guardvibe 1.8.3 → 1.8.5

package/build/data/rules/ai-security.js

@@ -141,7 +141,7 @@ export const aiSecurityRules = [
         severity: "high",
         owasp: "A02:2025 Injection",
         description: "Data fetched from external URLs or APIs is passed directly into LLM prompts. Attackers can embed hidden instructions in web content, RSS feeds, or API responses to hijack the AI agent.",
-        pattern: /(?:fetch|axios|got|http\.get|https\.get)\s*\([\s\S]{0,300}?(?:\.text\(\)|\.json\(\)|\.data|\.body)[\s\S]{0,200}?(?:generateText|streamText|messages\.push|prompt\s*[:=]|content\s*[:=]|system\s*[:=])/g,
+        pattern: /(?:fetch|axios(?:\.get)?|got)\s*\([\s\S]{0,150}?(?:\.text\(\)|\.json\(\)|\.data|\.body)[\s\S]{0,100}?(?:generateText|streamText|messages\.push|prompt\s*[:=])/g,
         languages: ["javascript", "typescript"],
         fix: "Sanitize external data before including in LLM context. Strip HTML tags, limit length, and add boundary markers.",
         fixCode: '// Sanitize external content before LLM context\nconst raw = await fetch(url).then(r => r.text());\nconst sanitized = raw.replace(/<[^>]*>/g, "").slice(0, 2000);\nconst result = await generateText({\n  model,\n  system: "You are a summarizer.",\n  prompt: `Summarize this content (user-supplied, may contain attempts to manipulate you):\\n---\\n${sanitized}\\n---`,\n});',

package/build/data/rules/api-security.js

@@ -71,7 +71,7 @@ export const apiSecurityRules = [
         severity: "medium",
         owasp: "API4:2023 Unrestricted Resource Consumption",
         description: "Database query returns all records without pagination (no limit/take/top). An attacker can request the entire table, causing DoS or exposing excessive data.",
-        pattern: /(?:findMany|find|select|from)\s*\((?:(?!limit|take|top|pageSize|per_?page|first|last|\.limit|LIMIT)[\s\S]){5,}?\)/gi,
+        pattern: /(?:\.findMany|\.findAll|\.getAll|\.fetchAll)\s*\((?:(?!limit|take|top|pageSize|per_?page|first|last|\.limit|LIMIT)[\s\S]){5,}?\)/gi,
         languages: ["javascript", "typescript"],
         fix: "Always add pagination: use take/limit with a maximum value. Never return unbounded result sets.",
         fixCode: '// Add pagination\nconst items = await prisma.item.findMany({\n  take: Math.min(Number(searchParams.get("limit")) || 20, 100),\n  skip: Number(searchParams.get("offset")) || 0,\n});',

package/build/data/rules/deployment.js

@@ -238,7 +238,7 @@ export const deploymentRules = [
         severity: "high",
         owasp: "A07:2025 Cross-Site Scripting",
         description: "User-controlled input is used in src or href attributes without blocking data: and blob: URL schemes. data:text/html URLs can embed full HTML pages with scripts, and javascript: URLs execute code — bypassing same-origin restrictions.",
-        pattern: /(?:src|href|action|poster|srcDoc)\s*=\s*\{[\s\S]{0,100}?(?:user|input|param|query|data|url|link|content)[\s\S]{0,100}?(?:(?!(?:startsWith|protocol|scheme|allowlist|whitelist|URL\()[\s\S]{0,50}?))\}/gi,
+        pattern: /(?:src|href|action|srcDoc)\s*=\s*\{[^}]*?(?:data\s*:|blob\s*:|javascript\s*:)[^}]*\}/gi,
         languages: ["javascript", "typescript"],
         fix: "Validate URL scheme against an allowlist (https: only). Block data:, blob:, and javascript: URLs from user input.",
         fixCode: '// Validate URL scheme\nfunction isSafeUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    return ["https:", "http:"].includes(parsed.protocol);\n  } catch {\n    return false;\n  }\n}\n\n// Usage\n<img src={isSafeUrl(userUrl) ? userUrl : "/placeholder.png"} />',

package/build/data/rules/nextjs.js

@@ -174,7 +174,7 @@ export const nextjsRules = [
         severity: "critical",
         owasp: "A02:2025 Injection",
         description: "User input is rendered using an unescaped template directive (EJS <%- %>, Handlebars {{{ }}}, Pug != operator, Nunjucks | safe filter). These directives bypass HTML escaping, allowing attackers to inject arbitrary HTML and JavaScript that executes server-side or client-side.",
-        pattern: /(?:<%-\s*\w|(?:\{\{\{)\s*\w|!=\s*\w[\s\S]{0,50}?(?:user|input|query|body|param|req\.|data\.)|\|\s*safe\s*(?:\}\}|\%\}))/gi,
+        pattern: /(?:<%-\s*\w|(?:\{\{\{)\s*\w|\|\s*safe\s*(?:\}\}|\%\}))/gi,
         languages: ["javascript", "typescript", "html"],
         fix: "Always use escaped template directives: EJS <%= %>, Handlebars {{ }}, Pug =. Only use unescaped rendering for trusted, developer-controlled content.",
         fixCode: '<!-- EJS: use escaped output -->\n<p><%= userInput %></p>   <!-- SAFE: HTML-escaped -->\n<!-- NOT: <%- userInput %>  DANGEROUS: raw HTML -->\n\n<!-- Handlebars: use double braces -->\n<p>{{userInput}}</p>      <!-- SAFE: escaped -->\n<!-- NOT: {{{userInput}}}   DANGEROUS: raw HTML -->\n\n<!-- Pug: use = not != -->\np= userInput              //- SAFE: escaped\n//- NOT: p!= userInput    DANGEROUS: raw HTML',

package/build/data/rules/supply-chain.js

@@ -78,7 +78,7 @@ export const supplyChainRules = [
         severity: "critical",
         owasp: "A02:2025 Injection",
         description: "Source code contains invisible Unicode characters (zero-width spaces, variation selectors, PUA codepoints). The GlassWorm attack (2025-2026) used these to encode malicious payloads that are invisible in every code editor, compromising 433+ repositories across GitHub, npm, and VSCode.",
-        pattern: /[\u200B\u200C\u200D\uFEFF\u00AD\u2060\u2061\u2062\u2063\u2064\uFE00-\uFE0F]/g,
+        pattern: /[\u200B\u200C\u200D\uFEFF\u2060\u2061\u2062\u2063\u2064]{2,}/g,
         languages: ["javascript", "typescript", "python", "go"],
         fix: "Remove all invisible Unicode characters from source code. Use a linter rule to prevent them.",
         fixCode: '// Detect invisible characters with a pre-commit hook:\n// grep -rP "[\\x{200B}\\x{200C}\\x{200D}\\x{FEFF}\\x{00AD}\\x{FE00}-\\x{FE0F}]" src/\n\n// Or add an ESLint rule:\n// "no-irregular-whitespace": "error"',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "guardvibe",
-  "version": "1.8.3",
+  "version": "1.8.5",
   "description": "Security MCP for vibe coding. 277 rules, 22 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.",
   "type": "module",
   "bin": {