dd-trace/packages/dd-trace/src/appsec/iast/analyzers/untrusted-deserialization-analyzer.js

Datadog APM tracing client for JavaScript

'use strict'

const InjectionAnalyzer = require('./injection-analyzer')
const { UNTRUSTED_DESERIALIZATION } = require('../vulnerabilities')

class UntrustedDeserializationAnalyzer extends InjectionAnalyzer {
  constructor () {
    super(UNTRUSTED_DESERIALIZATION)
  }

  onConfigure () {
    this.addSub('datadog:node-serialize:unserialize:start', ({ obj }) => this.analyze(obj))
  }
}

module.exports = new UntrustedDeserializationAnalyzer()