driftdetect-detectors 0.1.0

package/dist/security/csrf-protection.d.ts

@@ -0,0 +1,72 @@
+/**
+ * CSRF Protection Detector - Cross-Site Request Forgery protection pattern detection
+ *
+ * Detects CSRF protection patterns including:
+ * - CSRF token generation and validation
+ * - CSRF middleware (csurf, csrf)
+ * - SameSite cookie attributes
+ * - Double submit cookie pattern
+ * - Origin/Referer header validation
+ *
+ * @requirements 16.4 - CSRF protection patterns
+ */
+import type { Violation, QuickFix, PatternCategory, Language } from 'driftdetect-core';
+import { RegexDetector } from '../base/regex-detector.js';
+import type { DetectionContext, DetectionResult } from '../base/base-detector.js';
+export type CSRFProtectionPatternType = 'csrf-token' | 'csrf-middleware' | 'same-site-cookie' | 'double-submit' | 'origin-validation' | 'referer-validation' | 'csrf-header';
+export type CSRFViolationType = 'missing-csrf-token' | 'insecure-cookie' | 'missing-same-site';
+export interface CSRFProtectionPatternInfo {
+    type: CSRFProtectionPatternType;
+    file: string;
+    line: number;
+    column: number;
+    matchedText: string;
+    context?: string | undefined;
+}
+export interface CSRFViolationInfo {
+    type: CSRFViolationType;
+    file: string;
+    line: number;
+    column: number;
+    matchedText: string;
+    issue: string;
+    suggestedFix?: string | undefined;
+    severity: 'high' | 'medium' | 'low';
+}
+export interface CSRFProtectionAnalysis {
+    patterns: CSRFProtectionPatternInfo[];
+    violations: CSRFViolationInfo[];
+    hasCSRFProtection: boolean;
+    hasSameSiteCookies: boolean;
+    confidence: number;
+}
+export declare const CSRF_TOKEN_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const CSRF_MIDDLEWARE_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const SAME_SITE_COOKIE_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const DOUBLE_SUBMIT_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const ORIGIN_VALIDATION_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const REFERER_VALIDATION_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const CSRF_HEADER_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const INSECURE_COOKIE_PATTERNS: readonly [RegExp, RegExp];
+export declare function shouldExcludeFile(filePath: string): boolean;
+export declare function detectCSRFTokens(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectCSRFMiddleware(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectSameSiteCookies(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectDoubleSubmit(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectOriginValidation(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectRefererValidation(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectCSRFHeaders(content: string, filePath: string): CSRFProtectionPatternInfo[];
+export declare function detectInsecureCookieViolations(content: string, filePath: string): CSRFViolationInfo[];
+export declare function analyzeCSRFProtection(content: string, filePath: string): CSRFProtectionAnalysis;
+export declare class CSRFProtectionDetector extends RegexDetector {
+    readonly id = "security/csrf-protection";
+    readonly name = "CSRF Protection Detector";
+    readonly description = "Detects CSRF protection patterns and identifies potential vulnerabilities";
+    readonly category: PatternCategory;
+    readonly subcategory = "csrf-protection";
+    readonly supportedLanguages: Language[];
+    detect(context: DetectionContext): Promise<DetectionResult>;
+    generateQuickFix(_violation: Violation): QuickFix | null;
+}
+export declare function createCSRFProtectionDetector(): CSRFProtectionDetector;
+//# sourceMappingURL=csrf-protection.d.ts.map

package/dist/security/csrf-protection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf-protection.d.ts","sourceRoot":"","sources":["../../src/security/csrf-protection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMlF,MAAM,MAAM,yBAAyB,GACjC,YAAY,GACZ,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,oBAAoB,GACpB,aAAa,CAAC;AAElB,MAAM,MAAM,iBAAiB,GACzB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,CAAC;AAExB,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,yBAAyB,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACrC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IACtC,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,eAAO,MAAM,mBAAmB,mIAkBtB,CAAC;AAEX,eAAO,MAAM,wBAAwB,mEAQ3B,CAAC;AAEX,eAAO,MAAM,yBAAyB,2CAK5B,CAAC;AAEX,eAAO,MAAM,sBAAsB,2CAKzB,CAAC;AAEX,eAAO,MAAM,0BAA0B,2FAa7B,CAAC;AAEX,eAAO,MAAM,2BAA2B,2CAK9B,CAAC;AAEX,eAAO,MAAM,oBAAoB,2CAKvB,CAAC;AAEX,eAAO,MAAM,wBAAwB,2BAG3B,CAAC;AAMX,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,EAAE,CAuB7B;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,iBAAiB,EAAE,CAyBrB;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,sBAAsB,CAqCxB;AAMD,qBAAa,sBAAuB,SAAQ,aAAa;IACvD,QAAQ,CAAC,EAAE,8BAA8B;IACzC,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,+EAC0D;IAC9E,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAc;IAChD,QAAQ,CAAC,WAAW,qBAAqB;IACzC,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAA0C;IAE3E,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqBjE,gBAAgB,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI;CAGzD;AAED,wBAAgB,4BAA4B,IAAI,sBAAsB,CAErE"}

package/dist/security/csrf-protection.js

@@ -0,0 +1,344 @@
+/**
+ * CSRF Protection Detector - Cross-Site Request Forgery protection pattern detection
+ *
+ * Detects CSRF protection patterns including:
+ * - CSRF token generation and validation
+ * - CSRF middleware (csurf, csrf)
+ * - SameSite cookie attributes
+ * - Double submit cookie pattern
+ * - Origin/Referer header validation
+ *
+ * @requirements 16.4 - CSRF protection patterns
+ */
+import { RegexDetector } from '../base/regex-detector.js';
+// ============================================================================
+// Constants
+// ============================================================================
+export const CSRF_TOKEN_PATTERNS = [
+    // TypeScript/JavaScript patterns
+    /csrfToken/gi,
+    /csrf_token/gi,
+    /xsrfToken/gi,
+    /xsrf_token/gi,
+    /_csrf/gi,
+    /anti-csrf/gi,
+    /generateCsrfToken\s*\(/gi,
+    /validateCsrfToken\s*\(/gi,
+    /verifyCsrfToken\s*\(/gi,
+    // Python patterns - Django, Flask
+    /csrf_protect/gi,
+    /CSRFProtect/gi,
+    /@csrf_exempt/gi,
+    /csrf_token\s*\(/gi,
+    /get_token\s*\(/gi,
+    /CsrfViewMiddleware/gi,
+];
+export const CSRF_MIDDLEWARE_PATTERNS = [
+    /csurf\s*\(/gi,
+    /csrf\s*\(/gi,
+    /csrfProtection/gi,
+    /lusca\.csrf\s*\(/gi,
+    /helmet\.csrf\s*\(/gi,
+    /import.*csurf/gi,
+    /require\s*\(\s*['"`]csurf['"`]\s*\)/gi,
+];
+export const SAME_SITE_COOKIE_PATTERNS = [
+    /sameSite\s*[=:]\s*['"`](?:strict|lax|none)['"`]/gi,
+    /SameSite\s*=\s*(?:Strict|Lax|None)/gi,
+    /cookie\s*\(\s*\{[^}]*sameSite/gi,
+    /cookieOptions\s*[=:]\s*\{[^}]*sameSite/gi,
+];
+export const DOUBLE_SUBMIT_PATTERNS = [
+    /doubleSubmit/gi,
+    /double-submit/gi,
+    /csrfCookie/gi,
+    /csrf-cookie/gi,
+];
+export const ORIGIN_VALIDATION_PATTERNS = [
+    // TypeScript/JavaScript patterns
+    /req\.headers\s*\[\s*['"`]origin['"`]\s*\]/gi,
+    /request\.headers\.origin/gi,
+    /validateOrigin\s*\(/gi,
+    /checkOrigin\s*\(/gi,
+    /allowedOrigins/gi,
+    // Python patterns - FastAPI, Flask
+    /request\.headers\.get\s*\(\s*['"`]origin['"`]/gi,
+    /validate_origin\s*\(/gi,
+    /check_origin\s*\(/gi,
+    /allowed_origins/gi,
+    /CORSMiddleware/gi,
+];
+export const REFERER_VALIDATION_PATTERNS = [
+    /req\.headers\s*\[\s*['"`]referer['"`]\s*\]/gi,
+    /request\.headers\.referer/gi,
+    /validateReferer\s*\(/gi,
+    /checkReferer\s*\(/gi,
+];
+export const CSRF_HEADER_PATTERNS = [
+    /x-csrf-token/gi,
+    /x-xsrf-token/gi,
+    /x-requested-with/gi,
+    /csrf-token/gi,
+];
+export const INSECURE_COOKIE_PATTERNS = [
+    /httpOnly\s*[=:]\s*false/gi,
+    /secure\s*[=:]\s*false/gi,
+];
+// ============================================================================
+// Analysis Functions
+// ============================================================================
+export function shouldExcludeFile(filePath) {
+    const excludePatterns = [
+        /\.test\.[jt]sx?$/,
+        /\.spec\.[jt]sx?$/,
+        /__tests__\//,
+        /\.d\.ts$/,
+        /node_modules\//,
+        /\.min\.[jt]s$/,
+    ];
+    return excludePatterns.some((p) => p.test(filePath));
+}
+export function detectCSRFTokens(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CSRF_TOKEN_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'csrf-token',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectCSRFMiddleware(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CSRF_MIDDLEWARE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'csrf-middleware',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectSameSiteCookies(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of SAME_SITE_COOKIE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'same-site-cookie',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectDoubleSubmit(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of DOUBLE_SUBMIT_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'double-submit',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectOriginValidation(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of ORIGIN_VALIDATION_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'origin-validation',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectRefererValidation(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of REFERER_VALIDATION_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'referer-validation',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectCSRFHeaders(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CSRF_HEADER_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'csrf-header',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectInsecureCookieViolations(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of INSECURE_COOKIE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'insecure-cookie',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    issue: 'Insecure cookie configuration detected',
+                    suggestedFix: 'Set httpOnly: true and secure: true for sensitive cookies',
+                    severity: 'medium',
+                });
+            }
+        }
+    }
+    return results;
+}
+export function analyzeCSRFProtection(content, filePath) {
+    if (shouldExcludeFile(filePath)) {
+        return {
+            patterns: [],
+            violations: [],
+            hasCSRFProtection: false,
+            hasSameSiteCookies: false,
+            confidence: 1.0,
+        };
+    }
+    const patterns = [
+        ...detectCSRFTokens(content, filePath),
+        ...detectCSRFMiddleware(content, filePath),
+        ...detectSameSiteCookies(content, filePath),
+        ...detectDoubleSubmit(content, filePath),
+        ...detectOriginValidation(content, filePath),
+        ...detectRefererValidation(content, filePath),
+        ...detectCSRFHeaders(content, filePath),
+    ];
+    const violations = detectInsecureCookieViolations(content, filePath);
+    const hasCSRFProtection = patterns.some((p) => p.type === 'csrf-token' || p.type === 'csrf-middleware');
+    const hasSameSiteCookies = patterns.some((p) => p.type === 'same-site-cookie');
+    const confidence = hasCSRFProtection ? 0.95 : hasSameSiteCookies ? 0.85 : 0.7;
+    return {
+        patterns,
+        violations,
+        hasCSRFProtection,
+        hasSameSiteCookies,
+        confidence,
+    };
+}
+// ============================================================================
+// Detector Class
+// ============================================================================
+export class CSRFProtectionDetector extends RegexDetector {
+    id = 'security/csrf-protection';
+    name = 'CSRF Protection Detector';
+    description = 'Detects CSRF protection patterns and identifies potential vulnerabilities';
+    category = 'security';
+    subcategory = 'csrf-protection';
+    supportedLanguages = ['typescript', 'javascript', 'python'];
+    async detect(context) {
+        if (!this.supportsLanguage(context.language)) {
+            return this.createEmptyResult();
+        }
+        const analysis = analyzeCSRFProtection(context.content, context.file);
+        if (analysis.patterns.length === 0 && analysis.violations.length === 0) {
+            return this.createEmptyResult();
+        }
+        return this.createResult([], [], analysis.confidence, {
+            custom: {
+                patterns: analysis.patterns,
+                violations: analysis.violations,
+                hasCSRFProtection: analysis.hasCSRFProtection,
+                hasSameSiteCookies: analysis.hasSameSiteCookies,
+            },
+        });
+    }
+    generateQuickFix(_violation) {
+        return null;
+    }
+}
+export function createCSRFProtectionDetector() {
+    return new CSRFProtectionDetector();
+}
+//# sourceMappingURL=csrf-protection.js.map

package/dist/security/csrf-protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf-protection.js","sourceRoot":"","sources":["../../src/security/csrf-protection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAiD1D,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iCAAiC;IACjC,aAAa;IACb,cAAc;IACd,aAAa;IACb,cAAc;IACd,SAAS;IACT,aAAa;IACb,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,kCAAkC;IAClC,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,sBAAsB;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,iBAAiB;IACjB,uCAAuC;CAC/B,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,mDAAmD;IACnD,sCAAsC;IACtC,iCAAiC;IACjC,0CAA0C;CAClC,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,eAAe;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,iCAAiC;IACjC,6CAA6C;IAC7C,4BAA4B;IAC5B,uBAAuB;IACvB,oBAAoB;IACpB,kBAAkB;IAClB,mCAAmC;IACnC,iDAAiD;IACjD,wBAAwB;IACxB,qBAAqB;IACrB,mBAAmB;IACnB,kBAAkB;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,8CAA8C;IAC9C,6BAA6B;IAC7B,wBAAwB;IACxB,qBAAqB;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,cAAc;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2BAA2B;IAC3B,yBAAyB;CACjB,CAAC;AAEX,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,eAAe,GAAG;QACtB,kBAAkB;QAClB,kBAAkB;QAClB,aAAa;QACb,UAAU;QACV,gBAAgB;QAChB,eAAe;KAChB,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,yBAAyB,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,KAAK,EAAE,wCAAwC;oBAC/C,YAAY,EAAE,2DAA2D;oBACzE,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,QAAgB;IAEhB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,KAAK;YACxB,kBAAkB,EAAE,KAAK;YACzB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAgC;QAC5C,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACtC,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC1C,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC3C,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACxC,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC5C,GAAG,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC7C,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;KACxC,CAAC;IAEF,MAAM,UAAU,GAAG,8BAA8B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAErE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAC/D,CAAC;IACF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;IAE/E,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAE9E,OAAO;QACL,QAAQ;QACR,UAAU;QACV,iBAAiB;QACjB,kBAAkB;QAClB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,sBAAuB,SAAQ,aAAa;IAC9C,EAAE,GAAG,0BAA0B,CAAC;IAChC,IAAI,GAAG,0BAA0B,CAAC;IAClC,WAAW,GAClB,2EAA2E,CAAC;IACrE,QAAQ,GAAoB,UAAU,CAAC;IACvC,WAAW,GAAG,iBAAiB,CAAC;IAChC,kBAAkB,GAAe,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEjF,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE;YACpD,MAAM,EAAE;gBACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;aAChD;SACF,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,UAAqB;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,IAAI,sBAAsB,EAAE,CAAC;AACtC,CAAC"}

package/dist/security/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Security detectors module exports
+ *
+ * Detects security patterns including:
+ * - Input sanitization
+ * - SQL injection prevention
+ * - XSS prevention
+ * - CSRF protection
+ * - CSP headers
+ * - Secret management
+ * - Rate limiting
+ *
+ * @requirements 16 - Security pattern detection
+ */
+export { InputSanitizationDetector, createInputSanitizationDetector, analyzeInputSanitization, shouldExcludeFile as shouldExcludeInputSanitizationFile, } from './input-sanitization.js';
+export type { InputSanitizationPatternType, InputSanitizationViolationType, InputSanitizationPatternInfo, InputSanitizationViolationInfo, InputSanitizationAnalysis, } from './input-sanitization.js';
+export { SQLInjectionDetector, createSQLInjectionDetector, analyzeSQLInjection, detectParameterizedQueries, detectPreparedStatements, detectORMQueries, detectQueryBuilders, detectEscapeFunctions, detectTaggedTemplates, detectStringConcatViolations, detectTemplateLiteralViolations, detectRawSQLViolations, shouldExcludeFile as shouldExcludeSQLInjectionFile, PARAMETERIZED_QUERY_PATTERNS, PREPARED_STATEMENT_PATTERNS, ORM_QUERY_PATTERNS, QUERY_BUILDER_PATTERNS, ESCAPE_FUNCTION_PATTERNS, TAGGED_TEMPLATE_PATTERNS, STRING_CONCAT_VIOLATION_PATTERNS, TEMPLATE_LITERAL_VIOLATION_PATTERNS, RAW_SQL_WITH_INPUT_PATTERNS, } from './sql-injection.js';
+export type { SQLInjectionPatternType, SQLInjectionViolationType, SQLInjectionPatternInfo, SQLInjectionViolationInfo, SQLInjectionAnalysis, } from './sql-injection.js';
+export { XSSPreventionDetector, createXSSPreventionDetector, analyzeXSSPrevention, shouldExcludeFile as shouldExcludeXSSFile, } from './xss-prevention.js';
+export type { XSSPreventionPatternType, XSSViolationType, XSSPreventionPatternInfo, XSSViolationInfo, XSSPreventionAnalysis, } from './xss-prevention.js';
+export { CSRFProtectionDetector, createCSRFProtectionDetector, analyzeCSRFProtection, shouldExcludeFile as shouldExcludeCSRFFile, } from './csrf-protection.js';
+export type { CSRFProtectionPatternType, CSRFViolationType, CSRFProtectionPatternInfo, CSRFViolationInfo, CSRFProtectionAnalysis, } from './csrf-protection.js';
+export { CSPHeadersDetector, createCSPHeadersDetector, analyzeCSPHeaders, shouldExcludeFile as shouldExcludeCSPFile, } from './csp-headers.js';
+export type { CSPHeaderPatternType, CSPViolationType, CSPHeaderPatternInfo, CSPViolationInfo, CSPHeaderAnalysis, } from './csp-headers.js';
+export { SecretManagementDetector, createSecretManagementDetector, analyzeSecretManagement, shouldExcludeFile as shouldExcludeSecretFile, } from './secret-management.js';
+export type { SecretPatternType, SecretViolationType, SecretPatternInfo, SecretViolationInfo, SecretManagementAnalysis, } from './secret-management.js';
+export { RateLimitingDetector, createRateLimitingDetector, analyzeRateLimiting, shouldExcludeFile as shouldExcludeRateLimitFile, } from './rate-limiting.js';
+export type { RateLimitPatternType, RateLimitViolationType, RateLimitPatternInfo, RateLimitViolationInfo, RateLimitAnalysis, } from './rate-limiting.js';
+export declare function createSecurityDetectors(): (import("./input-sanitization.js").InputSanitizationDetector | import("./sql-injection.js").SQLInjectionDetector | import("./xss-prevention.js").XSSPreventionDetector | import("./csrf-protection.js").CSRFProtectionDetector | import("./csp-headers.js").CSPHeadersDetector | import("./secret-management.js").SecretManagementDetector | import("./rate-limiting.js").RateLimitingDetector)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,wBAAwB,EACxB,iBAAiB,IAAI,kCAAkC,GACxD,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,+BAA+B,EAC/B,sBAAsB,EACtB,iBAAiB,IAAI,6BAA6B,EAClD,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,gCAAgC,EAChC,mCAAmC,EACnC,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,IAAI,oBAAoB,GAC1C,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,iBAAiB,IAAI,qBAAqB,GAC3C,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,IAAI,oBAAoB,GAC1C,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,EACvB,iBAAiB,IAAI,uBAAuB,GAC7C,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,IAAI,0BAA0B,GAChD,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,wBAAgB,uBAAuB,sYAUtC"}

package/dist/security/index.js

@@ -0,0 +1,48 @@
+/**
+ * Security detectors module exports
+ *
+ * Detects security patterns including:
+ * - Input sanitization
+ * - SQL injection prevention
+ * - XSS prevention
+ * - CSRF protection
+ * - CSP headers
+ * - Secret management
+ * - Rate limiting
+ *
+ * @requirements 16 - Security pattern detection
+ */
+import { createInputSanitizationDetector } from './input-sanitization.js';
+import { createSQLInjectionDetector } from './sql-injection.js';
+import { createXSSPreventionDetector } from './xss-prevention.js';
+import { createCSRFProtectionDetector } from './csrf-protection.js';
+import { createCSPHeadersDetector } from './csp-headers.js';
+import { createSecretManagementDetector } from './secret-management.js';
+import { createRateLimitingDetector } from './rate-limiting.js';
+// Input Sanitization
+export { InputSanitizationDetector, createInputSanitizationDetector, analyzeInputSanitization, shouldExcludeFile as shouldExcludeInputSanitizationFile, } from './input-sanitization.js';
+// SQL Injection
+export { SQLInjectionDetector, createSQLInjectionDetector, analyzeSQLInjection, detectParameterizedQueries, detectPreparedStatements, detectORMQueries, detectQueryBuilders, detectEscapeFunctions, detectTaggedTemplates, detectStringConcatViolations, detectTemplateLiteralViolations, detectRawSQLViolations, shouldExcludeFile as shouldExcludeSQLInjectionFile, PARAMETERIZED_QUERY_PATTERNS, PREPARED_STATEMENT_PATTERNS, ORM_QUERY_PATTERNS, QUERY_BUILDER_PATTERNS, ESCAPE_FUNCTION_PATTERNS, TAGGED_TEMPLATE_PATTERNS, STRING_CONCAT_VIOLATION_PATTERNS, TEMPLATE_LITERAL_VIOLATION_PATTERNS, RAW_SQL_WITH_INPUT_PATTERNS, } from './sql-injection.js';
+// XSS Prevention
+export { XSSPreventionDetector, createXSSPreventionDetector, analyzeXSSPrevention, shouldExcludeFile as shouldExcludeXSSFile, } from './xss-prevention.js';
+// CSRF Protection
+export { CSRFProtectionDetector, createCSRFProtectionDetector, analyzeCSRFProtection, shouldExcludeFile as shouldExcludeCSRFFile, } from './csrf-protection.js';
+// CSP Headers
+export { CSPHeadersDetector, createCSPHeadersDetector, analyzeCSPHeaders, shouldExcludeFile as shouldExcludeCSPFile, } from './csp-headers.js';
+// Secret Management
+export { SecretManagementDetector, createSecretManagementDetector, analyzeSecretManagement, shouldExcludeFile as shouldExcludeSecretFile, } from './secret-management.js';
+// Rate Limiting
+export { RateLimitingDetector, createRateLimitingDetector, analyzeRateLimiting, shouldExcludeFile as shouldExcludeRateLimitFile, } from './rate-limiting.js';
+// Factory function to create all security detectors
+export function createSecurityDetectors() {
+    return [
+        createInputSanitizationDetector(),
+        createSQLInjectionDetector(),
+        createXSSPreventionDetector(),
+        createCSRFProtectionDetector(),
+        createCSPHeadersDetector(),
+        createSecretManagementDetector(),
+        createRateLimitingDetector(),
+    ];
+}
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE,qBAAqB;AACrB,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,wBAAwB,EACxB,iBAAiB,IAAI,kCAAkC,GACxD,MAAM,yBAAyB,CAAC;AASjC,gBAAgB;AAChB,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,+BAA+B,EAC/B,sBAAsB,EACtB,iBAAiB,IAAI,6BAA6B,EAClD,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,gCAAgC,EAChC,mCAAmC,EACnC,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAS5B,iBAAiB;AACjB,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,IAAI,oBAAoB,GAC1C,MAAM,qBAAqB,CAAC;AAS7B,kBAAkB;AAClB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,iBAAiB,IAAI,qBAAqB,GAC3C,MAAM,sBAAsB,CAAC;AAS9B,cAAc;AACd,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,IAAI,oBAAoB,GAC1C,MAAM,kBAAkB,CAAC;AAS1B,oBAAoB;AACpB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,EACvB,iBAAiB,IAAI,uBAAuB,GAC7C,MAAM,wBAAwB,CAAC;AAShC,gBAAgB;AAChB,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,IAAI,0BAA0B,GAChD,MAAM,oBAAoB,CAAC;AAS5B,oDAAoD;AACpD,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,+BAA+B,EAAE;QACjC,0BAA0B,EAAE;QAC5B,2BAA2B,EAAE;QAC7B,4BAA4B,EAAE;QAC9B,wBAAwB,EAAE;QAC1B,8BAA8B,EAAE;QAChC,0BAA0B,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/dist/security/input-sanitization.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Input Sanitization Detector - Input sanitization pattern detection
+ *
+ * Detects input sanitization patterns including:
+ * - HTML sanitization (DOMPurify, sanitize-html)
+ * - Input validation libraries (validator.js, joi, zod)
+ * - Escape functions for different contexts
+ * - Custom sanitization functions
+ * - Missing sanitization violations
+ *
+ * @requirements 16.1 - Input sanitization patterns
+ */
+import type { Violation, QuickFix, PatternCategory, Language } from 'driftdetect-core';
+import { RegexDetector } from '../base/regex-detector.js';
+import type { DetectionContext, DetectionResult } from '../base/base-detector.js';
+export type InputSanitizationPatternType = 'dompurify-sanitize' | 'sanitize-html-lib' | 'validator-js' | 'escape-html' | 'escape-sql' | 'escape-regex' | 'custom-sanitize' | 'trim-normalize';
+export type InputSanitizationViolationType = 'unsanitized-input' | 'raw-user-input' | 'missing-validation';
+export interface InputSanitizationPatternInfo {
+    type: InputSanitizationPatternType;
+    file: string;
+    line: number;
+    column: number;
+    matchedText: string;
+    library?: string | undefined;
+    context?: string | undefined;
+}
+export interface InputSanitizationViolationInfo {
+    type: InputSanitizationViolationType;
+    file: string;
+    line: number;
+    column: number;
+    matchedText: string;
+    issue: string;
+    suggestedFix?: string | undefined;
+}
+export interface InputSanitizationAnalysis {
+    patterns: InputSanitizationPatternInfo[];
+    violations: InputSanitizationViolationInfo[];
+    hasSanitization: boolean;
+    sanitizationLibraries: string[];
+    confidence: number;
+}
+export declare const DOMPURIFY_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const SANITIZE_HTML_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const VALIDATOR_JS_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const ESCAPE_HTML_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const ESCAPE_SQL_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const ESCAPE_REGEX_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const CUSTOM_SANITIZE_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const TRIM_NORMALIZE_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const UNSANITIZED_INPUT_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const RAW_USER_INPUT_PATTERNS: readonly [RegExp, RegExp, RegExp];
+export declare function shouldExcludeFile(filePath: string): boolean;
+export declare function detectDOMPurifySanitization(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectSanitizeHtmlLib(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectValidatorJS(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectEscapeHTML(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectEscapeSQL(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectCustomSanitization(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectTrimNormalize(content: string, filePath: string): InputSanitizationPatternInfo[];
+export declare function detectUnsanitizedInputViolations(content: string, filePath: string): InputSanitizationViolationInfo[];
+export declare function analyzeInputSanitization(content: string, filePath: string): InputSanitizationAnalysis;
+export declare class InputSanitizationDetector extends RegexDetector {
+    readonly id = "security/input-sanitization";
+    readonly name = "Input Sanitization Detector";
+    readonly description = "Detects input sanitization patterns and identifies potential unsanitized input vulnerabilities";
+    readonly category: PatternCategory;
+    readonly subcategory = "input-sanitization";
+    readonly supportedLanguages: Language[];
+    detect(context: DetectionContext): Promise<DetectionResult>;
+    generateQuickFix(_violation: Violation): QuickFix | null;
+}
+export declare function createInputSanitizationDetector(): InputSanitizationDetector;
+//# sourceMappingURL=input-sanitization.d.ts.map

package/dist/security/input-sanitization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-sanitization.d.ts","sourceRoot":"","sources":["../../src/security/input-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMlF,MAAM,MAAM,4BAA4B,GACpC,oBAAoB,GACpB,mBAAmB,GACnB,cAAc,GACd,aAAa,GACb,YAAY,GACZ,cAAc,GACd,iBAAiB,GACjB,gBAAgB,CAAC;AAErB,MAAM,MAAM,8BAA8B,GACtC,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,4BAA4B,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,4BAA4B,EAAE,CAAC;IACzC,UAAU,EAAE,8BAA8B,EAAE,CAAC;IAC7C,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,eAAO,MAAM,kBAAkB,mDAMrB,CAAC;AAEX,eAAO,MAAM,sBAAsB,mDAMzB,CAAC;AAEX,eAAO,MAAM,qBAAqB,2IAmBxB,CAAC;AAEX,eAAO,MAAM,oBAAoB,2DAOvB,CAAC;AAEX,eAAO,MAAM,mBAAmB,mDAMtB,CAAC;AAEX,eAAO,MAAM,qBAAqB,2CAKxB,CAAC;AAEX,eAAO,MAAM,wBAAwB,mHAgB3B,CAAC;AAEX,eAAO,MAAM,uBAAuB,mDAM1B,CAAC;AAEX,eAAO,MAAM,0BAA0B,2CAK7B,CAAC;AAEX,eAAO,MAAM,uBAAuB,mCAI1B,CAAC;AAMX,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAwBhC;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAwBhC;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAwBhC;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAuBhC;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAuBhC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAuBhC;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,4BAA4B,EAAE,CAuBhC;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,8BAA8B,EAAE,CAyBlC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,yBAAyB,CAyC3B;AAMD,qBAAa,yBAA0B,SAAQ,aAAa;IAC1D,QAAQ,CAAC,EAAE,iCAAiC;IAC5C,QAAQ,CAAC,IAAI,iCAAiC;IAC9C,QAAQ,CAAC,WAAW,oGAC+E;IACnG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAc;IAChD,QAAQ,CAAC,WAAW,wBAAwB;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAA0C;IAE3E,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqBjE,gBAAgB,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI;CAGzD;AAED,wBAAgB,+BAA+B,IAAI,yBAAyB,CAE3E"}