[Snyk] Upgrade @microsoft/api-extractor from 7.7.11 to 7.13.2 #176

snyk-bot · 2021-04-09T22:58:12Z

Snyk has created this PR to upgrade @microsoft/api-extractor from 7.7.11 to 7.13.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 61 versions ahead of your current version.
The recommended version was released a month ago, on 2021-03-04.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @microsoft/api-extractor from 7.7.11 to 7.13.2. See this package in npm: See this project in Snyk: https://app.snyk.io/org/kadirselcuk/project/fed70c8d-1e2a-4a10-9c7b-47e6d3ab59fa?utm_source=github&utm_medium=upgrade-pr

mistaken-pull-closer · 2021-04-09T22:58:17Z

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

pull-dog · 2021-04-09T22:58:18Z

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

@pull-dog up to reprovision or provision the server.
@pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
0fd8c030-9987-11eb-9762-69c7169d5bfc

guardrails · 2021-04-09T23:25:56Z

⚠️ We detected 1567 security issues in this pull request:
Mode: paranoid | Total findings: 1567 | Considered vulnerability: 0

Hard-Coded Secrets (3)

angular/packages/zone.js/test/common/fetch.spec.ts

Line 95 in dce0213

global['fetch']('http://user:[email protected]')

angular/packages/common/upgrade/src/location_shim.ts

Line 516 in dce0213

    
              * // given URL http://user:password@example.com:8080/#/some/path?foo=bar&baz=xoxo

https://github.com/turkdevops/angular/blob/dce021386b884120c590078964ba263bdc40394e/.yarn/releases/yarn-1.22.5.js#L128456

More info on how to fix Hard-Coded Secrets in General and Javascript.

Insecure Use of Regular Expressions (138)

angular/aio/content/examples/upgrade-phonecat-2-hybrid/karma-test-shim.1.js

Line 19 in dce0213

return /\.spec\.(.*\.)?js$/.test(path);

angular/aio/content/examples/upgrade-phonecat-2-hybrid/karma-test-shim.js

Line 22 in dce0213

return /\.spec\.(.*\.)?js$/.test(path);

angular/aio/content/examples/upgrade-phonecat-3-final/karma-test-shim.js

Line 22 in dce0213

return /\.spec\.(.*\.)?js$/.test(path);

angular/aio/tools/transforms/angular-api-package/content-rules/noMarkdownHeadings.js

Line 27 in dce0213

    
           const regex = new RegExp(`^ {0,3}(${disallowedHeadings.join('|')}) +.*$`, 'mg');

angular/aio/tools/transforms/angular.io-package/processors/processNavigationMap.js

Line 54 in dce0213

return !/^(https?:)?\/\//.test(url);

angular/aio/tools/transforms/links-package/inline-tag-defs/link.js

Line 1 in dce0213

var INLINE_LINK = /(\S+)(?:\s+([\s\S]+))?/;

angular/aio/tools/transforms/remark-package/services/renderMarkdown.js

Line 85 in dce0213

    
           const anyBlockMatcher = new RegExp('^' + createOpenMatcher(`(${plainBlocks.join('|')})`));

angular/aio/tools/transforms/remark-package/services/renderMarkdown.js

Line 166 in dce0213

    
           const bothMatcher = new RegExp(left + '|' + right, 'g' + flags.replace(/g/g, ''));

angular/aio/tools/transforms/remark-package/services/renderMarkdown.js

Line 167 in dce0213

const leftMatcher = new RegExp(left, flags.replace(/g/g, ''));

angular/dev-infra/ng-dev.js

Line 394 in dce0213

    
           LOGGED_TEXT = LOGGED_TEXT.replace(/\x1B\[([0-9]{1,3}(;[0-9]{1,2})?)?[mGK]/g, '');

angular/dev-infra/ng-dev.js

Line 629 in dce0213

this._githubTokenRegex = new RegExp(githubToken, 'g');

angular/dev-infra/ng-dev.js

Line 1739 in dce0213

const TYPE_SCOPE_RE = /^(\w+)(?:$([^)]+)$)?\:\s(.+)$/;

angular/dev-infra/ng-dev.js

Line 5409 in dce0213

    
           return data.commit.message.match(new RegExp(`(?:close[sd]?|fix(?:e[sd]?)|resolve[sd]?):? #${id}(?!\\d)`, 'i'));

angular/dev-infra/ng-dev.js

Line 5428 in dce0213

return new RegExp(`(<a name="${escapedVersion}"></a>.*?)(?:<a name="|$)`, 's');

angular/integration/check-dependencies.js

Line 54 in dce0213

    
           const nonExactDeps = deps.filter(([, version]) => !/^\d+\.\d+\.\d+(?:-\w+\.\d+)?$/.test(version));

angular/tools/gulp-tasks/cldr/extract.js

Line 555 in dce0213

return new RegExp(s.replace(/([.*+?^=!:${}()|[\]\/\\])/g, '\\$1'), 'g');

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/preview-server/preview-server-factory.ts

Line 66 in dce0213

const jsonParser = bodyParser.json();

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/helper.ts

Line 121 in dce0213

expect(result.success).toBe(true);

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/helper.ts

Line 109 in dce0213

const [headers, body] = result.stdout.

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 65 in dce0213

const origin = `${scheme}://pr${pr}-${shortSha9}.${host}`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 77 in dce0213

const origin = `${scheme}://pr${pr}-${sha9}.${host}`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 92 in dce0213

it('should return /foo/bar.js', async () => {

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 101 in dce0213

const origin = `${scheme}://pr${pr}-${sha9}.${host}`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 127 in dce0213

const origin = `${scheme}://pr${pr}-${shortSha9}.${host}`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 170 in dce0213

    
           it('should accept SHAs with leading zeros (but not trim the zeros)', async () => {

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 171 in dce0213

    
           const bodyRegex9 = new RegExp(`^PR: ${pr} | SHA: ${sha9} | File: /index\\.html$`);

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/nginx.e2e.ts

Line 30 in dce0213

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/preview-server.e2e.ts

Line 343 in dce0213

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 32 in dce0213

const regexPrefix = `^BUILD: ${BUILD} \\| PR: ${PR} \\| SHA: ${SHA} \\| File:`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 33 in dce0213

const idxContentRegex = new RegExp(`${regexPrefix} \\/index\\.html$`);

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 89 in dce0213

const regexPrefix1 = `^PR: ${PR} \\| SHA: ${ALT_SHA} \\| File:`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 90 in dce0213

const idxContentRegex1 = new RegExp(`${regexPrefix1} \\/index\\.html$`);

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 93 in dce0213

    
           const regexPrefix2 = `^BUILD: ${BUILD} \\| PR: ${PR} \\| SHA: ${SHA} \\| File:`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 94 in dce0213

const idxContentRegex2 = new RegExp(`${regexPrefix2} \\/index\\.html$`);

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 151 in dce0213

const regexPrefix = `^PR: ${PR} \\| SHA: ${SHA} \\| File:`;

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 152 in dce0213

const idxContentRegex = new RegExp(`${regexPrefix} \\/index\\.html$`);

angular/aio/aio-builds-setup/dockerbuild/scripts-js/lib/verify-setup/server-integration.e2e.ts

Line 254 in dce0213

const publicPrDir = h.getPrDir(PrNums.TRUST_CHECK_ACTIVE_TRUSTED_USER, true);

angular/aio/content/examples/form-validation/src/app/shared/forbidden-name.directive.ts

Line 25 in dce0213

validate(control: AbstractControl): ValidationErrors | null {

angular/aio/tests/deployment/shared/helpers.ts

Line 25 in dce0213

.filter(spec => spec.positive)

angular/aio/tests/deployment/shared/helpers.ts

Line 28 in dce0213

.filter(spec => !spec.positive)

angular/aio/tests/deployment/unit/testFirebaseRedirection.spec.ts

Line 25 in dce0213

it('should match pattern "^(https?:/)?/.*"', () => {

angular/dev-infra/commit-message/parse.ts

Line 32 in dce0213

/** Regex determining the scope of a commit if provided. */

angular/dev-infra/release/publish/pull-request-state.ts

Line 79 in dce0213

return data.commit.message.match(

angular/dev-infra/release/publish/release-notes.ts

Line 20 in dce0213

    
           // based on the conventional-changelog version. They removed anchors in more recent versions.

angular/dev-infra/release/publish/test/common.spec.ts

Line 113 in dce0213

releaseConfig.extractReleaseNotesPattern = version =>

angular/dev-infra/utils/console.ts

Line 200 in dce0213

// Strip ANSI escape codes from log outputs.

angular/dev-infra/utils/git/index.ts

Line 70 in dce0213

if (githubToken != null) {

angular/packages/animations/browser/src/dsl/animation_ast_builder.ts

Line 18 in dce0213

const SELF_TOKEN = ':self';

angular/packages/animations/browser/src/dsl/animation_timeline_builder.ts

Line 18 in dce0213

const ENTER_TOKEN = ':enter';

angular/packages/animations/browser/src/dsl/animation_timeline_builder.ts

Line 20 in dce0213

const LEAVE_TOKEN = ':leave';

angular/packages/animations/browser/src/util.ts

Line 214 in dce0213

const PARAM_REGEX =

angular/packages/animations/browser/src/util.ts

Line 52 in dce0213

    
           exp: string|number, errors: string[], allowNegativeValues?: boolean): AnimateTimings {

angular/packages/common/src/i18n/format_date.ts

Line 11 in dce0213

export const ISO8601_DATE_REGEX =

angular/packages/common/src/i18n/format_number.ts

Line 196 in dce0213

return res.replace(

angular/packages/common/src/i18n/format_number.ts

Line 10 in dce0213

angular/packages/common/testing/src/mock_platform_location.ts

Line 31 in dce0213

*/

angular/packages/common/upgrade/src/location_shim.ts

Line 15 in dce0213

angular/packages/compiler-cli/ngcc/src/packages/entry_point.ts

Line 343 in dce0213

// (e.g. only keep `@angular/common` from `@angular/common/http`).

angular/packages/compiler-cli/ngcc/test/integration/ngcc_spec.ts

Line 2382 in dce0213

function countOccurrences(haystack: string, needle: string): number {

angular/packages/compiler-cli/src/ngtsc/shims/src/adapter.ts

Line 87 in dce0213

const pattern = `^(.*)\\.${gen.extensionPrefix}\\.ts$`;

angular/packages/compiler-cli/test/compliance_old/mock_compile/index.ts

Line 24 in dce0213

const ELLIPSIS = '…';

angular/packages/compiler-cli/test/compliance_old/mock_compile/index.ts

Line 193 in dce0213

return {

angular/packages/compiler-cli/test/compliance/test_helpers/di_checks.ts

Line 12 in dce0213

export function verifyUniqueFactory(output: string, type: string): boolean {

angular/packages/compiler-cli/test/compliance/test_helpers/expect_emit.ts

Line 16 in dce0213

const INLINE_BACKTICK_STRING = /`(([\s\S]*?)(\$\{[^}]*?\})?)*?[^\\]`/;

angular/packages/compiler-cli/test/compliance/test_helpers/expect_emit.ts

Line 21 in dce0213

const ELLIPSIS = '…';

angular/packages/compiler-cli/test/compliance/test_helpers/expect_emit.ts

Line 218 in dce0213

return {

angular/packages/compiler-cli/test/compliance/test_helpers/expected_file_macros.ts

Line 140 in dce0213

const ws = /[\s\r\n]*/.source;

angular/packages/compiler-cli/test/compliance/test_helpers/expected_file_macros.ts

Line 156 in dce0213

// separated by a pipe.

angular/packages/compiler-cli/test/compliance/test_helpers/function_checks.ts

Line 17 in dce0213

    
           output: string, functionNamePattern?: string, expectedCount?: number): boolean {

angular/packages/compiler-cli/test/compliance/test_helpers/get_compliance_tests.ts

Line 211 in dce0213

function parseRegExp(str: string|undefined): RegExp {

angular/packages/compiler-cli/test/diagnostics/check_types_spec.ts

Line 723 in dce0213

reject(

angular/packages/compiler-cli/test/ngtsc/ngtsc_spec.ts

Line 22 in dce0213

angular/packages/compiler-cli/test/ngtsc/ngtsc_spec.ts

Line 26 in dce0213

const maybeRef = ref ? `, ${ref}` : ``;

angular/packages/compiler-cli/test/ngtsc/ngtsc_spec.ts

Line 31 in dce0213

const maybeRef = ref ? `, ${ref}` : ``;

angular/packages/compiler-cli/test/ngtsc/ngtsc_spec.ts

Line 35 in dce0213

const setClassMetadataRegExp = (expectedType: string): RegExp =>

angular/packages/compiler-cli/test/transformers/program_spec.ts

Line 508 in dce0213

case ShouldBe.Empty:

angular/packages/compiler/src/compile_metadata.ts

Line 760 in dce0213

// in the chrome dev tools.

angular/packages/compiler/src/ml_parser/html_whitespaces.ts

Line 19 in dce0213

    
           const WS_CHARS = ' \f\n\r\t\v\u1680\u180e\u2000-\u200a\u2028\u2029\u202f\u205f\u3000\ufeff';

angular/packages/compiler/src/ml_parser/html_whitespaces.ts

Line 20 in dce0213

const NO_WS_REGEXP = new RegExp(`[^${WS_CHARS}]`);

angular/packages/compiler/src/ml_parser/html_whitespaces.ts

Line 34 in dce0213

// lexer is replacing the &ngsp; pseudo-entity with NGSP_UNICODE

angular/packages/compiler/src/selector.ts

Line 10 in dce0213

angular/packages/compiler/src/shadow_css.ts

Line 369 in dce0213

scopeSelector = scopeSelector.replace(lre, '\\[').replace(rre, '\\]');

angular/packages/compiler/src/shadow_css.ts

Line 539 in dce0213

')\\))?([^,{]*)';

angular/packages/compiler/src/shadow_css.ts

Line 540 in dce0213

const _cssColonHostRe = new RegExp('(' + _polyfillHost + _parenSuffix, 'gim');

angular/packages/compiler/src/url_resolver.ts

Line 199 in dce0213

*/

angular/packages/compiler/test/aot/compiler_spec.ts

Line 111 in dce0213

expect(() => compileApp())

angular/packages/compiler/test/aot/compiler_spec.ts

Line 119 in dce0213

expect(() => compileApp())

angular/packages/compiler/test/i18n/serializers/xliff_spec.ts

Line 405 in dce0213

.toThrowError(

angular/packages/compiler/test/i18n/serializers/xliff_spec.ts

Line 423 in dce0213

loadAsMap(XLIFF);

angular/packages/compiler/test/i18n/serializers/xliff2_spec.ts

Line 419 in dce0213

.toThrowError(

angular/packages/compiler/test/i18n/serializers/xliff2_spec.ts

Line 437 in dce0213

loadAsMap(XLIFF);

angular/packages/compiler/test/i18n/serializers/xtb_spec.ts

Line 166 in dce0213

loadAsMap(XTB);

angular/packages/compiler/test/i18n/serializers/xtb_spec.ts

Line 178 in dce0213

.toThrowError(

angular/packages/compiler/test/util_spec.ts

Line 32 in dce0213

it('should escape regexp', () => {

angular/packages/compiler/test/util_spec.ts

Line 33 in dce0213

expect(new RegExp(escapeRegExp('b')).exec('abc')).toBeTruthy();

angular/packages/compiler/test/util_spec.ts

Line 34 in dce0213

expect(new RegExp(escapeRegExp('b')).exec('adc')).toBeFalsy();

angular/packages/compiler/test/util_spec.ts

Line 35 in dce0213

expect(new RegExp(escapeRegExp('a.b')).exec('a.b')).toBeTruthy();

angular/packages/core/schematics/test/helpers.ts

Line 26 in dce0213

const minLineIndent = Math.min(...matches.map(el => el.length));

angular/packages/core/src/render3/errors.ts

Line 86 in dce0213

if (typeof meta === 'string') {

angular/packages/core/src/render3/i18n/i18n_parse.ts

Line 386 in dce0213

    
           message.indexOf(`:${subTemplateIndex}${MARKER}`) + 2 + subTemplateIndex.toString().length;

angular/packages/core/src/render3/i18n/i18n_postprocess.ts

Line 12 in dce0213

const PP_PLACEHOLDERS_REGEXP = /\[(�.+?�?)\]|(�\/?\*\d+:\d+�)/g;

angular/packages/core/src/render3/i18n/i18n_postprocess.ts

Line 14 in dce0213

const PP_ICU_PLACEHOLDERS_REGEXP = /{([A-Z0-9_]+)}/g;

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1403 in dce0213

expect(() => initWithTemplate('<div [id]="unstableStringExpression"></div>'))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1413 in dce0213

'<div id="Expressions: {{ a }} and {{ unstableStringExpression }}!"></div>'))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1421 in dce0213

    
           expect(() => initWithTemplate('<div [attr.id]="unstableStringExpression"></div>'))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1431 in dce0213

    
           '<div attr.id="Expressions: {{ a }} and {{ unstableStringExpression }}!"></div>'))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1455 in dce0213

    
           expect(() => initWithTemplate('<div [style.color]="unstableColorExpression"></div>'))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1463 in dce0213

    
           expect(() => initWithTemplate('<div [class.someClass]="unstableBooleanExpression"></div>'))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1485 in dce0213

expect(() => initWithHostBindings({'[id]': 'unstableStringExpression'}))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1492 in dce0213

    
           expect(() => initWithHostBindings({'[style.color]': 'unstableColorExpression'}))

angular/packages/core/test/acceptance/change_detection_spec.ts

Line 1500 in dce0213

    
           expect(() => initWithHostBindings({'[class.someClass]': 'unstableBooleanExpression'}))

angular/packages/core/test/acceptance/component_spec.ts

Line 186 in dce0213

expect(match).toBeDefined();

angular/packages/core/test/acceptance/i18n_spec.ts

Line 2442 in dce0213

return element.innerHTML.replace(/\sng-reflect-\S*="[^"]*"/g, '')

angular/packages/core/test/bundling/todo_r2/todo_e2e_spec.ts

Line 40 in dce0213

const styles = document.querySelectorAll('head style');

angular/packages/core/test/linker/source_map_integration_node_only_spec.ts

Line 74 in dce0213

.toThrowError(

angular/packages/core/test/linker/source_map_integration_node_only_spec.ts

Line 86 in dce0213

.toThrowError(

angular/packages/core/test/linker/source_map_integration_node_only_spec.ts

Line 271 in dce0213

resolveCompileAndCreateComponent(MyComp, template);

angular/packages/core/test/linker/source_map_integration_node_only_spec.ts

Line 286 in dce0213

.toThrowError(

angular/packages/core/test/linker/source_map_integration_node_only_spec.ts

Line 496 in dce0213

getSourcePositionForStack(stack: string, genFile: string): SourcePos {

angular/packages/core/test/render3/render_util.ts

Line 383 in dce0213

html = html.replace(/\sng-reflect-\S*="[^"]*"/g, '')

angular/packages/core/test/test_bed_spec.ts

Line 923 in dce0213

TestBed.createComponent(type);

angular/packages/forms/src/validators.ts

Line 411 in dce0213

angular/packages/forms/src/validators.ts

Line 98 in dce0213

const EMAIL_REGEXP =

angular/packages/language-service/ivy/test/legacy/mock_host.ts

Line 277 in dce0213

    
           function replaceOnce(searchText: string, regex: RegExp, replaceText: string): OverwriteResult {

angular/packages/language-service/src/completions.ts

Line 386 in dce0213

if (tail instanceof Text) {

angular/packages/language-service/test/test_utils.ts

Line 408 in dce0213

angular/packages/misc/angular-in-memory-web-api/src/backend-service.ts

Line 151 in dce0213

query.forEach((value: string[], name: string) => {

angular/packages/misc/angular-in-memory-web-api/src/interfaces.ts

Line 134 in dce0213

const URL_REGEX =

angular/packages/service-worker/config/src/generator.ts

Line 109 in dce0213

positive: false,

angular/packages/service-worker/config/src/generator.ts

Line 114 in dce0213

positive: true,

angular/packages/service-worker/worker/src/app-version.ts

Line 111 in dce0213

this.navigationUrls = {

angular/packages/service-worker/worker/src/app-version.ts

Line 112 in dce0213

include: includeUrls.map(spec => new RegExp(spec.regex)),

angular/packages/service-worker/worker/src/assets.ts

Line 64 in dce0213

    
           // Patterns in the config are regular expressions disguised as strings. Breathe life into them.

angular/packages/service-worker/worker/src/data.ts

Line 250 in dce0213

private prefix: string) {

angular/packages/upgrade/src/common/src/upgrade_helper.ts

Line 17 in dce0213

// Constants

angular/packages/zone.js/lib/common/events.ts

Line 45 in dce0213

angular/packages/zone.js/test/test-env-setup-mocha.ts

Line 138 in dce0213

toMatch: function(actual: any) {

angular/tools/ts-api-guardian/lib/cli.ts

Line 33 in dce0213

const bazelWorkspaceManifestPathRegex =

More info on how to fix Insecure Use of Regular Expressions in Javascript and Typescript.

Insecure Use of Dangerous Function (49)

angular/aio/scripts/check-environment.js

Line 25 in dce0213

var exec = require('child_process').exec;

angular/aio/scripts/deploy-to-firebase.spec.js

Line 4 in dce0213

const {execSync} = require('child_process');

angular/aio/scripts/test-preview.js

Line 15 in dce0213

const {spawn} = require('child_process');

angular/aio/tools/stackblitz-builder/builder.js

Line 217 in dce0213

const matches = /<title>(.*)<\/title>/.exec(content);

angular/aio/tools/transforms/angular-base-package/processors/generateKeywords.js

Line 148 in dce0213

const ngTokenMatch = /^[nN]g([A-Z]\w*)/.exec(token);

angular/aio/tools/transforms/angular-base-package/services/getPreviousMajorVersions.js

Line 3 in dce0213

const child = require('child_process');

angular/aio/tools/transforms/angular-base-package/services/getPreviousMajorVersions.spec.js

Line 1 in dce0213

const child = require('child_process');

angular/aio/tools/transforms/remark-package/services/plugins/mapHeadings.js

Line 4 in dce0213

const match = /^h(\d+)/.exec(heading);

angular/aio/tools/transforms/remark-package/services/renderMarkdown.js

Line 59 in dce0213

const match = /^\{@[^\s\}]+[^\}]*\}/.exec(value);

angular/dev-infra/ng-dev.js

Line 15 in dce0213

var child_process = require('child_process');

angular/integration/ng_update_migrations/test.js

Line 11 in dce0213

const child_process = require('child_process');

angular/packages/compiler-cli/integrationtest/test_helpers.js

Line 9 in dce0213

const child_process = require('child_process');

angular/scripts/build/package-builder.js

Line 26 in dce0213

const {execSync} = require('child_process');

angular/scripts/webdriver-manager-update.js

Line 15 in dce0213

const spawnSync = require('child_process').spawnSync;

angular/tools/npm/check-node-modules.js

Line 13 in dce0213

var childProcess = require('child_process');

angular/tools/npm_integration_test/test_runner.js

Line 9 in dce0213

const spawnSync = require('child_process').spawnSync;

angular/tools/symbol-extractor/run_all_symbols_extractor_tests.js

Line 10 in dce0213

const {spawnSync} = require('child_process');

angular/dev-infra/pullapprove/condition_evaluator.ts

Line 37 in dce0213

    
           // correspond to other context variables provided by PullApprove for conditions.

angular/dev-infra/release/publish/test/github-api-testing.ts

Line 64 in dce0213

    
           nock(this.repoApiUrl).get(`/contents//CHANGELOG.md`).query(p => p.ref === branch).reply(200, {

angular/dev-infra/release/stamping/env-stamp.ts

Line 54 in dce0213

const packageJsonPath = join(getRepoBaseDir(), 'package.json');

angular/dev-infra/ts-circular-dependencies/config.ts

Line 44 in dce0213

try {

angular/dev-infra/utils/config.ts

Line 115 in dce0213

try {

angular/packages/bazel/src/builders/bazel.ts

Line 59 in dce0213

});

angular/packages/compiler-cli/src/ngtsc/file_system/testing/src/mock_file_system.ts

Line 43 in dce0213

if (isFile(entity)) {

angular/packages/compiler-cli/src/transformers/compiler_host.ts

Line 255 in dce0213

importedFilePackageName;

angular/packages/compiler-cli/test/compliance/test_helpers/expected_file_macros.ts

Line 56 in dce0213

function parsePlaceholders(str: string): Placeholder[] {

angular/packages/compiler-cli/test/compliance/test_helpers/expected_file_macros.ts

Line 67 in dce0213

function parseMetaProperties(str: string): Record<string, string> {

angular/packages/compiler-cli/test/ngc_spec.ts

Line 1314 in dce0213

angular/packages/compiler/src/output/output_jit_trusted_types.ts

Line 107 in dce0213

// straightforward implementation:

angular/packages/core/schematics/test/all-migrations.spec.ts

Line 22 in dce0213

const migrationCollectionPath = require.resolve('../migrations.json');

angular/packages/core/src/reflection/reflection_capabilities.ts

Line 281 in dce0213

getter(name: string): GetterFn {

angular/packages/core/src/reflection/reflection_capabilities.ts

Line 285 in dce0213

setter(name: string): SetterFn {

angular/packages/core/src/reflection/reflection_capabilities.ts

Line 291 in dce0213

return o.${name}.apply(o, args);`;

angular/packages/core/src/util/security/trusted_types.ts

Line 105 in dce0213

// straightforward implementation:

angular/packages/core/test/bundling/cyclic_import/integration_spec.ts

Line 27 in dce0213

    
           it('should render hello world when not minified', withBody('<trigger></trigger>', () => {

angular/packages/core/test/bundling/cyclic_import/integration_spec.ts

Line 32 in dce0213

    
           it('should render hello world when debug minified', withBody('<trigger></trigger>', () => {

angular/packages/core/test/bundling/cyclic_import/integration_spec.ts

Line 37 in dce0213

    
           it('should render hello world when fully minified', withBody('<trigger></trigger>', () => {

angular/packages/core/test/bundling/forms/forms_e2e_spec.ts

Line 20 in dce0213

    
           it('should render template form', withBody('<app-root></app-root>', async () => {

angular/packages/core/test/bundling/hello_world/treeshaking_spec.ts

Line 41 in dce0213

withBody('<hello-world></hello-world>', () => {

angular/packages/core/test/bundling/hello_world/treeshaking_spec.ts

Line 47 in dce0213

withBody('<hello-world></hello-world>', () => {

angular/packages/core/test/bundling/hello_world/treeshaking_spec.ts

Line 53 in dce0213

withBody('<hello-world></hello-world>', () => {

angular/packages/core/test/bundling/todo_i18n/todo_e2e_spec.ts

Line 24 in dce0213

clearTranslations();

angular/packages/core/test/bundling/todo_r2/todo_e2e_spec.ts

Line 24 in dce0213

withBody('<todo-app></todo-app>', async () => {

angular/packages/core/test/bundling/todo/todo_e2e_spec.ts

Line 24 in dce0213

it('should render todo', withBody('<todo-app></todo-app>', async () => {

angular/packages/private/testing/src/render3.ts

Line 65 in dce0213

try {

angular/packages/zone.js/test/node/fs.spec.ts

Line 113 in dce0213

const chunkSize = 512;

angular/packages/zone.js/test/node/fs.spec.ts

Line 135 in dce0213

const chunkSize = 512;

angular/tools/symbol-extractor/cli.ts

Line 11 in dce0213

angular/tools/ts-api-guardian/test/bootstrap.ts

Line 9 in dce0213

const path = require('path');

More info on how to fix Insecure Use of Dangerous Function in Javascript and Typescript.

Insecure File Management (829)

angular/aio/scripts/check-environment.js

Line 26 in dce0213

var engines = require(__dirname + '/../package.json').engines;

angular/aio/tools/example-zipper/exampleZipper.js

Line 35 in dce0213

let output = fs.createWriteStream(zipFileName);

angular/aio/tools/example-zipper/exampleZipper.js

Line 49 in dce0213

return require(filePath, 'utf-8').projectType || 'cli';

angular/aio/tools/example-zipper/exampleZipper.js

Line 69 in dce0213

let json = require(configFileName, 'utf-8');

angular/aio/tools/example-zipper/exampleZipper.js

Line 158 in dce0213

let content = fs.readFileSync(fileName, 'utf8');

angular/aio/tools/example-zipper/exampleZipper.js

Line 169 in dce0213

    
           zip.append(fs.readFileSync(this.examplesSystemjsConfig, 'utf8'), { name: 'src/systemjs.config.js' });

angular/aio/tools/example-zipper/exampleZipper.js

Line 170 in dce0213

    
           zip.append(fs.readFileSync(this.examplesSystemjsLoaderConfig, 'utf8'), { name: 'src/systemjs-angular-loader.js' });

angular/aio/tools/example-zipper/exampleZipper.js

Line 172 in dce0213

let tsconfig = fs.readFileSync(this.exampleTsconfig, 'utf8');

angular/aio/tools/examples/create-example.js

Line 58 in dce0213

if (fs.existsSync(examplePath)) {

angular/aio/tools/examples/create-example.js

Line 69 in dce0213

fs.writeFileSync(path.resolve(examplePath, EXAMPLE_CONFIG_FILENAME), '');

angular/aio/tools/examples/create-example.js

Line 81 in dce0213

fs.writeFileSync(

angular/aio/tools/examples/create-example.js

Line 120 in dce0213

if (fs.existsSync(gitignoreFilePath)) {

angular/aio/tools/examples/create-example.js

Line 121 in dce0213

const gitignoreFile = fs.readFileSync(gitignoreFilePath, 'utf8');

angular/aio/tools/examples/example-boilerplate.js

Line 24 in dce0213

    
           const gitignore = ignore().add(fs.readFileSync(path.resolve(BOILERPLATE_BASE_PATH, '.gitignore'), 'utf8'));

angular/aio/tools/examples/example-boilerplate.js

Line 27 in dce0213

if (!fs.existsSync(SHARED_NODE_MODULES_PATH)) {

angular/aio/tools/examples/run-example-e2e.js

Line 99 in dce0213

fs.writeFileSync(outputFile, header);

angular/aio/tools/examples/run-example-e2e.js

Line 187 in dce0213

if (argv.viewengine && fs.existsSync(appDir + '/aot/index.html')) {

angular/aio/tools/examples/run-example-e2e.js

Line 199 in dce0213

fs.appendFileSync(outputFile, emsg);

angular/aio/tools/examples/run-example-e2e.js

Line 222 in dce0213

fs.appendFileSync(outputFile, emsg);

angular/aio/tools/examples/run-example-e2e.js

Line 245 in dce0213

fs.appendFileSync(outputFile, '++ AoT version ++\n');

angular/aio/tools/examples/run-example-e2e.js

Line 250 in dce0213

if (fs.existsSync(appDir + '/' + copyFileCmd)) {

angular/aio/tools/examples/run-example-e2e.js

Line 298 in dce0213

fs.appendFileSync(outputFile, `Passed: ${appDir}\n\n`);

angular/aio/tools/examples/run-example-e2e.js

Line 302 in dce0213

fs.appendFileSync(outputFile, `Failed: ${appDir}\n\n`);

angular/aio/tools/examples/run-example-e2e.js

Line 348 in dce0213

fs.appendFileSync(outputFile, log);

angular/aio/tools/examples/shared/protractor.config.js

Line 123 in dce0213

fs.appendFileSync(outputFile, output);

angular/aio/tools/examples/shared/sync-boilerplate-dependencies.js

Line 30 in dce0213

return fs.readdirSync(dirPath)

angular/aio/tools/examples/shared/sync-boilerplate-dependencies.js

Line 32 in dce0213

.filter(childPath => fs.statSync(childPath).isDirectory())

angular/aio/tools/examples/shared/sync-boilerplate-dependencies.js

Line 34 in dce0213

.filter(pkgJsonPath => fs.existsSync(pkgJsonPath));

angular/aio/tools/examples/shared/sync-boilerplate-dependencies.js

Line 38 in dce0213

return JSON.parse(fs.readFileSync(filePath, 'utf8'));

angular/aio/tools/examples/shared/sync-boilerplate-dependencies.js

Line 63 in dce0213

    
           fs.writeFileSync(boilerplatePkgJsonPath, `${JSON.stringify(boilerplatePkgJson, null, 2)}\n`);

angular/aio/tools/ng-packages-installer/index.js

Line 73 in dce0213

const packageConfigFile = fs.readFileSync(pathToPackageConfig, 'utf8');

angular/aio/tools/ng-packages-installer/index.js

Line 106 in dce0213

fs.writeFileSync(pkg.packageJsonPath, JSON.stringify(tmpConfig, null, 2));

angular/aio/tools/ng-packages-installer/index.js

Line 121 in dce0213

fs.writeFileSync(pathToPackageConfig, localPackageConfigJson);

angular/aio/tools/ng-packages-installer/index.js

Line 126 in dce0213

fs.writeFileSync(pathToPackageConfig, packageConfigFile);

angular/aio/tools/ng-packages-installer/index.js

Line 133 in dce0213

fs.writeFileSync(pkg.packageJsonPath, JSON.stringify(pkg.config, null, 2));

angular/aio/tools/ng-packages-installer/index.js

Line 236 in dce0213

    
           const packageConfig = fs.existsSync(packageJsonPath) ? require(packageJsonPath) : null;

angular/aio/tools/ng-packages-installer/index.js

Line 335 in dce0213

const lockfileContent = fs.readFileSync(lockfilePath, 'utf8');

angular/aio/tools/ng-packages-installer/index.js

Line 383 in dce0213

return fs.existsSync(this.localMarkerPath);

angular/aio/tools/ng-packages-installer/index.js

Line 388 in dce0213

fs.writeFileSync(this.localMarkerPath, contents);

angular/aio/tools/ng-packages-installer/index.spec.js

Line 41 in dce0213

    
           expect(fs.existsSync).toHaveBeenCalledWith(path.resolve(projectDir, 'node_modules/_local_.json'));

angular/aio/tools/ng-packages-installer/index.spec.js

Line 48 in dce0213

    
           expect(fs.existsSync).toHaveBeenCalledWith(path.resolve(projectDir, 'node_modules/_local_.json'));

angular/aio/tools/ng-packages-installer/index.spec.js

Line 249 in dce0213

expect(fs.readFileSync).toHaveBeenCalledWith(packageJsonPath, 'utf8');

angular/aio/tools/ng-packages-installer/index.spec.js

Line 253 in dce0213

    
           expect(fs.writeFileSync).toHaveBeenCalledWith(packageJsonPath, expectedModifiedPackageJson);

angular/aio/tools/ng-packages-installer/index.spec.js

Line 257 in dce0213

    
           expect(fs.writeFileSync).toHaveBeenCalledWith(packageJsonPath, dummyPackageJson);

angular/aio/tools/ng-packages-installer/index.spec.js

Line 310 in dce0213

expect(fs.existsSync(buildScript)).toBe(true);

angular/aio/tools/ng-packages-installer/index.spec.js

Line 502 in dce0213

expect(fs.readFileSync).toHaveBeenCalledWith('/foo/bar/yarn.lock', 'utf8');

angular/aio/tools/ng-packages-installer/index.spec.js

Line 558 in dce0213

    
           expect(fs.existsSync).toHaveBeenCalledWith(path.resolve(nodeModulesDir, '_local_.json'));

angular/aio/tools/ng-packages-installer/index.spec.js

Line 563 in dce0213

    
           expect(fs.existsSync).toHaveBeenCalledWith(path.resolve(nodeModulesDir, '_local_.json'));

angular/aio/tools/ng-packages-installer/index.spec.js

Line 570 in dce0213

    
           expect(fs.writeFileSync).toHaveBeenCalledWith(path.resolve(nodeModulesDir, '_local_.json'), 'test contents');

angular/aio/tools/stackblitz-builder/builder.js

Line 52 in dce0213

    
           const configSrc = fs.existsSync(configPath) && fs.readFileSync(configPath, 'utf-8').trim();

angular/aio/tools/stackblitz-builder/builder.js

Line 61 in dce0213

    
           this._boilerplatePackageJsons[exampleType] = fs.existsSync(pkgJsonPath) ? require(pkgJsonPath) : null;

angular/aio/tools/stackblitz-builder/builder.js

Line 99 in dce0213

fs.writeFileSync(outputFileName, html, 'utf-8');

angular/aio/tools/stackblitz-builder/builder.js

Line 103 in dce0213

fs.writeFileSync(altFileName, html, 'utf-8');

angular/aio/tools/stackblitz-builder/builder.js

Line 107 in dce0213

if (fs.existsSync(outputFileName)) {

angular/aio/tools/stackblitz-builder/builder.js

Line 108 in dce0213

fs.unlinkSync(outputFileName);

angular/aio/tools/stackblitz-builder/builder.js

Line 110 in dce0213

if (altFileName && fs.existsSync(altFileName)) {

angular/aio/tools/stackblitz-builder/builder.js

Line 111 in dce0213

fs.unlinkSync(altFileName);

angular/aio/tools/stackblitz-builder/builder.js

Line 137 in dce0213

if (!fs.existsSync(path.join(config.basePath, config.file))) {

angular/aio/tools/stackblitz-builder/builder.js

Line 143 in dce0213

    
           const primaryFile = defaultPrimaryFiles.find(fileName =>  fs.existsSync(path.join(config.basePath, fileName)));

angular/aio/tools/stackblitz-builder/builder.js

Line 181 in dce0213

if (config.main && !fs.existsSync(path.join(config.basePath, config.main))) {

angular/aio/tools/stackblitz-builder/builder.js

Line 192 in dce0213

content = fs.readFileSync(fileName, 'utf-8');

angular/aio/tools/stackblitz-builder/builder.js

Line 253 in dce0213

return fs.readFileSync(file, { encoding: 'base64' });

angular/aio/tools/stackblitz-builder/builder.js

Line 318 in dce0213

const configSrc = fs.readFileSync(configFileName, 'utf-8');

angular/aio/tools/transforms/angular-base-package/index.js

Line 38 in dce0213

    
           .factory('packageInfo', function() { return require(path.resolve(PROJECT_ROOT, 'package.json')); })

angular/aio/tools/transforms/angular-base-package/processors/generateKeywords.js

Line 37 in dce0213

    
           wordsToIgnore = fs.readFileSync(ignoreWordsPath, 'utf8').toString().split(/[,\s\n\r]+/gm);

angular/aio/tools/transforms/angular-content-package/index.js

Line 24 in dce0213

const gitignoreFile = fs.readFileSync(gitignoreFilePath, 'utf8');

angular/aio/tools/transforms/authors-package/index.spec.js

Line 28 in dce0213