From: Oleksii Shumeiko -X (oshumeik - SOFTSERVE INC at Cisco) Date: Thu, 18 Aug 2022 09:40:20 +0000 (+0000) Subject: Pull request #3559: http_inspect: add more identifiers to js_norm lists X-Git-Tag: 3.1.40.0~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cd91f1def226021d1b65f669ee67e8fdcac7b7a3;p=thirdparty%2Fsnort3.git Pull request #3559: http_inspect: add more identifiers to js_norm lists Merge in SNORT/snort3 from ~YVELYKOZ/snort3:js_ident_upd to master Squashed commit of the following: commit ccd9e35e96370cecdfbeb53a6ec980d506cd6b86 Author: Vitalii Date: Thu Aug 4 13:57:34 2022 +0300 http_inspect: add more identifiers to js_norm lists --- diff --git a/lua/snort_defaults.lua b/lua/snort_defaults.lua index 4242f85dc..1153987aa 100644 --- a/lua/snort_defaults.lua +++ b/lua/snort_defaults.lua @@ -1190,6 +1190,9 @@ default_js_norm_ident_ignore = 'isFinite', 'isNaN', 'parseFloat', 'parseInt', 'Encode', 'Decode', 'decodeURI', 'decodeURIComponent', 'encodeURI', 'encodeURIComponent', + -- Microsoft.JScript.GlobalObject.Functions + 'CollectGarbage', 'GetHashCode', 'GetObject', 'GetType', 'MemberwiseClone', + -- GlobalObject.Constructors 'AggregateError', 'Array', 'ArrayBuffer', 'BigInt', 'BitInt64Array', 'BigUint64Array', 'Boolean', 'DataView', 'Date', 'Error', 'EvalError', 'FinalizationRegistry', @@ -1199,6 +1202,9 @@ default_js_norm_ident_ignore = 'Symbol', 'SyntaxError', 'TypeError', 'Uint8Array', 'Uint8ClampedArray', 'Uint16Array', 'Uint32Array', 'URIError', 'WeakMap', 'WeakRef', 'WeakSet', + -- Microsoft.JScript.GlobalObject.Constructors + 'ActiveXObject', 'Enumerator', 'VBArray', + -- Atomics 'Atomics', 'WaiterList', 'ValidateIntegerTypedArray', 'ValidateAtomicAccess', 'GetWaiterList', 'EnterCriticalSection', 'LeaveCriticalSection', 'AddWaiter', 'RemoveWaiter', 'RemoveWaiters', @@ -1271,7 +1277,7 @@ default_js_norm_ident_ignore = 'console', 'document', -- Misc - 'CreateDynamicFunction', 'HostHasSourceTextAvailable', 'SymbolDescriptiveString', + 'arguments', 'CreateDynamicFunction', 'HostHasSourceTextAvailable', 'SymbolDescriptiveString', 'IsConcatSpreadable', 'FlattenIntoArray', 'SortCompare', 'AddEntriesFromIterable', 'CreateMapIterator', 'CreateSetIterator', 'EventSet', 'SharedDataBlockEventSet', 'HostEventSet', 'ComposeWriteEventBytes', 'ValueOfReadEvent', 'escape', 'unescape', @@ -1311,7 +1317,32 @@ default_js_norm_prop_ignore = 'reduceRight', 'reverse', 'shift', 'unshift', 'some', 'sort', 'splice', -- Generator - 'next', 'return', 'throw' + 'next', 'return', 'throw', + + -- EventTarget + 'addEventListener', 'dispatchEvent', 'removeEventListener', + + -- Node + 'childNodes', 'nodeValue', 'ownerDocument', 'parentElement', 'textContent', 'appendChild', + 'cloneNode', 'insertBefore', 'removeChild', 'replaceChild', + + -- Element + 'innerHTML', 'msRegionOverflow', 'openOrClosedShadowRoot', 'outerHTML', 'part', 'shadowRoot', + 'after', 'append', 'attachShadow', 'before', 'closest', 'createShadowRoot', 'getAttribute', + 'getAttributeNode', 'getAttributeNodeNS', 'getAttributeNS', 'getElementsByClassName', + 'getElementsByTagName', 'getElementsByTagNameNS', 'insertAdjacentElement', 'insertAdjacentHTML', + 'insertAdjacentText', 'prepend', 'querySelector', 'querySelectorAll', 'releasePointerCapture', + 'remove', 'removeAttribute', 'removeAttributeNode', 'removeAttributeNS', 'replaceChildren', + 'replaceWith', 'setAttribute', 'setAttributeNode', 'setAttributeNodeNS', 'setAttributeNS', + 'setCapture', 'setHTML', 'setPointerCapture', 'toggleAttribute', + + -- HTMLElement + 'contentEditable', 'contextMenu', 'dataset', 'dir', 'enterKeyHint', 'hidden', 'inert', + 'innerText', 'lang', 'nonce', 'outerText', 'style', 'tabIndex', 'title', + 'attachInternals', + + -- Misc + 'ExportStyle', 'callee' } default_http_inspect =