fix: helmet issues (#77)

javascript/express/helmet_missing.yml

@@ -10,6 +10,16 @@ auxiliary:
   - id: javascript_express_helmet_express_init
     patterns:
       - express()
+      - |
+        const $<_>: Express = $<!>$<_>
+      - |
+        ($<...>$<!>$<_>: Express$<...>) => {}
+      - |
+        function ($<...>$<!>$<_>: Express$<...>) {}
+      - |
+        function $<_>($<...>$<!>$<_>: Express$<...>) {}
+      - |
+        class $<_> $<...>{ $<_>($<...>$<!>$<_>: Express$<...>) {} }
   - id: javascript_express_helmet_configuration
     patterns:
       - helmet()

javascript/express/helmet_missing/.snapshots/index.yml

@@ -0,0 +1,2 @@
+{}
+

javascript/express/helmet_missing/testdata/index.ts

@@ -0,0 +1,39 @@
+import helmet, {
+  contentSecurityPolicy,
+  crossOriginEmbedderPolicy,
+  crossOriginOpenerPolicy,
+  crossOriginResourcePolicy,
+  dnsPrefetchControl,
+  frameguard,
+  hidePoweredBy,
+  hsts,
+  ieNoOpen,
+  noSniff,
+  originAgentCluster,
+  permittedCrossDomainPolicies,
+  referrerPolicy,
+  xssFilter,
+} from "helmet"
+
+import { Express } from "express"
+const expressApp = express()
+
+export const addHelmet = (app: Express) => {
+  app.use(helmet())
+  app.use(contentSecurityPolicy())
+  app.use(crossOriginEmbedderPolicy())
+  app.use(crossOriginOpenerPolicy())
+  app.use(crossOriginResourcePolicy())
+  app.use(dnsPrefetchControl())
+  app.use(frameguard())
+  app.use(hidePoweredBy())
+  app.use(hsts())
+  app.use(ieNoOpen())
+  app.use(noSniff())
+  app.use(originAgentCluster())
+  app.use(permittedCrossDomainPolicies())
+  app.use(referrerPolicy())
+  app.use(xssFilter())
+}
+
+addHelmet(expressApp)

javascript/express/reduce_fingerprint/.snapshots/index.yml

@@ -0,0 +1,2 @@
+{}
+

javascript/express/reduce_fingerprint/testdata/index.ts

@@ -0,0 +1,39 @@
+import helmet, {
+  contentSecurityPolicy,
+  crossOriginEmbedderPolicy,
+  crossOriginOpenerPolicy,
+  crossOriginResourcePolicy,
+  dnsPrefetchControl,
+  frameguard,
+  hidePoweredBy,
+  hsts,
+  ieNoOpen,
+  noSniff,
+  originAgentCluster,
+  permittedCrossDomainPolicies,
+  referrerPolicy,
+  xssFilter,
+} from "helmet"
+
+import { Express } from "express"
+const expressApp = express()
+
+export const addHelmet = (app: Express) => {
+  app.use(helmet())
+  app.use(contentSecurityPolicy())
+  app.use(crossOriginEmbedderPolicy())
+  app.use(crossOriginOpenerPolicy())
+  app.use(crossOriginResourcePolicy())
+  app.use(dnsPrefetchControl())
+  app.use(frameguard())
+  app.use(hidePoweredBy())
+  app.use(hsts())
+  app.use(ieNoOpen())
+  app.use(noSniff())
+  app.use(originAgentCluster())
+  app.use(permittedCrossDomainPolicies())
+  app.use(referrerPolicy())
+  app.use(xssFilter())
+}
+
+addHelmet(expressApp)