dd-trace/packages/dd-trace/src/appsec/iast/vulnerabilities-formatter/evidence-redaction/sensitive-analyzers/ldap-sensitive-analyzer.js

Datadog APM tracing client for JavaScript

'use strict'

const log = require('../../../../../log')

const LDAP_PATTERN = String.raw`\(.*?(?:~=|=|<=|>=)(?<LITERAL>[^)]+)\)`
const pattern = new RegExp(LDAP_PATTERN, 'gmi')

module.exports = function extractSensitiveRanges (evidence) {
  try {
    pattern.lastIndex = 0
    const tokens = []

    let regexResult = pattern.exec(evidence.value)
    while (regexResult != null) {
      if (!regexResult.groups.LITERAL) continue
      // Computing indices manually since Node.js 12 does not support d flag on regular expressions
      // TODO Get indices from group by adding d flag in regular expression
      const start = regexResult.index + (regexResult[0].length - regexResult.groups.LITERAL.length - 1)
      const end = start + regexResult.groups.LITERAL.length
      tokens.push({ start, end })
      regexResult = pattern.exec(evidence.value)
    }
    return tokens
  } catch (e) {
    log.debug('[ASM] Error extracting sensitive ranges', e)
  }
  return []
}