npm - mdefender-pro - Versions diffs - 1.2.0 → 1.2.2 - Mend

mdefender-pro 1.2.0 → 1.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/block-page.html ADDED Viewed

@@ -0,0 +1,541 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>403 &mdash; Security Action Required | MDefender Pro</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;500;600;700;800&family=JetBrains+Mono:wght@400;500;600;700&display=swap" rel="stylesheet">
+    <style>
+        :root {
+            --brand-1: #4f46e5;
+            --brand-2: #6366f1;
+            --bg-color: #f8fafc;
+            --card-bg: #ffffff;
+            --text-primary: #0f172a;
+            --text-secondary: #475569;
+            --text-muted: #94a3b8;
+            --border-color: #cbd5e1;
+            --font-main: 'Outfit', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+            --font-mono: 'JetBrains Mono', Consolas, Monaco, monospace;
+        }
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+        body {
+            font-family: var(--font-main);
+            background-color: var(--bg-color);
+            background-image:
+                radial-gradient(circle at 10% 20%, rgba(99, 102, 241, 0.03) 0%, transparent 40%),
+                radial-gradient(circle at 90% 80%, rgba(59, 130, 246, 0.03) 0%, transparent 40%);
+            color: var(--text-primary);
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            padding: 20px 14px;
+        }
+        .container {
+            width: 100%;
+            max-width: 660px;
+            background: var(--card-bg);
+            border: 1px solid rgba(226, 232, 240, 0.95);
+            border-radius: 12px;
+            box-shadow: 0 8px 25px -4px rgba(0, 0, 0, 0.04), 0 4px 6px -2px rgba(0, 0, 0, 0.02);
+            padding: 24px 28px;
+            text-align: center;
+            animation: fadeIn 0.35s cubic-bezier(0.16, 1, 0.3, 1) forwards;
+        }
+        @keyframes fadeIn {
+            from { opacity: 0; transform: translateY(10px); }
+            to { opacity: 1; transform: translateY(0); }
+        }
+        .logo-wrap {
+            margin-bottom: 10px;
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            justify-content: center;
+        }
+        .logo-svg {
+            width: 48px;
+            height: 48px;
+        }
+        .logo-text {
+            font-size: 13.5px;
+            font-weight: 800;
+            color: #1e293b;
+            letter-spacing: 0.5px;
+            margin-top: 4px;
+            text-transform: uppercase;
+        }
+        .fw-badge {
+            font-size: 9.5px;
+            font-weight: 700;
+            color: #64748b;
+            text-transform: uppercase;
+            letter-spacing: 1.5px;
+            margin-bottom: 2px;
+        }
+        .fw-owner {
+            font-size: 12px;
+            font-weight: 800;
+            color: #0f172a;
+            text-transform: uppercase;
+            letter-spacing: 1px;
+            margin-bottom: 12px;
+        }
+        .main-title {
+            font-size: 19px;
+            font-weight: 800;
+            color: #0f172a;
+            letter-spacing: -0.3px;
+            margin-bottom: 3px;
+        }
+        .sub-title {
+            font-size: 14px;
+            font-weight: 700;
+            color: #0f172a;
+            margin-bottom: 3px;
+        }
+        .desc-text {
+            font-size: 11.5px;
+            color: var(--text-secondary);
+            margin-bottom: 12px;
+        }
+        .table-container {
+            border: 1px solid var(--border-color);
+            border-radius: 7px;
+            overflow: hidden;
+            background: #ffffff;
+            margin-bottom: 12px;
+            text-align: left;
+        }
+        .details-table {
+            width: 100%;
+            border-collapse: collapse;
+        }
+        .details-table tr {
+            border-bottom: 1px solid var(--border-color);
+        }
+        .details-table tr:last-child {
+            border-bottom: none;
+        }
+        .details-table th {
+            background-color: #f8fafc;
+            color: #475569;
+            font-weight: 700;
+            font-size: 11px;
+            text-transform: uppercase;
+            letter-spacing: 0.4px;
+            width: 190px;
+            padding: 7px 12px;
+            border-right: 1px solid var(--border-color);
+            vertical-align: middle;
+        }
+        .details-table td {
+            color: #334155;
+            font-weight: 500;
+            font-size: 11.5px;
+            padding: 7px 12px;
+            vertical-align: middle;
+        }
+        .threat-row td {
+            background-color: #fff5f5 !important;
+            color: #991b1b !important;
+        }
+        .threat-cell-content {
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            width: 100%;
+            gap: 8px;
+        }
+        .threat-text {
+            font-weight: 700;
+            color: #dc2626;
+            word-break: break-word;
+        }
+        .info-tag {
+            background: #f1f5f9;
+            color: #475569;
+            border: 1px solid #cbd5e1;
+            font-size: 10px;
+            font-weight: 600;
+            padding: 2px 7px;
+            border-radius: 4px;
+            text-decoration: none;
+            white-space: nowrap;
+        }
+        .ip-wrap {
+            display: flex;
+            align-items: center;
+            gap: 8px;
+        }
+        .flag-img {
+            border: 1px solid rgba(0, 0, 0, 0.08);
+            border-radius: 2px;
+            box-shadow: 0 1px 2px rgba(0,0,0,0.05);
+            display: inline-block;
+            vertical-align: middle;
+        }
+        .why-header {
+            font-size: 12.5px;
+            font-weight: 700;
+            color: #0f172a;
+            margin-top: 10px;
+            margin-bottom: 3px;
+        }
+        .why-desc {
+            font-size: 10.5px;
+            color: var(--text-secondary);
+            line-height: 1.45;
+            max-width: 560px;
+            margin: 0 auto 10px;
+        }
+        .ref-box {
+            background: #f8fafc;
+            border: 1px dashed var(--border-color);
+            border-radius: 5px;
+            padding: 6px 14px;
+            font-family: var(--font-mono);
+            font-size: 11.5px;
+            font-weight: 700;
+            color: #0f172a;
+            display: inline-block;
+            margin-bottom: 12px;
+            letter-spacing: 0.5px;
+            cursor: pointer;
+            transition: all 0.2s ease;
+        }
+        .ref-box:hover {
+            background: #f1f5f9;
+            border-color: #94a3b8;
+            transform: scale(1.01);
+        }
+        .actions {
+            display: flex;
+            justify-content: center;
+            gap: 8px;
+            margin-bottom: 8px;
+            flex-wrap: wrap;
+        }
+        .btn {
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            padding: 7px 16px;
+            border-radius: 6px;
+            font-size: 11.5px;
+            font-weight: 600;
+            text-decoration: none;
+            cursor: pointer;
+            transition: all 0.2s ease;
+            gap: 6px;
+            box-shadow: 0 1px 3px rgba(0,0,0,0.02);
+            border: none;
+        }
+        .btn-primary {
+            background-color: #1e3a8a;
+            color: #ffffff;
+        }
+        .btn-primary:hover {
+            background-color: #172554;
+            transform: translateY(-1px);
+            box-shadow: 0 3px 5px rgba(0,0,0,0.06);
+            color: #ffffff;
+        }
+        .btn-secondary {
+            background-color: #ffffff;
+            color: #475569;
+            border: 1px solid var(--border-color);
+        }
+        .btn-secondary:hover {
+            background-color: #f8fafc;
+            color: #0f172a;
+            border-color: #94a3b8;
+            transform: translateY(-1px);
+            box-shadow: 0 3px 5px rgba(0,0,0,0.04);
+        }
+        .footer {
+            font-size: 10.5px;
+            color: var(--text-muted);
+            border-top: 1px solid var(--border-color);
+            padding-top: 12px;
+            margin-top: 10px;
+        }
+        @media (max-width: 768px) {
+            .container { padding: 24px; }
+            .details-table th, .details-table td {
+                display: block;
+                width: 100%;
+                border-right: none;
+            }
+            .details-table th {
+                background-color: #f8fafc;
+                padding-bottom: 6px;
+            }
+            .details-table td {
+                padding-top: 6px;
+                border-bottom: none;
+            }
+            .details-table tr {
+                border-bottom: 1px solid var(--border-color);
+                display: block;
+            }
+            .threat-cell-content {
+                flex-direction: column;
+                align-items: flex-start;
+                gap: 8px;
+            }
+            .actions {
+                flex-direction: column;
+                width: 100%;
+                max-width: 400px;
+                margin: 0 auto 12px;
+            }
+            .btn {
+                width: 100%;
+            }
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <!-- Logo Header -->
+        <div class="logo-wrap">
+            <svg class="logo-svg" viewBox="0 0 120 120" xmlns="http://www.w3.org/2000/svg">
+                <defs>
+                    <linearGradient id="shieldBg" x1="0%" y1="0%" x2="100%" y2="100%">
+                        <stop offset="0%" stop-color="#f8fafc" />
+                        <stop offset="30%" stop-color="#cbd5e1" />
+                        <stop offset="70%" stop-color="#94a3b8" />
+                        <stop offset="100%" stop-color="#475569" />
+                    </linearGradient>
+                    <linearGradient id="shieldBorder" x1="0%" y1="0%" x2="100%" y2="0%">
+                        <stop offset="0%" stop-color="#94a3b8" />
+                        <stop offset="50%" stop-color="#f1f5f9" />
+                        <stop offset="100%" stop-color="#475569" />
+                    </linearGradient>
+                    <linearGradient id="dragonColor" x1="0%" y1="0%" x2="100%" y2="100%">
+                        <stop offset="0%" stop-color="#1e293b" />
+                        <stop offset="100%" stop-color="#0f172a" />
+                    </linearGradient>
+                    <filter id="dropShadow" x="-10%" y="-10%" width="120%" height="120%">
+                        <feDropShadow dx="0" dy="4" stdDeviation="4" flood-color="#0f172a" flood-opacity="0.15" />
+                    </filter>
+                </defs>
+                <path d="M60 10 C85 22 98 25 98 48 C98 75 75 98 60 108 C45 98 22 75 22 48 C22 25 35 22 60 10 Z" fill="url(#shieldBg)" stroke="url(#shieldBorder)" stroke-width="3" filter="url(#dropShadow)" />
+                <path d="M60 18 C80 28 90 30 90 48 C90 70 70 90 60 98 C50 90 30 70 30 48 C30 30 40 28 60 18 Z" fill="none" stroke="#ffffff" stroke-width="1.5" stroke-opacity="0.8" stroke-dasharray="3 2" />
+                <path d="M60 28 C58 35 52 38 48 38 C44 38 43 42 45 44 C47 46 51 44 51 48 C51 52 46 55 42 53 C38 51 36 54 38 58 C40 62 45 60 48 64 C50 66 48 70 44 72 C48 74 54 75 58 72 C58 68 55 65 57 62 C59 59 63 61 65 58 C67 55 66 52 62 50 C64 45 68 46 70 42 C72 38 67 36 65 32 C63 28 61 25 60 28 Z" fill="url(#dragonColor)" />
+            </svg>
+            <div class="logo-text">MDefender-Pro AI</div>
+        </div>
+        <div class="fw-badge">A.S.A.P. Security Firewall</div>
+        <div class="fw-owner">Mahabub</div>
+        <h1 class="main-title">403 — SECURITY ACTION REQUIRED</h1>
+        <h2 class="sub-title">Access Denied by Corporate WAF</h2>
+        <div class="desc-text" id="desc-msg">Access to [{{SITE_NAME}}] restricted.</div>
+        <!-- Table Section -->
+        <div class="table-container">
+            <table class="details-table">
+                <tr class="threat-row">
+                    <th>Attack Classification</th>
+                    <td>
+                        <div class="threat-cell-content">
+                            <span class="threat-text">{{ATTACK_TYPE}}</span>
+                            <span class="info-tag">Detailed info tag</span>
+                        </div>
+                    </td>
+                </tr>
+                <tr>
+                    <th>Origin Client IP</th>
+                    <td>
+                        <div class="ip-wrap">
+                            <img id="flag-img" src="https://flagcdn.com/w40/bd.png" srcset="https://flagcdn.com/w80/bd.png 2x" width="20" height="15" alt="Flag" class="flag-img" style="display: inline-block;">
+                            <span><span id="client-ip-display" style="font-family: var(--font-mono); font-weight: 700;">{{CLIENT_IP}}</span><span id="geo-text" style="color: #64748b;"> (GeoIP: Dhaka, Bangladesh)</span></span>
+                        </div>
+                    </td>
+                </tr>
+                <tr>
+                    <th>Event Timestamp</th>
+                    <td><span id="utc-time">{{TIMESTAMP}}</span> (Ref: <span id="unix-ref">1788199736</span>)</td>
+                </tr>
+                <tr>
+                    <th>Violation Reason</th>
+                    <td>Request blocked by rule ID: <span id="rule-id-val">96565</span> (Ref: {{ATTACK_TYPE}})</td>
+                </tr>
+                <tr>
+                    <th>Protocol Details</th>
+                    <td>HTTP/1.1 (WAF_VER: 4.1.0)</td>
+                </tr>
+                <tr>
+                    <th>Server Host</th>
+                    <td><span id="server-host">{{SITE_NAME}}</span></td>
+                </tr>
+            </table>
+        </div>
+        <!-- Bottom Explanatory Section -->
+        <h3 class="why-header">Why did this happen?</h3>
+        <p class="why-desc">
+            To maintain system integrity, suspicious requests are automatically analyzed and filtered. If you believe this is a valid corporate action, please share the Reference ID below with your local IT/Security operations. Regular users should clear cache or contact support.
+        </p>
+        <div class="ref-box" id="ref-id-box" title="Click to copy Reference ID" onclick="copyRef()">
+            REFERENCE ID: {{REFERENCE_ID}}
+        </div>
+        <!-- Actions Button Section -->
+        <div class="actions">
+            <a id="email-link" href="#" class="btn btn-primary">
+                <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                    <path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"></path>
+                    <polyline points="22,6 12,13 2,6"></polyline>
+                </svg>
+                Contact Security Operations
+            </a>
+            <a href="/" class="btn btn-secondary">
+                <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                    <path d="M3 9l9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path>
+                    <polyline points="9 22 9 12 15 12 15 22"></polyline>
+                </svg>
+                Return to Homepage
+            </a>
+            <button type="button" class="btn btn-secondary" onclick="copyRef()">
+                <svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                    <rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect>
+                    <path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path>
+                </svg>
+                Copy Reference ID
+            </button>
+        </div>
+        <div class="footer">
+            Secured by MDefender-Pro AI Firewall. All critical system events are logged and audited.
+        </div>
+    </div>
+    <script>
+        // Fetch GeoIP and real IP details
+        const serverDetectedIp = "{{CLIENT_IP}}";
+        const ipSpan = document.getElementById('client-ip-display');
+        const flagImg = document.getElementById('flag-img');
+        const geoText = document.getElementById('geo-text');
+        function updateGeoDisplay(ip, countryCode, city, country) {
+            if (ipSpan && ip) {
+                ipSpan.innerText = ip;
+            }
+            if (flagImg && countryCode) {
+                const cc = countryCode.toLowerCase();
+                flagImg.src = `https://flagcdn.com/w40/${cc}.png`;
+                flagImg.srcset = `https://flagcdn.com/w80/${cc}.png 2x`;
+                flagImg.alt = countryCode.toUpperCase();
+                flagImg.style.display = 'inline-block';
+            }
+            if (geoText) {
+                let geoInfo = '';
+                if (city && country) geoInfo = ` (GeoIP: ${city}, ${country})`;
+                else if (country) geoInfo = ` (GeoIP: ${country})`;
+                geoText.innerText = geoInfo;
+            }
+        }
+        if (serverDetectedIp && serverDetectedIp !== '127.0.0.1' && serverDetectedIp !== '::1' && serverDetectedIp !== 'localhost' && serverDetectedIp !== 'unknown') {
+            // Real public IP forwarded by server
+            fetch(`https://ip-api.com/json/${serverDetectedIp}?fields=status,country,city,countryCode,query`)
+                .then(r => r.json())
+                .then(data => {
+                    if (data.status === 'success') {
+                        updateGeoDisplay(data.query || serverDetectedIp, data.countryCode, data.city, data.country);
+                    }
+                }).catch(err => {
+                    updateGeoDisplay(serverDetectedIp, 'BD', 'Dhaka', 'Bangladesh');
+                });
+        } else {
+            // Local / private IP - discover visitor's public GeoIP from browser client
+            fetch('https://ipapi.co/json/')
+                .then(r => r.json())
+                .then(data => {
+                    if (data && data.ip) {
+                        updateGeoDisplay(data.ip, data.country_code, data.city, data.country_name);
+                    }
+                })
+                .catch(() => {
+                    fetch('https://api.country.is')
+                        .then(r => r.json())
+                        .then(cData => {
+                            if (cData && cData.country) {
+                                updateGeoDisplay(cData.ip || serverDetectedIp, cData.country, '', cData.country);
+                            }
+                        })
+                        .catch(() => {});
+                });
+        }
+        // Convert Timestamp to UTC format
+        const timestampStr = "{{TIMESTAMP}}";
+        try {
+            const dt = new Date(timestampStr.replace(' ', 'T'));
+            if (!isNaN(dt.getTime())) {
+                document.getElementById('utc-time').innerText = dt.toISOString().replace('T', ' ').slice(0, 19) + ' UTC';
+                document.getElementById('unix-ref').innerText = Math.floor(dt.getTime() / 1000);
+            }
+        } catch (e) {}
+        // Dynamically compute rule ID from attack type
+        const attackType = "{{ATTACK_TYPE}}";
+        let hash = 0;
+        for (let i = 0; i < attackType.length; i++) {
+            hash = attackType.charCodeAt(i) + ((hash << 5) - hash);
+        }
+        const ruleId = Math.abs(hash % 10000) + 90000;
+        const ruleEl = document.getElementById('rule-id-val');
+        if (ruleEl) ruleEl.innerText = ruleId;
+        // Server host lookup
+        const srvHost = document.getElementById('server-host');
+        if (srvHost && (!srvHost.innerText || srvHost.innerText === 'Protected Website' || srvHost.innerText.includes('{{'))) {
+            srvHost.innerText = window.location.hostname || "protected.local";
+        }
+        // Setup email operations mailto link
+        const refId = "{{REFERENCE_ID}}";
+        const emailLink = document.getElementById('email-link');
+        if (emailLink) {
+            emailLink.href = `mailto:security@mdefender-pro.io?subject=WAF Block Reference: ${refId}&body=Hello Security Team,%0D%0A%0D%0AMy request was blocked by the corporate WAF. Details below:%0D%0A- Reference ID: ${refId}%0D%0A- IP: ${clientIp}%0D%0A- Host: ${window.location.host}%0D%0A- Reason: ${attackType}`;
+        }
+        function copyRef() {
+            navigator.clipboard.writeText(refId).then(() => {
+                const refBox = document.getElementById('ref-id-box');
+                const originalHtml = refBox.innerHTML;
+                refBox.innerHTML = 'COPIED TO CLIPBOARD! ✅';
+                refBox.style.color = '#10b981';
+                refBox.style.borderColor = '#10b981';
+                refBox.style.background = '#ecfdf5';
+                setTimeout(() => {
+                    refBox.innerHTML = originalHtml;
+                    refBox.style.color = '';
+                    refBox.style.borderColor = '';
+                    refBox.style.background = '';
+                }, 2000);
+            }).catch(err => {
+                console.error('Could not copy Reference ID: ', err);
+            });
+        }
+    </script>
+</body>
+</html>