eslint-plugin-vercel-ai-security 1.5.2 → 1.5.3

package/src/rules/require-validated-prompt/index.js

@@ -1,194 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireValidatedPrompt = void 0;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-const prompt_props_1 = require("../../utils/prompt-props");
-exports.requireValidatedPrompt = (0, eslint_devkit_1.createRule)({
-    name: 'require-validated-prompt',
-    meta: {
-        type: 'problem',
-        docs: {
-            url: 'https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-validated-prompt.md',
-            description: 'Require validated/sanitized prompts in generateText and streamText calls',
-            cwe: 'CWE-74',
-            cvss: 9,
-        },
-        messages: {
-            unsafePrompt: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'Unsafe Prompt in Vercel AI SDK',
-                cwe: 'CWE-74',
-                owasp: 'A03:2021',
-                cvss: 9.0,
-                description: 'User input "{{input}}" passed directly to {{function}} prompt without validation',
-                severity: 'CRITICAL',
-                compliance: ['SOC2', 'GDPR'],
-                fix: 'Validate input before use: generateText({ prompt: validateInput(userInput) })',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-            unsafeSystemPrompt: (0, eslint_devkit_1.formatLLMMessage)({
-                icon: eslint_devkit_1.MessageIcons.SECURITY,
-                issueName: 'Unsafe System Prompt',
-                cwe: 'CWE-74',
-                owasp: 'A03:2021',
-                cvss: 8.5,
-                description: 'Dynamic value in system prompt can lead to prompt injection',
-                severity: 'HIGH',
-                fix: 'Use static system prompts or validate dynamic content',
-                documentationLink: 'https://owasp.org/www-project-top-10-for-large-language-model-applications/',
-            }),
-        },
-        schema: [
-            {
-                type: 'object',
-                properties: {
-                    validatorFunctions: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Function names considered as input validators',
-                    },
-                    userInputPatterns: {
-                        type: 'array',
-                        items: { type: 'string' },
-                        description: 'Variable patterns that suggest user input (regex)',
-                    },
-                    allowInTests: {
-                        type: 'boolean',
-                        description: 'Allow unsafe patterns in test files',
-                    },
-                },
-                additionalProperties: false,
-            },
-        ],
-    },
-    defaultOptions: [
-        {
-            validatorFunctions: [
-                'validateInput',
-                'sanitizeInput',
-                'validatePrompt',
-                'sanitizePrompt',
-                'escapeInput',
-                'cleanInput',
-            ],
-            userInputPatterns: [
-                'userInput',
-                'userPrompt',
-                'userMessage',
-                'userQuery',
-                'userContent',
-                'input',
-                'query',
-                'message',
-                'req.body',
-                'request.body',
-            ],
-            allowInTests: false,
-        },
-    ],
-    create(context) {
-        const [options = {}] = context.options;
-        const validatorFunctions = options.validatorFunctions ?? [
-            'validateInput', 'sanitizeInput', 'validatePrompt', 'sanitizePrompt',
-        ];
-        const userInputPatterns = options.userInputPatterns ?? [
-            'userInput', 'userPrompt', 'userMessage', 'userQuery', 'userContent',
-            'input', 'query', 'message', 'req.body', 'request.body',
-        ];
-        const allowInTests = options.allowInTests ?? false;
-        const sourceCode = context.sourceCode;
-        const filename = context.filename;
-        if (allowInTests && /\.(test|spec)\.[jt]sx?$/.test(filename)) {
-            return {};
-        }
-        const vercelAIFunctions = [
-            'generateText',
-            'streamText',
-            'generateObject',
-            'streamObject',
-        ];
-        function isValidatedCall(node) {
-            if (node.type !== 'CallExpression')
-                return false;
-            const callee = sourceCode.getText(node.callee);
-            return validatorFunctions.some((v) => callee.includes(v));
-        }
-        function isUserInput(node) {
-            const text = sourceCode.getText(node);
-            return userInputPatterns.some((pattern) => text.includes(pattern));
-        }
-        function hasUnsafeUserInput(node) {
-            if (isValidatedCall(node)) {
-                return { unsafe: false };
-            }
-            if (node.type === 'TemplateLiteral') {
-                for (const expr of node.expressions) {
-                    const result = hasUnsafeUserInput(expr);
-                    if (result.unsafe)
-                        return result;
-                }
-            }
-            if (node.type === 'Identifier') {
-                if (isUserInput(node)) {
-                    return { unsafe: true, input: node.name };
-                }
-            }
-            if (node.type === 'MemberExpression') {
-                const text = sourceCode.getText(node);
-                if (isUserInput(node)) {
-                    return { unsafe: true, input: text };
-                }
-            }
-            if (node.type === 'BinaryExpression') {
-                const leftResult = hasUnsafeUserInput(node.left);
-                if (leftResult.unsafe)
-                    return leftResult;
-                const rightResult = hasUnsafeUserInput(node.right);
-                if (rightResult.unsafe)
-                    return rightResult;
-            }
-            return { unsafe: false };
-        }
-        function checkAICall(node) {
-            const callee = sourceCode.getText(node.callee);
-            const matchedFunction = vercelAIFunctions.find(fn => callee.includes(fn));
-            if (!matchedFunction) {
-                return;
-            }
-            const optionsArg = node.arguments[0];
-            if (!optionsArg || optionsArg.type !== 'ObjectExpression') {
-                return;
-            }
-            for (const prop of optionsArg.properties) {
-                if (prop.type !== eslint_devkit_1.AST_NODE_TYPES.Property)
-                    continue;
-                const keyName = (0, prompt_props_1.getStaticPropName)(prop);
-                if (keyName === 'prompt') {
-                    const result = hasUnsafeUserInput(prop.value);
-                    if (result.unsafe) {
-                        context.report({
-                            node: prop.value,
-                            messageId: 'unsafePrompt',
-                            data: {
-                                input: result.input || 'user input',
-                                function: matchedFunction,
-                            },
-                        });
-                    }
-                }
-                if ((0, prompt_props_1.isSystemPromptProp)(keyName)) {
-                    const result = hasUnsafeUserInput(prop.value);
-                    if (result.unsafe) {
-                        context.report({
-                            node: prop.value,
-                            messageId: 'unsafeSystemPrompt',
-                        });
-                    }
-                }
-            }
-        }
-        return {
-            CallExpression: checkAICall,
-        };
-    },
-});
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.requireValidatedPrompt=void 0;const eslint_devkit_1=require("@interlace/eslint-devkit");const prompt_props_1=require("../../utils/prompt-props");exports.requireValidatedPrompt=(0,eslint_devkit_1.createRule)({name:"require-validated-prompt",meta:{type:"problem",docs:{url:"https://github.com/ofri-peretz/eslint/blob/main/packages/eslint-plugin-vercel-ai-security/docs/rules/require-validated-prompt.md",description:"Require validated/sanitized prompts in generateText and streamText calls",cwe:"CWE-74",cvss:9},messages:{unsafePrompt:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"Unsafe Prompt in Vercel AI SDK",cwe:"CWE-74",owasp:"A03:2021",cvss:9,description:'User input "{{input}}" passed directly to {{function}} prompt without validation',severity:"CRITICAL",compliance:["SOC2","GDPR"],fix:"Validate input before use: generateText({ prompt: validateInput(userInput) })",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"}),unsafeSystemPrompt:(0,eslint_devkit_1.formatLLMMessage)({icon:eslint_devkit_1.MessageIcons.SECURITY,issueName:"Unsafe System Prompt",cwe:"CWE-74",owasp:"A03:2021",cvss:8.5,description:"Dynamic value in system prompt can lead to prompt injection",severity:"HIGH",fix:"Use static system prompts or validate dynamic content",documentationLink:"https://owasp.org/www-project-top-10-for-large-language-model-applications/"})},schema:[{type:"object",properties:{validatorFunctions:{type:"array",items:{type:"string"},description:"Function names considered as input validators"},userInputPatterns:{type:"array",items:{type:"string"},description:"Variable patterns that suggest user input (regex)"},allowInTests:{type:"boolean",description:"Allow unsafe patterns in test files"}},additionalProperties:false}]},defaultOptions:[{validatorFunctions:["validateInput","sanitizeInput","validatePrompt","sanitizePrompt","escapeInput","cleanInput"],userInputPatterns:["userInput","userPrompt","userMessage","userQuery","userContent","input","query","message","req.body","request.body"],allowInTests:false}],create(context){const[options={}]=context.options;const validatorFunctions=options.validatorFunctions??["validateInput","sanitizeInput","validatePrompt","sanitizePrompt"];const userInputPatterns=options.userInputPatterns??["userInput","userPrompt","userMessage","userQuery","userContent","input","query","message","req.body","request.body"];const allowInTests=options.allowInTests??false;const sourceCode=context.sourceCode;const filename=context.filename;if(allowInTests&&/\.(test|spec)\.[jt]sx?$/.test(filename)){return{}}const vercelAIFunctions=["generateText","streamText","generateObject","streamObject"];function isValidatedCall(node){if(node.type!=="CallExpression")return false;const callee=sourceCode.getText(node.callee);return validatorFunctions.some(v=>callee.includes(v))}function isUserInput(node){const text=sourceCode.getText(node);return userInputPatterns.some(pattern=>text.includes(pattern))}function hasUnsafeUserInput(node){if(isValidatedCall(node)){return{unsafe:false}}if(node.type==="TemplateLiteral"){for(const expr of node.expressions){const result=hasUnsafeUserInput(expr);if(result.unsafe)return result}}if(node.type==="Identifier"){if(isUserInput(node)){return{unsafe:true,input:node.name}}}if(node.type==="MemberExpression"){const text=sourceCode.getText(node);if(isUserInput(node)){return{unsafe:true,input:text}}}if(node.type==="BinaryExpression"){const leftResult=hasUnsafeUserInput(node.left);if(leftResult.unsafe)return leftResult;const rightResult=hasUnsafeUserInput(node.right);if(rightResult.unsafe)return rightResult}return{unsafe:false}}function checkAICall(node){const callee=sourceCode.getText(node.callee);const matchedFunction=vercelAIFunctions.find(fn=>callee.includes(fn));if(!matchedFunction){return}const optionsArg=node.arguments[0];if(!optionsArg||optionsArg.type!=="ObjectExpression"){return}for(const prop of optionsArg.properties){if(prop.type!==eslint_devkit_1.AST_NODE_TYPES.Property)continue;const keyName=(0,prompt_props_1.getStaticPropName)(prop);if(keyName==="prompt"){const result=hasUnsafeUserInput(prop.value);if(result.unsafe){context.report({node:prop.value,messageId:"unsafePrompt",data:{input:result.input||"user input",function:matchedFunction}})}}if((0,prompt_props_1.isSystemPromptProp)(keyName)){const result=hasUnsafeUserInput(prop.value);if(result.unsafe){context.report({node:prop.value,messageId:"unsafeSystemPrompt"})}}}}return{CallExpression:checkAICall}}});

package/src/types/index.js

@@ -1,2 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});

package/src/utils/prompt-props.js

@@ -1,20 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SYSTEM_PROMPT_PROPS = void 0;
-exports.isSystemPromptProp = isSystemPromptProp;
-exports.getStaticPropName = getStaticPropName;
-const eslint_devkit_1 = require("@interlace/eslint-devkit");
-exports.SYSTEM_PROMPT_PROPS = new Set(['instructions', 'system']);
-function isSystemPromptProp(name) {
-    return name !== null && exports.SYSTEM_PROMPT_PROPS.has(name);
-}
-function getStaticPropName(prop) {
-    if (prop.computed)
-        return null;
-    if (prop.key.type === eslint_devkit_1.AST_NODE_TYPES.Identifier)
-        return prop.key.name;
-    if (prop.key.type === eslint_devkit_1.AST_NODE_TYPES.Literal && typeof prop.key.value === 'string') {
-        return prop.key.value;
-    }
-    return null;
-}
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.SYSTEM_PROMPT_PROPS=void 0;exports.isSystemPromptProp=isSystemPromptProp;exports.getStaticPropName=getStaticPropName;const eslint_devkit_1=require("@interlace/eslint-devkit");exports.SYSTEM_PROMPT_PROPS=new Set(["instructions","system"]);function isSystemPromptProp(name){return name!==null&&exports.SYSTEM_PROMPT_PROPS.has(name)}function getStaticPropName(prop){if(prop.computed)return null;if(prop.key.type===eslint_devkit_1.AST_NODE_TYPES.Identifier)return prop.key.name;if(prop.key.type===eslint_devkit_1.AST_NODE_TYPES.Literal&&typeof prop.key.value==="string"){return prop.key.value}return null}