@thymian/rules-rfc-9110 0.1.0

package/dist/rules/representation-data-and-metadata/validator-fields/etag/sender-may-send-etag-in-trailer.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-may-send-etag-in-trailer.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/etag/sender-may-send-etag-in-trailer.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,yCAAyC,CAAC;KAC/D,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;KACzB,SAAS,CAAC,QAAQ,CAAC;KACnB,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV;4GACwG,CACzG;KACA,OAAO,CACN,4EAA4E,CAC7E;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EACzB,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAC7B,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-obtain-last-modified-close-to-date-generation.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-obtain-last-modified-close-to-date-generation.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-obtain-last-modified-close-to-date-generation.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-obtain-last-modified-close-to-date-generation.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-obtain-last-modified-close-to-date-generation.rule.ts"],"names":[],"mappings":";AAEA,wBAeU"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-obtain-last-modified-close-to-date-generation.rule.js

@@ -0,0 +1,12 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-obtain-last-modified-close-to-date-generation')
+    .severity('off')
+    .type('informational')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.2.1')
+    .description(`An origin server SHOULD obtain the Last-Modified value of the representation as close as possible to the time
+    that it generates the Date field value for its response. This allows a recipient to make an accurate assessment
+    of the representation's modification time, especially if the representation changes near the time that the response is generated.`)
+    .summary('Origin servers SHOULD obtain Last-Modified close to Date generation time.')
+    .done();
+//# sourceMappingURL=origin-server-should-obtain-last-modified-close-to-date-generation.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-obtain-last-modified-close-to-date-generation.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-obtain-last-modified-close-to-date-generation.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-obtain-last-modified-close-to-date-generation.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4EAA4E,CAC7E;KACE,QAAQ,CAAC,KAAK,CAAC;KACf,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;sIAEkI,CACnI;KACA,OAAO,CACN,2EAA2E,CAC5E;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-send-last-modified.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-send-last-modified.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-send-last-modified.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-last-modified.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-send-last-modified.rule.ts"],"names":[],"mappings":";AAGA,wBAuBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-send-last-modified.rule.js

@@ -0,0 +1,18 @@
+import { and, not, responseHeader, statusCodeRange } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-send-last-modified')
+    .severity('warn')
+    .type('static', 'test', 'analytics')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.2.1')
+    .description(`An origin server SHOULD send Last-Modified for any selected representation for which a last modification date
+    can be reasonably and consistently determined, since its use in conditional requests and evaluating cache freshness
+    can substantially reduce unnecessary transfers and significantly improve service availability and scalability.`)
+    .summary('Origin servers SHOULD send Last-Modified header when modification date can be determined.')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(
+// Only for successful responses
+statusCodeRange(200, 299), 
+// Should have at least one validator
+not(responseHeader('last-modified')))))
+    .done();
+//# sourceMappingURL=origin-server-should-send-last-modified.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-send-last-modified.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-send-last-modified.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-should-send-last-modified.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,iDAAiD,CAAC;KACvE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;KACnC,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;mHAE+G,CAChH;KACA,OAAO,CACN,2FAA2F,CAC5F;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG;AACD,gCAAgC;AAChC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;AACzB,qCAAqC;AACrC,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CACrC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-with-clock-must-not-generate-future-last-modified.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-with-clock-must-not-generate-future-last-modified.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-with-clock-must-not-generate-future-last-modified.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-with-clock-must-not-generate-future-last-modified.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-with-clock-must-not-generate-future-last-modified.rule.ts"],"names":[],"mappings":";AAQA,wBAgDU"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-with-clock-must-not-generate-future-last-modified.rule.js

@@ -0,0 +1,34 @@
+import { and, getHeader, httpTransactionToLabel, responseHeader, } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-with-clock-must-not-generate-future-last-modified')
+    .severity('error')
+    .type('test', 'analytics')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.2.1')
+    .description(`An origin server with a clock MUST NOT generate a Last-Modified date that is later than the server's time of
+    message origination (Date). If the last modification time is derived from implementation-specific metadata that
+    evaluates to some time in the future, according to the origin server's clock, then the origin server MUST replace
+    that value with the message origination date.`)
+    .summary('Origin servers MUST NOT generate Last-Modified dates later than the Date header.')
+    .rule((ctx) => ctx.validateHttpTransactions(and(responseHeader('last-modified'), responseHeader('date')), (req, res) => {
+    const lastModifiedHeader = getHeader(res.headers, 'last-modified');
+    const dateHeader = getHeader(res.headers, 'date');
+    if (typeof lastModifiedHeader !== 'string' ||
+        typeof dateHeader !== 'string') {
+        return false;
+    }
+    const lastModifiedDate = new Date(lastModifiedHeader);
+    const dateValue = new Date(dateHeader);
+    if (isNaN(lastModifiedDate.getTime()) || isNaN(dateValue.getTime())) {
+        return false;
+    }
+    if (lastModifiedDate > dateValue) {
+        return {
+            message: `Last-Modified date (${lastModifiedHeader}) is later than Date header (${dateHeader})`,
+            location: httpTransactionToLabel(req, res),
+        };
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=origin-server-with-clock-must-not-generate-future-last-modified.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-with-clock-must-not-generate-future-last-modified.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-with-clock-must-not-generate-future-last-modified.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-with-clock-must-not-generate-future-last-modified.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,SAAS,EACT,sBAAsB,EACtB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;KACzB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;;kDAG8C,CAC/C;KACA,OAAO,CACN,kFAAkF,CACnF;KACA,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,EAC5D,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACX,MAAM,kBAAkB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAElD,IACE,OAAO,kBAAkB,KAAK,QAAQ;QACtC,OAAO,UAAU,KAAK,QAAQ,EAC9B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,gBAAgB,GAAG,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,uBAAuB,kBAAkB,gCAAgC,UAAU,GAAG;YAC/F,QAAQ,EAAE,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-without-clock-must-not-generate-last-modified.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-without-clock-must-not-generate-last-modified.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-without-clock-must-not-generate-last-modified.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-without-clock-must-not-generate-last-modified.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-without-clock-must-not-generate-last-modified.rule.ts"],"names":[],"mappings":";AAEA,wBAkBU"}

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-without-clock-must-not-generate-last-modified.rule.js

@@ -0,0 +1,15 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-without-clock-must-not-generate-last-modified')
+    .severity('error')
+    .type('informational')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.2.1')
+    .description(`An origin server without a clock MUST NOT generate a Last-Modified date for a response unless that date value
+    was assigned to the resource by some other system (presumably one with a clock).
+
+    Note: This rule cannot be automatically validated because it requires knowledge of whether the server has a clock
+    and whether Last-Modified values are generated locally or obtained from external systems. This must be verified
+    through code review and system configuration analysis.`)
+    .summary('Origin servers without a clock MUST NOT generate Last-Modified unless assigned by another system.')
+    .done();
+//# sourceMappingURL=origin-server-without-clock-must-not-generate-last-modified.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-without-clock-must-not-generate-last-modified.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-without-clock-must-not-generate-last-modified.rule.js","sourceRoot":"","sources":["../../../../../src/rules/representation-data-and-metadata/validator-fields/last-modified/origin-server-without-clock-must-not-generate-last-modified.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,qEAAqE,CACtE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV;;;;;2DAKuD,CACxD;KACA,OAAO,CACN,mGAAmG,CACpG;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/representation-data-and-metadata/validator-fields/origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.d.ts.map

package/dist/rules/representation-data-and-metadata/validator-fields/origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/validator-fields/origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.ts"],"names":[],"mappings":";AAEA,wBAeU"}

package/dist/rules/representation-data-and-metadata/validator-fields/origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.js

@@ -0,0 +1,12 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-change-weak-entity-tag-for-unacceptable-representations')
+    .severity('off')
+    .type('informational')
+    .appliesTo('origin server')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#section-8.8.1')
+    .description(`An origin server SHOULD change a weak entity tag whenever it considers prior representations to be unacceptable
+    as a substitute for the current representation. In other words, a weak entity tag ought to change whenever the
+    origin server wants caches to invalidate old responses.`)
+    .summary('Origin servers SHOULD change weak entity tags when prior representations are unacceptable.')
+    .done();
+//# sourceMappingURL=origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.js.map

package/dist/rules/representation-data-and-metadata/validator-fields/origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.js","sourceRoot":"","sources":["../../../../src/rules/representation-data-and-metadata/validator-fields/origin-server-should-change-weak-entity-tag-for-unacceptable-representations.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sFAAsF,CACvF;KACE,QAAQ,CAAC,KAAK,CAAC;KACf,IAAI,CAAC,eAAe,CAAC;KACrB,SAAS,CAAC,eAAe,CAAC;KAC1B,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV;;4DAEwD,CACzD;KACA,OAAO,CACN,4FAA4F,CAC7F;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/client-must-not-use-special-request-target-forms-with-other-methods.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-not-use-special-request-target-forms-with-other-methods.rule.d.ts.map

package/dist/rules/routing/client-must-not-use-special-request-target-forms-with-other-methods.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-use-special-request-target-forms-with-other-methods.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/routing/client-must-not-use-special-request-target-forms-with-other-methods.rule.ts"],"names":[],"mappings":";AAEA,wBAeU"}

package/dist/rules/routing/client-must-not-use-special-request-target-forms-with-other-methods.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-not-use-special-request-target-forms-with-other-methods')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-determining-the-target-reso')
+    .description('The special request target forms (host:port for CONNECT, single asterisk for OPTIONS) MUST NOT be used with other methods. For CONNECT, the request target is the host name and port number of the tunnel destination, separated by a colon. For OPTIONS, the request target can be a single asterisk ("*"). These forms MUST NOT be used with other methods.')
+    .summary('Special request target forms MUST NOT be used with methods other than CONNECT or OPTIONS.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-must-not-use-special-request-target-forms-with-other-methods.rule.js.map

package/dist/rules/routing/client-must-not-use-special-request-target-forms-with-other-methods.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-not-use-special-request-target-forms-with-other-methods.rule.js","sourceRoot":"","sources":["../../../src/rules/routing/client-must-not-use-special-request-target-forms-with-other-methods.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6EAA6E,CAC9E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CACF,8EAA8E,CAC/E;KACA,WAAW,CACV,+VAA+V,CAChW;KACA,OAAO,CACN,2FAA2F,CAC5F;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/client-should-continue-sending-request-when-response-arrives.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-should-continue-sending-request-when-response-arrives.rule.d.ts.map

package/dist/rules/routing/client-should-continue-sending-request-when-response-arrives.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-continue-sending-request-when-response-arrives.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/routing/client-should-continue-sending-request-when-response-arrives.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/client-should-continue-sending-request-when-response-arrives.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-should-continue-sending-request-when-response-arrives')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-response-correlation')
+    .description('A client that receives a response while it is still sending the associated request SHOULD continue sending that request unless it receives an explicit indication to the contrary. All responses can be sent at any time after a request is received, even if the request is not yet complete.')
+    .summary('Client SHOULD continue sending request even if response arrives early.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-should-continue-sending-request-when-response-arrives.rule.js.map

package/dist/rules/routing/client-should-continue-sending-request-when-response-arrives.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-continue-sending-request-when-response-arrives.rule.js","sourceRoot":"","sources":["../../../src/rules/routing/client-should-continue-sending-request-when-response-arrives.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,uEAAuE,CAAC;KAC5E,WAAW,CACV,gSAAgS,CACjS;KACA,OAAO,CACN,wEAAwE,CACzE;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/connection/intermediary-must-parse-and-remove-connection-fields.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-parse-and-remove-connection-fields.rule.d.ts.map

package/dist/rules/routing/message-forwarding/connection/intermediary-must-parse-and-remove-connection-fields.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-parse-and-remove-connection-fields.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/intermediary-must-parse-and-remove-connection-fields.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/message-forwarding/connection/intermediary-must-parse-and-remove-connection-fields.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-parse-and-remove-connection-fields')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connection')
+    .description("Intermediaries MUST parse a received Connection header field before a message is forwarded and, for each connection-option in this field, remove any header or trailer field(s) from the message with the same name as the connection-option, and then remove the Connection header field itself (or replace it with the intermediary's own control options for the forwarded message).")
+    .summary('Intermediary MUST parse and remove Connection fields before forwarding.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-must-parse-and-remove-connection-fields.rule.js.map

package/dist/rules/routing/message-forwarding/connection/intermediary-must-parse-and-remove-connection-fields.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-parse-and-remove-connection-fields.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/intermediary-must-parse-and-remove-connection-fields.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,8DAA8D,CAC/D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,yXAAyX,CAC1X;KACA,OAAO,CACN,yEAAyE,CAC1E;KACA,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/connection/intermediary-should-remove-known-hop-by-hop-fields.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-should-remove-known-hop-by-hop-fields.rule.d.ts.map

package/dist/rules/routing/message-forwarding/connection/intermediary-should-remove-known-hop-by-hop-fields.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-should-remove-known-hop-by-hop-fields.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/intermediary-should-remove-known-hop-by-hop-fields.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/connection/intermediary-should-remove-known-hop-by-hop-fields.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-should-remove-known-hop-by-hop-fields')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connection')
+    .description("Intermediaries SHOULD remove or replace fields that are known to require removal before forwarding, whether or not they appear as a connection-option, after applying those fields' semantics. This includes but is not limited to: Proxy-Connection, Keep-Alive, TE, Transfer-Encoding, and Upgrade.")
+    .summary('Intermediary SHOULD remove known hop-by-hop fields.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-should-remove-known-hop-by-hop-fields.rule.js.map

package/dist/rules/routing/message-forwarding/connection/intermediary-should-remove-known-hop-by-hop-fields.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-should-remove-known-hop-by-hop-fields.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/intermediary-should-remove-known-hop-by-hop-fields.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,4DAA4D,CAC7D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,uSAAuS,CACxS;KACA,OAAO,CAAC,qDAAqD,CAAC;KAC9D,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/connection/sender-must-list-connection-specific-field-in-connection-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-list-connection-specific-field-in-connection-header.rule.d.ts.map

package/dist/rules/routing/message-forwarding/connection/sender-must-list-connection-specific-field-in-connection-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-list-connection-specific-field-in-connection-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/sender-must-list-connection-specific-field-in-connection-header.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/routing/message-forwarding/connection/sender-must-list-connection-specific-field-in-connection-header.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-list-connection-specific-field-in-connection-header')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connection')
+    .description('When a field aside from Connection is used to supply control information for or about the current connection, the sender MUST list the corresponding field name within the Connection header field. This enables proper hop-by-hop vs end-to-end field distinction.')
+    .summary('Sender MUST list connection-specific fields in Connection header.')
+    .done();
+//# sourceMappingURL=sender-must-list-connection-specific-field-in-connection-header.rule.js.map

package/dist/rules/routing/message-forwarding/connection/sender-must-list-connection-specific-field-in-connection-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-list-connection-specific-field-in-connection-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/sender-must-list-connection-specific-field-in-connection-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,qQAAqQ,CACtQ;KACA,OAAO,CAAC,mEAAmE,CAAC;KAC5E,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/connection/sender-must-not-send-end-to-end-fields-as-connection-options.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-must-not-send-end-to-end-fields-as-connection-options.rule.d.ts.map

package/dist/rules/routing/message-forwarding/connection/sender-must-not-send-end-to-end-fields-as-connection-options.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-not-send-end-to-end-fields-as-connection-options.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/sender-must-not-send-end-to-end-fields-as-connection-options.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/routing/message-forwarding/connection/sender-must-not-send-end-to-end-fields-as-connection-options.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-not-send-end-to-end-fields-as-connection-options')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connection')
+    .description('A sender MUST NOT send a connection option corresponding to a field that is intended for all recipients of the content. For example, Cache-Control is never appropriate as a connection option. This ensures end-to-end fields are not incorrectly marked as hop-by-hop.')
+    .summary('Sender MUST NOT use end-to-end fields as connection options.')
+    .done();
+//# sourceMappingURL=sender-must-not-send-end-to-end-fields-as-connection-options.rule.js.map

package/dist/rules/routing/message-forwarding/connection/sender-must-not-send-end-to-end-fields-as-connection-options.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-not-send-end-to-end-fields-as-connection-options.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/connection/sender-must-not-send-end-to-end-fields-as-connection-options.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,sEAAsE,CACvE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,0QAA0Q,CAC3Q;KACA,OAAO,CAAC,8DAA8D,CAAC;KACvE,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/intermediary-must-implement-connection-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-implement-connection-header.rule.d.ts.map

package/dist/rules/routing/message-forwarding/intermediary-must-implement-connection-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-implement-connection-header.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-forwarding/intermediary-must-implement-connection-header.rule.ts"],"names":[],"mappings":";AAEA,wBASU"}

package/dist/rules/routing/message-forwarding/intermediary-must-implement-connection-header.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-implement-connection-header')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-forwarding')
+    .description('An intermediary not acting as a tunnel MUST implement the Connection header field, as specified in Section 7.6.1, and exclude fields from being forwarded that are only intended for the incoming connection. This ensures proper hop-by-hop header handling.')
+    .summary('Intermediary MUST implement Connection header field.')
+    .appliesTo('proxy', 'gateway')
+    .done();
+//# sourceMappingURL=intermediary-must-implement-connection-header.rule.js.map

package/dist/rules/routing/message-forwarding/intermediary-must-implement-connection-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-implement-connection-header.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-forwarding/intermediary-must-implement-connection-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,uDAAuD,CAAC;KAC7E,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CACV,+PAA+P,CAChQ;KACA,OAAO,CAAC,sDAAsD,CAAC;KAC/D,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC;KAC7B,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/intermediary-must-not-forward-message-to-itself.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-not-forward-message-to-itself.rule.d.ts.map

package/dist/rules/routing/message-forwarding/intermediary-must-not-forward-message-to-itself.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-not-forward-message-to-itself.rule.d.ts","sourceRoot":"","sources":["../../../../src/rules/routing/message-forwarding/intermediary-must-not-forward-message-to-itself.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/message-forwarding/intermediary-must-not-forward-message-to-itself.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-not-forward-message-to-itself')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-message-forwarding')
+    .description('An intermediary MUST NOT forward a message to itself unless it is protected from an infinite request loop. In general, an intermediary ought to recognize its own server names, including any aliases, local variations, or literal IP addresses, and respond to such requests directly.')
+    .summary('Intermediary MUST NOT forward message to itself without loop protection.')
+    .appliesTo('proxy', 'gateway')
+    .done();
+//# sourceMappingURL=intermediary-must-not-forward-message-to-itself.rule.js.map

package/dist/rules/routing/message-forwarding/intermediary-must-not-forward-message-to-itself.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-not-forward-message-to-itself.rule.js","sourceRoot":"","sources":["../../../../src/rules/routing/message-forwarding/intermediary-must-not-forward-message-to-itself.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,qEAAqE,CAAC;KAC1E,WAAW,CACV,0RAA0R,CAC3R;KACA,OAAO,CACN,0EAA0E,CAC3E;KACA,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC;KAC7B,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-check-and-update-max-forwards.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-check-and-update-max-forwards.rule.d.ts.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-check-and-update-max-forwards.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-check-and-update-max-forwards.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-check-and-update-max-forwards.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-check-and-update-max-forwards.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-check-and-update-max-forwards')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-max-forwards')
+    .description('Each intermediary that receives a TRACE or OPTIONS request containing a Max-Forwards header field MUST check and update its value prior to forwarding the request. The Max-Forwards mechanism limits the number of times a request can be forwarded.')
+    .summary('Intermediary MUST check and update Max-Forwards value.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-must-check-and-update-max-forwards.rule.js.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-check-and-update-max-forwards.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-check-and-update-max-forwards.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-check-and-update-max-forwards.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yDAAyD,CAC1D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,WAAW,CACV,sPAAsP,CACvP;KACA,OAAO,CAAC,wDAAwD,CAAC;KACjE,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-generate-updated-max-forwards-when-forwarding.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-generate-updated-max-forwards-when-forwarding.rule.d.ts.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-generate-updated-max-forwards-when-forwarding.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-generate-updated-max-forwards-when-forwarding.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-generate-updated-max-forwards-when-forwarding.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-generate-updated-max-forwards-when-forwarding.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-generate-updated-max-forwards-when-forwarding')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-max-forwards')
+    .description("If the received Max-Forwards value is greater than zero, the intermediary MUST generate an updated Max-Forwards field in the forwarded message with a field value that is the lesser of a) the received value decremented by one (1) or b) the recipient's maximum supported value for Max-Forwards.")
+    .summary('Intermediary MUST generate updated Max-Forwards when forwarding.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-must-generate-updated-max-forwards-when-forwarding.rule.js.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-generate-updated-max-forwards-when-forwarding.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-generate-updated-max-forwards-when-forwarding.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-generate-updated-max-forwards-when-forwarding.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,yEAAyE,CAC1E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,WAAW,CACV,sSAAsS,CACvS;KACA,OAAO,CAAC,kEAAkE,CAAC;KAC3E,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-not-forward-when-max-forwards-is-zero.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-not-forward-when-max-forwards-is-zero.rule.d.ts.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-not-forward-when-max-forwards-is-zero.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-not-forward-when-max-forwards-is-zero.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-not-forward-when-max-forwards-is-zero.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-not-forward-when-max-forwards-is-zero.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-not-forward-when-max-forwards-is-zero')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-max-forwards')
+    .description('If the received Max-Forwards value is zero (0), the intermediary MUST NOT forward the request; instead, the intermediary MUST respond as the final recipient. This prevents infinite forwarding loops in TRACE and OPTIONS requests.')
+    .summary('Intermediary MUST NOT forward request when Max-Forwards is zero.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-must-not-forward-when-max-forwards-is-zero.rule.js.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-not-forward-when-max-forwards-is-zero.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-not-forward-when-max-forwards-is-zero.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-not-forward-when-max-forwards-is-zero.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,iEAAiE,CAClE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,WAAW,CACV,sOAAsO,CACvO;KACA,OAAO,CAAC,kEAAkE,CAAC;KAC3E,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.d.ts.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-max-forwards')
+    .description('If the received Max-Forwards value is zero (0), the intermediary MUST NOT forward the request; instead, the intermediary MUST respond as the final recipient. This prevents infinite forwarding loops in TRACE and OPTIONS requests.')
+    .summary('Intermediary MUST respond as final recipient when Max-Forwards is zero.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.js.map

package/dist/rules/routing/message-forwarding/max-forwards/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/intermediary-must-respond-as-final-recipient-when-max-forward-is-zero.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,+EAA+E,CAChF;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,WAAW,CACV,sOAAsO,CACvO;KACA,OAAO,CACN,yEAAyE,CAC1E;KACA,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/max-forwards/recipient-may-ignore-max-forwards-for-other-methods.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=recipient-may-ignore-max-forwards-for-other-methods.rule.d.ts.map

package/dist/rules/routing/message-forwarding/max-forwards/recipient-may-ignore-max-forwards-for-other-methods.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-ignore-max-forwards-for-other-methods.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/recipient-may-ignore-max-forwards-for-other-methods.rule.ts"],"names":[],"mappings":";AAEA,wBAYU"}

package/dist/rules/routing/message-forwarding/max-forwards/recipient-may-ignore-max-forwards-for-other-methods.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/recipient-may-ignore-max-forwards-for-other-methods')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-max-forwards')
+    .description('A recipient MAY ignore a Max-Forwards header field received with any other request methods. The Max-Forwards mechanism is specifically designed for TRACE and OPTIONS methods to limit forwarding.')
+    .summary('Recipient MAY ignore Max-Forwards for methods other than TRACE/OPTIONS.')
+    .done();
+//# sourceMappingURL=recipient-may-ignore-max-forwards-for-other-methods.rule.js.map

package/dist/rules/routing/message-forwarding/max-forwards/recipient-may-ignore-max-forwards-for-other-methods.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-may-ignore-max-forwards-for-other-methods.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/max-forwards/recipient-may-ignore-max-forwards-for-other-methods.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6DAA6D,CAC9D;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,+DAA+D,CAAC;KACpE,WAAW,CACV,oMAAoM,CACrM;KACA,OAAO,CACN,yEAAyE,CAC1E;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-not-forward-internal-hosts.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=firewall-intermediary-should-not-forward-internal-hosts.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-not-forward-internal-hosts.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall-intermediary-should-not-forward-internal-hosts.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/firewall-intermediary-should-not-forward-internal-hosts.rule.ts"],"names":[],"mappings":";AAEA,wBAWU"}

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-not-forward-internal-hosts.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/firewall-intermediary-should-not-forward-internal-hosts')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('An intermediary used as a portal through a network firewall SHOULD NOT forward the names and ports of hosts within the firewall region unless it is explicitly enabled to do so. This protects internal network topology from exposure.')
+    .summary('Firewall intermediary SHOULD NOT forward internal host names.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=firewall-intermediary-should-not-forward-internal-hosts.rule.js.map

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-not-forward-internal-hosts.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall-intermediary-should-not-forward-internal-hosts.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/firewall-intermediary-should-not-forward-internal-hosts.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,iEAAiE,CAClE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,yOAAyO,CAC1O;KACA,OAAO,CAAC,+DAA+D,CAAC;KACxE,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.d.ts.map

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-via')
+    .description('If not explicitly enabled to forward internal host names, an intermediary used as a portal through a network firewall SHOULD replace each received-by host of any host behind the firewall by an appropriate pseudonym for that host. This protects internal network information.')
+    .summary('Firewall intermediary SHOULD replace internal hosts with pseudonyms.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.js.map

package/dist/rules/routing/message-forwarding/via/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.js","sourceRoot":"","sources":["../../../../../src/rules/routing/message-forwarding/via/firewall-intermediary-should-replace-internal-hosts-with-pseudonyms.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6EAA6E,CAC9E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,sDAAsD,CAAC;KAC3D,WAAW,CACV,mRAAmR,CACpR;KACA,OAAO,CACN,sEAAsE,CACvE;KACA,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/routing/message-forwarding/via/gateway-may-send-via-header-in-responses.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=gateway-may-send-via-header-in-responses.rule.d.ts.map