@solongate/proxy 0.23.0 → 0.23.2

package/dist/index.js

@@ -4729,7 +4729,7 @@ var init_stage1_rules2 = __esm3({
         patterns: [
           /\bignore\s+(all\s+)?(previous|prior|above|earlier)\s+(instructions?|prompts?|rules?|directives?)\b/i,
           /\bdisregard\s+(all\s+)?(previous|prior|above|earlier|your)\s+(instructions?|prompts?|rules?|guidelines?)\b/i,
-          /\bforget\s+(all\s+)?(your|the|previous|prior)\s+(instructions?|rules?|constraints?|guidelines?)\b/i,
+          /\bforget\s+(all\s+|everything\s+)?(your|the|previous|prior|above|earlier)\b/i,
           /\boverride\s+(the\s+)?(system|previous|current)\s+(prompt|instructions?|rules?|settings?)\b/i,
           /\bdo\s+not\s+follow\s+(your|the|any)\s+(instructions?|rules?|guidelines?)\b/i,
           /\bcancel\s+(all\s+)?(prior|previous)\s+(directives?|instructions?)\b/i,
@@ -4788,13 +4788,13 @@ var init_stage1_rules2 = __esm3({
         name: "multi_language",
         weight: 0.7,
         patterns: [
-          /\bignor(iere|a|e[zs]?)\s+(alle|todas?|toutes?|tüm|все)\b/i,
-          /\bигнорируйте\b/i,
-          /\byoksay\b/i,
-          /\bvorherigen?\s+Anweisungen\b/i,
-          /\binstrucciones\s+anteriores\b/i,
-          /\binstructions?\s+pr[eé]c[eé]dentes?\b/i,
-          /\bönceki\s+talimatlar\b/i
+          /ignor(iere|a|e[zs]?)\s+(alle|todas?|toutes?|tüm|все)/iu,
+          /игнорируйте/iu,
+          /yoksay/iu,
+          /vorherigen?\s+Anweisungen/iu,
+          /instrucciones\s+anteriores/iu,
+          /instructions?\s+pr[eé]c[eé]dentes?/iu,
+          /önceki\s+talimatlar/iu
         ]
       }
     ];
@@ -5271,6 +5271,10 @@ var PATH_TRAVERSAL_PATTERNS = [
 var SENSITIVE_PATHS = [
   /\/etc\/passwd/i,
   /\/etc\/shadow/i,
+  /\/proc\/self\/environ/i,
+  // Process environment variables
+  /\/proc\/\d+\/environ/i,
+  // Any process environment
   /\/proc\//i,
   /\/dev\//i,
   /c:\\windows\\system32/i,
@@ -5332,8 +5336,26 @@ var SHELL_INJECTION_PATTERNS = [
   // URL-encoded tab
   /\r\n/,
   // CRLF injection
-  /\n/
+  /\n/,
   // Newline (command separator on Unix)
+  /\bbash\s+-c\b/i,
+  // Subshell wrapper: bash -c
+  /\bsh\s+-c\b/i,
+  // Subshell wrapper: sh -c
+  /\bzsh\s+-c\b/i,
+  // Subshell wrapper: zsh -c
+  /\bsource\s+/i,
+  // Source command
+  /\bprintenv\b/i,
+  // Environment variable leak
+  /\$'\\x[0-9a-f]/i,
+  // Hex escape in bash: $'\x72\x6d'
+  /\bxargs\b/i,
+  // xargs chaining
+  /\bbase64\s+-d\b/i,
+  // Base64 decode pipe
+  /\bxxd\s+-r\b/i
+  // Hex decode pipe
 ];
 function detectShellInjection(value) {
   for (const pattern of SHELL_INJECTION_PATTERNS) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.23.0",
+  "version": "0.23.2",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {