@thymian/rules-rfc-9110 0.1.0

package/dist/rules/message-context/request-context/user-agent/sender-must-not-generate-advertising-in-product-identifier.rule.js

@@ -0,0 +1,29 @@
+import { and, getHeader, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-must-not-generate-advertising-in-product-identifier')
+    .severity('error')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-user-agent')
+    .description('A sender MUST NOT generate advertising or other nonessential information within the product identifier.')
+    .appliesTo('client')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(and(requestHeader('user-agent')), (request) => {
+    const userAgent = getHeader(request.headers, 'user-agent');
+    if (typeof userAgent !== 'string') {
+        return false;
+    }
+    // Check for common advertising/promotional keywords
+    const advertisingKeywords = [
+        /\bvisit\s+(?:our\s+)?(?:website|site)\b/i,
+        /\bdownload\s+(?:now|free|here)\b/i,
+        /\bclick\s+here\b/i,
+        /\bfree\s+trial\b/i,
+        /\bbuy\s+now\b/i,
+        /\bspecial\s+offer\b/i,
+        /\blimited\s+time\b/i,
+        /\bget\s+it\s+(?:now|free|here)\b/i,
+        /https?:\/\/[^\s)]+\.(com|net|org|io)(?!\/[a-zA-Z0-9-]+$)/i, // URLs that look promotional (not just domain/path)
+    ];
+    return advertisingKeywords.some((pattern) => pattern.test(userAgent));
+}))
+    .done();
+//# sourceMappingURL=sender-must-not-generate-advertising-in-product-identifier.rule.js.map

package/dist/rules/message-context/request-context/user-agent/sender-must-not-generate-advertising-in-product-identifier.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-must-not-generate-advertising-in-product-identifier.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/sender-must-not-generate-advertising-in-product-identifier.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,oEAAoE,CACrE;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,yGAAyG,CAC1G;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,EAChC,CAAC,OAAO,EAAE,EAAE;IACV,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oDAAoD;IACpD,MAAM,mBAAmB,GAAG;QAC1B,0CAA0C;QAC1C,mCAAmC;QACnC,mBAAmB;QACnB,mBAAmB;QACnB,gBAAgB;QAChB,sBAAsB;QACtB,qBAAqB;QACrB,mCAAmC;QACnC,2DAA2D,EAAE,oDAAoD;KAClH,CAAC;IAEF,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACxE,CAAC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/user-agent/sender-should-limit-generated-product-identifiers-to-necessity.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-should-limit-generated-product-identifiers-to-necessity.rule.d.ts.map

package/dist/rules/message-context/request-context/user-agent/sender-should-limit-generated-product-identifiers-to-necessity.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-limit-generated-product-identifiers-to-necessity.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/sender-should-limit-generated-product-identifiers-to-necessity.rule.ts"],"names":[],"mappings":";AAEA,wBASU"}

package/dist/rules/message-context/request-context/user-agent/sender-should-limit-generated-product-identifiers-to-necessity.rule.js

@@ -0,0 +1,8 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-should-limit-generated-product-identifiers-to-necessity')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-user-agent')
+    .description('A sender SHOULD limit generated product identifiers to what is necessary to identify the product.')
+    .done();
+//# sourceMappingURL=sender-should-limit-generated-product-identifiers-to-necessity.rule.js.map

package/dist/rules/message-context/request-context/user-agent/sender-should-limit-generated-product-identifiers-to-necessity.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-limit-generated-product-identifiers-to-necessity.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/sender-should-limit-generated-product-identifiers-to-necessity.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,mGAAmG,CACpG;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/user-agent/sender-should-not-generate-non-version-info-in-product-version.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=sender-should-not-generate-non-version-info-in-product-version.rule.d.ts.map

package/dist/rules/message-context/request-context/user-agent/sender-should-not-generate-non-version-info-in-product-version.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-not-generate-non-version-info-in-product-version.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/sender-should-not-generate-non-version-info-in-product-version.rule.ts"],"names":[],"mappings":";AAGA,wBAyDU"}

package/dist/rules/message-context/request-context/user-agent/sender-should-not-generate-non-version-info-in-product-version.rule.js

@@ -0,0 +1,45 @@
+import { and, getHeader, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/sender-should-not-generate-non-version-info-in-product-version')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-user-agent')
+    .description('A sender SHOULD NOT generate information in product-version that is not a version identifier (i.e., successive versions of the same product name ought to differ only in the product-version portion of the product identifier).')
+    .appliesTo('client')
+    .overrideAnalyticsRule((ctx) => ctx.validateHttpTransactions(and(requestHeader('user-agent')), (request) => {
+    const userAgent = getHeader(request.headers, 'user-agent');
+    if (typeof userAgent !== 'string') {
+        return false;
+    }
+    // Parse User-Agent for product tokens: product/version
+    // RFC 9110: product = token ["/" product-version]
+    const productTokens = userAgent.match(/([^\s/]+)\/([^\s)]+)/g);
+    if (!productTokens) {
+        return false;
+    }
+    for (const token of productTokens) {
+        const [, version] = token.split('/');
+        if (!version) {
+            continue;
+        }
+        // Check if version contains non-version information
+        // Valid versions typically contain: digits, dots, dashes, alphanumerics
+        // Invalid: long text, spaces, special chars, descriptive text
+        // Skip if it looks like a valid version (e.g., "1.0.0", "2.3", "1.0-beta", "v1.2.3")
+        if (/^v?\d+(\.\d+)*(-[a-zA-Z0-9]+)?$/.test(version)) {
+            continue;
+        }
+        // Check for descriptive/non-version text indicators
+        const nonVersionPatterns = [
+            /[a-zA-Z]{10,}/, // Long text strings (likely descriptive)
+            /\b(like|for|with|on|the|and|or)\b/i, // Common words
+            /[,;:]/, // Unusual punctuation for versions
+        ];
+        if (nonVersionPatterns.some((pattern) => pattern.test(version))) {
+            return true;
+        }
+    }
+    return false;
+}))
+    .done();
+//# sourceMappingURL=sender-should-not-generate-non-version-info-in-product-version.rule.js.map

package/dist/rules/message-context/request-context/user-agent/sender-should-not-generate-non-version-info-in-product-version.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-should-not-generate-non-version-info-in-product-version.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/sender-should-not-generate-non-version-info-in-product-version.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wEAAwE,CACzE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,kOAAkO,CACnO;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,qBAAqB,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,wBAAwB,CAC1B,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,EAChC,CAAC,OAAO,EAAE,EAAE;IACV,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uDAAuD;IACvD,kDAAkD;IAClD,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,oDAAoD;QACpD,wEAAwE;QACxE,8DAA8D;QAE9D,qFAAqF;QACrF,IAAI,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QAED,oDAAoD;QACpD,MAAM,kBAAkB,GAAG;YACzB,eAAe,EAAE,yCAAyC;YAC1D,oCAAoC,EAAE,eAAe;YACrD,OAAO,EAAE,mCAAmC;SAC7C,CAAC;QAEF,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CACF,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/user-agent/user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts.map

package/dist/rules/message-context/request-context/user-agent/user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.ts"],"names":[],"mappings":";AAIA,wBAUU"}

package/dist/rules/message-context/request-context/user-agent/user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.js

@@ -0,0 +1,10 @@
+// user-agent-should-limit-addition-of-subproducts-by-third-parties
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-limit-addition-of-subproducts-by-third-parties')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-user-agent')
+    .description('A user agent SHOULD limit the addition of subproducts by third parties. Overly long and detailed User-Agent field values increase request latency and the risk of a user being identified against their wishes ("fingerprinting").')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.js.map

package/dist/rules/message-context/request-context/user-agent/user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/user-agent-should-limit-addition-of-subproducts-by-third-parties.rule.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0EAA0E,CAC3E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,oOAAoO,CACrO;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/user-agent/user-agent-should-not-generate-overly-detailed-user-agent.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-not-generate-overly-detailed-user-agent.rule.d.ts.map

package/dist/rules/message-context/request-context/user-agent/user-agent-should-not-generate-overly-detailed-user-agent.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-generate-overly-detailed-user-agent.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/user-agent-should-not-generate-overly-detailed-user-agent.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/request-context/user-agent/user-agent-should-not-generate-overly-detailed-user-agent.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-not-generate-needlessly-fine-grained-detailed-user-agent-field')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-user-agent')
+    .description('A user agent SHOULD NOT generate a User-Agent header field containing needlessly fine-grained detail.')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-should-not-generate-overly-detailed-user-agent.rule.js.map

package/dist/rules/message-context/request-context/user-agent/user-agent-should-not-generate-overly-detailed-user-agent.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-not-generate-overly-detailed-user-agent.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/user-agent-should-not-generate-overly-detailed-user-agent.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0FAA0F,CAC3F;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,uGAAuG,CACxG;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/request-context/user-agent/user-agent-should-send-user-agent-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-should-send-user-agent-header.rule.d.ts.map

package/dist/rules/message-context/request-context/user-agent/user-agent-should-send-user-agent-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-send-user-agent-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/user-agent-should-send-user-agent-header.rule.ts"],"names":[],"mappings":";AAGA,wBAWU"}

package/dist/rules/message-context/request-context/user-agent/user-agent-should-send-user-agent-header.rule.js

@@ -0,0 +1,11 @@
+import { not, requestHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-should-send-user-agent-header')
+    .severity('warn')
+    .type('analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-user-agent')
+    .description('A user agent SHOULD send a User-Agent header field in each request unless specifically configured not to do so.')
+    .appliesTo('user-agent')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(not(requestHeader('user-agent'))))
+    .done();
+//# sourceMappingURL=user-agent-should-send-user-agent-header.rule.js.map

package/dist/rules/message-context/request-context/user-agent/user-agent-should-send-user-agent-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-should-send-user-agent-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/request-context/user-agent/user-agent-should-send-user-agent-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,kDAAkD,CAAC;KACxE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,WAAW,CAAC;KACjB,GAAG,CAAC,6DAA6D,CAAC;KAClE,WAAW,CACV,iHAAiH,CAClH;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CACrE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/response-context/allow/origin-sever-may-send-allow-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-sever-may-send-allow-header.rule.d.ts.map

package/dist/rules/message-context/response-context/allow/origin-sever-may-send-allow-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-sever-may-send-allow-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/allow/origin-sever-may-send-allow-header.rule.ts"],"names":[],"mappings":";AAGA,wBASU"}

package/dist/rules/message-context/response-context/allow/origin-sever-may-send-allow-header.rule.js

@@ -0,0 +1,11 @@
+import { not, responseHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-sever-may-send-allow-header')
+    .severity('hint')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-allow')
+    .description('Origin server MAY send "Allow" header field in response.')
+    .appliesTo('origin server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(not(responseHeader('allow'))))
+    .done();
+//# sourceMappingURL=origin-sever-may-send-allow-header.rule.js.map

package/dist/rules/message-context/response-context/allow/origin-sever-may-send-allow-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-sever-may-send-allow-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/allow/origin-sever-may-send-allow-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,4CAA4C,CAAC;KAClE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,wDAAwD,CAAC;KAC7D,WAAW,CAAC,0DAA0D,CAAC;KACvE,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CACjE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/response-context/allow/proxy-must-not-modify-allow-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=proxy-must-not-modify-allow-header.rule.d.ts.map

package/dist/rules/message-context/response-context/allow/proxy-must-not-modify-allow-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-modify-allow-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/allow/proxy-must-not-modify-allow-header.rule.ts"],"names":[],"mappings":";AAGA,wBAMU"}

package/dist/rules/message-context/response-context/allow/proxy-must-not-modify-allow-header.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+// also analytics rule in the future
+export default httpRule('rfc9110/proxy-must-not-modify-allow-header')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-allow')
+    .description('A proxy MUST NOT modify the Allow header field.')
+    .appliesTo('proxy')
+    .done();
+//# sourceMappingURL=proxy-must-not-modify-allow-header.rule.js.map

package/dist/rules/message-context/response-context/allow/proxy-must-not-modify-allow-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-must-not-modify-allow-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/allow/proxy-must-not-modify-allow-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,oCAAoC;AACpC,eAAe,QAAQ,CAAC,4CAA4C,CAAC;KAClE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,wDAAwD,CAAC;KAC7D,WAAW,CAAC,iDAAiD,CAAC;KAC9D,SAAS,CAAC,OAAO,CAAC;KAClB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/response-context/location/user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.d.ts.map

package/dist/rules/message-context/response-context/location/user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/location/user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.ts"],"names":[],"mappings":";AAEA,wBAaU"}

package/dist/rules/message-context/response-context/location/user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.js

@@ -0,0 +1,10 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/user-agent-must-inherit-fragment-for-3xx-without-fragment')
+    .severity('hint')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-location')
+    .description("If the Location value provided in a 3xx (Redirection) response does not have a fragment component, a user agent MUST process the redirection as if the value inherits the fragment component of the URI reference used to generate the target URI (i.e., the redirection inherits the original reference's fragment, if any).")
+    .summary('A user agent MUST process the redirection as if the value inherits the fragment component of the URI reference used to generate the target URI')
+    .appliesTo('user-agent')
+    .done();
+//# sourceMappingURL=user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.js.map

package/dist/rules/message-context/response-context/location/user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/location/user-agent-must-inherit-fragment-for-3xx-without-fragment.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,mEAAmE,CACpE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV,+TAA+T,CAChU;KACA,OAAO,CACN,gJAAgJ,CACjJ;KACA,SAAS,CAAC,YAAY,CAAC;KACvB,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/response-context/server/origin-server-may-generate-server-header-field.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-may-generate-server-header-field.rule.d.ts.map

package/dist/rules/message-context/response-context/server/origin-server-may-generate-server-header-field.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-may-generate-server-header-field.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/server/origin-server-may-generate-server-header-field.rule.ts"],"names":[],"mappings":";AAGA,wBAaU"}

package/dist/rules/message-context/response-context/server/origin-server-may-generate-server-header-field.rule.js

@@ -0,0 +1,11 @@
+import { not, responseHeader } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-may-generate-server-header-field')
+    .severity('hint')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-server')
+    .description('An origin server MAY generate a Server header field in its responses.')
+    .appliesTo('origin server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(not(responseHeader('server'))))
+    .done();
+//# sourceMappingURL=origin-server-may-generate-server-header-field.rule.js.map

package/dist/rules/message-context/response-context/server/origin-server-may-generate-server-header-field.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-may-generate-server-header-field.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/server/origin-server-may-generate-server-header-field.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wDAAwD,CACzD;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,uEAAuE,CACxE;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAClE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/response-context/server/origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts.map

package/dist/rules/message-context/response-context/server/origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/server/origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.ts"],"names":[],"mappings":";AAGA,wBAUU"}

package/dist/rules/message-context/response-context/server/origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.js

@@ -0,0 +1,10 @@
+// origin-server-should-limit-addition-of-subproducts-by-third-parties
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-limit-addition-of-subproducts-by-third-parties')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-server')
+    .description('An origin SHOULD limit the addition of subproducts by third parties.')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.js.map

package/dist/rules/message-context/response-context/server/origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/server/origin-server-should-limit-addition-of-subproducts-by-third-parties.rule.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6EAA6E,CAC9E;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,sEAAsE,CACvE;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/message-context/response-context/server/origin-server-should-not-generate-detailed-server-header.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-not-generate-detailed-server-header.rule.d.ts.map

package/dist/rules/message-context/response-context/server/origin-server-should-not-generate-detailed-server-header.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-not-generate-detailed-server-header.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/server/origin-server-should-not-generate-detailed-server-header.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/message-context/response-context/server/origin-server-should-not-generate-detailed-server-header.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-server-should-not-generate-needlessly-fine-grained-detail-server-header')
+    .severity('warn')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-server')
+    .description('An origin server SHOULD NOT generate a Server header field containing needlessly fine-grained detail')
+    .appliesTo('origin server')
+    .done();
+//# sourceMappingURL=origin-server-should-not-generate-detailed-server-header.rule.js.map

package/dist/rules/message-context/response-context/server/origin-server-should-not-generate-detailed-server-header.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-server-should-not-generate-detailed-server-header.rule.js","sourceRoot":"","sources":["../../../../../src/rules/message-context/response-context/server/origin-server-should-not-generate-detailed-server-header.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wFAAwF,CACzF;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,sGAAsG,CACvG;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,EAAE,CAAC"}

package/dist/rules/methods/general-purpose-severs-must-support-get-and-head.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=general-purpose-severs-must-support-get-and-head.rule.d.ts.map

package/dist/rules/methods/general-purpose-severs-must-support-get-and-head.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"general-purpose-severs-must-support-get-and-head.rule.d.ts","sourceRoot":"","sources":["../../../src/rules/methods/general-purpose-severs-must-support-get-and-head.rule.ts"],"names":[],"mappings":";AAGA,wBAyBU"}

package/dist/rules/methods/general-purpose-severs-must-support-get-and-head.rule.js

@@ -0,0 +1,16 @@
+import { and, method, not, or, statusCode } from '@thymian/core';
+import { httpRule, singleTestCase } from '@thymian/core';
+export default httpRule('rfc9110/general-purpose-severs-must-support-get-and-head')
+    .severity('error')
+    .type('test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-overview')
+    .description('All general-purpose servers MUST support the methods GET and HEAD.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(or(method('get'), method('head')), statusCode(501)))
+    .overrideTest((ctx) => ctx.httpTest(singleTestCase()
+    .forTransactionsWith(or(method('get'), method('head')))
+    .run({ checkResponse: false })
+    .expectForTransactions(not(statusCode(501)))
+    .done()))
+    .done();
+//# sourceMappingURL=general-purpose-severs-must-support-get-and-head.rule.js.map

package/dist/rules/methods/general-purpose-severs-must-support-get-and-head.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"general-purpose-severs-must-support-get-and-head.rule.js","sourceRoot":"","sources":["../../../src/rules/methods/general-purpose-severs-must-support-get-and-head.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzD,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,MAAM,CAAC;KACZ,GAAG,CAAC,2DAA2D,CAAC;KAChE,WAAW,CACV,oEAAoE,CACrE;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EACjC,UAAU,CAAC,GAAG,CAAC,CAChB,CACF;KACA,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE,CACpB,GAAG,CAAC,QAAQ,CACV,cAAc,EAAE;KACb,mBAAmB,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;KACtD,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;KAC7B,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3C,IAAI,EAAE,CACV,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/connect/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.d.ts.map

package/dist/rules/methods/method-definitions/connect/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/connect/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connect')
+    .description('A client MUST ignore any Content-Length or Transfer-Encoding header fields received in a successful response to CONNECT.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.js.map

package/dist/rules/methods/method-definitions/connect/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/client-must-ignore-content-length-or-transfer-encoding-headers-in-response-to-connect.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,+FAA+F,CAChG;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,0HAA0H,CAC3H;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/connect/client-must-send-port-number-for-connect-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-must-send-port-number-for-connect-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/connect/client-must-send-port-number-for-connect-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-send-port-number-for-connect-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/client-must-send-port-number-for-connect-request.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/connect/client-must-send-port-number-for-connect-request.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-must-send-port-number-for-connect-request')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connect')
+    .description('A client MUST send the port number even if the CONNECT request is based on a URI reference that contains an authority component with an elided port.')
+    .appliesTo('client')
+    .done();
+//# sourceMappingURL=client-must-send-port-number-for-connect-request.rule.js.map

package/dist/rules/methods/method-definitions/connect/client-must-send-port-number-for-connect-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-must-send-port-number-for-connect-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/client-must-send-port-number-for-connect-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,0DAA0D,CAC3D;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,sJAAsJ,CACvJ;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/connect/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/connect/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/connect/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connect')
+    .description('A tunnel is closed when a tunnel intermediary detects that either side has closed its connection: the intermediary MUST attempt to send any outstanding data that came from the closed side to the other side, close both connections, and then discard any remaining data left undelivered.')
+    .appliesTo('intermediary')
+    .done();
+//# sourceMappingURL=intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.js.map

package/dist/rules/methods/method-definitions/connect/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/intermediary-must-attempt-to-send-outstanding-data-coming-from-closed-side-for-connect-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,wGAAwG,CACzG;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,8RAA8R,CAC/R;KACA,SAAS,CAAC,cAAc,CAAC;KACzB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/connect/origin-sever-may-accept-connect-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-sever-may-accept-connect-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/connect/origin-sever-may-accept-connect-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-sever-may-accept-connect-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/origin-sever-may-accept-connect-request.rule.ts"],"names":[],"mappings":";AAGA,wBAWU"}

package/dist/rules/methods/method-definitions/connect/origin-sever-may-accept-connect-request.rule.js

@@ -0,0 +1,11 @@
+import { method, statusCode } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/origin-sever-may-accept-connect-request')
+    .severity('hint')
+    .type('static', 'analytics', 'test')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connect')
+    .description('An origin server MAY accept a CONNECT request, but most origin servers do not implement CONNECT')
+    .appliesTo('origin server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(method('CONNECT'), statusCode(501)))
+    .done();
+//# sourceMappingURL=origin-sever-may-accept-connect-request.rule.js.map

package/dist/rules/methods/method-definitions/connect/origin-sever-may-accept-connect-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-sever-may-accept-connect-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/origin-sever-may-accept-connect-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CAAC,iDAAiD,CAAC;KACvE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC;KACnC,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,iGAAiG,CAClG;KACA,SAAS,CAAC,eAAe,CAAC;KAC1B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CACvE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/connect/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/connect/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.ts"],"names":[],"mappings":";AASA,wBAgBU"}

package/dist/rules/methods/method-definitions/connect/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.js

@@ -0,0 +1,11 @@
+import { and, method, or, responseHeader, statusCodeRange, } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request')
+    .severity('error')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connect')
+    .description('A server MUST NOT send any Transfer-Encoding or Content-Length header fields in a 2xx (Successful) response to CONNECT.')
+    .appliesTo('server')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(and(method('CONNECT'), statusCodeRange(200, 299)), or(responseHeader('transfer-encoding'), responseHeader('content-length'))))
+    .done();
+//# sourceMappingURL=server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.js.map

package/dist/rules/methods/method-definitions/connect/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/server-must-not-send-transfer-encoding-or-content-length-headers-in-2xx-response-to-connect-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,GAAG,EACH,MAAM,EACN,EAAE,EACF,cAAc,EACd,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,6GAA6G,CAC9G;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,yHAAyH,CAC1H;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAChC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EACjD,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAC1E,CACF;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/connect/server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.d.ts.map

package/dist/rules/methods/method-definitions/connect/server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.ts"],"names":[],"mappings":";AAEA,wBAUU"}

package/dist/rules/methods/method-definitions/connect/server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.js

@@ -0,0 +1,9 @@
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/server-must-reject-connect-request-with-empty-or-invalid-port-number')
+    .severity('error')
+    .type('informational')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-connect')
+    .description('A server MUST reject a CONNECT request that targets an empty or invalid port number, typically by responding with a 400 (Bad Request) status code.')
+    .appliesTo('server')
+    .done();
+//# sourceMappingURL=server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.js.map

package/dist/rules/methods/method-definitions/connect/server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/connect/server-must-reject-connect-request-with-empty-or-invalid-port-number.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,8EAA8E,CAC/E;KACE,QAAQ,CAAC,OAAO,CAAC;KACjB,IAAI,CAAC,eAAe,CAAC;KACrB,GAAG,CAAC,0DAA0D,CAAC;KAC/D,WAAW,CACV,oJAAoJ,CACrJ;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/delete/client-should-not-generate-content-for-delete-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=client-should-not-generate-content-for-delete-request.rule.d.ts.map

package/dist/rules/methods/method-definitions/delete/client-should-not-generate-content-for-delete-request.rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-generate-content-for-delete-request.rule.d.ts","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/delete/client-should-not-generate-content-for-delete-request.rule.ts"],"names":[],"mappings":";AAGA,wBAaU"}

package/dist/rules/methods/method-definitions/delete/client-should-not-generate-content-for-delete-request.rule.js

@@ -0,0 +1,11 @@
+import { hasRequestBody, method } from '@thymian/core';
+import { httpRule } from '@thymian/core';
+export default httpRule('rfc9110/client-should-not-generate-content-for-delete-request')
+    .severity('warn')
+    .type('static', 'analytics')
+    .url('https://www.rfc-editor.org/rfc/rfc9110.html#name-delete')
+    .description('A client SHOULD NOT generate content in a DELETE request unless it is made directly to an origin server that has previously indicated, in or out of band, that such a request has a purpose and will be adequately supported.')
+    .appliesTo('client')
+    .rule((ctx) => ctx.validateCommonHttpTransactions(method('DELETE'), hasRequestBody()))
+    .done();
+//# sourceMappingURL=client-should-not-generate-content-for-delete-request.rule.js.map

package/dist/rules/methods/method-definitions/delete/client-should-not-generate-content-for-delete-request.rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-should-not-generate-content-for-delete-request.rule.js","sourceRoot":"","sources":["../../../../../src/rules/methods/method-definitions/delete/client-should-not-generate-content-for-delete-request.rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,eAAe,QAAQ,CACrB,+DAA+D,CAChE;KACE,QAAQ,CAAC,MAAM,CAAC;KAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;KAC3B,GAAG,CAAC,yDAAyD,CAAC;KAC9D,WAAW,CACV,+NAA+N,CAChO;KACA,SAAS,CAAC,QAAQ,CAAC;KACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC,CACvE;KACA,IAAI,EAAE,CAAC"}

package/dist/rules/methods/method-definitions/delete/origin-server-should-not-rely-on-private-agreements-to-receive-content-in-delete-request.rule.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@thymian/core").Rule<Record<PropertyKey, unknown>>;
+export default _default;
+//# sourceMappingURL=origin-server-should-not-rely-on-private-agreements-to-receive-content-in-delete-request.rule.d.ts.map