purifai 2.0.2 → 3.0.0

package/dist/index.d.cts

@@ -1,191 +1,2 @@
-/**
- * 🛡️ PURIFAI - Ultra-Secure HTML Sanitizer
- *
- * Advanced XSS protection with polyglot attack resistance.
- * Blocks sophisticated obfuscation techniques that bypass other sanitizers.
- *
- * @version 2.0.2
- * @license MIT
- */
-/**
- * Purifai Configuration Options
- */
-export interface PurifaiOptions {
-    /** Maximum input length (default: 1MB) */
-    maxLength?: number;
-    /** Custom allowed protocols (default: ['http', 'https', 'mailto']) */
-    allowedProtocols?: string[];
-    /** Enable aggressive mode for maximum security (default: true) */
-    aggressiveMode?: boolean;
-}
-/**
- * Purifai Sanitization Result
- */
-export interface PurifaiResult {
-    /** Sanitized content */
-    content: string;
-    /** Whether dangerous content was detected */
-    hadThreats: boolean;
-    /** Processing time in milliseconds */
-    processingTime: number;
-    /** Threat level: 'none' | 'low' | 'medium' | 'high' | 'critical' */
-    threatLevel: 'none' | 'low' | 'medium' | 'high' | 'critical';
-}
-/**
- * Check if input contains dangerous patterns
- */
-declare function isDangerous(input: string): boolean;
-/**
- * Sanitize input with maximum security protection
- */
-declare function sanitize(input: unknown, options?: PurifaiOptions): string;
-/**
- * Sanitize input and return detailed analysis
- */
-declare function analyze(input: unknown, options?: PurifaiOptions): PurifaiResult;
-/**
- * Batch sanitize multiple inputs for optimal performance
- */
-declare function sanitizeBatch(inputs: unknown[], options?: PurifaiOptions): string[];
-/**
- * Escape text for insertion into an HTML body context.
- *
- * Lossless and total: nothing is removed, so this is the correct choice when
- * the input is plain text rather than markup. `sanitize()` cannot tell the two
- * apart — `a<b && c>d` is a valid HTML start tag by the parsing spec, so
- * `sanitize()` drops it while `escape()` preserves it verbatim.
- */
-declare function escape(input: unknown): string;
-/**
- * Escape text for insertion into an HTML attribute value.
- *
- * Stricter than `escape()`: every character outside `[a-zA-Z0-9]` is
- * hex-encoded, which stays safe even in an unquoted attribute — the case that
- * breaks naive escaping, since a bare space or backtick can end the value and
- * start a new attribute such as `onerror=`.
- */
-declare function escapeAttribute(input: unknown): string;
-/**
- * Escape and validate a value used as a URL.
- *
- * Returns '' when the protocol is not in `allowedProtocols`, which is what
- * stops `javascript:`, `data:` and friends from reaching an `href`. Relative
- * URLs are allowed through, since they cannot carry a protocol.
- */
-declare function escapeUrl(input: unknown, options?: PurifaiOptions): string;
-/**
- * 🛡️ Purifai - Ultra-Secure HTML Sanitizer
- *
- * Advanced lightweight HTML sanitizer with superior XSS protection
- * against known attack vectors including advanced polyglot attacks.
- *
- * Every method delegates to a module-level function and reads no instance or
- * class state, so `Purifai.sanitize` and the standalone `sanitize` export are
- * interchangeable and neither depends on its call-site receiver.
- */
-export declare class Purifai {
-    /**
-     * Sanitize input with maximum security protection
-     *
-     * @param input - Content to sanitize (string, object, or any type)
-     * @param options - Optional configuration
-     * @returns Sanitized string safe for HTML output
-     *
-     * @example
-     * ```typescript
-     * import { Purifai } from 'purifai';
-     *
-     * const clean = Purifai.sanitize('<script>alert("xss")</script>Hello World');
-     * console.log(clean); // "Hello World"
-     * ```
-     */
-    static sanitize(input: unknown, options?: PurifaiOptions): string;
-    /**
-     * Sanitize input and return detailed analysis
-     *
-     * @param input - Content to sanitize
-     * @param options - Optional configuration
-     * @returns Detailed sanitization result with threat analysis
-     *
-     * @example
-     * ```typescript
-     * const result = Purifai.analyze('<script>alert("xss")</script>Hello');
-     * console.log(result.content); // "Hello"
-     * console.log(result.hadThreats); // true
-     * console.log(result.threatLevel); // "critical"
-     * ```
-     */
-    static analyze(input: unknown, options?: PurifaiOptions): PurifaiResult;
-    /**
-     * Check if input contains dangerous patterns
-     *
-     * @param input - Content to check
-     * @returns true if dangerous content detected
-     *
-     * @example
-     * ```typescript
-     * const isDangerous = Purifai.isDangerous('<script>alert("xss")</script>');
-     * console.log(isDangerous); // true
-     * ```
-     */
-    static isDangerous(input: string): boolean;
-    /**
-     * Batch sanitize multiple inputs for optimal performance
-     *
-     * @param inputs - Array of inputs to sanitize
-     * @param options - Optional configuration
-     * @returns Array of sanitized strings
-     *
-     * @example
-     * ```typescript
-     * const cleaned = Purifai.sanitizeBatch([
-     *   '<script>alert("xss")</script>Hello',
-     *   '<img src=x onerror=alert(1)>World'
-     * ]);
-     * console.log(cleaned); // ["Hello", "World"]
-     * ```
-     */
-    static sanitizeBatch(inputs: unknown[], options?: PurifaiOptions): string[];
-    /**
-     * Escape text for an HTML body context (lossless — nothing is removed)
-     *
-     * @example
-     * ```typescript
-     * Purifai.escape('if (a<b && c>d)'); // "if (a&lt;b &amp;&amp; c&gt;d)"
-     * ```
-     */
-    static escape(input: unknown): string;
-    /**
-     * Escape text for an HTML attribute value, safe even when unquoted
-     *
-     * @example
-     * ```typescript
-     * `<div title="${Purifai.escapeAttribute(userInput)}">`
-     * ```
-     */
-    static escapeAttribute(input: unknown): string;
-    /**
-     * Escape a URL, returning '' if its protocol is not allowed
-     *
-     * @example
-     * ```typescript
-     * Purifai.escapeUrl('javascript:alert(1)'); // ""
-     * Purifai.escapeUrl('https://example.com'); // escaped, safe for href
-     * ```
-     */
-    static escapeUrl(input: unknown, options?: PurifaiOptions): string;
-    /**
-     * Get version information
-     */
-    static getVersion(): string;
-    /**
-     * Get performance and security statistics
-     */
-    static getStats(): {
-        version: string;
-        securityLevel: string;
-        performance: string;
-    };
-}
-export { sanitize, analyze, isDangerous, sanitizeBatch, escape, escapeAttribute, escapeUrl };
-export default Purifai;
+export { PurifaiLimitError, convert, createTextTransform, escapeHtmlText, toText, } from './src/api.js';
+export type { ConversionLimits, ConversionReport, ConversionResult, ConvertOptions, ImageMode, LayoutMode, LimitKind, LinkMode, OverflowMode, PurifaiTextTransform, ToTextOptions, } from './src/api.js';

package/dist/index.d.ts

@@ -1,191 +1,2 @@
-/**
- * 🛡️ PURIFAI - Ultra-Secure HTML Sanitizer
- *
- * Advanced XSS protection with polyglot attack resistance.
- * Blocks sophisticated obfuscation techniques that bypass other sanitizers.
- *
- * @version 2.0.2
- * @license MIT
- */
-/**
- * Purifai Configuration Options
- */
-export interface PurifaiOptions {
-    /** Maximum input length (default: 1MB) */
-    maxLength?: number;
-    /** Custom allowed protocols (default: ['http', 'https', 'mailto']) */
-    allowedProtocols?: string[];
-    /** Enable aggressive mode for maximum security (default: true) */
-    aggressiveMode?: boolean;
-}
-/**
- * Purifai Sanitization Result
- */
-export interface PurifaiResult {
-    /** Sanitized content */
-    content: string;
-    /** Whether dangerous content was detected */
-    hadThreats: boolean;
-    /** Processing time in milliseconds */
-    processingTime: number;
-    /** Threat level: 'none' | 'low' | 'medium' | 'high' | 'critical' */
-    threatLevel: 'none' | 'low' | 'medium' | 'high' | 'critical';
-}
-/**
- * Check if input contains dangerous patterns
- */
-declare function isDangerous(input: string): boolean;
-/**
- * Sanitize input with maximum security protection
- */
-declare function sanitize(input: unknown, options?: PurifaiOptions): string;
-/**
- * Sanitize input and return detailed analysis
- */
-declare function analyze(input: unknown, options?: PurifaiOptions): PurifaiResult;
-/**
- * Batch sanitize multiple inputs for optimal performance
- */
-declare function sanitizeBatch(inputs: unknown[], options?: PurifaiOptions): string[];
-/**
- * Escape text for insertion into an HTML body context.
- *
- * Lossless and total: nothing is removed, so this is the correct choice when
- * the input is plain text rather than markup. `sanitize()` cannot tell the two
- * apart — `a<b && c>d` is a valid HTML start tag by the parsing spec, so
- * `sanitize()` drops it while `escape()` preserves it verbatim.
- */
-declare function escape(input: unknown): string;
-/**
- * Escape text for insertion into an HTML attribute value.
- *
- * Stricter than `escape()`: every character outside `[a-zA-Z0-9]` is
- * hex-encoded, which stays safe even in an unquoted attribute — the case that
- * breaks naive escaping, since a bare space or backtick can end the value and
- * start a new attribute such as `onerror=`.
- */
-declare function escapeAttribute(input: unknown): string;
-/**
- * Escape and validate a value used as a URL.
- *
- * Returns '' when the protocol is not in `allowedProtocols`, which is what
- * stops `javascript:`, `data:` and friends from reaching an `href`. Relative
- * URLs are allowed through, since they cannot carry a protocol.
- */
-declare function escapeUrl(input: unknown, options?: PurifaiOptions): string;
-/**
- * 🛡️ Purifai - Ultra-Secure HTML Sanitizer
- *
- * Advanced lightweight HTML sanitizer with superior XSS protection
- * against known attack vectors including advanced polyglot attacks.
- *
- * Every method delegates to a module-level function and reads no instance or
- * class state, so `Purifai.sanitize` and the standalone `sanitize` export are
- * interchangeable and neither depends on its call-site receiver.
- */
-export declare class Purifai {
-    /**
-     * Sanitize input with maximum security protection
-     *
-     * @param input - Content to sanitize (string, object, or any type)
-     * @param options - Optional configuration
-     * @returns Sanitized string safe for HTML output
-     *
-     * @example
-     * ```typescript
-     * import { Purifai } from 'purifai';
-     *
-     * const clean = Purifai.sanitize('<script>alert("xss")</script>Hello World');
-     * console.log(clean); // "Hello World"
-     * ```
-     */
-    static sanitize(input: unknown, options?: PurifaiOptions): string;
-    /**
-     * Sanitize input and return detailed analysis
-     *
-     * @param input - Content to sanitize
-     * @param options - Optional configuration
-     * @returns Detailed sanitization result with threat analysis
-     *
-     * @example
-     * ```typescript
-     * const result = Purifai.analyze('<script>alert("xss")</script>Hello');
-     * console.log(result.content); // "Hello"
-     * console.log(result.hadThreats); // true
-     * console.log(result.threatLevel); // "critical"
-     * ```
-     */
-    static analyze(input: unknown, options?: PurifaiOptions): PurifaiResult;
-    /**
-     * Check if input contains dangerous patterns
-     *
-     * @param input - Content to check
-     * @returns true if dangerous content detected
-     *
-     * @example
-     * ```typescript
-     * const isDangerous = Purifai.isDangerous('<script>alert("xss")</script>');
-     * console.log(isDangerous); // true
-     * ```
-     */
-    static isDangerous(input: string): boolean;
-    /**
-     * Batch sanitize multiple inputs for optimal performance
-     *
-     * @param inputs - Array of inputs to sanitize
-     * @param options - Optional configuration
-     * @returns Array of sanitized strings
-     *
-     * @example
-     * ```typescript
-     * const cleaned = Purifai.sanitizeBatch([
-     *   '<script>alert("xss")</script>Hello',
-     *   '<img src=x onerror=alert(1)>World'
-     * ]);
-     * console.log(cleaned); // ["Hello", "World"]
-     * ```
-     */
-    static sanitizeBatch(inputs: unknown[], options?: PurifaiOptions): string[];
-    /**
-     * Escape text for an HTML body context (lossless — nothing is removed)
-     *
-     * @example
-     * ```typescript
-     * Purifai.escape('if (a<b && c>d)'); // "if (a&lt;b &amp;&amp; c&gt;d)"
-     * ```
-     */
-    static escape(input: unknown): string;
-    /**
-     * Escape text for an HTML attribute value, safe even when unquoted
-     *
-     * @example
-     * ```typescript
-     * `<div title="${Purifai.escapeAttribute(userInput)}">`
-     * ```
-     */
-    static escapeAttribute(input: unknown): string;
-    /**
-     * Escape a URL, returning '' if its protocol is not allowed
-     *
-     * @example
-     * ```typescript
-     * Purifai.escapeUrl('javascript:alert(1)'); // ""
-     * Purifai.escapeUrl('https://example.com'); // escaped, safe for href
-     * ```
-     */
-    static escapeUrl(input: unknown, options?: PurifaiOptions): string;
-    /**
-     * Get version information
-     */
-    static getVersion(): string;
-    /**
-     * Get performance and security statistics
-     */
-    static getStats(): {
-        version: string;
-        securityLevel: string;
-        performance: string;
-    };
-}
-export { sanitize, analyze, isDangerous, sanitizeBatch, escape, escapeAttribute, escapeUrl };
-export default Purifai;
+export { PurifaiLimitError, convert, createTextTransform, escapeHtmlText, toText, } from './src/api.js';
+export type { ConversionLimits, ConversionReport, ConversionResult, ConvertOptions, ImageMode, LayoutMode, LimitKind, LinkMode, OverflowMode, PurifaiTextTransform, ToTextOptions, } from './src/api.js';