playwright/1.47.0 package update #27773
Conversation
![octo-sts[bot]](https://avatars.githubusercontent.com/in/801323?s=60&v=4){kind=small}
octo-sts
bot
commented
Sep 6, 2024
octo-sts
bot
commented
Signed-off-by: wolfi-bot <[email protected]>
octo-sts
bot
added
request-version-update
Package playwright: Click to expand/collapsePackage playwright:
(
"""
# Generated by melange
pkgname = playwright
- pkgver = 1.46.1-r0
+ pkgver = 1.47.0-r0
arch = x86_64
- size = 10663698
+ size = 10845508
origin = playwright
pkgdesc = Framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API
url =
- commit = 9f76677a9bd7fbfe57001022fb066fa74301d33d
- builddate = 1724070786
+ commit = 043b1cdb18d1af6865a3f71cc2ad1801f033817b
license = Apache-2.0
depend = nodejs
- datahash = 5daf013937fcf229a760cc10ed40746d5aae9b1205e09d9eabbedae01a2dde34
+ datahash = 8928b23b262b57b9c1df82c3220b6a526bf66029a9e4e9d285e28e34dffd2db9
"""
)
Added: /usr/lib/node_modules/playwright/lib/isomorphic/teleSuiteUpdater.js bincapz found differences: Click to expand/collapseDeleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/python.js [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | as download downloadAlias expect_download |
| -LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/java.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | Download download acceptDownloads downloadAlias setAcceptDownloads waitForDownload |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/embedded.Rs3k5vqi.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | ref/path/relative | references and possibly executes relative path | ./assets |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/utils.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/language.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | let download |
| -LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/utils/glob.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Regular_exp |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/uiMode.DF8Bmr4C.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | ref/path/relative | references and possibly executes relative path | ./assets |
| -MEDIUM | ref/words/intercept | References interception | interceptStdio |
| -LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| -LOW | fd/write | writes to a file handle | U.write(I) h.write(S) |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/index.DMistyfh.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | trace into the download shelf |
| -MEDIUM | ref/path/relative | references and possibly executes relative path | ./assets |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://trace.playwright.dev |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/codeGenerator.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | download |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/recorder/assets/index-CicNBMuh.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/cmd | executes a command | execCommand |
| -MEDIUM | net/download | download files | download |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(e)) |
| -LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| -LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| -LOW | fs/mount | mounts file systems | -o mount |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://reactjs.org/docs/error-decoder.html?invariant= |
| -LOW | ref/words/password | references a 'password' | password |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/javascript.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | await download const download downloadAlias |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/csharp.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | RunAndWaitForDownloadAsync downloadAlias var download |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/recorder/assets/codeMirrorModule-CLVU69JM.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | databases/mysql | accesses MySQL databases | mysql |
| -MEDIUM | databases/sqlite | accesses SQLite databases | sqlite |
| -MEDIUM | exec/cmd | executes a command | execCommand:function |
| -MEDIUM | ref/program/powershell | powershell | powershell |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(f exec(m) exec(n) exec(t),x |
| -LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-Bhx_foC8.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | databases/mysql | accesses MySQL databases | mysql |
| -MEDIUM | databases/sqlite | accesses SQLite databases | sqlite |
| -MEDIUM | exec/cmd | executes a command | execCommand:function |
| -MEDIUM | ref/program/powershell | powershell | powershell |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(f exec(m) exec(n) exec(t),x |
| -LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| -LOW | fd/multiplex | monitor multiple file descriptors | select |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/assets/testServerConnection-D2nmasS1.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/websocket | supports web sockets | WebSocket |
| -LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| -LOW | encoding/json/encode | encodes JSON | JSON.stringify |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/assets/workbench-NhP651gz.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | exec/cmd | executes a command | execCommand |
| -MEDIUM | net/download | download files | download |
| -MEDIUM | net/url/encode | encodes URL, likely to pass GET variables | urlencode |
| -MEDIUM | ref/words/agent | references an 'agent' | agent |
| -MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(t) |
| -LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| -LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| -LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| -LOW | fs/mount | mounts file systems | -o mount |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://reactjs.org/docs/error-decoder.html?invariant= |
| -LOW | ref/words/password | references a 'password' | password |
Deleted: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/jsonl.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| -LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| -LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/recorderCollection.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | download |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/recorderRunner.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiExecutionContext.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/csharp.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | RunAndWaitForDownloadAsync downloadAlias var download |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/javascript.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | await download const download downloadAlias |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/utils/isomorphic/urlMatch.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Regular_exp |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/languages.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./csharp ./javascript ./jsonl ./python |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/third_party/bidiSerializer.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/third_party/bidiProtocol.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/words/intercept | References interception | intercept |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/w3c/webdriver-bidi/blob/master/index.bs |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/index.pMAN88y-.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | trace into the download shelf |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./assets |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://trace.playwright.dev |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiConnection.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/java.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | Download download acceptDownloads downloadAlias setAcceptDownloads waitForDownload |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/embedded.CvhnUgIi.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./assets |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/throttledFile.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | fs/file/write | writes to file | writeFileSync |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/assets/testServerConnection-DeE2kSzz.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/websocket | supports web sockets | WebSocket |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
Added: playwright/usr/lib/node_modules/playwright/lib/isomorphic/teleSuiteUpdater.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiNetworkManager.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/url/request | requests resources via URL | requests.get(params |
| +MEDIUM | ref/words/intercept | References interception | interceptPromise intercepted intercepting intercepts |
| +MEDIUM | ref/words/server_address | references a 'server address', possible C2 client | _serverAddrFinished |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
| +LOW | ref/words/password | references a 'password' | password |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/recorder/assets/codeMirrorModule-C-fQ5QZD.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | databases/mysql | accesses MySQL databases | mysql |
| +MEDIUM | databases/sqlite | accesses SQLite databases | sqlite |
| +MEDIUM | exec/cmd | executes a command | execCommand:function |
| +MEDIUM | ref/program/powershell | powershell | powershell |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(f exec(m) exec(n) exec(t),x |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiPage.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiInput.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./third_party |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/assets/workbench-DrQjKdyE.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | exec/cmd | executes a command | execCommand |
| +MEDIUM | net/download | download files | download |
| +MEDIUM | net/url/encode | encodes URL, likely to pass GET variables | urlencode |
| +MEDIUM | ref/words/agent | references an 'agent' | agent |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/mount | mounts file systems | -o mount |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://reactjs.org/docs/error-decoder.html?invariant= |
| +LOW | ref/words/password | references a 'password' | password |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/recorder/contextRecorder.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | _lastDownloadOrdinal _onDownload downloadAlias |
| +MEDIUM | ref/words/intercept | References interception | intercepted |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/utils/expectUtils.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./rtti |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiBrowser.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | async cancelDownload |
| +MEDIUM | net/http/cookies | access HTTP resources using cookies | Cookie HTTP |
| +MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
| +MEDIUM | net/socks5 | Supports SOCK5 proxies | socks5 |
| +MEDIUM | net/websocket | supports web sockets | webSocketUrl: |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/language.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | let download |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/jsonl.js [✅ LOW]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/uiMode.jY2s-9ps.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./assets |
| +MEDIUM | ref/words/intercept | References interception | interceptStdio |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | fd/write | writes to a file handle | U.write(k) h.write(S) |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/recorder/assets/index-D-5S5PPN.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | exec/cmd | executes a command | execCommand |
| +MEDIUM | net/download | download files | download |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(e)) |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/mount | mounts file systems | -o mount |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://reactjs.org/docs/error-decoder.html?invariant= |
| +LOW | ref/words/password | references a 'password' | password |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/bidi/bidiFirefox.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/socket/connect | initiate a connection on a socket | connect |
| +MEDIUM | net/websocket | supports web sockets | useWebSocket |
| +MEDIUM | ref/path/root | path reference within /root | /root |
| +LOW | env/get | Retrieve environment variable values | env.GITHUB |
| +LOW | ref/site/url | contains embedded HTTPS URLs | microsoft/playwright#20555 microsoft/playwright#6500 |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-C6p3E9Zg.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | databases/mysql | accesses MySQL databases | mysql |
| +MEDIUM | databases/sqlite | accesses SQLite databases | sqlite |
| +MEDIUM | exec/cmd | executes a command | execCommand:function |
| +MEDIUM | ref/program/powershell | powershell | powershell |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(f exec(m) exec(n) exec(t),x |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | fd/multiplex | monitor multiple file descriptors | select |
Added: playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/codegen/python.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | as download downloadAlias expect_download |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTP URLs | http://www.apache.org/licenses/LICENSE-2.0 |
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_msedge_beta_mac.sh
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_msedge_dev_mac.sh
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/lib/server/android/android.js
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_chrome_stable_mac.sh
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_chrome_stable_linux.sh
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_msedge_stable_mac.sh
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/lib/utilsBundleImpl.js
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/types/protocol.d.ts
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_chrome_beta_mac.sh
Changed: /tmp/wolfictl-apk-1553029335/playwright/usr/lib/node_modules/playwright/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh
Moved: playwright/var/lib/db/sbom/playwright-1.46.1-r0.spdx.json -> /tmp/wolfictl-apk-1553029335/playwright/var/lib/db/sbom/playwright-1.47.0-r0.spdx.json (similarity: 0.98)
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
octo-sts
bot
deleted the
wolfictl-78b9f7e8-2316-4577-a594-774b1511bd9d
branch
