mdefender-pro 1.2.3 → 1.2.5

package/index.js

@@ -35,10 +35,10 @@ function getDefaultTemplate() {
 const DEFAULT_CONFIG = {
   apiKey: '',
   domain: '',
-  apiEndpoint: 'https://mdefenderapi.onrender.com',
+  apiEndpoint: process.env.MDEFENDER_API_ENDPOINT || 'http://localhost:8000',
   mode: 'block',         // 'block' | 'monitor' | 'off'
   blockStatusCode: 403,
-  timeout: 5000,
+  timeout: 10000,
   maxBodySize: 1024 * 1024, // 1MB
   logBlocked: true,
   customBlockPage: null,
@@ -137,7 +137,11 @@ function extractBody(req) {
 function sendAnalyzeRequest(endpointUrl, apiKey, data, timeoutMs = 5000) {
   return new Promise((resolve, reject) => {
     try {
-      const parsed = new URL('/api/analyze', endpointUrl);
+      let analyzePath = '/api/v1/waf/analyze';
+      if (endpointUrl.endsWith('/waf/analyze') || endpointUrl.endsWith('/analyze')) {
+        analyzePath = '';
+      }
+      const parsed = new URL(analyzePath, endpointUrl.replace(/\/+$/, '') + '/');
       const postData = JSON.stringify(data);
       const isHttps = parsed.protocol === 'https:';
       const transport = isHttps ? https : http;
@@ -154,7 +158,7 @@ function sendAnalyzeRequest(endpointUrl, apiKey, data, timeoutMs = 5000) {
           'Content-Type': 'application/json',
           'Content-Length': Buffer.byteLength(postData),
           'Authorization': `Bearer ${apiKey}`,
-          'X-MDefender-Version': '1.1.0'
+          'X-MDefender-Version': '1.2.4'
         }
       };
 
@@ -165,7 +169,8 @@ function sendAnalyzeRequest(endpointUrl, apiKey, data, timeoutMs = 5000) {
         res.on('end', () => {
           try {
             const json = JSON.parse(body);
-            resolve({ statusCode: res.statusCode, data: json });
+            const decisionData = json && json.data ? json.data : json;
+            resolve({ statusCode: res.statusCode, data: decisionData });
           } catch (e) {
             resolve({ statusCode: res.statusCode, data: { status: res.statusCode === 200 ? 'allowed' : 'error', raw: body } });
           }
@@ -271,7 +276,7 @@ function mdefender(overrides = {}) {
         domain: config.domain || host.split(':')[0],
         request: {
           method: req.method,
-          url: parsedUrl.pathname,
+          url: req.originalUrl || req.url || parsedUrl.pathname,
           query_string: parsedUrl.search || '',
           query_params: Object.fromEntries(parsedUrl.searchParams),
           ip: clientIp,
@@ -287,11 +292,19 @@ function mdefender(overrides = {}) {
       };
 
       const resp = await sendAnalyzeRequest(config.apiEndpoint, config.apiKey, payload, config.timeout);
-      const result = resp.data;
-
-      if (result.status === 'blocked') {
+      const result = resp && resp.data ? resp.data : {};
+      const isBlocked = Boolean(
+        result && (
+          result.decision === 'BLOCK' ||
+          result.action === 'block' ||
+          result.status === 'blocked' ||
+          result.blocked === true
+        )
+      );
+
+      if (isBlocked) {
         if (config.logBlocked) {
-          console.warn(`[MDefender] BLOCKED ${req.method} ${parsedUrl.pathname} - ${result.attack_type || 'Malicious Payload'} (${((result.confidence || 0.95) * 100).toFixed(0)}%) [IP: ${clientIp}]`);
+          console.warn(`[MDefender] BLOCKED ${req.method} ${parsedUrl.pathname} - ${result.attack_type || result.reason || 'Malicious Payload'} (${((result.confidence || 0.95) * 100).toFixed(0)}%) [IP: ${clientIp}]`);
         }
         
         const blockPage = result.block_page || renderBlockPage(config, result, req);
@@ -337,4 +350,11 @@ mdefender.DEFAULT_CONFIG = DEFAULT_CONFIG;
 mdefender.sendAnalyzeRequest = sendAnalyzeRequest;
 
 module.exports = mdefender;
+
+try {
+  const { autoHook } = require('./auto');
+  mdefender.autoHook = autoHook;
+} catch (e) {}
+
+
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mdefender-pro",
-  "version": "1.2.3",
+  "version": "1.2.5",
   "description": "MDefender Pro - Web Application Firewall middleware for Node.js/Express. Protects against XSS, SQLi, CSRF, and other OWASP Top 10 attacks.",
   "main": "index.js",
   "types": "index.d.ts",
@@ -32,6 +32,7 @@
   },
   "files": [
     "index.js",
+    "auto.js",
     "index.d.ts",
     "README.md",
     "config-loader.js",
@@ -43,6 +44,7 @@
   ],
   "exports": {
     ".": "./index.js",
+    "./auto": "./auto.js",
     "./client": "./client.mjs",
     "./vite": "./vite.mjs"
   },
@@ -50,7 +52,6 @@
     "type": "git",
     "url": "git+https://github.com/mdefender/mdefender.git"
   },
-  "homepage": "https://mdefenderapi.onrender.com",
   "bugs": {
     "url": "https://github.com/mdefender/mdefender/issues"
   }

package/vite.js

@@ -1,15 +1,58 @@
 // vite.js - Official MDefender Pro Vite Plugin (CJS)
+'use strict';
+
 const mdefender = require('./index.js');
 
 function mdefenderVite(options = {}) {
   const middleware = mdefender(options);
+  
   return {
     name: 'mdefender-vite-plugin',
     configureServer(server) {
-      server.middlewares.use(middleware);
+      if (server && server.middlewares) {
+        server.middlewares.use(middleware);
+      }
     },
     configurePreviewServer(server) {
-      server.middlewares.use(middleware);
+      if (server && server.middlewares) {
+        server.middlewares.use(middleware);
+      }
+    },
+    transformIndexHtml(html) {
+      const inlineGuard = [
+        '<script>',
+        '(function(){',
+        '  try {',
+        '    var raw = (window.location.search || "") + " " + (window.location.hash || "");',
+        '    if (!raw.trim()) return;',
+        '    var norm = raw;',
+        '    try { norm = decodeURIComponent(norm); } catch(e){}',
+        '    try { norm = decodeURIComponent(norm); } catch(e){}',
+        '    var p = [',
+        '      /<\\s*(?:script|iframe|object|embed|svg|img|math)\\b/i,',
+        '      /\\bon(?:error|load|click|mouseover|focus|submit)\\s*=/i,',
+        '      /\\b(?:javascript|data\\s*:\\s*text\\/html)\\s*:/i,',
+        '      /\\b(?:alert|eval|confirm|prompt|document\\.cookie)\\s*\\(/i,',
+        '      /\\bUNION\\s+(?:ALL\\s+)?SELECT\\b/i,',
+        '      /(?:\'|"|\\b)\\s*(?:OR|AND)\\s+[\'"]?([a-zA-Z0-9_\\-]+)[\'"]?\\s*=\\s*[\'"]?\\1/i,',
+        '      /(?:--|#|\\/\\*).*?(?:DROP|ALTER|INSERT|DELETE|UPDATE|EXEC)/i,',
+        '      /(?:\\.\\.\\/|\\.\\.\\\\|etc\\/passwd|etc\\/shadow|win\\.ini|boot\\.ini)/i,',
+        '      /(?:169\\.254\\.169\\.254|metadata\\.google\\.internal|=(?:https?:\\/\\/)?(?:127\\.0\\.0\\.1|169\\.254|localhost|0\\.0\\.0\\.0))/i,',
+        '      /(?:;|\\||\\|\\||&&|`|\\$\\()\\s*(?:cat|ls|id|whoami|powershell|cmd|sh|bash|wget|curl)\\b/i,',
+        '      /(?:ignore\\s+all\\s+(?:previous|prior)\\s+instructions|system\\s+override|DAN\\s+mode)/i',
+        '    ];',
+        '    for (var i = 0; i < p.length; i++) {',
+        '      if (p[i].test(norm)) {',
+        '        try { window.stop(); } catch(e){}',
+        '        break;',
+        '      }',
+        '    }',
+        '  } catch(e){}',
+        '})();',
+        '</script>'
+      ].join('\\n');
+
+      return html.replace('<head>', '<head>\\n' + inlineGuard);
     }
   };
 }