18939101006

Committed 30 Oct 2025 11:27AM UTC coverage: 96.239%. Remained the same

Build # 18939101006

Build Type

push

github

Specific Base 2be939

Committed by

web-flow

Commit Message

CI: Complete codeQL fingerprinting rules (#14066)

* Core: Skip module bids during mediaType eligibility checks

Module bids do not have a `bidder` property. They should not be considered for mediaType checks.

This only works as-is for banner units because we default `supportedMediaTypes` to `['banner']'` for an `undefined` bidder.

Closes #14057

* add test case

* Improve codeql queries

* event tracking

* Extend and update codeQL rules for fingerprinting APIs

* Refactor to generate only data, not query logic

* rename rules

* coverage complete

* remove stray files

* cleanup & comments

* typo/whitespace

* update-codeql

---------

Co-authored-by: Graham Higgins <ghiggins@raptive.com>

Run Details

52639 of 64479 branches covered (81.64%)

201570 of 209448 relevant lines covered (96.24%)

124.72 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

83.33

/libraries/timeToFirstBytesUtils/timeToFirstBytesUtils.js

/**
 * Calculates the Time to First Byte (TTFB) for the given window object.
 *
 * This function attempts to use the Navigation Timing Level 2 API first, and falls back to
 * the Navigation Timing Level 1 API if the former is not available.
 *
 * @param {Window} win - The window object from which to retrieve performance timing information.
 * @returns {string} The TTFB in milliseconds as a string, or an empty string if the TTFB cannot be determined.
 */
export function getTimeToFirstByte(win) {
  const performance = win.performance || win.webkitPerformance || win.msPerformance || win.mozPerformance;

  const ttfbWithTimingV2 = performance &&
        typeof performance.getEntriesByType === 'function' &&
        Object.prototype.toString.call(performance.getEntriesByType) === '[object Function]' &&
        performance.getEntriesByType('navigation')[0] &&
        performance.getEntriesByType('navigation')[0].responseStart &&
        performance.getEntriesByType('navigation')[0].requestStart &&
        performance.getEntriesByType('navigation')[0].responseStart > 0 &&
        performance.getEntriesByType('navigation')[0].requestStart > 0 &&
        Math.round(
          performance.getEntriesByType('navigation')[0].responseStart - performance.getEntriesByType('navigation')[0].requestStart
        );

  if (ttfbWithTimingV2) {
    return ttfbWithTimingV2.toString();
  }

  const ttfbWithTimingV1 = performance &&
        performance.timing.responseStart &&
        performance.timing.requestStart &&
        performance.timing.responseStart > 0 &&
        performance.timing.requestStart > 0 &&
        performance.timing.responseStart - performance.timing.requestStart;

  return ttfbWithTimingV1 ? ttfbWithTimingV1.toString() : '';
}

1	/**
2	* Calculates the Time to First Byte (TTFB) for the given window object.
3	*
4	* This function attempts to use the Navigation Timing Level 2 API first, and falls back to
5	* the Navigation Timing Level 1 API if the former is not available.
6	*
7	* @param {Window} win - The window object from which to retrieve performance timing information.
8	* @returns {string} The TTFB in milliseconds as a string, or an empty string if the TTFB cannot be determined.
9	*/
10	export function getTimeToFirstByte(win) {
11	const performance = win.performance \|\| win.webkitPerformance \|\| win.msPerformance \|\| win.mozPerformance;	66!
12
13	const ttfbWithTimingV2 = performance &&	66!
14	typeof performance.getEntriesByType === 'function' &&
15	Object.prototype.toString.call(performance.getEntriesByType) === '[object Function]' &&
16	performance.getEntriesByType('navigation')[0] &&
17	performance.getEntriesByType('navigation')[0].responseStart &&
18	performance.getEntriesByType('navigation')[0].requestStart &&
19	performance.getEntriesByType('navigation')[0].responseStart > 0 &&
20	performance.getEntriesByType('navigation')[0].requestStart > 0 &&
21	Math.round(
22	performance.getEntriesByType('navigation')[0].responseStart - performance.getEntriesByType('navigation')[0].requestStart
23	);
24
25	if (ttfbWithTimingV2) {	66!
26	return ttfbWithTimingV2.toString();	×
27	}
28
29	const ttfbWithTimingV1 = performance &&	66✔
30	performance.timing.responseStart &&
31	performance.timing.requestStart &&
32	performance.timing.responseStart > 0 &&
33	performance.timing.requestStart > 0 &&
34	performance.timing.responseStart - performance.timing.requestStart;
35
36	return ttfbWithTimingV1 ? ttfbWithTimingV1.toString() : '';	66!
37	}

prebid / Prebid.js / 18939101006

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous