fullcourtdefense-cli 1.21.16 → 1.21.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -310,7 +310,11 @@ function containsSensitiveCredentialPath(value) {
|
|
|
310
310
|
{ itemId: 'gcp_adc', label: 'GCP ADC credentials', re: /application_default_credentials\.json(?:$|[/?#\s'"])/ },
|
|
311
311
|
{ itemId: 'linux_shadow', label: 'Linux shadow file', re: /(?:^|\/)etc\/(?:shadow|sudoers)(?:$|[/?#\s'"])/ },
|
|
312
312
|
{ itemId: 'powershell_history', label: 'PowerShell history', re: /powershell\/psreadline\/consolehost_history\.txt(?:$|[/?#\s'"])/ },
|
|
313
|
-
|
|
313
|
+
// Anchored to real browser-profile paths (Chromium: "User Data/<profile>/Network/Cookies",
|
|
314
|
+
// "<profile>/Login Data"; Firefox: key4.db / logins.json / cookies.sqlite). Bare English
|
|
315
|
+
// words like "cookies" in prose, code, or a "/cookies" web route must NOT match — the
|
|
316
|
+
// unanchored version over-blocked ordinary web-dev work.
|
|
317
|
+
{ itemId: 'browser_credentials', label: 'browser credential store', re: /(?:^|\/)(?:(?:default|profile [0-9]+|network)\/cookies|login data|cookies\.sqlite|key4\.db|logins\.json)(?:$|[/?#\s'"])/ },
|
|
314
318
|
];
|
|
315
319
|
for (const check of checks) {
|
|
316
320
|
if (check.re.test(text))
|
package/dist/version.json
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "fullcourtdefense-cli",
|
|
3
|
-
"version": "1.21.
|
|
3
|
+
"version": "1.21.18",
|
|
4
4
|
"description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"bin": {
|
|
@@ -15,6 +15,7 @@
|
|
|
15
15
|
"scripts": {
|
|
16
16
|
"build": "tsc && node scripts/copy-attack-corpus.js",
|
|
17
17
|
"test:deterministic-guard": "npm run build && node scripts/test-deterministic-guard.js",
|
|
18
|
+
"test:browser-credentials-rule": "npm run build && node scripts/test-browser-credentials-rule.js",
|
|
18
19
|
"test:taint-ledger": "npm run build && node scripts/test-taint-ledger.js",
|
|
19
20
|
"test:shell-audit": "npm run build && node scripts/test-shell-audit.js",
|
|
20
21
|
"test:shell-guard": "npm run build && node scripts/test-shell-guard.js",
|