dd-trace/packages/dd-trace/src/appsec/iast/analyzers/weak-randomness-analyzer.js

Datadog APM tracing client for JavaScript

'use strict'
const { WEAK_RANDOMNESS } = require('../vulnerabilities')
const Analyzer = require('./vulnerability-analyzer')

class WeakRandomnessAnalyzer extends Analyzer {
  constructor () {
    super(WEAK_RANDOMNESS)
  }

  onConfigure () {
    this.addSub('datadog:random:call', ({ fn }) => this.analyze(fn))
  }

  _isVulnerable (fn) {
    return fn === Math.random
  }
}

module.exports = new WeakRandomnessAnalyzer()