mdefender-pro 1.1.0 → 1.2.0

package/README.md

@@ -1,21 +1,21 @@
 # MDefender Pro
 
-[![npm version](https://img.shields.io/npm/v/mdefender.svg)](https://www.npmjs.com/package/mdefender)
-[![license](https://img.shields.io/npm/l/mdefender.svg)](https://github.com/mdefender/mdefender/blob/main/LICENSE)
+[![npm version](https://img.shields.io/npm/v/mdefender-pro.svg)](https://www.npmjs.com/package/mdefender-pro)
+[![license](https://img.shields.io/npm/l/mdefender-pro.svg)](https://github.com/mahabub251595/mdefender-pro/blob/main/LICENSE)
 
 **MDefender Pro** is a Web Application Firewall (WAF) middleware for Node.js/Express. It intercepts incoming HTTP requests and sends them to the MDefender Pro API for real-time threat analysis, blocking malicious traffic such as XSS, SQLi, CSRF, and other OWASP Top 10 attacks.
 
 ## Installation
 
 ```bash
-npm install mdefender
+npm install mdefender-pro
 ```
 
 ## Quick Start
 
 ```js
 const express = require('express');
-const mdefender = require('mdefender');
+const mdefender = require('mdefender-pro');
 
 const app = express();
 

package/index.js

@@ -81,7 +81,7 @@ function buildPayload(req, config) {
   return payload;
 }
 
-function readBody(req) {
+function readBody(req, maxBytes) {
   return new Promise((resolve) => {
     if (req.body) {
       if (typeof req.body === 'string') return resolve(req.body);
@@ -90,7 +90,7 @@ function readBody(req) {
     }
 
     let body = '';
-    const maxBytes = 1024 * 1024;
+    maxBytes = maxBytes || 1024 * 1024;
     let bytesRead = 0;
 
     const onData = (chunk) => {
@@ -206,7 +206,7 @@ function mdefender(overrides = {}) {
     headers: {
       'Authorization': `Bearer ${config.apiKey}`,
       'Content-Type': 'application/json',
-      'X-MDefender-Version': '1.0.0',
+      'X-MDefender-Version': '1.2.0',
     },
   });
 
@@ -223,7 +223,7 @@ function mdefender(overrides = {}) {
 
     try {
       // Read and parse request body
-      const rawBody = await readBody(req);
+      const rawBody = await readBody(req, config.maxBodySize);
       const contentType = req.headers['content-type'] || '';
       const { fields, values } = parseBody(rawBody, contentType);
       
@@ -242,6 +242,19 @@ function mdefender(overrides = {}) {
       const result = response.data;
 
       if (result.status === 'blocked') {
+        if (config.mode === 'monitor') {
+          // Monitor mode: log but don't block
+          console.log(`[MDefender] MONITOR: ${req.method} ${req.url} - ${result.attack_type} (${(result.confidence * 100).toFixed(1)}%) - ALLOWED (monitor mode)`);
+          req.mdefender = {
+            status: 'monitor',
+            threat_score: result.confidence || 0,
+            attack_type: result.attack_type || null,
+            request_id: result.reference_id || null,
+          };
+          return next();
+        }
+
+        // Block mode: block the request
         if (config.logBlocked) {
           console.log(`[MDefender] BLOCKED ${req.method} ${req.url} - ${result.attack_type} (${(result.confidence * 100).toFixed(1)}%)`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mdefender-pro",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "MDefender Pro - Web Application Firewall middleware for Node.js/Express. Protects against XSS, SQLi, CSRF, and other OWASP Top 10 attacks.",
   "main": "index.js",
   "types": "index.d.ts",
@@ -37,10 +37,10 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/mdefender/mdefender"
+    "url": "https://github.com/mahabub251595/mdefender-pro.git"
   },
   "homepage": "https://mdefender-pro-6e3r.onrender.com",
   "bugs": {
-    "url": "https://github.com/mdefender/mdefender/issues"
+    "url": "https://github.com/mahabub251595/mdefender-pro/issues"
   }
 }