guardvibe 0.6.3 → 0.7.0

package/build/data/rules/ruby.js

@@ -1,59 +0,0 @@
-// === Ruby-specific rules ===
-export const rubyRules = [
-    {
-        id: "VG140",
-        name: "Ruby SQL injection via interpolation",
-        severity: "critical",
-        owasp: "A02:2025 Injection",
-        description: "String interpolation in SQL queries allows SQL injection attacks.",
-        pattern: /(?:where|find_by_sql|execute|select|order)\s*\(\s*["'][^"']*#\{/gi,
-        languages: ["ruby"],
-        fix: "Use parameterized queries: User.where('name = ?', user_input) or User.where(name: user_input).",
-        fixCode: "# Use parameterized queries\nUser.where('name = ?', params[:name])\n# Or use hash syntax:\nUser.where(name: params[:name])",
-    },
-    {
-        id: "VG141",
-        name: "Ruby command injection",
-        severity: "critical",
-        owasp: "A02:2025 Injection",
-        description: "User input in system/backtick commands allows arbitrary command execution.",
-        pattern: /(?:`[^`]*#\{|%x\{[^}]*#\{|IO\.popen|Open3)/gi,
-        languages: ["ruby"],
-        fix: "Use array form of system(): system('cmd', arg1, arg2). Validate input against an allowlist.",
-        fixCode: "# Use array form of system\nsystem('ls', '-la', safe_dir)\n# Or use Open3 with array args",
-    },
-    {
-        id: "VG142",
-        name: "Ruby XSS via html_safe/raw",
-        severity: "high",
-        owasp: "A02:2025 Injection",
-        description: "Using .html_safe or raw() with user input bypasses Rails' auto-escaping.",
-        pattern: /(?:\.html_safe|raw\s*\()\s*/gi,
-        languages: ["ruby"],
-        fix: "Avoid .html_safe and raw() with user data. Use sanitize() helper for HTML content.",
-        fixCode: "# Use sanitize helper\n<%= sanitize(user_input) %>\n# Or use content_tag for safe HTML generation",
-    },
-    {
-        id: "VG143",
-        name: "Ruby route without auth",
-        severity: "high",
-        owasp: "A01:2025 Broken Access Control",
-        description: "Rails route without before_action authentication filter.",
-        pattern: /(?:get|post|put|patch|delete)\s+['"]\/(?:api|admin|users|account|dashboard)/gi,
-        languages: ["ruby"],
-        fix: "Add before_action :authenticate_user! to controllers handling sensitive routes.",
-        fixCode: "# Add authentication filter\nclass ApiController < ApplicationController\n  before_action :authenticate_user!\nend",
-    },
-    {
-        id: "VG144",
-        name: "Ruby weak hashing",
-        severity: "critical",
-        owasp: "A07:2025 Auth Failures",
-        description: "Using Digest::MD5 or Digest::SHA1 for hashing. These are not suitable for passwords.",
-        pattern: /Digest::(?:MD5|SHA1)\.(?:hexdigest|digest|base64digest)/gi,
-        languages: ["ruby"],
-        fix: "Use BCrypt::Password.create(password) from the bcrypt gem for password hashing.",
-        fixCode: "# Use bcrypt gem\nrequire 'bcrypt'\nhash = BCrypt::Password.create(password)\nvalid = BCrypt::Password.new(hash) == input",
-    },
-];
-//# sourceMappingURL=ruby.js.map

package/build/data/rules/ruby.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ruby.js","sourceRoot":"","sources":["../../../src/data/rules/ruby.ts"],"names":[],"mappings":"AAEA,8BAA8B;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,mEAAmE;QACrE,OAAO,EAAE,mEAAmE;QAC5E,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,gGAAgG;QACrG,OAAO,EAAE,4HAA4H;KACtI;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,4EAA4E;QAC9E,OAAO,EAAE,8CAA8C;QACvD,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,6FAA6F;QAClG,OAAO,EAAE,2FAA2F;KACrG;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,0EAA0E;QAC5E,OAAO,EAAE,+BAA+B;QACxC,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,oFAAoF;QACzF,OAAO,EAAE,mGAAmG;KAC7G;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACT,0DAA0D;QAC5D,OAAO,EAAE,+EAA+E;QACxF,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,iFAAiF;QACtF,OAAO,EAAE,oHAAoH;KAC9H;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE,2DAA2D;QACpE,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,iFAAiF;QACtF,OAAO,EAAE,2HAA2H;KACrI;CACF,CAAC"}