@next-secure-check/rules 0.2.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/LICENSE +22 -21
  2. package/README.md +1 -1
  3. package/dist/analysis-cache.d.ts +14 -0
  4. package/dist/analysis-cache.d.ts.map +1 -0
  5. package/dist/analysis-cache.js +28 -0
  6. package/dist/analysis-cache.js.map +1 -0
  7. package/dist/ast-utils.d.ts +24 -0
  8. package/dist/ast-utils.d.ts.map +1 -1
  9. package/dist/ast-utils.js +79 -348
  10. package/dist/ast-utils.js.map +1 -1
  11. package/dist/command-ast.d.ts +14 -0
  12. package/dist/command-ast.d.ts.map +1 -0
  13. package/dist/command-ast.js +40 -0
  14. package/dist/command-ast.js.map +1 -0
  15. package/dist/command-discovery.d.ts +8 -0
  16. package/dist/command-discovery.d.ts.map +1 -0
  17. package/dist/command-discovery.js +92 -0
  18. package/dist/command-discovery.js.map +1 -0
  19. package/dist/command-flow.d.ts +9 -0
  20. package/dist/command-flow.d.ts.map +1 -0
  21. package/dist/command-flow.js +377 -0
  22. package/dist/command-flow.js.map +1 -0
  23. package/dist/command-guards.d.ts +4 -0
  24. package/dist/command-guards.d.ts.map +1 -0
  25. package/dist/command-guards.js +92 -0
  26. package/dist/command-guards.js.map +1 -0
  27. package/dist/password-ast.d.ts +4 -0
  28. package/dist/password-ast.d.ts.map +1 -0
  29. package/dist/password-ast.js +102 -0
  30. package/dist/password-ast.js.map +1 -0
  31. package/dist/route-ast.d.ts +8 -0
  32. package/dist/route-ast.d.ts.map +1 -0
  33. package/dist/route-ast.js +165 -0
  34. package/dist/route-ast.js.map +1 -0
  35. package/dist/rule-utils.d.ts +1 -2
  36. package/dist/rule-utils.d.ts.map +1 -1
  37. package/dist/rule-utils.js +1 -13
  38. package/dist/rule-utils.js.map +1 -1
  39. package/dist/security-rules.d.ts.map +1 -1
  40. package/dist/security-rules.js +57 -17
  41. package/dist/security-rules.js.map +1 -1
  42. package/dist/sql-ast.d.ts +3 -0
  43. package/dist/sql-ast.d.ts.map +1 -0
  44. package/dist/sql-ast.js +36 -0
  45. package/dist/sql-ast.js.map +1 -0
  46. package/dist/xss-ast.d.ts +13 -0
  47. package/dist/xss-ast.d.ts.map +1 -0
  48. package/dist/xss-ast.js +114 -0
  49. package/dist/xss-ast.js.map +1 -0
  50. package/package.json +3 -3
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-flow.js","sourceRoot":"","sources":["../src/command-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,mBAAmB,EAEnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAOjG,MAAM,UAAU,gCAAgC,CAC9C,IAAuB,EACvB,kBAAuC,EACvC,sBAA2C;IAE3C,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C;IAE3C,OAAO,uBAAuB,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAC,WAAW,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C;IAE3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAqB,CAAC;IACtD,mBAAmB,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAEvH,iBAAiB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACrC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC;QACtH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC3C,IAAI,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1H,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAuBD,SAAS,mBAAmB,CAC1B,SAAkB,EAClB,IAAa,EACb,kBAAuC,EACvC,sBAA2C,EAC3C,WAA2C,EAC3C,gBAAwC,EACxC,QAA0B,sBAAsB,EAAE;IAElD,IAAI,IAAI,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,gCAAgC,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YACvF,MAAM,UAAU,GAAG,gCAAgC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBACtC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5F,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9B,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,CACxH,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAuB,EAAE,KAAuB;IAC5E,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAuB,EAAE,KAAuB;IAClF,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,QAAQ,EAAE,IAAI,GAAG,EAAU;QAC3B,WAAW,EAAE,IAAI,GAAG,EAAU;QAC9B,WAAW,EAAE,IAAI,GAAG,EAAU;QAC9B,OAAO,EAAE,IAAI,GAAG,EAA4B;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,IAA4B,EAAE,KAAuB;IACrF,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3G,OAAO;IACT,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,iBAAiB,CACf,SAAS,EACT,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACtE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAyB,EAAE,KAAuB;IACjF,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAC1D,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAmC,EAAE,KAAuB;IACnG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,mBAAmB,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAuB,EAAE,KAAuB;IACxF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,iCAAiC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iCAAiC,CAAC,IAAa,EAAE,KAAuB;IAC/E,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAqB,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9B,IAAI,UAAU,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,UAAU,GAAG,iCAAiC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB,EAAE,KAAuB;IACjF,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,uBAAuB,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,uBAAuB,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,sBAAsB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAyB,EACzB,KAAuB,EACvB,UAAmB;IAEnB,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,YAAY,CAAC,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB,EAAE,KAAuB;IAChF,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjJ,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,CAAC;IAED,IAAI,EAAE,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,kBAAkB,IAAI,WAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACjG,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,0BAA0B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1E,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QAClD,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9F,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACxF,CAAC;QAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAiC;IACpE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC3G,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAgC,EAAE,YAAoB;IACxF,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,OAAO,CAAC,EAAE,CAAC;QACvG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB,EAAE,YAAoB;IACpE,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,YAAY,EAAE;QACxC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB,EAAE,SAAiB;IAC9D,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,SAAS,EAAE;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa,EAAE,KAAuB;IACrE,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAa,EAAE,KAAuB;IACzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,iBAAiB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,OACE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC;QACrC,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC7B,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC/B,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;QAC1B,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB;IACtC,OAAO,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa;IAC1C,OAAO,CACL,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACxB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAC9B,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;QAC7B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAyB;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,QAAiC;IACzE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvE,CAAC"}
@@ -0,0 +1,4 @@
1
+ import ts from "typescript";
2
+ export declare function isCommandAllowlistMembershipCall(node: ts.CallExpression): boolean;
3
+ export declare function hasCommandAllowlistGuard(node: ts.CallExpression, commandName: string): boolean;
4
+ //# sourceMappingURL=command-guards.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-guards.d.ts","sourceRoot":"","sources":["../src/command-guards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,GAAG,OAAO,CAMjF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9F"}
@@ -0,0 +1,92 @@
1
+ import ts from "typescript";
2
+ const ALLOWLIST_METHODS = new Set(["includes", "has"]);
3
+ export function isCommandAllowlistMembershipCall(node) {
4
+ if (!ts.isPropertyAccessExpression(node.expression) || !ALLOWLIST_METHODS.has(node.expression.name.text)) {
5
+ return false;
6
+ }
7
+ return node.arguments.length === 1 && ts.isIdentifier(node.arguments[0]);
8
+ }
9
+ export function hasCommandAllowlistGuard(node, commandName) {
10
+ return hasSiblingEarlyExitGuard(node, commandName) || hasPositiveAllowlistBranch(node, commandName);
11
+ }
12
+ function hasSiblingEarlyExitGuard(node, commandName) {
13
+ const statement = containingStatement(node);
14
+ if (!statement || !ts.isBlock(statement.parent)) {
15
+ return false;
16
+ }
17
+ const statementIndex = statement.parent.statements.indexOf(statement);
18
+ if (statementIndex <= 0) {
19
+ return false;
20
+ }
21
+ const previousStatement = statement.parent.statements[statementIndex - 1];
22
+ return isRejectingAllowlistGuard(previousStatement, commandName);
23
+ }
24
+ function isRejectingAllowlistGuard(node, commandName) {
25
+ if (!ts.isIfStatement(node) || node.elseStatement || !isNegatedAllowlistCheck(node.expression, commandName)) {
26
+ return false;
27
+ }
28
+ return isExitStatement(node.thenStatement);
29
+ }
30
+ function hasPositiveAllowlistBranch(node, commandName) {
31
+ let current = node;
32
+ while (current.parent) {
33
+ const parent = current.parent;
34
+ if (ts.isIfStatement(parent) && parent.thenStatement === current && isAllowlistCheck(parent.expression, commandName)) {
35
+ return true;
36
+ }
37
+ if (isFunctionBoundary(parent)) {
38
+ return false;
39
+ }
40
+ current = parent;
41
+ }
42
+ return false;
43
+ }
44
+ function isNegatedAllowlistCheck(expression, commandName) {
45
+ const normalized = unwrapParenthesized(expression);
46
+ return ts.isPrefixUnaryExpression(normalized) && normalized.operator === ts.SyntaxKind.ExclamationToken && isAllowlistCheck(normalized.operand, commandName);
47
+ }
48
+ function isAllowlistCheck(expression, commandName) {
49
+ const normalized = unwrapParenthesized(expression);
50
+ if (!ts.isCallExpression(normalized) || !isCommandAllowlistMembershipCall(normalized)) {
51
+ return false;
52
+ }
53
+ const [argument] = normalized.arguments;
54
+ return ts.isIdentifier(argument) && argument.text === commandName;
55
+ }
56
+ function isExitStatement(node) {
57
+ if (ts.isReturnStatement(node) || ts.isThrowStatement(node)) {
58
+ return true;
59
+ }
60
+ if (!ts.isBlock(node) || node.statements.length === 0) {
61
+ return false;
62
+ }
63
+ const lastStatement = node.statements[node.statements.length - 1];
64
+ return ts.isReturnStatement(lastStatement) || ts.isThrowStatement(lastStatement);
65
+ }
66
+ function containingStatement(node) {
67
+ let current = node;
68
+ while (current) {
69
+ if (ts.isStatement(current)) {
70
+ return current;
71
+ }
72
+ current = current.parent;
73
+ }
74
+ return undefined;
75
+ }
76
+ function unwrapParenthesized(expression) {
77
+ let current = expression;
78
+ while (ts.isParenthesizedExpression(current)) {
79
+ current = current.expression;
80
+ }
81
+ return current;
82
+ }
83
+ function isFunctionBoundary(node) {
84
+ return (ts.isArrowFunction(node) ||
85
+ ts.isConstructorDeclaration(node) ||
86
+ ts.isFunctionDeclaration(node) ||
87
+ ts.isFunctionExpression(node) ||
88
+ ts.isGetAccessorDeclaration(node) ||
89
+ ts.isMethodDeclaration(node) ||
90
+ ts.isSetAccessorDeclaration(node));
91
+ }
92
+ //# sourceMappingURL=command-guards.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-guards.js","sourceRoot":"","sources":["../src/command-guards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AAEvD,MAAM,UAAU,gCAAgC,CAAC,IAAuB;IACtE,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAuB,EAAE,WAAmB;IACnF,OAAO,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,0BAA0B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAuB,EAAE,WAAmB;IAC5E,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,yBAAyB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAkB,EAAE,WAAmB;IACxE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAuB,EAAE,WAAmB;IAC9E,IAAI,OAAO,GAAY,IAAI,CAAC;IAE5B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YACrH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB,EAAE,WAAmB;IAC7E,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,KAAK,EAAE,CAAC,UAAU,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC/J,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAyB,EAAE,WAAmB;IACtE,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,UAAU,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,IAAkB;IACzC,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,OAAO,GAAwB,IAAI,CAAC;IACxC,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAyB;IACpD,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,OAAO,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,OAAO,CACL,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACxB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAC9B,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;QAC7B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC"}
@@ -0,0 +1,4 @@
1
+ import ts from "typescript";
2
+ export declare function hasPasswordHashingCall(sourceFile: ts.SourceFile): boolean;
3
+ export declare function findPasswordHandlingNodes(sourceFile: ts.SourceFile): ts.Node[];
4
+ //# sourceMappingURL=password-ast.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"password-ast.d.ts","sourceRoot":"","sources":["../src/password-ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5B,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,OAAO,CAYzE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,IAAI,EAAE,CAU9E"}
@@ -0,0 +1,102 @@
1
+ import ts from "typescript";
2
+ import { bindingElementName } from "./command-ast.js";
3
+ export function hasPasswordHashingCall(sourceFile) {
4
+ let hasHashingCall = false;
5
+ visitPasswordNodes(sourceFile, (node) => {
6
+ if (hasHashingCall || !ts.isCallExpression(node)) {
7
+ return;
8
+ }
9
+ hasHashingCall = isPasswordHashingCall(node);
10
+ });
11
+ return hasHashingCall;
12
+ }
13
+ export function findPasswordHandlingNodes(sourceFile) {
14
+ const matches = [];
15
+ visitPasswordNodes(sourceFile, (node) => {
16
+ if (isPasswordHandlingNode(node)) {
17
+ matches.push(node);
18
+ }
19
+ });
20
+ return matches;
21
+ }
22
+ function isPasswordHashingCall(node) {
23
+ const expression = node.expression;
24
+ if (ts.isIdentifier(expression)) {
25
+ return /^scrypt(?:Sync)?$/i.test(expression.text);
26
+ }
27
+ if (!ts.isPropertyAccessExpression(expression)) {
28
+ return false;
29
+ }
30
+ const methodName = expression.name.text;
31
+ const targetName = expressionNameText(expression.expression);
32
+ if (/^scrypt(?:Sync)?$/i.test(methodName) && targetName === "crypto") {
33
+ return true;
34
+ }
35
+ return methodName === "hash" && (targetName === "bcrypt" || targetName === "argon2");
36
+ }
37
+ function isPasswordHandlingNode(node) {
38
+ if (ts.isVariableDeclaration(node)) {
39
+ return isPasswordVariableDeclaration(node);
40
+ }
41
+ return (ts.isPropertyAccessExpression(node) &&
42
+ node.name.text === "password" &&
43
+ isRequestBodyExpression(node.expression) &&
44
+ !isVariableDeclarationInitializer(node));
45
+ }
46
+ function isPasswordVariableDeclaration(node) {
47
+ if (!node.initializer) {
48
+ return false;
49
+ }
50
+ if (ts.isIdentifier(node.name) && node.name.text === "password") {
51
+ return isPasswordSourceExpression(node.initializer);
52
+ }
53
+ if (!ts.isObjectBindingPattern(node.name)) {
54
+ return false;
55
+ }
56
+ return node.name.elements.some((element) => bindingElementName(element) === "password") && isCredentialJsonExpression(node.initializer);
57
+ }
58
+ function isPasswordSourceExpression(expression) {
59
+ return isPasswordPropertyAccess(expression) || isPasswordFormDataGetCall(expression);
60
+ }
61
+ function isPasswordPropertyAccess(expression) {
62
+ return ts.isPropertyAccessExpression(expression) && expression.name.text === "password" && isCredentialContainerExpression(expression.expression);
63
+ }
64
+ function isPasswordFormDataGetCall(expression) {
65
+ if (!ts.isCallExpression(expression) || !ts.isPropertyAccessExpression(expression.expression) || expression.expression.name.text !== "get") {
66
+ return false;
67
+ }
68
+ const [fieldName] = expression.arguments;
69
+ return fieldName !== undefined && ts.isStringLiteralLike(fieldName) && fieldName.text === "password";
70
+ }
71
+ function isVariableDeclarationInitializer(expression) {
72
+ return ts.isVariableDeclaration(expression.parent) && expression.parent.initializer === expression;
73
+ }
74
+ function isCredentialContainerExpression(expression) {
75
+ return isRequestBodyExpression(expression) || isCredentialLikeIdentifier(expression);
76
+ }
77
+ function isRequestBodyExpression(expression) {
78
+ return ((ts.isIdentifier(expression) && /^(body|credentials|credential|data|payload|formData)$/i.test(expression.text)) ||
79
+ (ts.isPropertyAccessExpression(expression) &&
80
+ expression.name.text === "body" &&
81
+ ts.isIdentifier(expression.expression) &&
82
+ /^(req|request)$/i.test(expression.expression.text)));
83
+ }
84
+ function isCredentialJsonExpression(expression) {
85
+ const unwrappedExpression = ts.isAwaitExpression(expression) ? expression.expression : expression;
86
+ return (ts.isCallExpression(unwrappedExpression) &&
87
+ ts.isPropertyAccessExpression(unwrappedExpression.expression) &&
88
+ unwrappedExpression.expression.name.text === "json" &&
89
+ ts.isIdentifier(unwrappedExpression.expression.expression) &&
90
+ /^(request|req)$/i.test(unwrappedExpression.expression.expression.text));
91
+ }
92
+ function isCredentialLikeIdentifier(expression) {
93
+ return ts.isIdentifier(expression) && /^(credentials?|user|account)$/i.test(expression.text);
94
+ }
95
+ function expressionNameText(expression) {
96
+ return ts.isIdentifier(expression) ? expression.text : undefined;
97
+ }
98
+ function visitPasswordNodes(node, callback) {
99
+ callback(node);
100
+ ts.forEachChild(node, (child) => visitPasswordNodes(child, callback));
101
+ }
102
+ //# sourceMappingURL=password-ast.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"password-ast.js","sourceRoot":"","sources":["../src/password-ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,UAAU,sBAAsB,CAAC,UAAyB;IAC9D,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,kBAAkB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACtC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAyB;IACjE,MAAM,OAAO,GAAc,EAAE,CAAC;IAE9B,kBAAkB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACtC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;IACxC,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,UAAU,KAAK,MAAM,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,QAAQ,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,CACL,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;QAC7B,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,CAAC,gCAAgC,CAAC,IAAI,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,IAA4B;IACjE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChE,OAAO,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1I,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAyB;IAC3D,OAAO,wBAAwB,CAAC,UAAU,CAAC,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAyB;IACzD,OAAO,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,+BAA+B,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACpJ,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAyB;IAC1D,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3I,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC;IACzC,OAAO,SAAS,KAAK,SAAS,IAAI,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC;AACvG,CAAC;AAED,SAAS,gCAAgC,CAAC,UAAyB;IACjE,OAAO,EAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,KAAK,UAAU,CAAC;AACrG,CAAC;AAED,SAAS,+BAA+B,CAAC,UAAyB;IAChE,OAAO,uBAAuB,CAAC,UAAU,CAAC,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,OAAO,CACL,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,wDAAwD,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/G,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;YAC/B,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC;YACtC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAyB;IAC3D,MAAM,mBAAmB,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IAClG,OAAO,CACL,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;QACxC,EAAE,CAAC,0BAA0B,CAAC,mBAAmB,CAAC,UAAU,CAAC;QAC7D,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;QACnD,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC,UAAU,CAAC,UAAU,CAAC;QAC1D,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAyB;IAC3D,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAyB;IACnD,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa,EAAE,QAAiC;IAC1E,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC"}
@@ -0,0 +1,8 @@
1
+ import ts from "typescript";
2
+ export declare const ROUTE_HANDLER_NAMES: Set<string>;
3
+ export declare function hasAuthIntentInSource(sourceFile: ts.SourceFile): boolean;
4
+ export declare function hasValidationIntentInSource(sourceFile: ts.SourceFile): boolean;
5
+ export declare function exportedRouteHandlerName(node: ts.Node): string | undefined;
6
+ export declare function isApiRouteFilePath(filePath: string): boolean;
7
+ export declare function isUploadHandlingNode(node: ts.Node): boolean;
8
+ //# sourceMappingURL=route-ast.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"route-ast.d.ts","sourceRoot":"","sources":["../src/route-ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,eAAO,MAAM,mBAAmB,aAAqD,CAAC;AA0BtF,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,OAAO,CAmBxE;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,OAAO,CAwB9E;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,MAAM,GAAG,SAAS,CAe1E;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU5D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,OAAO,CAsB3D"}
@@ -0,0 +1,165 @@
1
+ import ts from "typescript";
2
+ export const ROUTE_HANDLER_NAMES = new Set(["GET", "POST", "PUT", "DELETE", "PATCH"]);
3
+ const AUTH_CALL_NAMES = new Set([
4
+ "auth",
5
+ "clerk",
6
+ "currentUser",
7
+ "getServerSession",
8
+ "getUser",
9
+ "isAdmin",
10
+ "middleware",
11
+ "requireAuth",
12
+ "verifyToken",
13
+ "withAuth"
14
+ ]);
15
+ const AUTH_GUARD_PROPERTY_NAMES = new Set(["permission", "role"]);
16
+ const AUTH_GUARD_TARGET_NAMES = new Set(["account", "claims", "session", "user"]);
17
+ const VALIDATION_CALL_NAMES = new Set(["isValid", "parse", "safeParse", "validate", "validateSync"]);
18
+ const VALIDATION_MODULE_PATTERN = /^(?:arktype|joi|superstruct|valibot|yup|zod)(?:\/|$)/i;
19
+ const VALIDATION_TYPE_NAMES = new Set(["boolean", "function", "number", "object", "string"]);
20
+ const TYPEOF_COMPARISON_OPERATORS = new Set([
21
+ ts.SyntaxKind.EqualsEqualsToken,
22
+ ts.SyntaxKind.EqualsEqualsEqualsToken,
23
+ ts.SyntaxKind.ExclamationEqualsToken,
24
+ ts.SyntaxKind.ExclamationEqualsEqualsToken
25
+ ]);
26
+ export function hasAuthIntentInSource(sourceFile) {
27
+ let found = false;
28
+ visitRouteNodes(sourceFile, (node) => {
29
+ if (found) {
30
+ return;
31
+ }
32
+ if (ts.isCallExpression(node) && isAuthIntentCall(node.expression)) {
33
+ found = true;
34
+ return;
35
+ }
36
+ if (ts.isPropertyAccessExpression(node) && isAuthGuardProperty(node)) {
37
+ found = true;
38
+ }
39
+ });
40
+ return found;
41
+ }
42
+ export function hasValidationIntentInSource(sourceFile) {
43
+ let found = false;
44
+ visitRouteNodes(sourceFile, (node) => {
45
+ if (found) {
46
+ return;
47
+ }
48
+ if (ts.isImportDeclaration(node) && isValidationLibraryImport(node)) {
49
+ found = true;
50
+ return;
51
+ }
52
+ if (ts.isCallExpression(node) && isValidationCall(node)) {
53
+ found = true;
54
+ return;
55
+ }
56
+ if (ts.isBinaryExpression(node) && isTypeofValidationCheck(node)) {
57
+ found = true;
58
+ }
59
+ });
60
+ return found;
61
+ }
62
+ export function exportedRouteHandlerName(node) {
63
+ if (ts.isFunctionDeclaration(node) && hasDefaultExportModifier(node)) {
64
+ return "DEFAULT";
65
+ }
66
+ if (ts.isFunctionDeclaration(node) && hasExportModifier(node) && node.name) {
67
+ return node.name.text;
68
+ }
69
+ if (!ts.isVariableStatement(node) || !hasExportModifier(node)) {
70
+ return undefined;
71
+ }
72
+ const [declaration] = node.declarationList.declarations;
73
+ return declaration && ts.isIdentifier(declaration.name) ? declaration.name.text : undefined;
74
+ }
75
+ export function isApiRouteFilePath(filePath) {
76
+ const normalizedPath = filePath.replace(/\\/g, "/");
77
+ return (/^app\/api\/.*\/route\.[tj]s$/i.test(normalizedPath) ||
78
+ /^src\/app\/api\/.*\/route\.[tj]s$/i.test(normalizedPath) ||
79
+ /^pages\/api\/.*\.([tj]s)$/i.test(normalizedPath) ||
80
+ /^apps\/[^/]+\/app\/api\/.*\/route\.[tj]s$/i.test(normalizedPath) ||
81
+ /^apps\/[^/]+\/src\/app\/api\/.*\/route\.[tj]s$/i.test(normalizedPath) ||
82
+ /^apps\/[^/]+\/pages\/api\/.*\.([tj]s)$/i.test(normalizedPath));
83
+ }
84
+ export function isUploadHandlingNode(node) {
85
+ if (ts.isCallExpression(node) && ts.isPropertyAccessExpression(node.expression)) {
86
+ const methodName = node.expression.name.text;
87
+ if (methodName === "formData") {
88
+ return true;
89
+ }
90
+ if (methodName === "get") {
91
+ const [fieldName] = node.arguments;
92
+ return fieldName !== undefined && ts.isStringLiteralLike(fieldName) && /^(file|files|blob|image|avatar|media)$/i.test(fieldName.text);
93
+ }
94
+ }
95
+ if (ts.isIdentifier(node)) {
96
+ return /^(file|files|blob|formData)$/i.test(node.text);
97
+ }
98
+ if (ts.isTypeReferenceNode(node) && ts.isIdentifier(node.typeName)) {
99
+ return /^(File|Blob|FormData)$/i.test(node.typeName.text);
100
+ }
101
+ return false;
102
+ }
103
+ function isAuthIntentCall(expression) {
104
+ if (ts.isIdentifier(expression)) {
105
+ return AUTH_CALL_NAMES.has(expression.text);
106
+ }
107
+ if (!ts.isPropertyAccessExpression(expression)) {
108
+ return false;
109
+ }
110
+ if (AUTH_CALL_NAMES.has(expression.name.text)) {
111
+ return true;
112
+ }
113
+ return (expression.name.text === "verify" &&
114
+ ts.isIdentifier(expression.expression) &&
115
+ /^(auth|jwt|session|token)$/i.test(expression.expression.text));
116
+ }
117
+ function isAuthGuardProperty(node) {
118
+ return (AUTH_GUARD_PROPERTY_NAMES.has(node.name.text) &&
119
+ ts.isIdentifier(node.expression) &&
120
+ AUTH_GUARD_TARGET_NAMES.has(node.expression.text));
121
+ }
122
+ function isValidationLibraryImport(node) {
123
+ return ts.isStringLiteralLike(node.moduleSpecifier) && VALIDATION_MODULE_PATTERN.test(node.moduleSpecifier.text);
124
+ }
125
+ function isValidationCall(node) {
126
+ const expression = node.expression;
127
+ if (ts.isIdentifier(expression)) {
128
+ return VALIDATION_CALL_NAMES.has(expression.text);
129
+ }
130
+ if (!ts.isPropertyAccessExpression(expression)) {
131
+ return false;
132
+ }
133
+ if (expression.name.text === "isArray" && isArrayTarget(expression.expression)) {
134
+ return true;
135
+ }
136
+ if (!VALIDATION_CALL_NAMES.has(expression.name.text)) {
137
+ return false;
138
+ }
139
+ return expression.name.text !== "parse" || !isBuiltInParserTarget(expression.expression);
140
+ }
141
+ function isArrayTarget(expression) {
142
+ return ts.isIdentifier(expression) && expression.text === "Array";
143
+ }
144
+ function isBuiltInParserTarget(expression) {
145
+ return ts.isIdentifier(expression) && /^(?:Date|JSON|Number|URL)$/i.test(expression.text);
146
+ }
147
+ function isTypeofValidationCheck(node) {
148
+ if (!TYPEOF_COMPARISON_OPERATORS.has(node.operatorToken.kind) || !ts.isTypeOfExpression(node.left)) {
149
+ return false;
150
+ }
151
+ return ts.isStringLiteralLike(node.right) && VALIDATION_TYPE_NAMES.has(node.right.text);
152
+ }
153
+ function hasExportModifier(node) {
154
+ return ts.canHaveModifiers(node) && (ts.getModifiers(node) ?? []).some((modifier) => modifier.kind === ts.SyntaxKind.ExportKeyword);
155
+ }
156
+ function hasDefaultExportModifier(node) {
157
+ const modifiers = ts.canHaveModifiers(node) ? (ts.getModifiers(node) ?? []) : [];
158
+ return (modifiers.some((modifier) => modifier.kind === ts.SyntaxKind.ExportKeyword) &&
159
+ modifiers.some((modifier) => modifier.kind === ts.SyntaxKind.DefaultKeyword));
160
+ }
161
+ function visitRouteNodes(node, callback) {
162
+ callback(node);
163
+ ts.forEachChild(node, (child) => visitRouteNodes(child, callback));
164
+ }
165
+ //# sourceMappingURL=route-ast.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"route-ast.js","sourceRoot":"","sources":["../src/route-ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,OAAO;IACP,aAAa;IACb,kBAAkB;IAClB,SAAS;IACT,SAAS;IACT,YAAY;IACZ,aAAa;IACb,aAAa;IACb,UAAU;CACX,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;AAClE,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AACrG,MAAM,yBAAyB,GAAG,uDAAuD,CAAC;AAC1F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC7F,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,EAAE,CAAC,UAAU,CAAC,iBAAiB;IAC/B,EAAE,CAAC,UAAU,CAAC,uBAAuB;IACrC,EAAE,CAAC,UAAU,CAAC,sBAAsB;IACpC,EAAE,CAAC,UAAU,CAAC,4BAA4B;CAC3C,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CAAC,UAAyB;IAC7D,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,eAAe,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,KAAK,GAAG,IAAI,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAyB;IACnE,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,eAAe,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,KAAK,GAAG,IAAI,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,KAAK,GAAG,IAAI,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC;IACxD,OAAO,WAAW,IAAI,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,CACL,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC;QACpD,oCAAoC,CAAC,IAAI,CAAC,cAAc,CAAC;QACzD,4BAA4B,CAAC,IAAI,CAAC,cAAc,CAAC;QACjD,4CAA4C,CAAC,IAAI,CAAC,cAAc,CAAC;QACjE,iDAAiD,CAAC,IAAI,CAAC,cAAc,CAAC;QACtE,yCAAyC,CAAC,IAAI,CAAC,cAAc,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7C,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACnC,OAAO,SAAS,KAAK,SAAS,IAAI,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,yCAAyC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxI,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAyB;IACjD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;QACjC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC;QACtC,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAiC;IAC5D,OAAO,CACL,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7C,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAChC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,IAA0B;IAC3D,OAAO,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,aAAa,CAAC,UAAyB;IAC9C,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC;AACpE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAyB;IACtD,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAyB;IACxD,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,OAAO,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AACtI,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAa;IAC7C,MAAM,SAAS,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,OAAO,CACL,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QAC3E,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAa,EAAE,QAAiC;IACvE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrE,CAAC"}
@@ -7,6 +7,7 @@ export type FindingInput = {
7
7
  line?: number;
8
8
  column?: number;
9
9
  evidence?: string;
10
+ evidencePath?: string;
10
11
  description: string;
11
12
  recommendation: string;
12
13
  confidence?: Confidence;
@@ -19,8 +20,6 @@ export declare function findMatches(file: SourceFile, pattern: RegExp): Array<{
19
20
  evidence: string;
20
21
  sourceLine: string;
21
22
  }>;
22
- export declare function hasDependency(context: ScanContext, packageNames: string[]): boolean;
23
- export declare function projectContains(context: ScanContext, pattern: RegExp): boolean;
24
23
  export declare function codeFiles(context: ScanContext): SourceFile[];
25
24
  export declare function configFiles(context: ScanContext): SourceFile[];
26
25
  //# sourceMappingURL=rule-utils.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"rule-utils.d.ts","sourceRoot":"","sources":["../src/rule-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAElG,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;IACzF,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAgB1D;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,GACd,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAOnF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAK9E;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,EAAE,CAE5D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,EAAE,CAE9D"}
1
+ {"version":3,"file":"rule-utils.d.ts","sourceRoot":"","sources":["../src/rule-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAElG,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;IACzF,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAiB1D;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,GACd,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/E;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,EAAE,CAE5D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,EAAE,CAE9D"}
@@ -10,6 +10,7 @@ export function createFinding(input) {
10
10
  line: input.line,
11
11
  column: input.column,
12
12
  evidence: input.evidence,
13
+ evidencePath: input.evidencePath,
13
14
  description: input.description,
14
15
  recommendation: input.recommendation,
15
16
  references: input.references
@@ -36,19 +37,6 @@ export function findMatches(file, pattern) {
36
37
  pattern.lastIndex = 0;
37
38
  return matches;
38
39
  }
39
- export function hasDependency(context, packageNames) {
40
- const dependencies = {
41
- ...(context.packageJson?.dependencies ?? {}),
42
- ...(context.packageJson?.devDependencies ?? {})
43
- };
44
- return packageNames.some((packageName) => packageName in dependencies);
45
- }
46
- export function projectContains(context, pattern) {
47
- return context.files.some((file) => {
48
- pattern.lastIndex = 0;
49
- return pattern.test(file.content);
50
- });
51
- }
52
40
  export function codeFiles(context) {
53
41
  return context.files.filter((file) => /\.(ts|tsx|js|jsx)$/.test(file.path));
54
42
  }
@@ -1 +1 @@
1
- {"version":3,"file":"rule-utils.js","sourceRoot":"","sources":["../src/rule-utils.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,OAAO;QACL,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE;QACjF,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QACrB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;QACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ;QACjE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,OAAe;IAEf,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAE9G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE;QAC5C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEtB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS,GAAG,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;gBACvB,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE;gBAC5B,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IAEtB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE,YAAsB;IACxE,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe,IAAI,EAAE,CAAC;KAChD,CAAC;IAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAoB,EAAE,OAAe;IACnE,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAoB;IAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClH,CAAC"}
1
+ {"version":3,"file":"rule-utils.js","sourceRoot":"","sources":["../src/rule-utils.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,OAAO;QACL,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE;QACjF,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QACrB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;QACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ;QACjE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,OAAe;IAEf,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAE9G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE;QAC5C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEtB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS,GAAG,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;gBACvB,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE;gBAC5B,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IAEtB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAoB;IAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClH,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"security-rules.d.ts","sourceRoot":"","sources":["../src/security-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAWpD,eAAO,MAAM,oBAAoB,EAAE,IAmBlC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,IAuDjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAgC/B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,IAuBxB,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,IAwBzC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IAuBtC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,IAqBvC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,IAsB1C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,IAyBxC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,IAqB9B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,IA+BxC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,IAyBlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAuB/B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,IAqB7B,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,IA0B3C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IA0BtC,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,IAyB3C,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,IA+BvC,CAAC;AAEF,eAAO,MAAM,+BAA+B,EAAE,IAyB7C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,IAmCrC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,IAAI,EAqBtC,CAAC"}
1
+ {"version":3,"file":"security-rules.d.ts","sourceRoot":"","sources":["../src/security-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAgBtE,eAAO,MAAM,oBAAoB,EAAE,IAmBlC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,IAuDjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAgC/B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,IAuBxB,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,IAwBzC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IAuBtC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,IAoBvC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,IAqB1C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,IAqBxC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,IAqB9B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,IA+BxC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,IAyBlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAuB/B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,IAsB7B,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,IA0B3C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IA0BtC,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,IAuB3C,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,IAmCvC,CAAC;AAEF,eAAO,MAAM,+BAA+B,EAAE,IAyB7C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,IAmCrC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,IAAI,EAqBtC,CAAC"}