npm - @thymian/rules-rfc-9110 - Versions diffs - 0.0.0-PLACEHOLDER - Mend

@thymian/rules-rfc-9110 0.0.0-PLACEHOLDER

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1642) hide show

package/dist/rules/identifiers/http/recipient-must-reject-http-uri-without-host.rule.js ADDED Viewed

@@ -0,0 +1,18 @@
+import { httpRule, protocol } from '@thymian/core';
+export default httpRule('rfc9110/recipient-must-reject-http-uri-without-host')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-http-uri-scheme')
+    .description(`A recipient that processes a 'http' URI reference with empty host MUST reject it as invalid.`)
+    .rule((ctx, opts, logger) => ctx.validateHttpTransactions(protocol('http'), (req, res) => {
+    try {
+        return (new URL(req.path, req.origin).host === '' &&
+            !(res.statusCode >= 400 && res.statusCode < 500));
+    }
+    catch (e) {
+        logger.error('Cannot run rule because of invalid URL:', e);
+        return false;
+    }
+}))
+    .done();
+//# sourceMappingURL=recipient-must-reject-http-uri-without-host.rule.js.map

package/dist/rules/identifiers/http/recipient-must-reject-http-uri-without-host.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"recipient-must-reject-http-uri-without-host.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/http/recipient-must-reject-http-uri-without-host.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEnD,eAAe,QAAQ,CAAC,qDAAqD,CAAC;KAC3E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,kEAAkE,CAAC;KACvE,WAAW,CACV,8FAA8F,CAC/F;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1D,IAAI,CAAC;QACH,OAAO,CACL,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,EAAE;YACzC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/http/sender-must-not-generate-http-uri-with-empty-host.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-not-generate-http-uri-with-empty-host.rule.d.ts.map

package/dist/rules/identifiers/http/sender-must-not-generate-http-uri-with-empty-host.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"sender-must-not-generate-http-uri-with-empty-host.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/http/sender-must-not-generate-http-uri-with-empty-host.rule.ts"],"names":[],"mappings":";AAEA,wBAmBU"}

package/dist/rules/identifiers/http/sender-must-not-generate-http-uri-with-empty-host.rule.js ADDED Viewed

@@ -0,0 +1,17 @@
+import { httpRule, protocol } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-not-generate-http-uri-with-empty-host')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-http-uri-scheme')
+    .description(`A sender MUST NOT generate an 'http' URI with an empty host identifier.`)
+    .rule((ctx, opts, logger) => ctx.validateHttpTransactions(protocol('http'), (req) => {
+    try {
+        return new URL(req.path, req.origin).host === '';
+    }
+    catch (e) {
+        logger.error('Cannot run rule because of invalid URL:', e);
+        return false;
+    }
+}))
+    .done();
+//# sourceMappingURL=sender-must-not-generate-http-uri-with-empty-host.rule.js.map

package/dist/rules/identifiers/http/sender-must-not-generate-http-uri-with-empty-host.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sender-must-not-generate-http-uri-with-empty-host.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/http/sender-must-not-generate-http-uri-with-empty-host.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEnD,eAAe,QAAQ,CACrB,2DAA2D,CAC5D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,kEAAkE,CAAC;KACvE,WAAW,CACV,yEAAyE,CAC1E;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/https/client-must-secure-https-requests-and-responses.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-secure-https-requests-and-responses.rule.d.ts.map

package/dist/rules/identifiers/https/client-must-secure-https-requests-and-responses.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"client-must-secure-https-requests-and-responses.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/https/client-must-secure-https-requests-and-responses.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/identifiers/https/client-must-secure-https-requests-and-responses.rule.js ADDED Viewed

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-secure-https-requests-and-responses')
+    .severity('error')
+    .type('static')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-https-uri-scheme')
+    .description("A client MUST ensure that its HTTP requests for an 'https' resource are secured, prior to being communicated, and that it only accepts secured responses to those requests.\n\nContext: This requirement applies whenever a client is sending requests to, or receiving responses from, an 'https' URI. The client must not send unencrypted requests or accept unencrypted responses for 'https' resources.")
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-must-secure-https-requests-and-responses.rule.js.map

package/dist/rules/identifiers/https/client-must-secure-https-requests-and-responses.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"client-must-secure-https-requests-and-responses.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/https/client-must-secure-https-requests-and-responses.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,CAAC;KACd,GAAG,CAAC,mEAAmE,CAAC;KACxE,WAAW,CACV,8YAA8Y,CAC/Y;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/https/recipient-must-reject-https-uri-without-host.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-must-reject-https-uri-without-host.rule.d.ts.map

package/dist/rules/identifiers/https/recipient-must-reject-https-uri-without-host.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"recipient-must-reject-https-uri-without-host.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/https/recipient-must-reject-https-uri-without-host.rule.ts"],"names":[],"mappings":";AAEA,wBAmBU"}

package/dist/rules/identifiers/https/recipient-must-reject-https-uri-without-host.rule.js ADDED Viewed

@@ -0,0 +1,17 @@
+import { httpRule, protocol } from '@thymian/core';
+export default httpRule('rfc9110/recipient-must-reject-https-uri-without-host')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-https-uri-scheme')
+    .description(`A recipient that processes a 'https' URI reference with empty host MUST reject it as invalid.`)
+    .rule((ctx, opts, logger) => ctx.validateHttpTransactions(protocol('https'), (req, res) => {
+    try {
+        return (new URL(req.path, req.origin).host === '' &&
+            !(res.statusCode >= 400 && res.statusCode < 500));
+    }
+    catch (e) {
+        return false;
+    }
+}))
+    .done();
+//# sourceMappingURL=recipient-must-reject-https-uri-without-host.rule.js.map

package/dist/rules/identifiers/https/recipient-must-reject-https-uri-without-host.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"recipient-must-reject-https-uri-without-host.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/https/recipient-must-reject-https-uri-without-host.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEnD,eAAe,QAAQ,CAAC,sDAAsD,CAAC;KAC5E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,mEAAmE,CAAC;KACxE,WAAW,CACV,+FAA+F,CAChG;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,OAAO,CACL,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,EAAE;YACzC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/https/sender-must-not-generate-https-uri-with-empty-host.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-not-generate-https-uri-with-empty-host.rule.d.ts.map

package/dist/rules/identifiers/https/sender-must-not-generate-https-uri-with-empty-host.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"sender-must-not-generate-https-uri-with-empty-host.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/https/sender-must-not-generate-https-uri-with-empty-host.rule.ts"],"names":[],"mappings":";AAEA,wBAmBU"}

package/dist/rules/identifiers/https/sender-must-not-generate-https-uri-with-empty-host.rule.js ADDED Viewed

@@ -0,0 +1,17 @@
+import { httpRule, protocol } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-not-generate-https-uri-with-empty-host')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-https-uri-scheme')
+    .description(`A sender MUST NOT generate an 'https' URI with an empty host identifier.`)
+    .rule((ctx, opts, logger) => ctx.validateHttpTransactions(protocol('https'), (req) => {
+    try {
+        return new URL(req.path, req.origin).host === '';
+    }
+    catch (e) {
+        logger.error('Cannot run rule because of invalid URL:', e);
+        return false;
+    }
+}))
+    .done();
+//# sourceMappingURL=sender-must-not-generate-https-uri-with-empty-host.rule.js.map

package/dist/rules/identifiers/https/sender-must-not-generate-https-uri-with-empty-host.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sender-must-not-generate-https-uri-with-empty-host.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/https/sender-must-not-generate-https-uri-with-empty-host.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEnD,eAAe,QAAQ,CACrB,4DAA4D,CAC7D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,mEAAmE,CAAC;KACxE,WAAW,CACV,0EAA0E,CAC3E;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IACtD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/normalization/authority-should-not-use-equivalent-uris-for-distinct-resources.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=authority-should-not-use-equivalent-uris-for-distinct-resources.rule.d.ts.map

package/dist/rules/identifiers/normalization/authority-should-not-use-equivalent-uris-for-distinct-resources.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"authority-should-not-use-equivalent-uris-for-distinct-resources.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/normalization/authority-should-not-use-equivalent-uris-for-distinct-resources.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/identifiers/normalization/authority-should-not-use-equivalent-uris-for-distinct-resources.rule.js ADDED Viewed

@@ -0,0 +1,8 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/authority-should-not-use-equivalent-uris-for-distinct-resources')
+    .severity('warn')
+    .type('static')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-https-normalization-and-comparison')
+    .description(`Distinct resources SHOULD NOT be identified by HTTP URIs that are equivalent after normalization.`)
+    .done();
+//# sourceMappingURL=authority-should-not-use-equivalent-uris-for-distinct-resources.rule.js.map

package/dist/rules/identifiers/normalization/authority-should-not-use-equivalent-uris-for-distinct-resources.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"authority-should-not-use-equivalent-uris-for-distinct-resources.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/normalization/authority-should-not-use-equivalent-uris-for-distinct-resources.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,CAAC;KACd,GAAG,CACF,qFAAqF,CACtF;KACA,WAAW,CACV,mGAAmG,CACpG;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/normalization/http-component-may-perform-normalization.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=http-component-may-perform-normalization.rule.d.ts.map

package/dist/rules/identifiers/normalization/http-component-may-perform-normalization.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"http-component-may-perform-normalization.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/normalization/http-component-may-perform-normalization.rule.ts"],"names":[],"mappings":";AAEA,wBAOU"}

package/dist/rules/identifiers/normalization/http-component-may-perform-normalization.rule.js ADDED Viewed

@@ -0,0 +1,8 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/http-component-may-perform-normalization')
+    .severity('warn')
+    .type('static')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-https-normalization-and-comparison')
+    .description(`Any HTTP component MAY perform normalization.`)
+    .done();
+//# sourceMappingURL=http-component-may-perform-normalization.rule.js.map

package/dist/rules/identifiers/normalization/http-component-may-perform-normalization.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"http-component-may-perform-normalization.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/normalization/http-component-may-perform-normalization.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,kDAAkD,CAAC;KACxE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,CAAC;KACd,GAAG,CACF,qFAAqF,CACtF;KACA,WAAW,CAAC,+CAA+C,CAAC;KAC5D,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/sender-recipient-should-support-8000-octet-uris.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-recipient-should-support-8000-octet-uris.rule.d.ts.map

package/dist/rules/identifiers/sender-recipient-should-support-8000-octet-uris.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"sender-recipient-should-support-8000-octet-uris.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/identifiers/sender-recipient-should-support-8000-octet-uris.rule.ts"],"names":[],"mappings":";AAEA,wBA0BU"}

package/dist/rules/identifiers/sender-recipient-should-support-8000-octet-uris.rule.js ADDED Viewed

@@ -0,0 +1,22 @@
+import { httpRule, statusCode } from '@thymian/core';
+export default httpRule('rfc9110/sender-recipient-should-support-8000-octet-uris')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-uri-references')
+    .description('It is RECOMMENDED that all senders and recipients support, at a minimum, URIs with lengths of 8000 octets in protocol elements.')
+    .rule((ctx, opts, logger) => ctx.validateHttpTransactions(statusCode(414), (req) => {
+    try {
+        const url = new URL(req.path, req.origin);
+        if (new TextEncoder().encode(url.toString()).length <= 8000) {
+            return {
+                message: 'URI length is less than 8000 octets',
+            };
+        }
+    }
+    catch (e) {
+        logger.error('Cannot run rule because of invalid URL:', e);
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=sender-recipient-should-support-8000-octet-uris.rule.js.map

package/dist/rules/identifiers/sender-recipient-should-support-8000-octet-uris.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sender-recipient-should-support-8000-octet-uris.rule.js","sourceRoot":"","sources":["../../../src/rules/identifiers/sender-recipient-should-support-8000-octet-uris.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAErD,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,iEAAiE,CAAC;KACtE,WAAW,CACV,iIAAiI,CAClI;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,qCAAqC;aAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/userinfo/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.d.ts.map

package/dist/rules/identifiers/userinfo/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/userinfo/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.ts"],"names":[],"mappings":";AAEA,wBA6BU"}

package/dist/rules/identifiers/userinfo/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.js ADDED Viewed

@@ -0,0 +1,19 @@
+import { httpRule, or, protocol } from '@thymian/core';
+export default httpRule('rfc9110/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-deprecation-of-userinfo-in-http')
+    .description(`A recipient SHOULD parse for userinfo and treat its presence as an error; it is likely being used to obscure the authority for the sake of phishing attacks.`)
+    .rule((ctx, opts, logger) => ctx.validateHttpTransactions(or(protocol('http'), protocol('https')), (req, res) => {
+    try {
+        const url = new URL(req.path, req.origin);
+        return ((!!url.username || !!url.password) &&
+            !(res.statusCode >= 400 && res.statusCode < 500));
+    }
+    catch (e) {
+        logger.error('Cannot run rule because of invalid URL:', e);
+        return false;
+    }
+}))
+    .done();
+//# sourceMappingURL=recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.js.map

package/dist/rules/identifiers/userinfo/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/userinfo/recipient-should-treat-userinfo-in-uri-from-untrusted-source-as-error.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEvD,eAAe,QAAQ,CACrB,+EAA+E,CAChF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CACF,kFAAkF,CACnF;KACA,WAAW,CACV,8JAA8J,CAC/J;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,wBAAwB,CAC1B,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EACvC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACX,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,OAAO,CACL,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/identifiers/userinfo/sender-must-not-generate-userinfo-in-uri.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-not-generate-userinfo-in-uri.rule.d.ts.map

package/dist/rules/identifiers/userinfo/sender-must-not-generate-userinfo-in-uri.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"sender-must-not-generate-userinfo-in-uri.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/identifiers/userinfo/sender-must-not-generate-userinfo-in-uri.rule.ts"],"names":[],"mappings":";AAEA,wBAwBU"}

package/dist/rules/identifiers/userinfo/sender-must-not-generate-userinfo-in-uri.rule.js ADDED Viewed

@@ -0,0 +1,18 @@
+import { httpRule, or, protocol } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-not-generate-userinfo-in-uri')
+    .severity('error')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-deprecation-of-userinfo-in-http')
+    .description("A sender MUST NOT generate the userinfo subcomponent (and its '@' delimiter) when an 'http' or 'https' URI reference is generated within a message as a target URI or field value.")
+    .rule((ctx, opts, logger) => ctx.validateCommonHttpTransactions(or(protocol('http'), protocol('https')), (req) => {
+    try {
+        const url = new URL(req.path, req.origin);
+        return !!url.username || !!url.password;
+    }
+    catch (e) {
+        logger.error('Cannot run rule because of invalid URL:', e);
+        return false;
+    }
+}))
+    .done();
+//# sourceMappingURL=sender-must-not-generate-userinfo-in-uri.rule.js.map

package/dist/rules/identifiers/userinfo/sender-must-not-generate-userinfo-in-uri.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sender-must-not-generate-userinfo-in-uri.rule.js","sourceRoot":"","sources":["../../../../src/rules/identifiers/userinfo/sender-must-not-generate-userinfo-in-uri.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEvD,eAAe,QAAQ,CAAC,kDAAkD,CAAC;KACxE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CACF,kFAAkF,CACnF;KACA,WAAW,CACV,oLAAoL,CACrL;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAC1B,GAAG,CAAC,8BAA8B,CAChC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EACvC,CAAC,GAAG,EAAE,EAAE;IACN,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAE1C,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/client-must-retain-knowledge-of-request.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-retain-knowledge-of-request.rule.d.ts.map

package/dist/rules/message-abstraction/client-must-retain-knowledge-of-request.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"client-must-retain-knowledge-of-request.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/message-abstraction/client-must-retain-knowledge-of-request.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/message-abstraction/client-must-retain-knowledge-of-request.rule.js ADDED Viewed

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-retain-knowledge-of-request')
+    .severity('error')
+    .type('informational')
+    .appliesTo('client')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-abstraction')
+    .description('Messages are intended to be "self-descriptive": everything a recipient needs to know about the message can be determined by looking at the message itself, after decoding or reconstituting parts that have been compressed or elided in transit, without requiring an understanding of the sender\'s current application state (established via prior messages). However, a client MUST retain knowledge of the request when parsing, interpreting, or caching a corresponding response. For example, responses to the HEAD method look just like the beginning of a response to GET but cannot be parsed in the same manner.')
+    .summary('A client MUST retain knowledge of the request when parsing, interpreting, or caching a corresponding response.')
+    .done();
+//# sourceMappingURL=client-must-retain-knowledge-of-request.rule.js.map

package/dist/rules/message-abstraction/client-must-retain-knowledge-of-request.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"client-must-retain-knowledge-of-request.rule.js","sourceRoot":"","sources":["../../../src/rules/message-abstraction/client-must-retain-knowledge-of-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,iDAAiD,CAAC;KACvE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,sEAAsE,CAAC;KAC3E,WAAW,CACV,gmBAAgmB,CACjmB;KACA,OAAO,CACN,gHAAgH,CACjH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/control-data/client-may-send-lower-version-for-broken-servers.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-may-send-lower-version-for-broken-servers.rule.d.ts.map

package/dist/rules/message-abstraction/control-data/client-may-send-lower-version-for-broken-servers.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"client-may-send-lower-version-for-broken-servers.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/client-may-send-lower-version-for-broken-servers.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/message-abstraction/control-data/client-may-send-lower-version-for-broken-servers.rule.js ADDED Viewed

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-may-send-lower-version-for-broken-servers')
+    .severity('hint')
+    .type('informational')
+    .appliesTo('client')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.2')
+    .description('A client MAY send a lower request version if it is known that the server incorrectly implements the HTTP specification, but only after the client has attempted at least one normal request and determined from the response status code or header fields (e.g., Server) that the server improperly handles higher request versions.')
+    .summary('Clients MAY send lower HTTP version for servers that improperly handle higher versions.')
+    .done();
+//# sourceMappingURL=client-may-send-lower-version-for-broken-servers.rule.js.map

package/dist/rules/message-abstraction/control-data/client-may-send-lower-version-for-broken-servers.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"client-may-send-lower-version-for-broken-servers.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/client-may-send-lower-version-for-broken-servers.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,sUAAsU,CACvU;KACA,OAAO,CACN,yFAAyF,CAC1F;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/control-data/client-must-not-send-non-conformant-version.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-not-send-non-conformant-version.rule.d.ts.map

package/dist/rules/message-abstraction/control-data/client-must-not-send-non-conformant-version.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"client-must-not-send-non-conformant-version.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/client-must-not-send-non-conformant-version.rule.ts"],"names":[],"mappings":";AAEA,wBASU"}

package/dist/rules/message-abstraction/control-data/client-must-not-send-non-conformant-version.rule.js ADDED Viewed

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-not-send-non-conformant-version')
+    .severity('error')
+    .type('informational')
+    .appliesTo('client')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.2')
+    .description('A client MUST NOT send a version to which it is not conformant. A client SHOULD send a request version equal to the highest version to which the client is conformant and whose major version is no higher than the highest version supported by the server, if this is known.')
+    .summary('Clients MUST NOT send HTTP version they are not conformant to.')
+    .done();
+//# sourceMappingURL=client-must-not-send-non-conformant-version.rule.js.map

package/dist/rules/message-abstraction/control-data/client-must-not-send-non-conformant-version.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"client-must-not-send-non-conformant-version.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/client-must-not-send-non-conformant-version.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,qDAAqD,CAAC;KAC3E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,gRAAgR,CACjR;KACA,OAAO,CAAC,gEAAgE,CAAC;KACzE,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/control-data/client-should-send-highest-conformant-version.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-should-send-highest-conformant-version.rule.d.ts.map

package/dist/rules/message-abstraction/control-data/client-should-send-highest-conformant-version.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"client-should-send-highest-conformant-version.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/client-should-send-highest-conformant-version.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/message-abstraction/control-data/client-should-send-highest-conformant-version.rule.js ADDED Viewed

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-should-send-highest-conformant-version')
+    .severity('warn')
+    .type('informational')
+    .appliesTo('client')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.2')
+    .description('A client SHOULD send a request version equal to the highest version to which the client is conformant and whose major version is no higher than the highest version supported by the server, if this is known.')
+    .summary('Clients SHOULD send highest conformant HTTP version supported by server.')
+    .done();
+//# sourceMappingURL=client-should-send-highest-conformant-version.rule.js.map

package/dist/rules/message-abstraction/control-data/client-should-send-highest-conformant-version.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"client-should-send-highest-conformant-version.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/client-should-send-highest-conformant-version.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,uDAAuD,CAAC;KAC7E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,gNAAgN,CACjN;KACA,OAAO,CACN,0EAA0E,CAC3E;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/control-data/recipient-should-process-higher-minor-version-as-highest-known.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-should-process-higher-minor-version-as-highest-known.rule.d.ts.map

package/dist/rules/message-abstraction/control-data/recipient-should-process-higher-minor-version-as-highest-known.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"recipient-should-process-higher-minor-version-as-highest-known.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/recipient-should-process-higher-minor-version-as-highest-known.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/message-abstraction/control-data/recipient-should-process-higher-minor-version-as-highest-known.rule.js ADDED Viewed

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/recipient-should-process-higher-minor-version-as-highest-known')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.2')
+    .description('A recipient that receives a message with a major version number that it implements and a minor version number higher than what it implements SHOULD process the message as if it were in the highest minor version within that major version to which the recipient is conformant. A recipient can assume that a message with a higher minor version, when sent to a recipient that has not yet indicated support for that higher version, is sufficiently backwards-compatible to be safely processed by any implementation of the same major version.')
+    .summary('Recipients SHOULD process messages with higher minor versions as highest known minor version.')
+    .done();
+//# sourceMappingURL=recipient-should-process-higher-minor-version-as-highest-known.rule.js.map

package/dist/rules/message-abstraction/control-data/recipient-should-process-higher-minor-version-as-highest-known.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"recipient-should-process-higher-minor-version-as-highest-known.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/recipient-should-process-higher-minor-version-as-highest-known.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,yhBAAyhB,CAC1hB;KACA,OAAO,CACN,+FAA+F,CAChG;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/control-data/server-must-not-send-non-conformant-version.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-not-send-non-conformant-version.rule.d.ts.map

package/dist/rules/message-abstraction/control-data/server-must-not-send-non-conformant-version.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"server-must-not-send-non-conformant-version.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/server-must-not-send-non-conformant-version.rule.ts"],"names":[],"mappings":";AAEA,wBASU"}

package/dist/rules/message-abstraction/control-data/server-must-not-send-non-conformant-version.rule.js ADDED Viewed

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-not-send-non-conformant-version')
+    .severity('error')
+    .type('informational')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.2')
+    .description("A server SHOULD send a response version equal to the highest version to which the server is conformant that has a major version less than or equal to the one received in the request. A server MUST NOT send a version to which it is not conformant. A server can send a 505 (HTTP Version Not Supported) response if it wishes, for any reason, to refuse service of the client's major protocol version.")
+    .summary('Servers MUST NOT send HTTP version they are not conformant to.')
+    .done();
+//# sourceMappingURL=server-must-not-send-non-conformant-version.rule.js.map

package/dist/rules/message-abstraction/control-data/server-must-not-send-non-conformant-version.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"server-must-not-send-non-conformant-version.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/server-must-not-send-non-conformant-version.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,qDAAqD,CAAC;KAC3E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,8YAA8Y,CAC/Y;KACA,OAAO,CAAC,gEAAgE,CAAC;KACzE,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/control-data/server-should-send-response-version-equal-to-highest-conformant.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-should-send-response-version-equal-to-highest-conformant.rule.d.ts.map

package/dist/rules/message-abstraction/control-data/server-should-send-response-version-equal-to-highest-conformant.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"server-should-send-response-version-equal-to-highest-conformant.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/server-should-send-response-version-equal-to-highest-conformant.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/message-abstraction/control-data/server-should-send-response-version-equal-to-highest-conformant.rule.js ADDED Viewed

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-should-send-response-version-equal-to-highest-conformant')
+    .severity('warn')
+    .type('informational')
+    .appliesTo('server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.2')
+    .description('A server SHOULD send a response version equal to the highest version to which the server is conformant that has a major version less than or equal to the one received in the request.')
+    .summary('Servers SHOULD send response version matching highest conformant version compatible with request.')
+    .done();
+//# sourceMappingURL=server-should-send-response-version-equal-to-highest-conformant.rule.js.map

package/dist/rules/message-abstraction/control-data/server-should-send-response-version-equal-to-highest-conformant.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"server-should-send-response-version-equal-to-highest-conformant.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/control-data/server-should-send-response-version-equal-to-highest-conformant.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,wLAAwL,CACzL;KACA,OAAO,CACN,mGAAmG,CACpG;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/framing/each-http-version-defines-own-framing.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=each-http-version-defines-own-framing.rule.d.ts.map

package/dist/rules/message-abstraction/framing/each-http-version-defines-own-framing.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"each-http-version-defines-own-framing.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/framing/each-http-version-defines-own-framing.rule.ts"],"names":[],"mappings":";AAEA,wBAQU"}

package/dist/rules/message-abstraction/framing/each-http-version-defines-own-framing.rule.js ADDED Viewed

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/each-http-version-defines-own-framing')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.1')
+    .description('Message framing indicates how each message begins and ends, such that each message can be distinguished from other messages or noise on the same connection. Each major version of HTTP defines its own framing mechanism.')
+    .summary('Each HTTP version defines its own message framing mechanism.')
+    .done();
+//# sourceMappingURL=each-http-version-defines-own-framing.rule.js.map

package/dist/rules/message-abstraction/framing/each-http-version-defines-own-framing.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"each-http-version-defines-own-framing.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/framing/each-http-version-defines-own-framing.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,+CAA+C,CAAC;KACrE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,4NAA4N,CAC7N;KACA,OAAO,CAAC,8DAA8D,CAAC;KACvE,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/framing/implicit-framing-allowed-for-backwards-compatibility.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=implicit-framing-allowed-for-backwards-compatibility.rule.d.ts.map

package/dist/rules/message-abstraction/framing/implicit-framing-allowed-for-backwards-compatibility.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"implicit-framing-allowed-for-backwards-compatibility.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/framing/implicit-framing-allowed-for-backwards-compatibility.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/message-abstraction/framing/implicit-framing-allowed-for-backwards-compatibility.rule.js ADDED Viewed

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/implicit-framing-allowed-for-backwards-compatibility')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.1')
+    .description('HTTP/0.9 and early deployments of HTTP/1.0 used closure of the underlying connection to end a response. For backwards compatibility, this implicit framing is also allowed in HTTP/1.1. However, implicit framing can fail to distinguish an incomplete response if the connection closes early. For that reason, almost all modern implementations use explicit framing in the form of length-delimited sequences of message data.')
+    .summary('Implicit framing (connection closure) is allowed for backwards compatibility but discouraged.')
+    .done();
+//# sourceMappingURL=implicit-framing-allowed-for-backwards-compatibility.rule.js.map

package/dist/rules/message-abstraction/framing/implicit-framing-allowed-for-backwards-compatibility.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"implicit-framing-allowed-for-backwards-compatibility.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/framing/implicit-framing-allowed-for-backwards-compatibility.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,8DAA8D,CAC/D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,qaAAqa,CACta;KACA,OAAO,CACN,+FAA+F,CAChG;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/framing/message-complete-when-framed-octets-available.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=message-complete-when-framed-octets-available.rule.d.ts.map

package/dist/rules/message-abstraction/framing/message-complete-when-framed-octets-available.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"message-complete-when-framed-octets-available.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/framing/message-complete-when-framed-octets-available.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-abstraction/framing/message-complete-when-framed-octets-available.rule.js ADDED Viewed

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/message-complete-when-framed-octets-available')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-6.1')
+    .description('A message is considered "complete" when all of the octets indicated by its framing are available. Note that, when no explicit framing is used, a response message that is ended by the underlying connection\'s close is considered complete even though it might be indistinguishable from an incomplete response, unless a transport-level error indicates that it is not complete.')
+    .summary('Message is complete when all framed octets are available or connection closes cleanly.')
+    .done();
+//# sourceMappingURL=message-complete-when-framed-octets-available.rule.js.map

package/dist/rules/message-abstraction/framing/message-complete-when-framed-octets-available.rule.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"message-complete-when-framed-octets-available.rule.js","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/framing/message-complete-when-framed-octets-available.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,uDAAuD,CAAC;KAC7E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,uXAAuX,CACxX;KACA,OAAO,CACN,wFAAwF,CACzF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-abstraction/header-fields/header-field-term-for-header-section-only-fields.rule.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=header-field-term-for-header-section-only-fields.rule.d.ts.map

package/dist/rules/message-abstraction/header-fields/header-field-term-for-header-section-only-fields.rule.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"header-field-term-for-header-section-only-fields.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/message-abstraction/header-fields/header-field-term-for-header-section-only-fields.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}