_POLLUTION"] = "parameter-pollution";
+    ResponseScanningRule["CSP_HEADER_MISSING"] = "csp-header-missing";
+    ResponseScanningRule["CSP_HEADER_INSECURE"] = "csp-header-insecure";
+    ResponseScanningRule["HSTS_HEADER_MISSING"] = "hsts-header-missing";
+    ResponseScanningRule["POWERED_BY_HEADER"] = "powered-by-header";
+    ResponseScanningRule["XCONTENTTYPE_HEADER_MISSING"] = "xcontenttype-header-missing";
+    ResponseScanningRule["XXSPROTECTION_HEADER_DISABLED"] = "xxssprotection-header-disabled";
+})(ResponseScanningRule = exports.ResponseScanningRule || (exports.ResponseScanningRule = {}));
 var InputType;
@@ -62,0 +76,0 @@ (function (InputType) {

lib/index.d.ts

@@ -39,1 +39,6 @@ import { CommonRulesResultsMap, HardeningResultsMap, ResultMap, SemanticAnalysisResultsMap, ServerFeaturePreliminaryResultsMap } from './types';
 export declare const settingsReaders: {};
+export declare function join(arr: Array<any>, ...args: []): string;
+export declare function substring(str: string, ...args: []): string;
+export declare function toLowerCase(str: string): string;
+export declare function split(str: string, ...args: []): string[];
+export declare function trim(str: string, ...args: []): string;

lib/index.js

@@ -31,3 +31,3 @@ "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.settingsReaders = exports.featureReaders = exports.mergeRemoteData = exports.set = exports.groupResultsMap = exports.callChildComponentMethodsSync = exports.traverseKeys = exports.traverseValues = exports.traverseKeysAndValues = exports.encodeString = exports.isNonEmptyObject = exports.isString = void 0;
+exports.trim = exports.split = exports.toLowerCase = exports.substring = exports.join = exports.settingsReaders = exports.featureReaders = exports.mergeRemoteData = exports.set = exports.groupResultsMap = exports.callChildComponentMethodsSync = exports.traverseKeys = exports.traverseValues = exports.traverseKeysAndValues = exports.encodeString = exports.isNonEmptyObject = exports.isString = void 0;
 const constants_1 = require("./constants");
@@ -232,2 +232,31 @@ __exportStar(require("./constants"), exports);
 }, {});
+const { join: origJoin } = Array.prototype;
+function join(arr, ...args) {
+    return origJoin.call(arr, ...args);
+}
+exports.join = join;
+const { substring: origSubstring } = String.prototype;
+function substring(str, ...args) {
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore
+    return origSubstring.call(str, ...args);
+}
+exports.substring = substring;
+const { toLowerCase: origToLowerCase } = String.prototype;
+function toLowerCase(str) {
+    return origToLowerCase.call(str);
+}
+exports.toLowerCase = toLowerCase;
+const { split: origSplit } = String.prototype;
+function split(str, ...args) {
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore
+    return origSplit.call(str, ...args);
+}
+exports.split = split;
+const { trim: origTrim } = String.prototype;
+function trim(str, ...args) {
+    return origTrim.call(str, ...args);
+}
+exports.trim = trim;
 //# sourceMappingURL=index.js.map

package.json

 {
   "name": "@contrast/common",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Shared constants and utilities for all Contrast Agent modules",
@@ -5,0 +5,0 @@ "license": "UNLICENSED",

src/constants.ts

@@ -24,2 +24,3 @@ /*
   ASSESS_DATAFLOW_FINDING = 'assess-dataflow-findings',
+  ASSESS_RESPONSE_SCANNING_FINDING = 'assess-response-scanning-findings',
   ROUTE_COVERAGE_DISCOVERY = 'route-coverage-discovery',
@@ -57,2 +58,15 @@ ROUTE_COVERAGE_OBSERVATION = 'route-coverage-observation'
 
+export enum ResponseScanningRule {
+  AUTOCOMPLETE_MISSING = 'autocomplete-missing',
+  CACHE_CONTROLS_MISSING = 'cache-controls-missing',
+  CLICKJACKING_CONTROL_MISSING = 'clickjacking-control-missing',
+  PARAMETER_POLLUTION = 'parameter-pollution',
+  CSP_HEADER_MISSING = 'csp-header-missing',
+  CSP_HEADER_INSECURE = 'csp-header-insecure',
+  HSTS_HEADER_MISSING = 'hsts-header-missing',
+  POWERED_BY_HEADER = 'powered-by-header',
+  XCONTENTTYPE_HEADER_MISSING = 'xcontenttype-header-missing',
+  XXSPROTECTION_HEADER_DISABLED = 'xxssprotection-header-disabled'
+}
+
 export enum InputType {
@@ -59,0 +73,0 @@ UNDEFINED_TYPE = 'UNDEFINED_TYPE',

src/index.ts

@@ -250,1 +250,30 @@ /*
 }, {});
+
+const { join: origJoin } = Array.prototype;
+export function join(arr: Array<any>, ...args: []) {
+  return origJoin.call(arr, ...args);
+}
+
+const { substring: origSubstring } = String.prototype;
+export function substring(str: string, ...args: []) {
+  // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+  // @ts-ignore
+  return origSubstring.call(str, ...args);
+}
+
+const { toLowerCase: origToLowerCase } = String.prototype;
+export function toLowerCase(str: string) {
+  return origToLowerCase.call(str);
+}
+
+const { split: origSplit } = String.prototype;
+export function split(str: string, ...args: []) {
+  // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+  // @ts-ignore
+  return origSplit.call(str, ...args);
+}
+
+const { trim: origTrim } = String.prototype;
+export function trim(str: string, ...args: []) {
+  return origTrim.call(str, ...args);
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

57128

increased by11.28%

Lines of code

1106

increased by9.72%

No dependency changes