upstream-sync: sync Prebid.js 10.11.0 → 10.12.0

.github/codeql/queries/autogen_2d_RenderingContext_getImageData.ql

@@ -0,0 +1,17 @@
+/**
+ * @id prebid/2d-getimagedata
+ * @name Access to 2d rendering context getImageData
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of  2d RenderingContext.getImageData
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from InvokeNode invocation, SourceNode api
+where
+  invocation.getCalleeName() = "getContext" and
+  invocation.getArgument(0).mayHaveStringValue("2d") and
+  api = invocation.getAPropertyRead("getImageData")
+select api, "getImageData is an indicator of fingerprinting, weighed 38.11 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_2d_RenderingContext_isPointInPath.ql

@@ -0,0 +1,17 @@
+/**
+ * @id prebid/2d-ispointinpath
+ * @name Access to 2d rendering context isPointInPath
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of  2d RenderingContext.isPointInPath
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from InvokeNode invocation, SourceNode api
+where
+  invocation.getCalleeName() = "getContext" and
+  invocation.getArgument(0).mayHaveStringValue("2d") and
+  api = invocation.getAPropertyRead("isPointInPath")
+select api, "isPointInPath is an indicator of fingerprinting, weighed 4216.23 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_2d_RenderingContext_measureText.ql

@@ -0,0 +1,17 @@
+/**
+ * @id prebid/2d-measuretext
+ * @name Access to 2d rendering context measureText
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of  2d RenderingContext.measureText
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from InvokeNode invocation, SourceNode api
+where
+  invocation.getCalleeName() = "getContext" and
+  invocation.getArgument(0).mayHaveStringValue("2d") and
+  api = invocation.getAPropertyRead("measureText")
+select api, "measureText is an indicator of fingerprinting, weighed 48.2 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_AudioWorkletNode.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/audioworkletnode
+ * @name Use of AudioWorkletNode
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of AudioWorkletNode
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode api
+where
+  api = instantiationOf("AudioWorkletNode")
+select api, "AudioWorkletNode is an indicator of fingerprinting, weighed 32.68 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_Date_getTimezoneOffset.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/date-gettimezoneoffset
+ * @name Access to Date.getTimezoneOffset
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of Date.getTimezoneOffset
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode inst, SourceNode api
+where
+  inst = instantiationOf("Date") and
+  api = inst.getAPropertyRead("getTimezoneOffset")
+select api, "getTimezoneOffset is an indicator of fingerprinting, weighed 16.79 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_DeviceMotionEvent_acceleration.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/devicemotionevent-acceleration
+ * @name Potential access to DeviceMotionEvent.acceleration
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of acceleration
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from PropRef api
+where  
+  api.getPropertyName() = "acceleration"
+select api, "acceleration is an indicator of fingerprinting, weighed 59.51 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_DeviceMotionEvent_accelerationIncludingGravity.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/devicemotionevent-accelerationincludinggravity
+ * @name Potential access to DeviceMotionEvent.accelerationIncludingGravity
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of accelerationIncludingGravity
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from PropRef api
+where  
+  api.getPropertyName() = "accelerationIncludingGravity"
+select api, "accelerationIncludingGravity is an indicator of fingerprinting, weighed 166.43 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_DeviceMotionEvent_rotationRate.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/devicemotionevent-rotationrate
+ * @name Potential access to DeviceMotionEvent.rotationRate
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of rotationRate
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from PropRef api
+where  
+  api.getPropertyName() = "rotationRate"
+select api, "rotationRate is an indicator of fingerprinting, weighed 59.32 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_Gyroscope.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/gyroscope
+ * @name Use of Gyroscope
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of Gyroscope
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode api
+where
+  api = instantiationOf("Gyroscope")
+select api, "Gyroscope is an indicator of fingerprinting, weighed 189.7 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_Gyroscope_x.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/gyroscope-x
+ * @name Access to Gyroscope.x
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of Gyroscope.x
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode inst, SourceNode api
+where
+  inst = instantiationOf("Gyroscope") and
+  api = inst.getAPropertyRead("x")
+select api, "x is an indicator of fingerprinting, weighed 4216.23 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_Gyroscope_y.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/gyroscope-y
+ * @name Access to Gyroscope.y
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of Gyroscope.y
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode inst, SourceNode api
+where
+  inst = instantiationOf("Gyroscope") and
+  api = inst.getAPropertyRead("y")
+select api, "y is an indicator of fingerprinting, weighed 4216.23 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_Gyroscope_z.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/gyroscope-z
+ * @name Access to Gyroscope.z
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of Gyroscope.z
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode inst, SourceNode api
+where
+  inst = instantiationOf("Gyroscope") and
+  api = inst.getAPropertyRead("z")
+select api, "z is an indicator of fingerprinting, weighed 4216.23 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_Notification_permission.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/notification-permission
+ * @name Access to Notification.permission
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of Notification.permission
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("Notification") and
+  api = prop.getAPropertyRead("permission")
+select api, "permission is an indicator of fingerprinting, weighed 21.19 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_OfflineAudioContext.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/offlineaudiocontext
+ * @name Use of OfflineAudioContext
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of OfflineAudioContext
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode api
+where
+  api = instantiationOf("OfflineAudioContext")
+select api, "OfflineAudioContext is an indicator of fingerprinting, weighed 1062.57 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_RTCPeerConnection.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/rtcpeerconnection
+ * @name Use of RTCPeerConnection
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of RTCPeerConnection
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode api
+where
+  api = instantiationOf("RTCPeerConnection")
+select api, "RTCPeerConnection is an indicator of fingerprinting, weighed 47.04 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_SharedWorker.ql

@@ -0,0 +1,15 @@
+/**
+ * @id prebid/sharedworker
+ * @name Use of SharedWorker
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of SharedWorker
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode api
+where
+  api = instantiationOf("SharedWorker")
+select api, "SharedWorker is an indicator of fingerprinting, weighed 56.71 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_appCodeName.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-appcodename
+ * @name Access to navigator.appCodeName
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.appCodeName
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("appCodeName")
+select api, "appCodeName is an indicator of fingerprinting, weighed 127.81 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_deviceMemory.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-devicememory
+ * @name Access to navigator.deviceMemory
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.deviceMemory
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("deviceMemory")
+select api, "deviceMemory is an indicator of fingerprinting, weighed 78.47 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_getBattery.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-getbattery
+ * @name Access to navigator.getBattery
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.getBattery
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("getBattery")
+select api, "getBattery is an indicator of fingerprinting, weighed 117.75 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_getGamepads.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-getgamepads
+ * @name Access to navigator.getGamepads
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.getGamepads
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("getGamepads")
+select api, "getGamepads is an indicator of fingerprinting, weighed 256.1 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_hardwareConcurrency.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-hardwareconcurrency
+ * @name Access to navigator.hardwareConcurrency
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.hardwareConcurrency
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("hardwareConcurrency")
+select api, "hardwareConcurrency is an indicator of fingerprinting, weighed 62.49 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_keyboard.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-keyboard
+ * @name Access to navigator.keyboard
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.keyboard
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("keyboard")
+select api, "keyboard is an indicator of fingerprinting, weighed 1296.7 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"

.github/codeql/queries/autogen_navigator_mediaCapabilities.ql

@@ -0,0 +1,16 @@
+/**
+ * @id prebid/navigator-mediacapabilities
+ * @name Access to navigator.mediaCapabilities
+ * @kind problem
+ * @problem.severity warning
+ * @description Finds uses of navigator.mediaCapabilities
+ */
+
+// this file is autogenerated, see fingerprintApis.mjs
+
+import prebid
+from SourceNode prop, SourceNode api
+where
+  prop = windowPropertyRead("navigator") and
+  api = prop.getAPropertyRead("mediaCapabilities")
+select api, "mediaCapabilities is an indicator of fingerprinting, weighed 115.38 in https://raw.githubusercontent.com/duckduckgo/tracker-radar/refs/heads/main/build-data/generated/api_fingerprint_weights.json"