@metamask-previews/phishing-controller 12.0.2-preview-367cb1da → 12.0.2-preview-cf09c0a

package/dist/PhishingDetector.cjs

@@ -0,0 +1,233 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _PhishingDetector_instances, _PhishingDetector_configs, _PhishingDetector_legacyConfig, _PhishingDetector_check;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PhishingDetector = void 0;
+const fastest_levenshtein_1 = require("fastest-levenshtein");
+const types_1 = require("./types.cjs");
+const utils_1 = require("./utils.cjs");
+class PhishingDetector {
+    /**
+     * Construct a phishing detector, which can check whether origins are known
+     * to be malicious or similar to common phishing targets.
+     *
+     * A list of configurations is accepted. Each origin checked is processed
+     * using each configuration in sequence, so the order defines which
+     * configurations take precedence.
+     *
+     * @param opts - Phishing detection options
+     */
+    constructor(opts) {
+        _PhishingDetector_instances.add(this);
+        _PhishingDetector_configs.set(this, void 0);
+        _PhishingDetector_legacyConfig.set(this, void 0);
+        // recommended configuration
+        if (Array.isArray(opts)) {
+            __classPrivateFieldSet(this, _PhishingDetector_configs, (0, utils_1.processConfigs)(opts), "f");
+            __classPrivateFieldSet(this, _PhishingDetector_legacyConfig, false, "f");
+            // legacy configuration
+        }
+        else {
+            __classPrivateFieldSet(this, _PhishingDetector_configs, [
+                (0, utils_1.getDefaultPhishingDetectorConfig)({
+                    allowlist: opts.whitelist,
+                    blocklist: opts.blacklist,
+                    c2DomainBlocklist: opts.c2DomainBlocklist,
+                    fuzzylist: opts.fuzzylist,
+                    tolerance: opts.tolerance,
+                }),
+            ], "f");
+            __classPrivateFieldSet(this, _PhishingDetector_legacyConfig, true, "f");
+        }
+    }
+    /**
+     * Check if a url is known to be malicious or similar to a common phishing
+     * target. This will check the hostname and IPFS CID that is sometimes
+     * located in the path.
+     *
+     * @param url - The url to check.
+     * @returns The result of the check.
+     */
+    check(url) {
+        const result = __classPrivateFieldGet(this, _PhishingDetector_instances, "m", _PhishingDetector_check).call(this, url);
+        if (__classPrivateFieldGet(this, _PhishingDetector_legacyConfig, "f")) {
+            let legacyType = result.type;
+            if (legacyType === types_1.PhishingDetectorResultType.Allowlist) {
+                legacyType = types_1.PhishingDetectorResultType.Whitelist;
+            }
+            else if (legacyType === types_1.PhishingDetectorResultType.Blocklist) {
+                legacyType = types_1.PhishingDetectorResultType.Blacklist;
+            }
+            return {
+                match: result.match,
+                result: result.result,
+                type: legacyType,
+            };
+        }
+        return result;
+    }
+    /**
+     * Checks if a URL is blocked against the hashed request blocklist.
+     * This is done by hashing the URL's hostname and checking it against the hashed request blocklist.
+     *
+     *
+     * @param urlString - The URL to check.
+     * @returns An object indicating if the URL is blocked and relevant metadata.
+     */
+    isMaliciousC2Domain(urlString) {
+        let hostname;
+        try {
+            hostname = new URL(urlString).hostname;
+        }
+        catch (error) {
+            return {
+                result: false,
+                type: types_1.PhishingDetectorResultType.C2DomainBlocklist,
+            };
+        }
+        const fqdn = hostname.endsWith('.') ? hostname.slice(0, -1) : hostname;
+        const source = (0, utils_1.domainToParts)(fqdn);
+        for (const { allowlist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+            // if source matches allowlist hostname (or subdomain thereof), PASS
+            const allowlistMatch = (0, utils_1.matchPartsAgainstList)(source, allowlist);
+            if (allowlistMatch) {
+                const match = (0, utils_1.domainPartsToDomain)(allowlistMatch);
+                return {
+                    match,
+                    name,
+                    result: false,
+                    type: types_1.PhishingDetectorResultType.Allowlist,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+        for (const { c2DomainBlocklist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+            const hash = (0, utils_1.sha256Hash)(hostname.toLowerCase());
+            const blocked = c2DomainBlocklist?.includes(hash) ?? false;
+            if (blocked) {
+                return {
+                    name,
+                    result: true,
+                    type: types_1.PhishingDetectorResultType.C2DomainBlocklist,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+        // did not match, PASS
+        return {
+            result: false,
+            type: types_1.PhishingDetectorResultType.C2DomainBlocklist,
+        };
+    }
+}
+exports.PhishingDetector = PhishingDetector;
+_PhishingDetector_configs = new WeakMap(), _PhishingDetector_legacyConfig = new WeakMap(), _PhishingDetector_instances = new WeakSet(), _PhishingDetector_check = function _PhishingDetector_check(url) {
+    const ipfsCidMatch = url.match(ipfsCidRegex());
+    // Check for IPFS CID related blocklist entries
+    if (ipfsCidMatch !== null) {
+        // there is a cID string somewhere
+        // Determine if any of the entries are ipfs cids
+        // Depending on the gateway, the CID is in the path OR a subdomain, so we do a regex match on it all
+        const cID = ipfsCidMatch[0];
+        for (const { blocklist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+            const blocklistMatch = blocklist
+                .filter((entries) => entries.length === 1)
+                .find((entries) => {
+                return entries[0] === cID;
+            });
+            if (blocklistMatch) {
+                return {
+                    name,
+                    match: cID,
+                    result: true,
+                    type: types_1.PhishingDetectorResultType.Blocklist,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+    }
+    let domain;
+    try {
+        domain = new URL(url).hostname;
+    }
+    catch (error) {
+        return {
+            result: false,
+            type: types_1.PhishingDetectorResultType.All,
+        };
+    }
+    const fqdn = domain.endsWith('.') ? domain.slice(0, -1) : domain;
+    const source = (0, utils_1.domainToParts)(fqdn);
+    for (const { allowlist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+        // if source matches allowlist hostname (or subdomain thereof), PASS
+        const allowlistMatch = (0, utils_1.matchPartsAgainstList)(source, allowlist);
+        if (allowlistMatch) {
+            const match = (0, utils_1.domainPartsToDomain)(allowlistMatch);
+            return {
+                match,
+                name,
+                result: false,
+                type: types_1.PhishingDetectorResultType.Allowlist,
+                version: version === undefined ? version : String(version),
+            };
+        }
+    }
+    for (const { blocklist, fuzzylist, name, tolerance, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+        // if source matches blocklist hostname (or subdomain thereof), FAIL
+        const blocklistMatch = (0, utils_1.matchPartsAgainstList)(source, blocklist);
+        if (blocklistMatch) {
+            const match = (0, utils_1.domainPartsToDomain)(blocklistMatch);
+            return {
+                match,
+                name,
+                result: true,
+                type: types_1.PhishingDetectorResultType.Blocklist,
+                version: version === undefined ? version : String(version),
+            };
+        }
+        if (tolerance > 0) {
+            // check if near-match of whitelist domain, FAIL
+            let fuzzyForm = (0, utils_1.domainPartsToFuzzyForm)(source);
+            // strip www
+            fuzzyForm = fuzzyForm.replace(/^www\./u, '');
+            // check against fuzzylist
+            const levenshteinMatched = fuzzylist.find((targetParts) => {
+                const fuzzyTarget = (0, utils_1.domainPartsToFuzzyForm)(targetParts);
+                const dist = (0, fastest_levenshtein_1.distance)(fuzzyForm, fuzzyTarget);
+                return dist <= tolerance;
+            });
+            if (levenshteinMatched) {
+                const match = (0, utils_1.domainPartsToDomain)(levenshteinMatched);
+                return {
+                    name,
+                    match,
+                    result: true,
+                    type: types_1.PhishingDetectorResultType.Fuzzy,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+    }
+    // matched nothing, PASS
+    return { result: false, type: types_1.PhishingDetectorResultType.All };
+};
+/**
+ * Runs a regex match to determine if a string is a IPFS CID
+ * @returns Regex string for IPFS CID
+ */
+function ipfsCidRegex() {
+    // regex from https://stackoverflow.com/a/67176726
+    const reg = 'Qm[1-9A-HJ-NP-Za-km-z]{44,}|b[A-Za-z2-7]{58,}|B[A-Z2-7]{58,}|z[1-9A-HJ-NP-Za-km-z]{48,}|F[0-9A-F]{50,}';
+    return new RegExp(reg, 'u');
+}
+//# sourceMappingURL=PhishingDetector.cjs.map

package/dist/PhishingDetector.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhishingDetector.cjs","sourceRoot":"","sources":["../src/PhishingDetector.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAA+C;AAE/C,uCAGiB;AACjB,uCAQiB;AAyCjB,MAAa,gBAAgB;IAK3B;;;;;;;;;OASG;IACH,YAAY,IAA6B;;QAdzC,4CAA0C;QAE1C,iDAAuB;QAarB,4BAA4B;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACvB,uBAAA,IAAI,6BAAY,IAAA,sBAAc,EAAC,IAAI,CAAC,MAAA,CAAC;YACrC,uBAAA,IAAI,kCAAiB,KAAK,MAAA,CAAC;YAC3B,uBAAuB;SACxB;aAAM;YACL,uBAAA,IAAI,6BAAY;gBACd,IAAA,wCAAgC,EAAC;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;aACH,MAAA,CAAC;YACF,uBAAA,IAAI,kCAAiB,IAAI,MAAA,CAAC;SAC3B;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAW;QACf,MAAM,MAAM,GAAG,uBAAA,IAAI,4DAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,CAAC;QAEhC,IAAI,uBAAA,IAAI,sCAAc,EAAE;YACtB,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,UAAU,KAAK,kCAA0B,CAAC,SAAS,EAAE;gBACvD,UAAU,GAAG,kCAA0B,CAAC,SAAS,CAAC;aACnD;iBAAM,IAAI,UAAU,KAAK,kCAA0B,CAAC,SAAS,EAAE;gBAC9D,UAAU,GAAG,kCAA0B,CAAC,SAAS,CAAC;aACnD;YACD,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,UAAU;aACjB,CAAC;SACH;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAqGD;;;;;;;OAOG;IACH,mBAAmB,CAAC,SAAiB;QACnC,IAAI,QAAQ,CAAC;QACb,IAAI;YACF,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;SACxC;QAAC,OAAO,KAAK,EAAE;YACd,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,kCAA0B,CAAC,iBAAiB;aACnD,CAAC;SACH;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEvE,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;QAEnC,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;YACxD,oEAAoE;YACpE,MAAM,cAAc,GAAG,IAAA,6BAAqB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,cAAc,EAAE;gBAClB,MAAM,KAAK,GAAG,IAAA,2BAAmB,EAAC,cAAc,CAAC,CAAC;gBAClD,OAAO;oBACL,KAAK;oBACL,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kCAA0B,CAAC,SAAS;oBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;QAED,KAAK,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;YAChE,MAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAE3D,IAAI,OAAO,EAAE;gBACX,OAAO;oBACL,IAAI;oBACJ,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,kCAA0B,CAAC,iBAAiB;oBAClD,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;QACD,sBAAsB;QACtB,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kCAA0B,CAAC,iBAAiB;SACnD,CAAC;IACJ,CAAC;CACF;AA1ND,4CA0NC;mMA5JQ,GAAW;IAChB,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAE/C,+CAA+C;IAC/C,IAAI,YAAY,KAAK,IAAI,EAAE;QACzB,kCAAkC;QAClC,gDAAgD;QAChD,oGAAoG;QACpG,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;YACxD,MAAM,cAAc,GAAG,SAAS;iBAC7B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;iBACzC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBAChB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAC5B,CAAC,CAAC,CAAC;YACL,IAAI,cAAc,EAAE;gBAClB,OAAO;oBACL,IAAI;oBACJ,KAAK,EAAE,GAAG;oBACV,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,kCAA0B,CAAC,SAAS;oBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;KACF;IAED,IAAI,MAAM,CAAC;IACX,IAAI;QACF,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;KAChC;IAAC,OAAO,KAAK,EAAE;QACd,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kCAA0B,CAAC,GAAG;SACrC,CAAC;KACH;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEjE,MAAM,MAAM,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;IAEnC,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;QACxD,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAA,6BAAqB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE;YAClB,MAAM,KAAK,GAAG,IAAA,2BAAmB,EAAC,cAAc,CAAC,CAAC;YAClD,OAAO;gBACL,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,kCAA0B,CAAC,SAAS;gBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC3D,CAAC;SACH;KACF;IAED,KAAK,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAC1D,EAAE;QACX,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAA,6BAAqB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE;YAClB,MAAM,KAAK,GAAG,IAAA,2BAAmB,EAAC,cAAc,CAAC,CAAC;YAClD,OAAO;gBACL,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,kCAA0B,CAAC,SAAS;gBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC3D,CAAC;SACH;QAED,IAAI,SAAS,GAAG,CAAC,EAAE;YACjB,gDAAgD;YAChD,IAAI,SAAS,GAAG,IAAA,8BAAsB,EAAC,MAAM,CAAC,CAAC;YAC/C,YAAY;YACZ,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC7C,0BAA0B;YAC1B,MAAM,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBACxD,MAAM,WAAW,GAAG,IAAA,8BAAsB,EAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,IAAA,8BAAQ,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC9C,OAAO,IAAI,IAAI,SAAS,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,kBAAkB,EAAE;gBACtB,MAAM,KAAK,GAAG,IAAA,2BAAmB,EAAC,kBAAkB,CAAC,CAAC;gBACtD,OAAO;oBACL,IAAI;oBACJ,KAAK;oBACL,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,kCAA0B,CAAC,KAAK;oBACtC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;KACF;IAED,wBAAwB;IACxB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kCAA0B,CAAC,GAAG,EAAE,CAAC;AACjE,CAAC;AA6DH;;;GAGG;AACH,SAAS,YAAY;IACnB,kDAAkD;IAClD,MAAM,GAAG,GACP,wGAAwG,CAAC;IAC3G,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { distance } from 'fastest-levenshtein';\n\nimport {\n  PhishingDetectorResultType,\n  type PhishingDetectorResult,\n} from './types';\nimport {\n  domainPartsToDomain,\n  domainPartsToFuzzyForm,\n  domainToParts,\n  getDefaultPhishingDetectorConfig,\n  matchPartsAgainstList,\n  processConfigs,\n  sha256Hash,\n} from './utils';\n\nexport type LegacyPhishingDetectorList = {\n  whitelist?: string[];\n  blacklist?: string[];\n  c2DomainBlocklist?: string[];\n} & FuzzyTolerance;\n\nexport type PhishingDetectorList = {\n  allowlist?: string[];\n  blocklist?: string[];\n  c2DomainBlocklist?: string[];\n  name?: string;\n  version?: string | number;\n  tolerance?: number;\n} & FuzzyTolerance;\n\nexport type FuzzyTolerance =\n  | {\n      tolerance?: number;\n      fuzzylist: string[];\n    }\n  | {\n      tolerance?: never;\n      fuzzylist?: never;\n    };\n\nexport type PhishingDetectorOptions =\n  | LegacyPhishingDetectorList\n  | PhishingDetectorList[];\n\nexport type PhishingDetectorConfiguration = {\n  name?: string;\n  version?: number | string;\n  allowlist: string[][];\n  blocklist: string[][];\n  c2DomainBlocklist?: string[];\n  fuzzylist: string[][];\n  tolerance: number;\n};\n\nexport class PhishingDetector {\n  #configs: PhishingDetectorConfiguration[];\n\n  #legacyConfig: boolean;\n\n  /**\n   * Construct a phishing detector, which can check whether origins are known\n   * to be malicious or similar to common phishing targets.\n   *\n   * A list of configurations is accepted. Each origin checked is processed\n   * using each configuration in sequence, so the order defines which\n   * configurations take precedence.\n   *\n   * @param opts - Phishing detection options\n   */\n  constructor(opts: PhishingDetectorOptions) {\n    // recommended configuration\n    if (Array.isArray(opts)) {\n      this.#configs = processConfigs(opts);\n      this.#legacyConfig = false;\n      // legacy configuration\n    } else {\n      this.#configs = [\n        getDefaultPhishingDetectorConfig({\n          allowlist: opts.whitelist,\n          blocklist: opts.blacklist,\n          c2DomainBlocklist: opts.c2DomainBlocklist,\n          fuzzylist: opts.fuzzylist,\n          tolerance: opts.tolerance,\n        }),\n      ];\n      this.#legacyConfig = true;\n    }\n  }\n\n  /**\n   * Check if a url is known to be malicious or similar to a common phishing\n   * target. This will check the hostname and IPFS CID that is sometimes\n   * located in the path.\n   *\n   * @param url - The url to check.\n   * @returns The result of the check.\n   */\n  check(url: string): PhishingDetectorResult {\n    const result = this.#check(url);\n\n    if (this.#legacyConfig) {\n      let legacyType = result.type;\n      if (legacyType === PhishingDetectorResultType.Allowlist) {\n        legacyType = PhishingDetectorResultType.Whitelist;\n      } else if (legacyType === PhishingDetectorResultType.Blocklist) {\n        legacyType = PhishingDetectorResultType.Blacklist;\n      }\n      return {\n        match: result.match,\n        result: result.result,\n        type: legacyType,\n      };\n    }\n    return result;\n  }\n\n  #check(url: string): PhishingDetectorResult {\n    const ipfsCidMatch = url.match(ipfsCidRegex());\n\n    // Check for IPFS CID related blocklist entries\n    if (ipfsCidMatch !== null) {\n      // there is a cID string somewhere\n      // Determine if any of the entries are ipfs cids\n      // Depending on the gateway, the CID is in the path OR a subdomain, so we do a regex match on it all\n      const cID = ipfsCidMatch[0];\n      for (const { blocklist, name, version } of this.#configs) {\n        const blocklistMatch = blocklist\n          .filter((entries) => entries.length === 1)\n          .find((entries) => {\n            return entries[0] === cID;\n          });\n        if (blocklistMatch) {\n          return {\n            name,\n            match: cID,\n            result: true,\n            type: PhishingDetectorResultType.Blocklist,\n            version: version === undefined ? version : String(version),\n          };\n        }\n      }\n    }\n\n    let domain;\n    try {\n      domain = new URL(url).hostname;\n    } catch (error) {\n      return {\n        result: false,\n        type: PhishingDetectorResultType.All,\n      };\n    }\n\n    const fqdn = domain.endsWith('.') ? domain.slice(0, -1) : domain;\n\n    const source = domainToParts(fqdn);\n\n    for (const { allowlist, name, version } of this.#configs) {\n      // if source matches allowlist hostname (or subdomain thereof), PASS\n      const allowlistMatch = matchPartsAgainstList(source, allowlist);\n      if (allowlistMatch) {\n        const match = domainPartsToDomain(allowlistMatch);\n        return {\n          match,\n          name,\n          result: false,\n          type: PhishingDetectorResultType.Allowlist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n    }\n\n    for (const { blocklist, fuzzylist, name, tolerance, version } of this\n      .#configs) {\n      // if source matches blocklist hostname (or subdomain thereof), FAIL\n      const blocklistMatch = matchPartsAgainstList(source, blocklist);\n      if (blocklistMatch) {\n        const match = domainPartsToDomain(blocklistMatch);\n        return {\n          match,\n          name,\n          result: true,\n          type: PhishingDetectorResultType.Blocklist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n\n      if (tolerance > 0) {\n        // check if near-match of whitelist domain, FAIL\n        let fuzzyForm = domainPartsToFuzzyForm(source);\n        // strip www\n        fuzzyForm = fuzzyForm.replace(/^www\\./u, '');\n        // check against fuzzylist\n        const levenshteinMatched = fuzzylist.find((targetParts) => {\n          const fuzzyTarget = domainPartsToFuzzyForm(targetParts);\n          const dist = distance(fuzzyForm, fuzzyTarget);\n          return dist <= tolerance;\n        });\n        if (levenshteinMatched) {\n          const match = domainPartsToDomain(levenshteinMatched);\n          return {\n            name,\n            match,\n            result: true,\n            type: PhishingDetectorResultType.Fuzzy,\n            version: version === undefined ? version : String(version),\n          };\n        }\n      }\n    }\n\n    // matched nothing, PASS\n    return { result: false, type: PhishingDetectorResultType.All };\n  }\n\n  /**\n   * Checks if a URL is blocked against the hashed request blocklist.\n   * This is done by hashing the URL's hostname and checking it against the hashed request blocklist.\n   *\n   *\n   * @param urlString - The URL to check.\n   * @returns An object indicating if the URL is blocked and relevant metadata.\n   */\n  isMaliciousC2Domain(urlString: string): PhishingDetectorResult {\n    let hostname;\n    try {\n      hostname = new URL(urlString).hostname;\n    } catch (error) {\n      return {\n        result: false,\n        type: PhishingDetectorResultType.C2DomainBlocklist,\n      };\n    }\n\n    const fqdn = hostname.endsWith('.') ? hostname.slice(0, -1) : hostname;\n\n    const source = domainToParts(fqdn);\n\n    for (const { allowlist, name, version } of this.#configs) {\n      // if source matches allowlist hostname (or subdomain thereof), PASS\n      const allowlistMatch = matchPartsAgainstList(source, allowlist);\n      if (allowlistMatch) {\n        const match = domainPartsToDomain(allowlistMatch);\n        return {\n          match,\n          name,\n          result: false,\n          type: PhishingDetectorResultType.Allowlist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n    }\n\n    for (const { c2DomainBlocklist, name, version } of this.#configs) {\n      const hash = sha256Hash(hostname.toLowerCase());\n      const blocked = c2DomainBlocklist?.includes(hash) ?? false;\n\n      if (blocked) {\n        return {\n          name,\n          result: true,\n          type: PhishingDetectorResultType.C2DomainBlocklist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n    }\n    // did not match, PASS\n    return {\n      result: false,\n      type: PhishingDetectorResultType.C2DomainBlocklist,\n    };\n  }\n}\n\n/**\n * Runs a regex match to determine if a string is a IPFS CID\n * @returns Regex string for IPFS CID\n */\nfunction ipfsCidRegex() {\n  // regex from https://stackoverflow.com/a/67176726\n  const reg =\n    'Qm[1-9A-HJ-NP-Za-km-z]{44,}|b[A-Za-z2-7]{58,}|B[A-Z2-7]{58,}|z[1-9A-HJ-NP-Za-km-z]{48,}|F[0-9A-F]{50,}';\n  return new RegExp(reg, 'u');\n}\n"]}

package/dist/{types/PhishingDetector.d.ts → PhishingDetector.d.cts}

@@ -1,4 +1,4 @@
-import { type PhishingDetectorResult } from './types';
+import { type PhishingDetectorResult } from "./types.cjs";
 export type LegacyPhishingDetectorList = {
     whitelist?: string[];
     blacklist?: string[];
@@ -61,4 +61,4 @@ export declare class PhishingDetector {
      */
     isMaliciousC2Domain(urlString: string): PhishingDetectorResult;
 }
-//# sourceMappingURL=PhishingDetector.d.ts.map
+//# sourceMappingURL=PhishingDetector.d.cts.map

package/dist/PhishingDetector.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhishingDetector.d.cts","sourceRoot":"","sources":["../src/PhishingDetector.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,oBAAgB;AAWjB,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,GAAG,cAAc,CAAC;AAEnB,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,cAAc,CAAC;AAEnB,MAAM,MAAM,cAAc,GACtB;IACE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,GACD;IACE,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B,0BAA0B,GAC1B,oBAAoB,EAAE,CAAC;AAE3B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,gBAAgB;;IAK3B;;;;;;;;;OASG;gBACS,IAAI,EAAE,uBAAuB;IAoBzC;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB;IAsH1C;;;;;;;OAOG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB;CAiD/D"}

package/dist/PhishingDetector.d.mts

@@ -0,0 +1,64 @@
+import { type PhishingDetectorResult } from "./types.mjs";
+export type LegacyPhishingDetectorList = {
+    whitelist?: string[];
+    blacklist?: string[];
+    c2DomainBlocklist?: string[];
+} & FuzzyTolerance;
+export type PhishingDetectorList = {
+    allowlist?: string[];
+    blocklist?: string[];
+    c2DomainBlocklist?: string[];
+    name?: string;
+    version?: string | number;
+    tolerance?: number;
+} & FuzzyTolerance;
+export type FuzzyTolerance = {
+    tolerance?: number;
+    fuzzylist: string[];
+} | {
+    tolerance?: never;
+    fuzzylist?: never;
+};
+export type PhishingDetectorOptions = LegacyPhishingDetectorList | PhishingDetectorList[];
+export type PhishingDetectorConfiguration = {
+    name?: string;
+    version?: number | string;
+    allowlist: string[][];
+    blocklist: string[][];
+    c2DomainBlocklist?: string[];
+    fuzzylist: string[][];
+    tolerance: number;
+};
+export declare class PhishingDetector {
+    #private;
+    /**
+     * Construct a phishing detector, which can check whether origins are known
+     * to be malicious or similar to common phishing targets.
+     *
+     * A list of configurations is accepted. Each origin checked is processed
+     * using each configuration in sequence, so the order defines which
+     * configurations take precedence.
+     *
+     * @param opts - Phishing detection options
+     */
+    constructor(opts: PhishingDetectorOptions);
+    /**
+     * Check if a url is known to be malicious or similar to a common phishing
+     * target. This will check the hostname and IPFS CID that is sometimes
+     * located in the path.
+     *
+     * @param url - The url to check.
+     * @returns The result of the check.
+     */
+    check(url: string): PhishingDetectorResult;
+    /**
+     * Checks if a URL is blocked against the hashed request blocklist.
+     * This is done by hashing the URL's hostname and checking it against the hashed request blocklist.
+     *
+     *
+     * @param urlString - The URL to check.
+     * @returns An object indicating if the URL is blocked and relevant metadata.
+     */
+    isMaliciousC2Domain(urlString: string): PhishingDetectorResult;
+}
+//# sourceMappingURL=PhishingDetector.d.mts.map

package/dist/PhishingDetector.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhishingDetector.d.mts","sourceRoot":"","sources":["../src/PhishingDetector.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,oBAAgB;AAWjB,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,GAAG,cAAc,CAAC;AAEnB,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,cAAc,CAAC;AAEnB,MAAM,MAAM,cAAc,GACtB;IACE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,GACD;IACE,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAC/B,0BAA0B,GAC1B,oBAAoB,EAAE,CAAC;AAE3B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qBAAa,gBAAgB;;IAK3B;;;;;;;;;OASG;gBACS,IAAI,EAAE,uBAAuB;IAoBzC;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB;IAsH1C;;;;;;;OAOG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB;CAiD/D"}

package/dist/PhishingDetector.mjs

@@ -1,9 +1,229 @@
-import {
-  PhishingDetector
-} from "./chunk-I3U4U3MW.mjs";
-import "./chunk-G2RL74NS.mjs";
-import "./chunk-XUI43LEZ.mjs";
-export {
-  PhishingDetector
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
 };
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _PhishingDetector_instances, _PhishingDetector_configs, _PhishingDetector_legacyConfig, _PhishingDetector_check;
+import { distance } from "fastest-levenshtein";
+import { PhishingDetectorResultType } from "./types.mjs";
+import { domainPartsToDomain, domainPartsToFuzzyForm, domainToParts, getDefaultPhishingDetectorConfig, matchPartsAgainstList, processConfigs, sha256Hash } from "./utils.mjs";
+export class PhishingDetector {
+    /**
+     * Construct a phishing detector, which can check whether origins are known
+     * to be malicious or similar to common phishing targets.
+     *
+     * A list of configurations is accepted. Each origin checked is processed
+     * using each configuration in sequence, so the order defines which
+     * configurations take precedence.
+     *
+     * @param opts - Phishing detection options
+     */
+    constructor(opts) {
+        _PhishingDetector_instances.add(this);
+        _PhishingDetector_configs.set(this, void 0);
+        _PhishingDetector_legacyConfig.set(this, void 0);
+        // recommended configuration
+        if (Array.isArray(opts)) {
+            __classPrivateFieldSet(this, _PhishingDetector_configs, processConfigs(opts), "f");
+            __classPrivateFieldSet(this, _PhishingDetector_legacyConfig, false, "f");
+            // legacy configuration
+        }
+        else {
+            __classPrivateFieldSet(this, _PhishingDetector_configs, [
+                getDefaultPhishingDetectorConfig({
+                    allowlist: opts.whitelist,
+                    blocklist: opts.blacklist,
+                    c2DomainBlocklist: opts.c2DomainBlocklist,
+                    fuzzylist: opts.fuzzylist,
+                    tolerance: opts.tolerance,
+                }),
+            ], "f");
+            __classPrivateFieldSet(this, _PhishingDetector_legacyConfig, true, "f");
+        }
+    }
+    /**
+     * Check if a url is known to be malicious or similar to a common phishing
+     * target. This will check the hostname and IPFS CID that is sometimes
+     * located in the path.
+     *
+     * @param url - The url to check.
+     * @returns The result of the check.
+     */
+    check(url) {
+        const result = __classPrivateFieldGet(this, _PhishingDetector_instances, "m", _PhishingDetector_check).call(this, url);
+        if (__classPrivateFieldGet(this, _PhishingDetector_legacyConfig, "f")) {
+            let legacyType = result.type;
+            if (legacyType === PhishingDetectorResultType.Allowlist) {
+                legacyType = PhishingDetectorResultType.Whitelist;
+            }
+            else if (legacyType === PhishingDetectorResultType.Blocklist) {
+                legacyType = PhishingDetectorResultType.Blacklist;
+            }
+            return {
+                match: result.match,
+                result: result.result,
+                type: legacyType,
+            };
+        }
+        return result;
+    }
+    /**
+     * Checks if a URL is blocked against the hashed request blocklist.
+     * This is done by hashing the URL's hostname and checking it against the hashed request blocklist.
+     *
+     *
+     * @param urlString - The URL to check.
+     * @returns An object indicating if the URL is blocked and relevant metadata.
+     */
+    isMaliciousC2Domain(urlString) {
+        let hostname;
+        try {
+            hostname = new URL(urlString).hostname;
+        }
+        catch (error) {
+            return {
+                result: false,
+                type: PhishingDetectorResultType.C2DomainBlocklist,
+            };
+        }
+        const fqdn = hostname.endsWith('.') ? hostname.slice(0, -1) : hostname;
+        const source = domainToParts(fqdn);
+        for (const { allowlist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+            // if source matches allowlist hostname (or subdomain thereof), PASS
+            const allowlistMatch = matchPartsAgainstList(source, allowlist);
+            if (allowlistMatch) {
+                const match = domainPartsToDomain(allowlistMatch);
+                return {
+                    match,
+                    name,
+                    result: false,
+                    type: PhishingDetectorResultType.Allowlist,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+        for (const { c2DomainBlocklist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+            const hash = sha256Hash(hostname.toLowerCase());
+            const blocked = c2DomainBlocklist?.includes(hash) ?? false;
+            if (blocked) {
+                return {
+                    name,
+                    result: true,
+                    type: PhishingDetectorResultType.C2DomainBlocklist,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+        // did not match, PASS
+        return {
+            result: false,
+            type: PhishingDetectorResultType.C2DomainBlocklist,
+        };
+    }
+}
+_PhishingDetector_configs = new WeakMap(), _PhishingDetector_legacyConfig = new WeakMap(), _PhishingDetector_instances = new WeakSet(), _PhishingDetector_check = function _PhishingDetector_check(url) {
+    const ipfsCidMatch = url.match(ipfsCidRegex());
+    // Check for IPFS CID related blocklist entries
+    if (ipfsCidMatch !== null) {
+        // there is a cID string somewhere
+        // Determine if any of the entries are ipfs cids
+        // Depending on the gateway, the CID is in the path OR a subdomain, so we do a regex match on it all
+        const cID = ipfsCidMatch[0];
+        for (const { blocklist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+            const blocklistMatch = blocklist
+                .filter((entries) => entries.length === 1)
+                .find((entries) => {
+                return entries[0] === cID;
+            });
+            if (blocklistMatch) {
+                return {
+                    name,
+                    match: cID,
+                    result: true,
+                    type: PhishingDetectorResultType.Blocklist,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+    }
+    let domain;
+    try {
+        domain = new URL(url).hostname;
+    }
+    catch (error) {
+        return {
+            result: false,
+            type: PhishingDetectorResultType.All,
+        };
+    }
+    const fqdn = domain.endsWith('.') ? domain.slice(0, -1) : domain;
+    const source = domainToParts(fqdn);
+    for (const { allowlist, name, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+        // if source matches allowlist hostname (or subdomain thereof), PASS
+        const allowlistMatch = matchPartsAgainstList(source, allowlist);
+        if (allowlistMatch) {
+            const match = domainPartsToDomain(allowlistMatch);
+            return {
+                match,
+                name,
+                result: false,
+                type: PhishingDetectorResultType.Allowlist,
+                version: version === undefined ? version : String(version),
+            };
+        }
+    }
+    for (const { blocklist, fuzzylist, name, tolerance, version } of __classPrivateFieldGet(this, _PhishingDetector_configs, "f")) {
+        // if source matches blocklist hostname (or subdomain thereof), FAIL
+        const blocklistMatch = matchPartsAgainstList(source, blocklist);
+        if (blocklistMatch) {
+            const match = domainPartsToDomain(blocklistMatch);
+            return {
+                match,
+                name,
+                result: true,
+                type: PhishingDetectorResultType.Blocklist,
+                version: version === undefined ? version : String(version),
+            };
+        }
+        if (tolerance > 0) {
+            // check if near-match of whitelist domain, FAIL
+            let fuzzyForm = domainPartsToFuzzyForm(source);
+            // strip www
+            fuzzyForm = fuzzyForm.replace(/^www\./u, '');
+            // check against fuzzylist
+            const levenshteinMatched = fuzzylist.find((targetParts) => {
+                const fuzzyTarget = domainPartsToFuzzyForm(targetParts);
+                const dist = distance(fuzzyForm, fuzzyTarget);
+                return dist <= tolerance;
+            });
+            if (levenshteinMatched) {
+                const match = domainPartsToDomain(levenshteinMatched);
+                return {
+                    name,
+                    match,
+                    result: true,
+                    type: PhishingDetectorResultType.Fuzzy,
+                    version: version === undefined ? version : String(version),
+                };
+            }
+        }
+    }
+    // matched nothing, PASS
+    return { result: false, type: PhishingDetectorResultType.All };
+};
+/**
+ * Runs a regex match to determine if a string is a IPFS CID
+ * @returns Regex string for IPFS CID
+ */
+function ipfsCidRegex() {
+    // regex from https://stackoverflow.com/a/67176726
+    const reg = 'Qm[1-9A-HJ-NP-Za-km-z]{44,}|b[A-Za-z2-7]{58,}|B[A-Z2-7]{58,}|z[1-9A-HJ-NP-Za-km-z]{48,}|F[0-9A-F]{50,}';
+    return new RegExp(reg, 'u');
+}
 //# sourceMappingURL=PhishingDetector.mjs.map

package/dist/PhishingDetector.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"PhishingDetector.mjs","sourceRoot":"","sources":["../src/PhishingDetector.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,4BAA4B;AAE/C,OAAO,EACL,0BAA0B,EAE3B,oBAAgB;AACjB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,gCAAgC,EAChC,qBAAqB,EACrB,cAAc,EACd,UAAU,EACX,oBAAgB;AAyCjB,MAAM,OAAO,gBAAgB;IAK3B;;;;;;;;;OASG;IACH,YAAY,IAA6B;;QAdzC,4CAA0C;QAE1C,iDAAuB;QAarB,4BAA4B;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACvB,uBAAA,IAAI,6BAAY,cAAc,CAAC,IAAI,CAAC,MAAA,CAAC;YACrC,uBAAA,IAAI,kCAAiB,KAAK,MAAA,CAAC;YAC3B,uBAAuB;SACxB;aAAM;YACL,uBAAA,IAAI,6BAAY;gBACd,gCAAgC,CAAC;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;aACH,MAAA,CAAC;YACF,uBAAA,IAAI,kCAAiB,IAAI,MAAA,CAAC;SAC3B;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAW;QACf,MAAM,MAAM,GAAG,uBAAA,IAAI,4DAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,CAAC;QAEhC,IAAI,uBAAA,IAAI,sCAAc,EAAE;YACtB,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,UAAU,KAAK,0BAA0B,CAAC,SAAS,EAAE;gBACvD,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC;aACnD;iBAAM,IAAI,UAAU,KAAK,0BAA0B,CAAC,SAAS,EAAE;gBAC9D,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC;aACnD;YACD,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,UAAU;aACjB,CAAC;SACH;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAqGD;;;;;;;OAOG;IACH,mBAAmB,CAAC,SAAiB;QACnC,IAAI,QAAQ,CAAC;QACb,IAAI;YACF,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;SACxC;QAAC,OAAO,KAAK,EAAE;YACd,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,0BAA0B,CAAC,iBAAiB;aACnD,CAAC;SACH;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEvE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAEnC,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;YACxD,oEAAoE;YACpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,cAAc,EAAE;gBAClB,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;gBAClD,OAAO;oBACL,KAAK;oBACL,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,0BAA0B,CAAC,SAAS;oBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;QAED,KAAK,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;YAChE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAE3D,IAAI,OAAO,EAAE;gBACX,OAAO;oBACL,IAAI;oBACJ,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,0BAA0B,CAAC,iBAAiB;oBAClD,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;QACD,sBAAsB;QACtB,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,0BAA0B,CAAC,iBAAiB;SACnD,CAAC;IACJ,CAAC;CACF;mMA5JQ,GAAW;IAChB,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAE/C,+CAA+C;IAC/C,IAAI,YAAY,KAAK,IAAI,EAAE;QACzB,kCAAkC;QAClC,gDAAgD;QAChD,oGAAoG;QACpG,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;YACxD,MAAM,cAAc,GAAG,SAAS;iBAC7B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;iBACzC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBAChB,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAC5B,CAAC,CAAC,CAAC;YACL,IAAI,cAAc,EAAE;gBAClB,OAAO;oBACL,IAAI;oBACJ,KAAK,EAAE,GAAG;oBACV,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,0BAA0B,CAAC,SAAS;oBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;KACF;IAED,IAAI,MAAM,CAAC;IACX,IAAI;QACF,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;KAChC;IAAC,OAAO,KAAK,EAAE;QACd,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,0BAA0B,CAAC,GAAG;SACrC,CAAC;KACH;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEjE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEnC,KAAK,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAAS,EAAE;QACxD,oEAAoE;QACpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE;YAClB,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAClD,OAAO;gBACL,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,0BAA0B,CAAC,SAAS;gBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC3D,CAAC;SACH;KACF;IAED,KAAK,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,uBAAA,IAAI,iCAC1D,EAAE;QACX,oEAAoE;QACpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,cAAc,EAAE;YAClB,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAClD,OAAO;gBACL,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,0BAA0B,CAAC,SAAS;gBAC1C,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC3D,CAAC;SACH;QAED,IAAI,SAAS,GAAG,CAAC,EAAE;YACjB,gDAAgD;YAChD,IAAI,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC/C,YAAY;YACZ,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC7C,0BAA0B;YAC1B,MAAM,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBACxD,MAAM,WAAW,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC9C,OAAO,IAAI,IAAI,SAAS,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,kBAAkB,EAAE;gBACtB,MAAM,KAAK,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;gBACtD,OAAO;oBACL,IAAI;oBACJ,KAAK;oBACL,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,0BAA0B,CAAC,KAAK;oBACtC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC3D,CAAC;aACH;SACF;KACF;IAED,wBAAwB;IACxB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC;AACjE,CAAC;AA6DH;;;GAGG;AACH,SAAS,YAAY;IACnB,kDAAkD;IAClD,MAAM,GAAG,GACP,wGAAwG,CAAC;IAC3G,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { distance } from 'fastest-levenshtein';\n\nimport {\n  PhishingDetectorResultType,\n  type PhishingDetectorResult,\n} from './types';\nimport {\n  domainPartsToDomain,\n  domainPartsToFuzzyForm,\n  domainToParts,\n  getDefaultPhishingDetectorConfig,\n  matchPartsAgainstList,\n  processConfigs,\n  sha256Hash,\n} from './utils';\n\nexport type LegacyPhishingDetectorList = {\n  whitelist?: string[];\n  blacklist?: string[];\n  c2DomainBlocklist?: string[];\n} & FuzzyTolerance;\n\nexport type PhishingDetectorList = {\n  allowlist?: string[];\n  blocklist?: string[];\n  c2DomainBlocklist?: string[];\n  name?: string;\n  version?: string | number;\n  tolerance?: number;\n} & FuzzyTolerance;\n\nexport type FuzzyTolerance =\n  | {\n      tolerance?: number;\n      fuzzylist: string[];\n    }\n  | {\n      tolerance?: never;\n      fuzzylist?: never;\n    };\n\nexport type PhishingDetectorOptions =\n  | LegacyPhishingDetectorList\n  | PhishingDetectorList[];\n\nexport type PhishingDetectorConfiguration = {\n  name?: string;\n  version?: number | string;\n  allowlist: string[][];\n  blocklist: string[][];\n  c2DomainBlocklist?: string[];\n  fuzzylist: string[][];\n  tolerance: number;\n};\n\nexport class PhishingDetector {\n  #configs: PhishingDetectorConfiguration[];\n\n  #legacyConfig: boolean;\n\n  /**\n   * Construct a phishing detector, which can check whether origins are known\n   * to be malicious or similar to common phishing targets.\n   *\n   * A list of configurations is accepted. Each origin checked is processed\n   * using each configuration in sequence, so the order defines which\n   * configurations take precedence.\n   *\n   * @param opts - Phishing detection options\n   */\n  constructor(opts: PhishingDetectorOptions) {\n    // recommended configuration\n    if (Array.isArray(opts)) {\n      this.#configs = processConfigs(opts);\n      this.#legacyConfig = false;\n      // legacy configuration\n    } else {\n      this.#configs = [\n        getDefaultPhishingDetectorConfig({\n          allowlist: opts.whitelist,\n          blocklist: opts.blacklist,\n          c2DomainBlocklist: opts.c2DomainBlocklist,\n          fuzzylist: opts.fuzzylist,\n          tolerance: opts.tolerance,\n        }),\n      ];\n      this.#legacyConfig = true;\n    }\n  }\n\n  /**\n   * Check if a url is known to be malicious or similar to a common phishing\n   * target. This will check the hostname and IPFS CID that is sometimes\n   * located in the path.\n   *\n   * @param url - The url to check.\n   * @returns The result of the check.\n   */\n  check(url: string): PhishingDetectorResult {\n    const result = this.#check(url);\n\n    if (this.#legacyConfig) {\n      let legacyType = result.type;\n      if (legacyType === PhishingDetectorResultType.Allowlist) {\n        legacyType = PhishingDetectorResultType.Whitelist;\n      } else if (legacyType === PhishingDetectorResultType.Blocklist) {\n        legacyType = PhishingDetectorResultType.Blacklist;\n      }\n      return {\n        match: result.match,\n        result: result.result,\n        type: legacyType,\n      };\n    }\n    return result;\n  }\n\n  #check(url: string): PhishingDetectorResult {\n    const ipfsCidMatch = url.match(ipfsCidRegex());\n\n    // Check for IPFS CID related blocklist entries\n    if (ipfsCidMatch !== null) {\n      // there is a cID string somewhere\n      // Determine if any of the entries are ipfs cids\n      // Depending on the gateway, the CID is in the path OR a subdomain, so we do a regex match on it all\n      const cID = ipfsCidMatch[0];\n      for (const { blocklist, name, version } of this.#configs) {\n        const blocklistMatch = blocklist\n          .filter((entries) => entries.length === 1)\n          .find((entries) => {\n            return entries[0] === cID;\n          });\n        if (blocklistMatch) {\n          return {\n            name,\n            match: cID,\n            result: true,\n            type: PhishingDetectorResultType.Blocklist,\n            version: version === undefined ? version : String(version),\n          };\n        }\n      }\n    }\n\n    let domain;\n    try {\n      domain = new URL(url).hostname;\n    } catch (error) {\n      return {\n        result: false,\n        type: PhishingDetectorResultType.All,\n      };\n    }\n\n    const fqdn = domain.endsWith('.') ? domain.slice(0, -1) : domain;\n\n    const source = domainToParts(fqdn);\n\n    for (const { allowlist, name, version } of this.#configs) {\n      // if source matches allowlist hostname (or subdomain thereof), PASS\n      const allowlistMatch = matchPartsAgainstList(source, allowlist);\n      if (allowlistMatch) {\n        const match = domainPartsToDomain(allowlistMatch);\n        return {\n          match,\n          name,\n          result: false,\n          type: PhishingDetectorResultType.Allowlist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n    }\n\n    for (const { blocklist, fuzzylist, name, tolerance, version } of this\n      .#configs) {\n      // if source matches blocklist hostname (or subdomain thereof), FAIL\n      const blocklistMatch = matchPartsAgainstList(source, blocklist);\n      if (blocklistMatch) {\n        const match = domainPartsToDomain(blocklistMatch);\n        return {\n          match,\n          name,\n          result: true,\n          type: PhishingDetectorResultType.Blocklist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n\n      if (tolerance > 0) {\n        // check if near-match of whitelist domain, FAIL\n        let fuzzyForm = domainPartsToFuzzyForm(source);\n        // strip www\n        fuzzyForm = fuzzyForm.replace(/^www\\./u, '');\n        // check against fuzzylist\n        const levenshteinMatched = fuzzylist.find((targetParts) => {\n          const fuzzyTarget = domainPartsToFuzzyForm(targetParts);\n          const dist = distance(fuzzyForm, fuzzyTarget);\n          return dist <= tolerance;\n        });\n        if (levenshteinMatched) {\n          const match = domainPartsToDomain(levenshteinMatched);\n          return {\n            name,\n            match,\n            result: true,\n            type: PhishingDetectorResultType.Fuzzy,\n            version: version === undefined ? version : String(version),\n          };\n        }\n      }\n    }\n\n    // matched nothing, PASS\n    return { result: false, type: PhishingDetectorResultType.All };\n  }\n\n  /**\n   * Checks if a URL is blocked against the hashed request blocklist.\n   * This is done by hashing the URL's hostname and checking it against the hashed request blocklist.\n   *\n   *\n   * @param urlString - The URL to check.\n   * @returns An object indicating if the URL is blocked and relevant metadata.\n   */\n  isMaliciousC2Domain(urlString: string): PhishingDetectorResult {\n    let hostname;\n    try {\n      hostname = new URL(urlString).hostname;\n    } catch (error) {\n      return {\n        result: false,\n        type: PhishingDetectorResultType.C2DomainBlocklist,\n      };\n    }\n\n    const fqdn = hostname.endsWith('.') ? hostname.slice(0, -1) : hostname;\n\n    const source = domainToParts(fqdn);\n\n    for (const { allowlist, name, version } of this.#configs) {\n      // if source matches allowlist hostname (or subdomain thereof), PASS\n      const allowlistMatch = matchPartsAgainstList(source, allowlist);\n      if (allowlistMatch) {\n        const match = domainPartsToDomain(allowlistMatch);\n        return {\n          match,\n          name,\n          result: false,\n          type: PhishingDetectorResultType.Allowlist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n    }\n\n    for (const { c2DomainBlocklist, name, version } of this.#configs) {\n      const hash = sha256Hash(hostname.toLowerCase());\n      const blocked = c2DomainBlocklist?.includes(hash) ?? false;\n\n      if (blocked) {\n        return {\n          name,\n          result: true,\n          type: PhishingDetectorResultType.C2DomainBlocklist,\n          version: version === undefined ? version : String(version),\n        };\n      }\n    }\n    // did not match, PASS\n    return {\n      result: false,\n      type: PhishingDetectorResultType.C2DomainBlocklist,\n    };\n  }\n}\n\n/**\n * Runs a regex match to determine if a string is a IPFS CID\n * @returns Regex string for IPFS CID\n */\nfunction ipfsCidRegex() {\n  // regex from https://stackoverflow.com/a/67176726\n  const reg =\n    'Qm[1-9A-HJ-NP-Za-km-z]{44,}|b[A-Za-z2-7]{58,}|B[A-Z2-7]{58,}|z[1-9A-HJ-NP-Za-km-z]{48,}|F[0-9A-F]{50,}';\n  return new RegExp(reg, 'u');\n}\n"]}

package/dist/index.cjs

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PhishingDetectorResultType = exports.PhishingDetector = void 0;
+__exportStar(require("./PhishingController.cjs"), exports);
+var PhishingDetector_1 = require("./PhishingDetector.cjs");
+Object.defineProperty(exports, "PhishingDetector", { enumerable: true, get: function () { return PhishingDetector_1.PhishingDetector; } });
+var types_1 = require("./types.cjs");
+Object.defineProperty(exports, "PhishingDetectorResultType", { enumerable: true, get: function () { return types_1.PhishingDetectorResultType; } });
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,2DAAqC;AAQrC,2DAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AACzB,qCAAqD;AAA5C,mHAAA,0BAA0B,OAAA","sourcesContent":["export * from './PhishingController';\nexport type {\n  LegacyPhishingDetectorList,\n  PhishingDetectorList,\n  FuzzyTolerance,\n  PhishingDetectorOptions,\n  PhishingDetectorConfiguration,\n} from './PhishingDetector';\nexport { PhishingDetector } from './PhishingDetector';\nexport { PhishingDetectorResultType } from './types';\n"]}