@thymian/rules-rfc-9110 0.0.0-PLACEHOLDER

package/dist/rules/message-context/request-context/expect/origin-server-must-not-wait-for-content-before-100-continue.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-not-wait-for-content-before-100-continue.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/origin-server-must-not-wait-for-content-before-100-continue.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-not-wait-for-content-before-100-continue.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/origin-server-must-not-wait-for-content-before-100-continue.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/expect/origin-server-must-not-wait-for-content-before-100-continue.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-not-wait-for-content-before-100-continue')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('The origin server MUST NOT wait for the content before sending the 100 (Continue) response.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-must-not-wait-for-content-before-100-continue.rule.js.map

package/dist/rules/message-context/request-context/expect/origin-server-must-not-wait-for-content-before-100-continue.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-not-wait-for-content-before-100-continue.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/origin-server-must-not-wait-for-content-before-100-continue.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,6FAA6F,CAC9F;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/origin-server-must-respond-immediately-to-100-continue-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-must-respond-immediately-to-100-continue-request.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/origin-server-must-respond-immediately-to-100-continue-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-respond-immediately-to-100-continue-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/origin-server-must-respond-immediately-to-100-continue-request.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/expect/origin-server-must-respond-immediately-to-100-continue-request.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-must-respond-immediately-to-100-continue-request')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('Upon receiving an HTTP/1.1 (or later) request that has a method, target URI, and complete header section that contains a 100-continue expectation and an indication that request content will follow, an origin server MUST send either an immediate response with a final status code, or an immediate 100 (Continue) response.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-must-respond-immediately-to-100-continue-request.rule.js.map

package/dist/rules/message-context/request-context/expect/origin-server-must-respond-immediately-to-100-continue-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-must-respond-immediately-to-100-continue-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/origin-server-must-respond-immediately-to-100-continue-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,kUAAkU,CACnU;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/proxy-may-generate-immediate-100-response.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-may-generate-immediate-100-response.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/proxy-may-generate-immediate-100-response.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-may-generate-immediate-100-response.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/proxy-may-generate-immediate-100-response.rule.ts"],"names":[],"mappings":";AAEA,wBAQU"}

package/dist/rules/message-context/request-context/expect/proxy-may-generate-immediate-100-response.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-may-generate-immediate-100-response')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('If the proxy believes (from configuration or past interaction) that the next inbound server only supports HTTP/1.0, the proxy MAY generate an immediate 100 (Continue) response to encourage the client to begin sending the content.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-may-generate-immediate-100-response.rule.js.map

package/dist/rules/message-context/request-context/expect/proxy-may-generate-immediate-100-response.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-may-generate-immediate-100-response.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/proxy-may-generate-immediate-100-response.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,mDAAmD,CAAC;KACzE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,uOAAuO,CACxO;KACA,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/proxy-must-handle-100-continue-expectation.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-handle-100-continue-expectation.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/proxy-must-handle-100-continue-expectation.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-handle-100-continue-expectation.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/proxy-must-handle-100-continue-expectation.rule.ts"],"names":[],"mappings":";AAEA,wBAQU"}

package/dist/rules/message-context/request-context/expect/proxy-must-handle-100-continue-expectation.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/proxy-must-handle-100-continue-expectation')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('Upon receiving an HTTP/1.1 (or later) request that has a method, target URI, and complete header section that contains a 100-continue expectation and indicates a request content will follow, a proxy MUST either send an immediate response with a final status code, or forward the request toward the origin server.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-must-handle-100-continue-expectation.rule.js.map

package/dist/rules/message-context/request-context/expect/proxy-must-handle-100-continue-expectation.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-handle-100-continue-expectation.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/proxy-must-handle-100-continue-expectation.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,oDAAoD,CAAC;KAC1E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,0TAA0T,CAC3T;KACA,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/server-may-omit-sending-100-response-if-already-received-content.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-may-omit-sending-100-response-if-already-received-content.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/server-may-omit-sending-100-response-if-already-received-content.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-omit-sending-100-response-if-already-received-content.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-may-omit-sending-100-response-if-already-received-content.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/expect/server-may-omit-sending-100-response-if-already-received-content.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-may-omit-sending-100-response-if-already-received-content')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('A server MAY omit sending a 100 (Continue) response if it has already received some or all of the content for the corresponding request, or if the framing indicates that there is no content.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-may-omit-sending-100-response-if-already-received-content.rule.js.map

package/dist/rules/message-context/request-context/expect/server-may-omit-sending-100-response-if-already-received-content.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-omit-sending-100-response-if-already-received-content.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-may-omit-sending-100-response-if-already-received-content.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0EAA0E,CAC3E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,gMAAgM,CACjM;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.ts"],"names":[],"mappings":";AAGA,wBAmBU"}

package/dist/rules/message-context/request-context/expect/server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.js

@@ -0,0 +1,11 @@
+import { and, not, requestHeader, statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-may-respond-with-417-response-for-other-expect-than-100-continue')
+    .severity('hint')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('A server that receives an Expect field value containing a member other than 100-continue MAY respond with a 417 (Expectation Failed) status code to indicate that the unexpected expectation cannot be met.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateHttpTransactions(and(requestHeader('expect'), not(requestHeader('expect', '100-continue')), not(statusCode(417)))))
+    .done();
+//# sourceMappingURL=server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.js.map

package/dist/rules/message-context/request-context/expect/server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-may-respond-with-417-response-for-other-expect-than-100-continue.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,iFAAiF,CAClF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,6MAA6M,CAC9M;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CACD,aAAa,CAAC,QAAQ,CAAC,EACvB,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,EAC5C,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CACrB,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/server-must-ignore-100-continue-in-http-1.0.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-ignore-100-continue-in-http-1.0.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/server-must-ignore-100-continue-in-http-1.0.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-ignore-100-continue-in-http-1.0.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-must-ignore-100-continue-in-http-1.0.rule.ts"],"names":[],"mappings":";AAGA,wBAQU"}

package/dist/rules/message-context/request-context/expect/server-must-ignore-100-continue-in-http-1.0.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+// could be analytics at some point --> we should add the HTTP to the analytics context
+export default httpRule('rfc9110/server-must-ignore-100-continue-in-http-1.0')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('A server that receives a 100-continue expectation in an HTTP/1.0 request MUST ignore that expectation.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-must-ignore-100-continue-in-http-1.0.rule.js.map

package/dist/rules/message-context/request-context/expect/server-must-ignore-100-continue-in-http-1.0.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-ignore-100-continue-in-http-1.0.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-must-ignore-100-continue-in-http-1.0.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,uFAAuF;AACvF,eAAe,QAAQ,CAAC,qDAAqD,CAAC;KAC3E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,wGAAwG,CACzG;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/server-must-send-final-status-after-100-continue.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-send-final-status-after-100-continue.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/server-must-send-final-status-after-100-continue.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-final-status-after-100-continue.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-must-send-final-status-after-100-continue.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/expect/server-must-send-final-status-after-100-continue.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-send-final-status-after-100-continue')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('A server that sends a 100 (Continue) response MUST ultimately send a final status code, once it receives and processes the request content, unless the connection is closed prematurely.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-must-send-final-status-after-100-continue.rule.js.map

package/dist/rules/message-context/request-context/expect/server-must-send-final-status-after-100-continue.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-send-final-status-after-100-continue.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-must-send-final-status-after-100-continue.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,0LAA0L,CAC3L;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/expect/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.d.ts.map

package/dist/rules/message-context/request-context/expect/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/expect/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('A server that responds with a final status code before reading the entire request content SHOULD indicate whether it intends to close the connection (e.g., see Section 9.6 of [HTTP/1.1]) or continue reading the request content.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.js.map

package/dist/rules/message-context/request-context/expect/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/expect/server-should-indicate-if-closing-the-connection-when-sending-final-status-code-without-full-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,8GAA8G,CAC/G;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,qOAAqO,CACtO;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/from/robotic-user-agent-should-send-valid-from-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=robotic-user-agent-should-send-valid-from-header.rule.d.ts.map

package/dist/rules/message-context/request-context/from/robotic-user-agent-should-send-valid-from-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"robotic-user-agent-should-send-valid-from-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/from/robotic-user-agent-should-send-valid-from-header.rule.ts"],"names":[],"mappings":";AAGA,wBA0BU"}

package/dist/rules/message-context/request-context/from/robotic-user-agent-should-send-valid-from-header.rule.js

@@ -0,0 +1,21 @@
+import { and, getHeader, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/robotic-user-agent-should-send-valid-from-header')
+    .severity('warn')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-from')
+    .description('A robotic user agent SHOULD send a valid From header field so that the person responsible for running the robot can be contacted if problems occur on servers.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(requestHeader('from'))))
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(and(requestHeader('from')), (request) => {
+    const from = getHeader(request.headers, 'from');
+    if (typeof from !== 'string') {
+        return false;
+    }
+    // when ABNF support is added, we should replace this regex with the ABNF defined in RFC 5322
+    // Basic email validation
+    const emailRegex = /^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/;
+    return !emailRegex.test(from);
+}))
+    .done();
+//# sourceMappingURL=robotic-user-agent-should-send-valid-from-header.rule.js.map

package/dist/rules/message-context/request-context/from/robotic-user-agent-should-send-valid-from-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"robotic-user-agent-should-send-valid-from-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/from/robotic-user-agent-should-send-valid-from-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,uDAAuD,CAAC;KAC5D,WAAW,CACV,gKAAgK,CACjK;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAC7E,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEhD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IAC7F,yBAAyB;IACzB,MAAM,UAAU,GACd,sIAAsI,CAAC;IACzI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/from/server-should-not-use-from-for-authentication.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-should-not-use-from-for-authentication.rule.d.ts.map

package/dist/rules/message-context/request-context/from/server-should-not-use-from-for-authentication.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-should-not-use-from-for-authentication.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/from/server-should-not-use-from-for-authentication.rule.ts"],"names":[],"mappings":";AAEA,wBAQU"}

package/dist/rules/message-context/request-context/from/server-should-not-use-from-for-authentication.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-should-not-use-from-for-authentication')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-from')
+    .description('A server SHOULD NOT use the From header field for access control or authentication, since its value is expected to be visible to anyone receiving or observing the request and is often recorded within logfiles and error reports without any expectation of privacy.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-should-not-use-from-for-authentication.rule.js.map

package/dist/rules/message-context/request-context/from/server-should-not-use-from-for-authentication.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-should-not-use-from-for-authentication.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/from/server-should-not-use-from-for-authentication.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,uDAAuD,CAAC;KAC7E,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,uDAAuD,CAAC;KAC5D,WAAW,CACV,wQAAwQ,CACzQ;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/from/user-agent-should-not-send-from-without-configuration.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-not-send-from-without-configuration.rule.d.ts.map

package/dist/rules/message-context/request-context/from/user-agent-should-not-send-from-without-configuration.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-send-from-without-configuration.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/from/user-agent-should-not-send-from-without-configuration.rule.ts"],"names":[],"mappings":";AAGA,wBAWU"}

package/dist/rules/message-context/request-context/from/user-agent-should-not-send-from-without-configuration.rule.js

@@ -0,0 +1,11 @@
+import { requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-not-send-from-without-configuration')
+    .severity('warn')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-from')
+    .description("A user agent SHOULD NOT send a From header field without explicit configuration by the user, since that might conflict with the user's privacy interests or their site's security policy.")
+    .appliesTo('user-agent')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(requestHeader('from')))
+    .done();
+//# sourceMappingURL=user-agent-should-not-send-from-without-configuration.rule.js.map

package/dist/rules/message-context/request-context/from/user-agent-should-not-send-from-without-configuration.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-send-from-without-configuration.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/from/user-agent-should-not-send-from-without-configuration.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,+DAA+D,CAChE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,uDAAuD,CAAC;KAC5D,WAAW,CACV,2LAA2L,CAC5L;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;KACxE,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/referer/intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.d.ts.map

package/dist/rules/message-context/request-context/referer/intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.ts"],"names":[],"mappings":";AAGA,wBAUU"}

package/dist/rules/message-context/request-context/referer/intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+// could be analytics at some point
+export default httpRule('rfc9110/intermediary-should-not-modify-referer-for-same-scheme-and-host')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-referer')
+    .description('An intermediary SHOULD NOT modify or delete the Referer header field when the field value shares the same scheme and host as the target URI.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.js.map

package/dist/rules/message-context/request-context/referer/intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/intermediary-should-not-modify-referer-for-same-scheme-and-host.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,mCAAmC;AACnC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,8IAA8I,CAC/I;KACA,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/referer/user-agent-may-truncate-parts-other-than-referring-origin.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-may-truncate-parts-other-than-referring-origin.rule.d.ts.map

package/dist/rules/message-context/request-context/referer/user-agent-may-truncate-parts-other-than-referring-origin.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-may-truncate-parts-other-than-referring-origin.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-may-truncate-parts-other-than-referring-origin.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/referer/user-agent-may-truncate-parts-other-than-referring-origin.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-may-truncate-parts-other-than-referring-origin')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-expect')
+    .description('The Referer header field value need not convey the full URI of the referring resource; a user agent MAY truncate parts other than the referring origin.')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-may-truncate-parts-other-than-referring-origin.rule.js.map

package/dist/rules/message-context/request-context/referer/user-agent-may-truncate-parts-other-than-referring-origin.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-may-truncate-parts-other-than-referring-origin.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-may-truncate-parts-other-than-referring-origin.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,mEAAmE,CACpE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,yJAAyJ,CAC1J;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/referer/user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.d.ts.map

package/dist/rules/message-context/request-context/referer/user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/referer/user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-must-exclude-referer-or-send-about-blank-for-no-source')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-referer')
+    .description('If the target URI was obtained from a source that does not have its own URI (e.g., input from the user keyboard, or an entry within the user\'s bookmarks/favorites), the user agent MUST either exclude the Referer header field or send it with a value of "about:blank".')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.js.map

package/dist/rules/message-context/request-context/referer/user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-must-exclude-referer-or-send-about-blank-for-no-source.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,2EAA2E,CAC5E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,6QAA6Q,CAC9Q;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/referer/user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.d.ts.map

package/dist/rules/message-context/request-context/referer/user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.ts"],"names":[],"mappings":";AAGA,wBAyCU"}

package/dist/rules/message-context/request-context/referer/user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.js

@@ -0,0 +1,37 @@
+import { getHeader, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-must-not-include-fragment-or-userinfo-in-referer')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-referer')
+    .description('A user agent MUST NOT include the fragment and userinfo components of the URI reference, if any, when generating the Referer field value.')
+    .appliesTo('user-agent')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(requestHeader('referer'), (request) => {
+    const referer = getHeader(request.headers, 'referer');
+    if (typeof referer !== 'string') {
+        return false;
+    }
+    // Check for fragment (#)
+    if (referer.includes('#')) {
+        return true;
+    }
+    // Check for userinfo (username:password@ or username@)
+    // Userinfo appears before the host in URLs like: http://user:pass@host/path
+    try {
+        const url = new URL(referer);
+        // URL.username or URL.password being non-empty indicates userinfo presence
+        if (url.username || url.password) {
+            return true;
+        }
+    }
+    catch {
+        // If URL parsing fails, check for @ before the first / after ://
+        const match = referer.match(/^[^:]+:\/\/([^/]+)/);
+        if (match && match[1]?.includes('@')) {
+            return true;
+        }
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.js.map

package/dist/rules/message-context/request-context/referer/user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-must-not-include-fragment-or-userinfo-in-referer.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,2IAA2I,CAC5I;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,2EAA2E;QAC3E,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAClD,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/referer/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.d.ts.map

package/dist/rules/message-context/request-context/referer/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.ts"],"names":[],"mappings":";AAGA,wBAeU"}

package/dist/rules/message-context/request-context/referer/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.js

@@ -0,0 +1,11 @@
+import { and, protocol, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-referer')
+    .description('A user agent MUST NOT send a Referer header field in an unsecured HTTP request if the referring resource was accessed with a secure protocol.')
+    .appliesTo('user-agent')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(and(requestHeader('referer'), protocol('http'))))
+    .done();
+//# sourceMappingURL=user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.js.map

package/dist/rules/message-context/request-context/referer/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-must-not-send-referer-in-unsecured-request-from-secure-resource.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,oFAAoF,CACrF;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,+IAA+I,CAChJ;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAChD,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/referer/user-agent-should-not-send-referer-for-secure-to-insecure.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-not-send-referer-for-secure-to-insecure.rule.d.ts.map

package/dist/rules/message-context/request-context/referer/user-agent-should-not-send-referer-for-secure-to-insecure.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-send-referer-for-secure-to-insecure.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-should-not-send-referer-for-secure-to-insecure.rule.ts"],"names":[],"mappings":";AAGA,wBA+BU"}

package/dist/rules/message-context/request-context/referer/user-agent-should-not-send-referer-for-secure-to-insecure.rule.js

@@ -0,0 +1,34 @@
+import { getHeader, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-not-send-referer-for-secure-to-insecure')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-referer')
+    .description('A user agent SHOULD NOT send a Referer header field if the referring resource was accessed with a secure protocol and the request target has an origin differing from that of the referring resource, unless the referring resource explicitly allows Referer to be sent.')
+    .appliesTo('user-agent')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(requestHeader('referer'), (request) => {
+    const referer = getHeader(request.headers, 'referer');
+    if (typeof referer !== 'string') {
+        return false;
+    }
+    if (!referer?.toLowerCase().startsWith('https://')) {
+        return false;
+    }
+    // Extract origins
+    const requestUrl = request.origin.toLowerCase();
+    const refererOrigin = extractOrigin(referer);
+    const requestOrigin = extractOrigin(requestUrl);
+    // Violation: secure referer with different origin
+    return refererOrigin !== requestOrigin;
+}))
+    .done();
+function extractOrigin(url) {
+    try {
+        const urlObj = new URL(url);
+        return `${urlObj.protocol}//${urlObj.host}`;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=user-agent-should-not-send-referer-for-secure-to-insecure.rule.js.map

package/dist/rules/message-context/request-context/referer/user-agent-should-not-send-referer-for-secure-to-insecure.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-send-referer-for-secure-to-insecure.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/referer/user-agent-should-not-send-referer-for-secure-to-insecure.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,mEAAmE,CACpE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,2QAA2Q,CAC5Q;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEtD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAEhD,kDAAkD;IAClD,OAAO,aAAa,KAAK,aAAa,CAAC;AACzC,CAAC,CAAC,CACH;KACA,IAAI,EAAE,CAAC;AAEV,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/rules/message-context/request-context/te/sender-must-send-te-connection-option-with-te-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-send-te-connection-option-with-te-header.rule.d.ts.map

package/dist/rules/message-context/request-context/te/sender-must-send-te-connection-option-with-te-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-send-te-connection-option-with-te-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/te/sender-must-send-te-connection-option-with-te-header.rule.ts"],"names":[],"mappings":";AAGA,wBAeU"}

package/dist/rules/message-context/request-context/te/sender-must-send-te-connection-option-with-te-header.rule.js

@@ -0,0 +1,11 @@
+import { and, not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-send-te-connection-option-with-te-header')
+    .severity('error')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-te')
+    .description('A sender of TE MUST also send a "TE" connection option within the Connection header field to inform intermediaries not to forward this field.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(requestHeader('te'), not(requestHeader('connection')))))
+    .done();
+//# sourceMappingURL=sender-must-send-te-connection-option-with-te-header.rule.js.map

package/dist/rules/message-context/request-context/te/sender-must-send-te-connection-option-with-te-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-send-te-connection-option-with-te-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/te/sender-must-send-te-connection-option-with-te-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,8DAA8D,CAC/D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,qDAAqD,CAAC;KAC1D,WAAW,CACV,+IAA+I,CAChJ;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAC3D,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/user-agent/sender-must-not-generate-advertising-in-product-identifier.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-not-generate-advertising-in-product-identifier.rule.d.ts.map

package/dist/rules/message-context/request-context/user-agent/sender-must-not-generate-advertising-in-product-identifier.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-not-generate-advertising-in-product-identifier.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/sender-must-not-generate-advertising-in-product-identifier.rule.ts"],"names":[],"mappings":";AAGA,wBAoCU"}