rules: add some tests to Java and JavaScript rules (#677)

Add tests to HS-JAVA-1, HS-JAVASCRIPT-1, HS-JAVASCRIPT-2 and HS-JAVASCRIPT-2 rules. This commit also make a improvement on HS-JAVASCRIPT-2 to match the correct way to set NODE_TLS_REJECT_UNAUTHORIZED env on Nodejs. Previously the rule was just match with the following code `"NODE_TLS_REJECT_UNAUTHORIZED" = "0";` with the change the rule will match `process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";` Update #630 Signed-off-by: Matheus Alcantara <[email protected]>
ZupIT · Oct 19, 2021 · 6434b57 · 6434b57
1 parent 5a4be7b
commit 6434b57
Show file tree

Hide file tree

Showing 3 changed files with 156 additions and 54 deletions.
diff --git a/internal/services/engines/nodejs/rules.go b/internal/services/engines/nodejs/rules.go
@@ -66,7 +66,7 @@ func NewNoDisableTlsRejectUnauthorized() text.TextRule {
 		},
 		Type: text.Regular,
 		Expressions: []*regexp.Regexp{
-			regexp.MustCompile(`(?:\[|)(?:'|\")NODE_TLS_REJECT_UNAUTHORIZED(?:'|\")(?:\]|)\s*=\s*(?:'|\")*0(?:'|\")`),
+			regexp.MustCompile(`NODE_TLS_REJECT_UNAUTHORIZED\s*=\s*(?:'|\")*0(?:'|\")`),
 		},
 	}
 }