@debugbundle/shared-types 1.0.1 → 1.1.0

package/dist/request-failure-noise.js

@@ -0,0 +1,111 @@
+export function isLowValueExternalProbeRequestFailure404(input) {
+    if (input.responseStatus !== 404 || input.httpMethod.toUpperCase() !== "GET") {
+        return false;
+    }
+    const normalizedRoute = input.routeTemplate.toLowerCase().replace(/\/+$/, "") || "/";
+    const normalizedPath = normalizePath(input.requestPath ?? input.routeTemplate);
+    const routesToCheck = new Set([normalizedRoute, normalizedPath]);
+    for (const route of routesToCheck) {
+        if (isRouteOnlyExternalProbe(route)) {
+            return true;
+        }
+    }
+    return isDirectIpRequest(input.headers ?? null) && [...routesToCheck].some(isGenericDirectIpProbeRoute);
+}
+function normalizePath(path) {
+    const withoutQuery = path.split("?")[0] ?? path;
+    return withoutQuery.toLowerCase().replace(/\/+$/, "") || "/";
+}
+function isRouteOnlyExternalProbe(normalizedRoute) {
+    const exactRoutes = new Set([
+        "/.env",
+        "/__debug__/render_panel",
+        "/actuator",
+        "/autodiscover/autodiscover.json",
+        "/developmentserver/metadatauploader",
+        "/cpanel",
+        "/favicon.ico",
+        "/geoserver/web",
+        "/hnap1",
+        "/logon/logonpoint/index.html",
+        "/owa/auth/logon.aspx",
+        "/robots.txt",
+        "/rdweb/pages",
+        "/web",
+        "/webclient/login.xhtml",
+        "/webconsole",
+        "/webui",
+        "/whm",
+        "/wp-admin",
+        "/wp-login.php",
+        "/wsman",
+        "/xmlrpc.php"
+    ]);
+    if (exactRoutes.has(normalizedRoute)) {
+        return true;
+    }
+    return (normalizedRoute.includes("/.git/") ||
+        normalizedRoute.includes("/.svn/") ||
+        normalizedRoute.includes("/api_keys") ||
+        normalizedRoute.includes("/backup/api_keys") ||
+        normalizedRoute.includes("/phpmyadmin") ||
+        normalizedRoute.includes("/pma/") ||
+        normalizedRoute.includes("/vendor/phpunit/") ||
+        normalizedRoute.startsWith("/autodiscover/") ||
+        normalizedRoute.startsWith("/cgi-bin/") ||
+        normalizedRoute.startsWith("/ecp/") ||
+        normalizedRoute.endsWith("/.git/config") ||
+        normalizedRoute.endsWith("/composer.json") ||
+        normalizedRoute.endsWith("/composer.lock") ||
+        normalizedRoute.endsWith("/package-lock.json") ||
+        normalizedRoute.endsWith("/package.json") ||
+        normalizedRoute.endsWith("/server-status") ||
+        normalizedRoute.includes("wp-config") ||
+        normalizedRoute.startsWith("/owa/") ||
+        normalizedRoute.startsWith("/rdweb/") ||
+        normalizedRoute.startsWith("/vpn/") ||
+        normalizedRoute.startsWith("/wp-") ||
+        isSensitiveBackupFileProbe(normalizedRoute));
+}
+function isSensitiveBackupFileProbe(normalizedRoute) {
+    if (!/\.(?:bak|backup|dump|old|orig|save|sql|swp|tar|tar\.gz|zip)$/.test(normalizedRoute)) {
+        return false;
+    }
+    return /(?:^|\/|\.)(?:backup|config|database|db|dump|env|secret|site|www|wp-config)(?:\/|\.|_|-|$)/.test(normalizedRoute);
+}
+function isGenericDirectIpProbeRoute(normalizedRoute) {
+    return [
+        "/admin",
+        "/administrator",
+        "/login",
+        "/logincheck",
+        "/remote/logincheck"
+    ].includes(normalizedRoute);
+}
+function isDirectIpRequest(headers) {
+    if (headers === null) {
+        return false;
+    }
+    const host = readHeader(headers, "x-forwarded-host") ?? readHeader(headers, "host");
+    if (host === null) {
+        return false;
+    }
+    return isIpLikeHost(host);
+}
+function readHeader(headers, name) {
+    const direct = headers[name] ?? headers[name.toLowerCase()];
+    if (typeof direct === "string") {
+        return direct;
+    }
+    if (Array.isArray(direct) && typeof direct[0] === "string") {
+        return direct[0];
+    }
+    return null;
+}
+function isIpLikeHost(value) {
+    const host = value.trim().replace(/:\d+$/, "");
+    return (/^(?:\d{1,3}\.){3}\d{1,3}$/.test(host) ||
+        /^\[[0-9a-f:]+\]$/i.test(host) ||
+        (host.includes(":") && /^[0-9a-f:]+$/i.test(host)));
+}
+//# sourceMappingURL=request-failure-noise.js.map

package/dist/request-failure-noise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-failure-noise.js","sourceRoot":"","sources":["../src/request-failure-noise.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,wCAAwC,CAAC,KAMxD;IACC,IAAI,KAAK,CAAC,cAAc,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACrF,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;IAEjE,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,iBAAiB,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChD,OAAO,YAAY,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC/D,CAAC;AAED,SAAS,wBAAwB,CAAC,eAAuB;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;QAC1B,OAAO;QACP,yBAAyB;QACzB,WAAW;QACX,iCAAiC;QACjC,qCAAqC;QACrC,SAAS;QACT,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,8BAA8B;QAC9B,sBAAsB;QACtB,aAAa;QACb,cAAc;QACd,MAAM;QACN,wBAAwB;QACxB,aAAa;QACb,QAAQ;QACR,MAAM;QACN,WAAW;QACX,eAAe;QACf,QAAQ;QACR,aAAa;KACd,CAAC,CAAC;IAEH,IAAI,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC5C,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC;QACvC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;QACjC,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC5C,eAAe,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAC5C,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC;QACvC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC;QACnC,eAAe,CAAC,QAAQ,CAAC,cAAc,CAAC;QACxC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1C,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1C,eAAe,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC9C,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC;QACzC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1C,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC;QACnC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;QACrC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC;QACnC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC;QAClC,0BAA0B,CAAC,eAAe,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,eAAuB;IACzD,IAAI,CAAC,8DAA8D,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,4FAA4F,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,2BAA2B,CAAC,eAAuB;IAC1D,OAAO;QACL,QAAQ;QACR,gBAAgB;QAChB,QAAQ;QACR,aAAa;QACb,oBAAoB;KACrB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAuC;IAChE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,OAAgC,EAAE,IAAY;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,CACL,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@debugbundle/shared-types",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "private": false,
   "type": "module",
   "license": "AGPL-3.0-only",