Pull request #3559: http_inspect: add more identifiers to js_norm lists

Merge in SNORT/snort3 from ~YVELYKOZ/snort3:js_ident_upd to master

Squashed commit of the following:

commit ccd9e35e96370cecdfbeb53a6ec980d506cd6b86
Author: Vitalii <vhorbato@cisco.com>
Date:   Thu Aug 4 13:57:34 2022 +0300

    http_inspect: add more identifiers to js_norm lists

diff --git a/lua/snort_defaults.lua b/lua/snort_defaults.lua
index 4242f85dcb572358a2c6f449878f96cab87945c9..1153987aadee3d1c62cb432471a1d0e5faf2e4c5 100644 (file)
--- a/lua/snort_defaults.lua
+++ b/lua/snort_defaults.lua
@@ -1190,6 +1190,9 @@ default_js_norm_ident_ignore =
     'isFinite', 'isNaN', 'parseFloat', 'parseInt', 'Encode', 'Decode', 'decodeURI',
     'decodeURIComponent', 'encodeURI', 'encodeURIComponent',
 
+    -- Microsoft.JScript.GlobalObject.Functions
+    'CollectGarbage', 'GetHashCode', 'GetObject', 'GetType', 'MemberwiseClone',
+
     -- GlobalObject.Constructors
     'AggregateError', 'Array', 'ArrayBuffer', 'BigInt', 'BitInt64Array', 'BigUint64Array',
     'Boolean', 'DataView', 'Date', 'Error', 'EvalError', 'FinalizationRegistry',
@@ -1199,6 +1202,9 @@ default_js_norm_ident_ignore =
     'Symbol', 'SyntaxError', 'TypeError', 'Uint8Array', 'Uint8ClampedArray', 'Uint16Array',
     'Uint32Array', 'URIError', 'WeakMap', 'WeakRef', 'WeakSet',
 
+    -- Microsoft.JScript.GlobalObject.Constructors
+    'ActiveXObject', 'Enumerator', 'VBArray',
+
     -- Atomics
     'Atomics', 'WaiterList', 'ValidateIntegerTypedArray', 'ValidateAtomicAccess', 'GetWaiterList',
     'EnterCriticalSection', 'LeaveCriticalSection', 'AddWaiter', 'RemoveWaiter', 'RemoveWaiters',
@@ -1271,7 +1277,7 @@ default_js_norm_ident_ignore =
     'console', 'document',
 
     -- Misc
-    'CreateDynamicFunction', 'HostHasSourceTextAvailable', 'SymbolDescriptiveString',
+    'arguments', 'CreateDynamicFunction', 'HostHasSourceTextAvailable', 'SymbolDescriptiveString',
     'IsConcatSpreadable', 'FlattenIntoArray', 'SortCompare', 'AddEntriesFromIterable',
     'CreateMapIterator', 'CreateSetIterator', 'EventSet', 'SharedDataBlockEventSet',
     'HostEventSet', 'ComposeWriteEventBytes', 'ValueOfReadEvent', 'escape', 'unescape',
@@ -1311,7 +1317,32 @@ default_js_norm_prop_ignore =
     'reduceRight', 'reverse', 'shift', 'unshift', 'some', 'sort', 'splice',
 
     -- Generator
-    'next', 'return', 'throw'
+    'next', 'return', 'throw',
+
+    -- EventTarget
+    'addEventListener', 'dispatchEvent', 'removeEventListener',
+
+    -- Node
+    'childNodes', 'nodeValue', 'ownerDocument', 'parentElement', 'textContent', 'appendChild',
+    'cloneNode', 'insertBefore', 'removeChild', 'replaceChild',
+
+    -- Element
+    'innerHTML', 'msRegionOverflow', 'openOrClosedShadowRoot', 'outerHTML', 'part', 'shadowRoot',
+    'after', 'append', 'attachShadow', 'before', 'closest', 'createShadowRoot', 'getAttribute',
+    'getAttributeNode', 'getAttributeNodeNS', 'getAttributeNS', 'getElementsByClassName',
+    'getElementsByTagName', 'getElementsByTagNameNS', 'insertAdjacentElement', 'insertAdjacentHTML',
+    'insertAdjacentText', 'prepend', 'querySelector', 'querySelectorAll', 'releasePointerCapture',
+    'remove', 'removeAttribute', 'removeAttributeNode', 'removeAttributeNS', 'replaceChildren',
+    'replaceWith', 'setAttribute', 'setAttributeNode', 'setAttributeNodeNS', 'setAttributeNS',
+    'setCapture', 'setHTML', 'setPointerCapture', 'toggleAttribute',
+
+    -- HTMLElement
+    'contentEditable', 'contextMenu', 'dataset', 'dir', 'enterKeyHint', 'hidden', 'inert', 
+    'innerText', 'lang', 'nonce', 'outerText', 'style', 'tabIndex', 'title',
+    'attachInternals',
+
+    -- Misc
+    'ExportStyle', 'callee'
 }
 
 default_http_inspect =