secure-scan 1.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (569) hide show
  1. package/README.md +564 -0
  2. package/dist/ai/aiAnalyzer.d.ts +99 -0
  3. package/dist/ai/aiAnalyzer.d.ts.map +1 -0
  4. package/dist/ai/aiAnalyzer.js +669 -0
  5. package/dist/ai/aiAnalyzer.js.map +1 -0
  6. package/dist/ai/index.d.ts +5 -0
  7. package/dist/ai/index.d.ts.map +1 -0
  8. package/dist/ai/index.js +21 -0
  9. package/dist/ai/index.js.map +1 -0
  10. package/dist/analyzers/base/baseAnalyzer.d.ts +44 -0
  11. package/dist/analyzers/base/baseAnalyzer.d.ts.map +1 -0
  12. package/dist/analyzers/base/baseAnalyzer.js +53 -0
  13. package/dist/analyzers/base/baseAnalyzer.js.map +1 -0
  14. package/dist/analyzers/base/index.d.ts +5 -0
  15. package/dist/analyzers/base/index.d.ts.map +1 -0
  16. package/dist/analyzers/base/index.js +21 -0
  17. package/dist/analyzers/base/index.js.map +1 -0
  18. package/dist/analyzers/c-cpp/cppAnalyzer.d.ts +60 -0
  19. package/dist/analyzers/c-cpp/cppAnalyzer.d.ts.map +1 -0
  20. package/dist/analyzers/c-cpp/cppAnalyzer.js +218 -0
  21. package/dist/analyzers/c-cpp/cppAnalyzer.js.map +1 -0
  22. package/dist/analyzers/c-cpp/index.d.ts +5 -0
  23. package/dist/analyzers/c-cpp/index.d.ts.map +1 -0
  24. package/dist/analyzers/c-cpp/index.js +21 -0
  25. package/dist/analyzers/c-cpp/index.js.map +1 -0
  26. package/dist/analyzers/core/engine/index.d.ts +5 -0
  27. package/dist/analyzers/core/engine/index.d.ts.map +1 -0
  28. package/dist/analyzers/core/engine/index.js +21 -0
  29. package/dist/analyzers/core/engine/index.js.map +1 -0
  30. package/dist/analyzers/core/engine/ruleEngine.d.ts +46 -0
  31. package/dist/analyzers/core/engine/ruleEngine.d.ts.map +1 -0
  32. package/dist/analyzers/core/engine/ruleEngine.js +173 -0
  33. package/dist/analyzers/core/engine/ruleEngine.js.map +1 -0
  34. package/dist/analyzers/core/index.d.ts +8 -0
  35. package/dist/analyzers/core/index.d.ts.map +1 -0
  36. package/dist/analyzers/core/index.js +24 -0
  37. package/dist/analyzers/core/index.js.map +1 -0
  38. package/dist/analyzers/core/scanner/fileScanner.d.ts +31 -0
  39. package/dist/analyzers/core/scanner/fileScanner.d.ts.map +1 -0
  40. package/dist/analyzers/core/scanner/fileScanner.js +199 -0
  41. package/dist/analyzers/core/scanner/fileScanner.js.map +1 -0
  42. package/dist/analyzers/core/scanner/index.d.ts +5 -0
  43. package/dist/analyzers/core/scanner/index.d.ts.map +1 -0
  44. package/dist/analyzers/core/scanner/index.js +21 -0
  45. package/dist/analyzers/core/scanner/index.js.map +1 -0
  46. package/dist/analyzers/core/scoring/index.d.ts +5 -0
  47. package/dist/analyzers/core/scoring/index.d.ts.map +1 -0
  48. package/dist/analyzers/core/scoring/index.js +21 -0
  49. package/dist/analyzers/core/scoring/index.js.map +1 -0
  50. package/dist/analyzers/core/scoring/riskScoring.d.ts +49 -0
  51. package/dist/analyzers/core/scoring/riskScoring.d.ts.map +1 -0
  52. package/dist/analyzers/core/scoring/riskScoring.js +180 -0
  53. package/dist/analyzers/core/scoring/riskScoring.js.map +1 -0
  54. package/dist/analyzers/core/securityScanner.d.ts +47 -0
  55. package/dist/analyzers/core/securityScanner.d.ts.map +1 -0
  56. package/dist/analyzers/core/securityScanner.js +298 -0
  57. package/dist/analyzers/core/securityScanner.js.map +1 -0
  58. package/dist/analyzers/csharp/csharpAnalyzer.d.ts +64 -0
  59. package/dist/analyzers/csharp/csharpAnalyzer.d.ts.map +1 -0
  60. package/dist/analyzers/csharp/csharpAnalyzer.js +232 -0
  61. package/dist/analyzers/csharp/csharpAnalyzer.js.map +1 -0
  62. package/dist/analyzers/csharp/index.d.ts +5 -0
  63. package/dist/analyzers/csharp/index.d.ts.map +1 -0
  64. package/dist/analyzers/csharp/index.js +21 -0
  65. package/dist/analyzers/csharp/index.js.map +1 -0
  66. package/dist/analyzers/iac/iacAnalyzer.d.ts +36 -0
  67. package/dist/analyzers/iac/iacAnalyzer.d.ts.map +1 -0
  68. package/dist/analyzers/iac/iacAnalyzer.js +182 -0
  69. package/dist/analyzers/iac/iacAnalyzer.js.map +1 -0
  70. package/dist/analyzers/iac/index.d.ts +5 -0
  71. package/dist/analyzers/iac/index.d.ts.map +1 -0
  72. package/dist/analyzers/iac/index.js +21 -0
  73. package/dist/analyzers/iac/index.js.map +1 -0
  74. package/dist/analyzers/index.d.ts +30 -0
  75. package/dist/analyzers/index.d.ts.map +1 -0
  76. package/dist/analyzers/index.js +80 -0
  77. package/dist/analyzers/index.js.map +1 -0
  78. package/dist/analyzers/java/index.d.ts +5 -0
  79. package/dist/analyzers/java/index.d.ts.map +1 -0
  80. package/dist/analyzers/java/index.js +21 -0
  81. package/dist/analyzers/java/index.js.map +1 -0
  82. package/dist/analyzers/java/javaAnalyzer.d.ts +64 -0
  83. package/dist/analyzers/java/javaAnalyzer.d.ts.map +1 -0
  84. package/dist/analyzers/java/javaAnalyzer.js +224 -0
  85. package/dist/analyzers/java/javaAnalyzer.js.map +1 -0
  86. package/dist/analyzers/javascript/astUtils.d.ts +170 -0
  87. package/dist/analyzers/javascript/astUtils.d.ts.map +1 -0
  88. package/dist/analyzers/javascript/astUtils.js +700 -0
  89. package/dist/analyzers/javascript/astUtils.js.map +1 -0
  90. package/dist/analyzers/javascript/index.d.ts +18 -0
  91. package/dist/analyzers/javascript/index.d.ts.map +1 -0
  92. package/dist/analyzers/javascript/index.js +50 -0
  93. package/dist/analyzers/javascript/index.js.map +1 -0
  94. package/dist/analyzers/javascript/javascriptAnalyzer.d.ts +111 -0
  95. package/dist/analyzers/javascript/javascriptAnalyzer.d.ts.map +1 -0
  96. package/dist/analyzers/javascript/javascriptAnalyzer.js +860 -0
  97. package/dist/analyzers/javascript/javascriptAnalyzer.js.map +1 -0
  98. package/dist/analyzers/javascript/malwareDetector.d.ts +102 -0
  99. package/dist/analyzers/javascript/malwareDetector.d.ts.map +1 -0
  100. package/dist/analyzers/javascript/malwareDetector.js +616 -0
  101. package/dist/analyzers/javascript/malwareDetector.js.map +1 -0
  102. package/dist/analyzers/javascript/packageJsonAnalyzer.d.ts +87 -0
  103. package/dist/analyzers/javascript/packageJsonAnalyzer.d.ts.map +1 -0
  104. package/dist/analyzers/javascript/packageJsonAnalyzer.js +553 -0
  105. package/dist/analyzers/javascript/packageJsonAnalyzer.js.map +1 -0
  106. package/dist/analyzers/javascript/taintAnalyzer.d.ts +120 -0
  107. package/dist/analyzers/javascript/taintAnalyzer.d.ts.map +1 -0
  108. package/dist/analyzers/javascript/taintAnalyzer.js +526 -0
  109. package/dist/analyzers/javascript/taintAnalyzer.js.map +1 -0
  110. package/dist/analyzers/php/index.d.ts +5 -0
  111. package/dist/analyzers/php/index.d.ts.map +1 -0
  112. package/dist/analyzers/php/index.js +21 -0
  113. package/dist/analyzers/php/index.js.map +1 -0
  114. package/dist/analyzers/php/phpAnalyzer.d.ts +56 -0
  115. package/dist/analyzers/php/phpAnalyzer.d.ts.map +1 -0
  116. package/dist/analyzers/php/phpAnalyzer.js +202 -0
  117. package/dist/analyzers/php/phpAnalyzer.js.map +1 -0
  118. package/dist/analyzers/python/index.d.ts +5 -0
  119. package/dist/analyzers/python/index.d.ts.map +1 -0
  120. package/dist/analyzers/python/index.js +21 -0
  121. package/dist/analyzers/python/index.js.map +1 -0
  122. package/dist/analyzers/python/pythonAnalyzer.d.ts +64 -0
  123. package/dist/analyzers/python/pythonAnalyzer.d.ts.map +1 -0
  124. package/dist/analyzers/python/pythonAnalyzer.js +226 -0
  125. package/dist/analyzers/python/pythonAnalyzer.js.map +1 -0
  126. package/dist/cli/index.d.ts +7 -0
  127. package/dist/cli/index.d.ts.map +1 -0
  128. package/dist/cli/index.js +281 -0
  129. package/dist/cli/index.js.map +1 -0
  130. package/dist/core/engine/index.d.ts +5 -0
  131. package/dist/core/engine/index.d.ts.map +1 -0
  132. package/dist/core/engine/index.js +21 -0
  133. package/dist/core/engine/index.js.map +1 -0
  134. package/dist/core/engine/ruleEngine.d.ts +46 -0
  135. package/dist/core/engine/ruleEngine.d.ts.map +1 -0
  136. package/dist/core/engine/ruleEngine.js +173 -0
  137. package/dist/core/engine/ruleEngine.js.map +1 -0
  138. package/dist/core/index.d.ts +8 -0
  139. package/dist/core/index.d.ts.map +1 -0
  140. package/dist/core/index.js +24 -0
  141. package/dist/core/index.js.map +1 -0
  142. package/dist/core/scanner/fileScanner.d.ts +31 -0
  143. package/dist/core/scanner/fileScanner.d.ts.map +1 -0
  144. package/dist/core/scanner/fileScanner.js +199 -0
  145. package/dist/core/scanner/fileScanner.js.map +1 -0
  146. package/dist/core/scanner/index.d.ts +5 -0
  147. package/dist/core/scanner/index.d.ts.map +1 -0
  148. package/dist/core/scanner/index.js +21 -0
  149. package/dist/core/scanner/index.js.map +1 -0
  150. package/dist/core/scoring/index.d.ts +5 -0
  151. package/dist/core/scoring/index.d.ts.map +1 -0
  152. package/dist/core/scoring/index.js +21 -0
  153. package/dist/core/scoring/index.js.map +1 -0
  154. package/dist/core/scoring/riskScoring.d.ts +49 -0
  155. package/dist/core/scoring/riskScoring.d.ts.map +1 -0
  156. package/dist/core/scoring/riskScoring.js +180 -0
  157. package/dist/core/scoring/riskScoring.js.map +1 -0
  158. package/dist/core/securityScanner.d.ts +47 -0
  159. package/dist/core/securityScanner.d.ts.map +1 -0
  160. package/dist/core/securityScanner.js +298 -0
  161. package/dist/core/securityScanner.js.map +1 -0
  162. package/dist/dependencies/aiDependencyAnalyzer.d.ts +96 -0
  163. package/dist/dependencies/aiDependencyAnalyzer.d.ts.map +1 -0
  164. package/dist/dependencies/aiDependencyAnalyzer.js +435 -0
  165. package/dist/dependencies/aiDependencyAnalyzer.js.map +1 -0
  166. package/dist/dependencies/database/cveDatabase.d.ts +32 -0
  167. package/dist/dependencies/database/cveDatabase.d.ts.map +1 -0
  168. package/dist/dependencies/database/cveDatabase.js +393 -0
  169. package/dist/dependencies/database/cveDatabase.js.map +1 -0
  170. package/dist/dependencies/database/index.d.ts +6 -0
  171. package/dist/dependencies/database/index.d.ts.map +1 -0
  172. package/dist/dependencies/database/index.js +22 -0
  173. package/dist/dependencies/database/index.js.map +1 -0
  174. package/dist/dependencies/database/maliciousPackages.d.ts +43 -0
  175. package/dist/dependencies/database/maliciousPackages.d.ts.map +1 -0
  176. package/dist/dependencies/database/maliciousPackages.js +279 -0
  177. package/dist/dependencies/database/maliciousPackages.js.map +1 -0
  178. package/dist/dependencies/dependencyAnalyzer.d.ts +74 -0
  179. package/dist/dependencies/dependencyAnalyzer.d.ts.map +1 -0
  180. package/dist/dependencies/dependencyAnalyzer.js +349 -0
  181. package/dist/dependencies/dependencyAnalyzer.js.map +1 -0
  182. package/dist/dependencies/detectors/index.d.ts +7 -0
  183. package/dist/dependencies/detectors/index.d.ts.map +1 -0
  184. package/dist/dependencies/detectors/index.js +28 -0
  185. package/dist/dependencies/detectors/index.js.map +1 -0
  186. package/dist/dependencies/detectors/securityStandards.d.ts +15 -0
  187. package/dist/dependencies/detectors/securityStandards.d.ts.map +1 -0
  188. package/dist/dependencies/detectors/securityStandards.js +178 -0
  189. package/dist/dependencies/detectors/securityStandards.js.map +1 -0
  190. package/dist/dependencies/detectors/vulnerabilityDetector.d.ts +53 -0
  191. package/dist/dependencies/detectors/vulnerabilityDetector.d.ts.map +1 -0
  192. package/dist/dependencies/detectors/vulnerabilityDetector.js +289 -0
  193. package/dist/dependencies/detectors/vulnerabilityDetector.js.map +1 -0
  194. package/dist/dependencies/index.d.ts +14 -0
  195. package/dist/dependencies/index.d.ts.map +1 -0
  196. package/dist/dependencies/index.js +43 -0
  197. package/dist/dependencies/index.js.map +1 -0
  198. package/dist/dependencies/installed/index.d.ts +8 -0
  199. package/dist/dependencies/installed/index.d.ts.map +1 -0
  200. package/dist/dependencies/installed/index.js +24 -0
  201. package/dist/dependencies/installed/index.js.map +1 -0
  202. package/dist/dependencies/installed/installedScanner.d.ts +91 -0
  203. package/dist/dependencies/installed/installedScanner.d.ts.map +1 -0
  204. package/dist/dependencies/installed/installedScanner.js +766 -0
  205. package/dist/dependencies/installed/installedScanner.js.map +1 -0
  206. package/dist/dependencies/installed/malwarePatterns.d.ts +32 -0
  207. package/dist/dependencies/installed/malwarePatterns.d.ts.map +1 -0
  208. package/dist/dependencies/installed/malwarePatterns.js +480 -0
  209. package/dist/dependencies/installed/malwarePatterns.js.map +1 -0
  210. package/dist/dependencies/installed/types.d.ts +274 -0
  211. package/dist/dependencies/installed/types.d.ts.map +1 -0
  212. package/dist/dependencies/installed/types.js +7 -0
  213. package/dist/dependencies/installed/types.js.map +1 -0
  214. package/dist/dependencies/parsers/base/baseParser.d.ts +44 -0
  215. package/dist/dependencies/parsers/base/baseParser.d.ts.map +1 -0
  216. package/dist/dependencies/parsers/base/baseParser.js +80 -0
  217. package/dist/dependencies/parsers/base/baseParser.js.map +1 -0
  218. package/dist/dependencies/parsers/base/index.d.ts +6 -0
  219. package/dist/dependencies/parsers/base/index.d.ts.map +1 -0
  220. package/dist/dependencies/parsers/base/index.js +27 -0
  221. package/dist/dependencies/parsers/base/index.js.map +1 -0
  222. package/dist/dependencies/parsers/cpp/cppParser.d.ts +36 -0
  223. package/dist/dependencies/parsers/cpp/cppParser.d.ts.map +1 -0
  224. package/dist/dependencies/parsers/cpp/cppParser.js +196 -0
  225. package/dist/dependencies/parsers/cpp/cppParser.js.map +1 -0
  226. package/dist/dependencies/parsers/cpp/index.d.ts +6 -0
  227. package/dist/dependencies/parsers/cpp/index.d.ts.map +1 -0
  228. package/dist/dependencies/parsers/cpp/index.js +27 -0
  229. package/dist/dependencies/parsers/cpp/index.js.map +1 -0
  230. package/dist/dependencies/parsers/csharp/csharpParser.d.ts +32 -0
  231. package/dist/dependencies/parsers/csharp/csharpParser.d.ts.map +1 -0
  232. package/dist/dependencies/parsers/csharp/csharpParser.js +125 -0
  233. package/dist/dependencies/parsers/csharp/csharpParser.js.map +1 -0
  234. package/dist/dependencies/parsers/csharp/index.d.ts +6 -0
  235. package/dist/dependencies/parsers/csharp/index.d.ts.map +1 -0
  236. package/dist/dependencies/parsers/csharp/index.js +27 -0
  237. package/dist/dependencies/parsers/csharp/index.js.map +1 -0
  238. package/dist/dependencies/parsers/index.d.ts +24 -0
  239. package/dist/dependencies/parsers/index.d.ts.map +1 -0
  240. package/dist/dependencies/parsers/index.js +69 -0
  241. package/dist/dependencies/parsers/index.js.map +1 -0
  242. package/dist/dependencies/parsers/java/index.d.ts +6 -0
  243. package/dist/dependencies/parsers/java/index.d.ts.map +1 -0
  244. package/dist/dependencies/parsers/java/index.js +27 -0
  245. package/dist/dependencies/parsers/java/index.js.map +1 -0
  246. package/dist/dependencies/parsers/java/javaParser.d.ts +32 -0
  247. package/dist/dependencies/parsers/java/javaParser.d.ts.map +1 -0
  248. package/dist/dependencies/parsers/java/javaParser.js +168 -0
  249. package/dist/dependencies/parsers/java/javaParser.js.map +1 -0
  250. package/dist/dependencies/parsers/javascript/index.d.ts +6 -0
  251. package/dist/dependencies/parsers/javascript/index.d.ts.map +1 -0
  252. package/dist/dependencies/parsers/javascript/index.js +27 -0
  253. package/dist/dependencies/parsers/javascript/index.js.map +1 -0
  254. package/dist/dependencies/parsers/javascript/javascriptParser.d.ts +55 -0
  255. package/dist/dependencies/parsers/javascript/javascriptParser.d.ts.map +1 -0
  256. package/dist/dependencies/parsers/javascript/javascriptParser.js +266 -0
  257. package/dist/dependencies/parsers/javascript/javascriptParser.js.map +1 -0
  258. package/dist/dependencies/parsers/php/index.d.ts +6 -0
  259. package/dist/dependencies/parsers/php/index.d.ts.map +1 -0
  260. package/dist/dependencies/parsers/php/index.js +27 -0
  261. package/dist/dependencies/parsers/php/index.js.map +1 -0
  262. package/dist/dependencies/parsers/php/phpParser.d.ts +35 -0
  263. package/dist/dependencies/parsers/php/phpParser.d.ts.map +1 -0
  264. package/dist/dependencies/parsers/php/phpParser.js +162 -0
  265. package/dist/dependencies/parsers/php/phpParser.js.map +1 -0
  266. package/dist/dependencies/parsers/python/index.d.ts +6 -0
  267. package/dist/dependencies/parsers/python/index.d.ts.map +1 -0
  268. package/dist/dependencies/parsers/python/index.js +27 -0
  269. package/dist/dependencies/parsers/python/index.js.map +1 -0
  270. package/dist/dependencies/parsers/python/pythonParser.d.ts +60 -0
  271. package/dist/dependencies/parsers/python/pythonParser.d.ts.map +1 -0
  272. package/dist/dependencies/parsers/python/pythonParser.js +336 -0
  273. package/dist/dependencies/parsers/python/pythonParser.js.map +1 -0
  274. package/dist/dependencies/types.d.ts +280 -0
  275. package/dist/dependencies/types.d.ts.map +1 -0
  276. package/dist/dependencies/types.js +59 -0
  277. package/dist/dependencies/types.js.map +1 -0
  278. package/dist/i18n/index.d.ts +2 -0
  279. package/dist/i18n/index.d.ts.map +1 -0
  280. package/dist/i18n/index.js +18 -0
  281. package/dist/i18n/index.js.map +1 -0
  282. package/dist/i18n/translations.d.ts +55 -0
  283. package/dist/i18n/translations.d.ts.map +1 -0
  284. package/dist/i18n/translations.js +119 -0
  285. package/dist/i18n/translations.js.map +1 -0
  286. package/dist/index.d.ts +14 -0
  287. package/dist/index.d.ts.map +1 -0
  288. package/dist/index.js +36 -0
  289. package/dist/index.js.map +1 -0
  290. package/dist/reports/dependencyReportGenerator.d.ts +20 -0
  291. package/dist/reports/dependencyReportGenerator.d.ts.map +1 -0
  292. package/dist/reports/dependencyReportGenerator.js +690 -0
  293. package/dist/reports/dependencyReportGenerator.js.map +1 -0
  294. package/dist/reports/htmlReportGenerator.d.ts +43 -0
  295. package/dist/reports/htmlReportGenerator.d.ts.map +1 -0
  296. package/dist/reports/htmlReportGenerator.js +793 -0
  297. package/dist/reports/htmlReportGenerator.js.map +1 -0
  298. package/dist/reports/index.d.ts +7 -0
  299. package/dist/reports/index.d.ts.map +1 -0
  300. package/dist/reports/index.js +23 -0
  301. package/dist/reports/index.js.map +1 -0
  302. package/dist/reports/installedDepsReportGenerator.d.ts +14 -0
  303. package/dist/reports/installedDepsReportGenerator.d.ts.map +1 -0
  304. package/dist/reports/installedDepsReportGenerator.js +872 -0
  305. package/dist/reports/installedDepsReportGenerator.js.map +1 -0
  306. package/dist/rules/index.d.ts +31 -0
  307. package/dist/rules/index.d.ts.map +1 -0
  308. package/dist/rules/index.js +95 -0
  309. package/dist/rules/index.js.map +1 -0
  310. package/dist/rules/malware/categories/backdoors.d.ts +12 -0
  311. package/dist/rules/malware/categories/backdoors.d.ts.map +1 -0
  312. package/dist/rules/malware/categories/backdoors.js +163 -0
  313. package/dist/rules/malware/categories/backdoors.js.map +1 -0
  314. package/dist/rules/malware/categories/cryptominers.d.ts +13 -0
  315. package/dist/rules/malware/categories/cryptominers.d.ts.map +1 -0
  316. package/dist/rules/malware/categories/cryptominers.js +415 -0
  317. package/dist/rules/malware/categories/cryptominers.js.map +1 -0
  318. package/dist/rules/malware/categories/exfiltration.d.ts +20 -0
  319. package/dist/rules/malware/categories/exfiltration.d.ts.map +1 -0
  320. package/dist/rules/malware/categories/exfiltration.js +658 -0
  321. package/dist/rules/malware/categories/exfiltration.js.map +1 -0
  322. package/dist/rules/malware/categories/keyloggers.d.ts +19 -0
  323. package/dist/rules/malware/categories/keyloggers.d.ts.map +1 -0
  324. package/dist/rules/malware/categories/keyloggers.js +763 -0
  325. package/dist/rules/malware/categories/keyloggers.js.map +1 -0
  326. package/dist/rules/malware/categories/loaders.d.ts +20 -0
  327. package/dist/rules/malware/categories/loaders.d.ts.map +1 -0
  328. package/dist/rules/malware/categories/loaders.js +702 -0
  329. package/dist/rules/malware/categories/loaders.js.map +1 -0
  330. package/dist/rules/malware/categories/network.d.ts +19 -0
  331. package/dist/rules/malware/categories/network.d.ts.map +1 -0
  332. package/dist/rules/malware/categories/network.js +622 -0
  333. package/dist/rules/malware/categories/network.js.map +1 -0
  334. package/dist/rules/malware/categories/obfuscation.d.ts +22 -0
  335. package/dist/rules/malware/categories/obfuscation.d.ts.map +1 -0
  336. package/dist/rules/malware/categories/obfuscation.js +766 -0
  337. package/dist/rules/malware/categories/obfuscation.js.map +1 -0
  338. package/dist/rules/malware/constants/index.d.ts +281 -0
  339. package/dist/rules/malware/constants/index.d.ts.map +1 -0
  340. package/dist/rules/malware/constants/index.js +327 -0
  341. package/dist/rules/malware/constants/index.js.map +1 -0
  342. package/dist/rules/malware/engine/index.d.ts +178 -0
  343. package/dist/rules/malware/engine/index.d.ts.map +1 -0
  344. package/dist/rules/malware/engine/index.js +552 -0
  345. package/dist/rules/malware/engine/index.js.map +1 -0
  346. package/dist/rules/malware/index.d.ts +205 -0
  347. package/dist/rules/malware/index.d.ts.map +1 -0
  348. package/dist/rules/malware/index.js +837 -0
  349. package/dist/rules/malware/index.js.map +1 -0
  350. package/dist/rules/malware/scoring/index.d.ts +84 -0
  351. package/dist/rules/malware/scoring/index.d.ts.map +1 -0
  352. package/dist/rules/malware/scoring/index.js +441 -0
  353. package/dist/rules/malware/scoring/index.js.map +1 -0
  354. package/dist/rules/malware/types/index.d.ts +616 -0
  355. package/dist/rules/malware/types/index.d.ts.map +1 -0
  356. package/dist/rules/malware/types/index.js +155 -0
  357. package/dist/rules/malware/types/index.js.map +1 -0
  358. package/dist/rules/malware/utils/index.d.ts +117 -0
  359. package/dist/rules/malware/utils/index.d.ts.map +1 -0
  360. package/dist/rules/malware/utils/index.js +514 -0
  361. package/dist/rules/malware/utils/index.js.map +1 -0
  362. package/dist/rules/standards.d.ts +26 -0
  363. package/dist/rules/standards.d.ts.map +1 -0
  364. package/dist/rules/standards.js +352 -0
  365. package/dist/rules/standards.js.map +1 -0
  366. package/dist/rules/vulnerabilities/constants/index.d.ts +835 -0
  367. package/dist/rules/vulnerabilities/constants/index.d.ts.map +1 -0
  368. package/dist/rules/vulnerabilities/constants/index.js +544 -0
  369. package/dist/rules/vulnerabilities/constants/index.js.map +1 -0
  370. package/dist/rules/vulnerabilities/engine/index.d.ts +145 -0
  371. package/dist/rules/vulnerabilities/engine/index.d.ts.map +1 -0
  372. package/dist/rules/vulnerabilities/engine/index.js +581 -0
  373. package/dist/rules/vulnerabilities/engine/index.js.map +1 -0
  374. package/dist/rules/vulnerabilities/index.d.ts +148 -0
  375. package/dist/rules/vulnerabilities/index.d.ts.map +1 -0
  376. package/dist/rules/vulnerabilities/index.js +252 -0
  377. package/dist/rules/vulnerabilities/index.js.map +1 -0
  378. package/dist/rules/vulnerabilities/rules/authentication.d.ts +8 -0
  379. package/dist/rules/vulnerabilities/rules/authentication.d.ts.map +1 -0
  380. package/dist/rules/vulnerabilities/rules/authentication.js +419 -0
  381. package/dist/rules/vulnerabilities/rules/authentication.js.map +1 -0
  382. package/dist/rules/vulnerabilities/rules/commandInjection.d.ts +8 -0
  383. package/dist/rules/vulnerabilities/rules/commandInjection.d.ts.map +1 -0
  384. package/dist/rules/vulnerabilities/rules/commandInjection.js +300 -0
  385. package/dist/rules/vulnerabilities/rules/commandInjection.js.map +1 -0
  386. package/dist/rules/vulnerabilities/rules/csrf.d.ts +8 -0
  387. package/dist/rules/vulnerabilities/rules/csrf.d.ts.map +1 -0
  388. package/dist/rules/vulnerabilities/rules/csrf.js +261 -0
  389. package/dist/rules/vulnerabilities/rules/csrf.js.map +1 -0
  390. package/dist/rules/vulnerabilities/rules/deserialization.d.ts +8 -0
  391. package/dist/rules/vulnerabilities/rules/deserialization.d.ts.map +1 -0
  392. package/dist/rules/vulnerabilities/rules/deserialization.js +336 -0
  393. package/dist/rules/vulnerabilities/rules/deserialization.js.map +1 -0
  394. package/dist/rules/vulnerabilities/rules/fileUpload.d.ts +8 -0
  395. package/dist/rules/vulnerabilities/rules/fileUpload.d.ts.map +1 -0
  396. package/dist/rules/vulnerabilities/rules/fileUpload.js +325 -0
  397. package/dist/rules/vulnerabilities/rules/fileUpload.js.map +1 -0
  398. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.d.ts +8 -0
  399. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.d.ts.map +1 -0
  400. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.js +446 -0
  401. package/dist/rules/vulnerabilities/rules/hardcodedSecrets.js.map +1 -0
  402. package/dist/rules/vulnerabilities/rules/index.d.ts +17 -0
  403. package/dist/rules/vulnerabilities/rules/index.d.ts.map +1 -0
  404. package/dist/rules/vulnerabilities/rules/index.js +47 -0
  405. package/dist/rules/vulnerabilities/rules/index.js.map +1 -0
  406. package/dist/rules/vulnerabilities/rules/pathTraversal.d.ts +8 -0
  407. package/dist/rules/vulnerabilities/rules/pathTraversal.d.ts.map +1 -0
  408. package/dist/rules/vulnerabilities/rules/pathTraversal.js +351 -0
  409. package/dist/rules/vulnerabilities/rules/pathTraversal.js.map +1 -0
  410. package/dist/rules/vulnerabilities/rules/prototypePollution.d.ts +8 -0
  411. package/dist/rules/vulnerabilities/rules/prototypePollution.d.ts.map +1 -0
  412. package/dist/rules/vulnerabilities/rules/prototypePollution.js +272 -0
  413. package/dist/rules/vulnerabilities/rules/prototypePollution.js.map +1 -0
  414. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.d.ts +8 -0
  415. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.d.ts.map +1 -0
  416. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.js +438 -0
  417. package/dist/rules/vulnerabilities/rules/securityMisconfiguration.js.map +1 -0
  418. package/dist/rules/vulnerabilities/rules/sqlInjection.d.ts +12 -0
  419. package/dist/rules/vulnerabilities/rules/sqlInjection.d.ts.map +1 -0
  420. package/dist/rules/vulnerabilities/rules/sqlInjection.js +636 -0
  421. package/dist/rules/vulnerabilities/rules/sqlInjection.js.map +1 -0
  422. package/dist/rules/vulnerabilities/rules/ssrf.d.ts +8 -0
  423. package/dist/rules/vulnerabilities/rules/ssrf.d.ts.map +1 -0
  424. package/dist/rules/vulnerabilities/rules/ssrf.js +401 -0
  425. package/dist/rules/vulnerabilities/rules/ssrf.js.map +1 -0
  426. package/dist/rules/vulnerabilities/rules/xss.d.ts +11 -0
  427. package/dist/rules/vulnerabilities/rules/xss.d.ts.map +1 -0
  428. package/dist/rules/vulnerabilities/rules/xss.js +724 -0
  429. package/dist/rules/vulnerabilities/rules/xss.js.map +1 -0
  430. package/dist/rules/vulnerabilities/scoring/index.d.ts +80 -0
  431. package/dist/rules/vulnerabilities/scoring/index.d.ts.map +1 -0
  432. package/dist/rules/vulnerabilities/scoring/index.js +414 -0
  433. package/dist/rules/vulnerabilities/scoring/index.js.map +1 -0
  434. package/dist/rules/vulnerabilities/types/index.d.ts +830 -0
  435. package/dist/rules/vulnerabilities/types/index.d.ts.map +1 -0
  436. package/dist/rules/vulnerabilities/types/index.js +164 -0
  437. package/dist/rules/vulnerabilities/types/index.js.map +1 -0
  438. package/dist/rules/vulnerabilities/utils/index.d.ts +206 -0
  439. package/dist/rules/vulnerabilities/utils/index.d.ts.map +1 -0
  440. package/dist/rules/vulnerabilities/utils/index.js +615 -0
  441. package/dist/rules/vulnerabilities/utils/index.js.map +1 -0
  442. package/dist/types/index.d.ts +359 -0
  443. package/dist/types/index.d.ts.map +1 -0
  444. package/dist/types/index.js +61 -0
  445. package/dist/types/index.js.map +1 -0
  446. package/dist/utils/index.d.ts +82 -0
  447. package/dist/utils/index.d.ts.map +1 -0
  448. package/dist/utils/index.js +326 -0
  449. package/dist/utils/index.js.map +1 -0
  450. package/dist/utils/logger.d.ts +40 -0
  451. package/dist/utils/logger.d.ts.map +1 -0
  452. package/dist/utils/logger.js +139 -0
  453. package/dist/utils/logger.js.map +1 -0
  454. package/docs/ARCHITECTURE.md +320 -0
  455. package/docs/V1.2.1-IA_Performances.md +116 -0
  456. package/docs/images/WIN_Defender.png +0 -0
  457. package/package.json +68 -0
  458. package/secure-scan.config.json +134 -0
  459. package/secure-scan.sln +29 -0
  460. package/src/ai/aiAnalyzer.ts +714 -0
  461. package/src/ai/index.ts +5 -0
  462. package/src/analyzers/base/baseAnalyzer.ts +66 -0
  463. package/src/analyzers/base/index.ts +5 -0
  464. package/src/analyzers/c-cpp/cppAnalyzer.ts +308 -0
  465. package/src/analyzers/c-cpp/index.ts +5 -0
  466. package/src/analyzers/core/engine/index.ts +5 -0
  467. package/src/analyzers/core/engine/ruleEngine.ts +221 -0
  468. package/src/analyzers/core/index.ts +8 -0
  469. package/src/analyzers/core/scanner/fileScanner.ts +204 -0
  470. package/src/analyzers/core/scanner/index.ts +5 -0
  471. package/src/analyzers/core/scoring/index.ts +5 -0
  472. package/src/analyzers/core/scoring/riskScoring.ts +198 -0
  473. package/src/analyzers/core/securityScanner.ts +321 -0
  474. package/src/analyzers/csharp/csharpAnalyzer.ts +328 -0
  475. package/src/analyzers/csharp/index.ts +5 -0
  476. package/src/analyzers/iac/iacAnalyzer.ts +318 -0
  477. package/src/analyzers/iac/index.ts +5 -0
  478. package/src/analyzers/index.ts +67 -0
  479. package/src/analyzers/java/index.ts +5 -0
  480. package/src/analyzers/java/javaAnalyzer.ts +320 -0
  481. package/src/analyzers/javascript/PROMPT_JS_ANALYZER.md +267 -0
  482. package/src/analyzers/javascript/astUtils.ts +789 -0
  483. package/src/analyzers/javascript/index.ts +50 -0
  484. package/src/analyzers/javascript/javascriptAnalyzer.ts +984 -0
  485. package/src/analyzers/javascript/malwareDetector.ts +697 -0
  486. package/src/analyzers/javascript/packageJsonAnalyzer.ts +626 -0
  487. package/src/analyzers/javascript/taintAnalyzer.ts +630 -0
  488. package/src/analyzers/php/index.ts +5 -0
  489. package/src/analyzers/php/phpAnalyzer.ts +280 -0
  490. package/src/analyzers/python/index.ts +5 -0
  491. package/src/analyzers/python/pythonAnalyzer.ts +319 -0
  492. package/src/cli/index.ts +276 -0
  493. package/src/dependencies/aiDependencyAnalyzer.ts +496 -0
  494. package/src/dependencies/database/cveDatabase.ts +426 -0
  495. package/src/dependencies/database/index.ts +6 -0
  496. package/src/dependencies/database/maliciousPackages.ts +286 -0
  497. package/src/dependencies/dependencyAnalyzer.ts +394 -0
  498. package/src/dependencies/detectors/index.ts +7 -0
  499. package/src/dependencies/detectors/securityStandards.ts +200 -0
  500. package/src/dependencies/detectors/vulnerabilityDetector.ts +343 -0
  501. package/src/dependencies/index.ts +27 -0
  502. package/src/dependencies/installed/index.ts +8 -0
  503. package/src/dependencies/installed/installedScanner.ts +821 -0
  504. package/src/dependencies/installed/malwarePatterns.ts +492 -0
  505. package/src/dependencies/installed/types.ts +287 -0
  506. package/src/dependencies/parsers/base/baseParser.ts +108 -0
  507. package/src/dependencies/parsers/base/index.ts +6 -0
  508. package/src/dependencies/parsers/cpp/cppParser.ts +245 -0
  509. package/src/dependencies/parsers/cpp/index.ts +6 -0
  510. package/src/dependencies/parsers/csharp/csharpParser.ts +151 -0
  511. package/src/dependencies/parsers/csharp/index.ts +6 -0
  512. package/src/dependencies/parsers/index.ts +56 -0
  513. package/src/dependencies/parsers/java/index.ts +6 -0
  514. package/src/dependencies/parsers/java/javaParser.ts +203 -0
  515. package/src/dependencies/parsers/javascript/index.ts +6 -0
  516. package/src/dependencies/parsers/javascript/javascriptParser.ts +362 -0
  517. package/src/dependencies/parsers/php/index.ts +6 -0
  518. package/src/dependencies/parsers/php/phpParser.ts +208 -0
  519. package/src/dependencies/parsers/python/index.ts +6 -0
  520. package/src/dependencies/parsers/python/pythonParser.ts +437 -0
  521. package/src/dependencies/types.ts +330 -0
  522. package/src/i18n/index.ts +1 -0
  523. package/src/i18n/translations.ts +194 -0
  524. package/src/index.ts +16 -0
  525. package/src/reports/dependencyReportGenerator.ts +717 -0
  526. package/src/reports/htmlReportGenerator.ts +781 -0
  527. package/src/reports/index.ts +7 -0
  528. package/src/reports/installedDepsReportGenerator.ts +899 -0
  529. package/src/rules/index.ts +58 -0
  530. package/src/rules/malware/INFO.md +287 -0
  531. package/src/rules/malware/categories/backdoors.ts +174 -0
  532. package/src/rules/malware/categories/cryptominers.ts +434 -0
  533. package/src/rules/malware/categories/exfiltration.ts +677 -0
  534. package/src/rules/malware/categories/keyloggers.ts +780 -0
  535. package/src/rules/malware/categories/loaders.ts +721 -0
  536. package/src/rules/malware/categories/network.ts +639 -0
  537. package/src/rules/malware/categories/obfuscation.ts +788 -0
  538. package/src/rules/malware/constants/index.ts +358 -0
  539. package/src/rules/malware/engine/index.ts +758 -0
  540. package/src/rules/malware/index.ts +928 -0
  541. package/src/rules/malware/scoring/index.ts +549 -0
  542. package/src/rules/malware/types/index.ts +752 -0
  543. package/src/rules/malware/utils/index.ts +643 -0
  544. package/src/rules/standards.ts +372 -0
  545. package/src/rules/vulnerabilities/PROMPT_VULNERABILITIES.md +226 -0
  546. package/src/rules/vulnerabilities/constants/index.ts +625 -0
  547. package/src/rules/vulnerabilities/engine/index.ts +831 -0
  548. package/src/rules/vulnerabilities/index.ts +312 -0
  549. package/src/rules/vulnerabilities/rules/authentication.ts +426 -0
  550. package/src/rules/vulnerabilities/rules/commandInjection.ts +307 -0
  551. package/src/rules/vulnerabilities/rules/csrf.ts +268 -0
  552. package/src/rules/vulnerabilities/rules/deserialization.ts +343 -0
  553. package/src/rules/vulnerabilities/rules/fileUpload.ts +332 -0
  554. package/src/rules/vulnerabilities/rules/hardcodedSecrets.ts +453 -0
  555. package/src/rules/vulnerabilities/rules/index.ts +17 -0
  556. package/src/rules/vulnerabilities/rules/pathTraversal.ts +358 -0
  557. package/src/rules/vulnerabilities/rules/prototypePollution.ts +279 -0
  558. package/src/rules/vulnerabilities/rules/securityMisconfiguration.ts +445 -0
  559. package/src/rules/vulnerabilities/rules/sqlInjection.ts +669 -0
  560. package/src/rules/vulnerabilities/rules/ssrf.ts +408 -0
  561. package/src/rules/vulnerabilities/rules/xss.ts +753 -0
  562. package/src/rules/vulnerabilities/scoring/index.ts +543 -0
  563. package/src/rules/vulnerabilities/types/index.ts +1004 -0
  564. package/src/rules/vulnerabilities/utils/index.ts +709 -0
  565. package/src/types/index.ts +391 -0
  566. package/src/utils/index.ts +306 -0
  567. package/src/utils/logger.ts +150 -0
  568. package/test-installed-scanner.ts +136 -0
  569. package/tsconfig.json +30 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/rules/vulnerabilities/constants/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;CAMnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;CAMd,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,MAAM;IACjB,yCAAyC;;IAEzC,wCAAwC;;IAExC,4CAA4C;;IAE5C,mCAAmC;;IAEnC,kCAAkC;;IAElC,gCAAgC;;IAEhC,+BAA+B;;IAE/B,qCAAqC;;CAE7B,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;CAM1B,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwBvB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAUpB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWrB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAUvB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;CAiCtB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;CA6B1B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CA2BZ,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCvB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;CA6Bb,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;CA2BxB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;CAQjB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;CAWjB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;CAQlB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWpB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DjB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;CAoB7B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;CAiBtB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;CAcvB,CAAC"}
@@ -0,0 +1,544 @@
1
+ "use strict";
2
+ /**
3
+ * @fileoverview Vulnerability Detection Module - Constants
4
+ * @module rules/vulnerabilities/constants
5
+ *
6
+ * Thresholds, limits, and configuration constants for vulnerability detection.
7
+ */
8
+ Object.defineProperty(exports, "__esModule", { value: true });
9
+ exports.WEAK_CRYPTO_PATTERNS = exports.DANGEROUS_FUNCTIONS = exports.HARDCODED_SECRETS_PATTERNS = exports.CWE_REFERENCES = exports.OWASP_TOP_10_2021 = exports.PATH_SANITIZERS = exports.COMMAND_SANITIZERS = exports.XSS_SANITIZERS = exports.SQL_SANITIZERS = exports.DESERIALIZATION_SINKS = exports.SSRF_SINKS = exports.PATH_TRAVERSAL_SINKS = exports.XSS_SINKS = exports.COMMAND_INJECTION_SINKS = exports.SQL_INJECTION_SINKS = exports.CSHARP_TAINT_SOURCES = exports.JAVA_TAINT_SOURCES = exports.PHP_TAINT_SOURCES = exports.PYTHON_TAINT_SOURCES = exports.JS_TAINT_SOURCES = exports.DEFAULT_SCORING_WEIGHTS = exports.LIMITS = exports.CONFIDENCE_THRESHOLDS = exports.RISK_LEVELS = exports.SCORE_THRESHOLDS = void 0;
10
+ // ============================================================================
11
+ // SCORE THRESHOLDS
12
+ // ============================================================================
13
+ /**
14
+ * Score thresholds for severity classification
15
+ */
16
+ exports.SCORE_THRESHOLDS = {
17
+ CRITICAL: 90,
18
+ HIGH: 70,
19
+ MEDIUM: 50,
20
+ LOW: 30,
21
+ INFO: 0
22
+ };
23
+ /**
24
+ * Risk level descriptions
25
+ */
26
+ exports.RISK_LEVELS = {
27
+ CRITICAL: 'critical',
28
+ HIGH: 'high',
29
+ MEDIUM: 'medium',
30
+ LOW: 'low',
31
+ MINIMAL: 'minimal'
32
+ };
33
+ /**
34
+ * Confidence thresholds
35
+ */
36
+ exports.CONFIDENCE_THRESHOLDS = {
37
+ CONFIRMED: 0.95,
38
+ HIGH: 0.80,
39
+ MEDIUM: 0.60,
40
+ LOW: 0.40,
41
+ TENTATIVE: 0.20
42
+ };
43
+ // ============================================================================
44
+ // LIMITS
45
+ // ============================================================================
46
+ /**
47
+ * Engine limits for performance and safety
48
+ */
49
+ exports.LIMITS = {
50
+ /** Maximum regex execution time in ms */
51
+ REGEX_TIMEOUT: 100,
52
+ /** Maximum rule execution time in ms */
53
+ RULE_TIMEOUT: 5000,
54
+ /** Maximum file size to analyze in bytes */
55
+ MAX_FILE_SIZE: 5 * 1024 * 1024, // 5MB
56
+ /** Maximum AST nodes to analyze */
57
+ MAX_AST_NODES: 100000,
58
+ /** Maximum matches per pattern */
59
+ MAX_MATCHES_PER_PATTERN: 100,
60
+ /** Maximum findings per file */
61
+ MAX_FINDINGS_PER_FILE: 500,
62
+ /** Maximum taint flow depth */
63
+ MAX_TAINT_DEPTH: 50,
64
+ /** Maximum line length to analyze */
65
+ MAX_LINE_LENGTH: 10000
66
+ };
67
+ // ============================================================================
68
+ // DEFAULT SCORING WEIGHTS
69
+ // ============================================================================
70
+ /**
71
+ * Default weights for vulnerability scoring
72
+ */
73
+ exports.DEFAULT_SCORING_WEIGHTS = {
74
+ taintFlow: 0.30,
75
+ patternCount: 0.15,
76
+ exploitability: 0.20,
77
+ impact: 0.20,
78
+ context: 0.15
79
+ };
80
+ // ============================================================================
81
+ // TAINT SOURCES BY LANGUAGE
82
+ // ============================================================================
83
+ /**
84
+ * Common taint sources for JavaScript/TypeScript
85
+ */
86
+ exports.JS_TAINT_SOURCES = {
87
+ // Express.js
88
+ 'req.body': { pattern: /req\.body(?:\.\w+|\[\s*['"`]\w+['"`]\s*\])?/g, category: 'user_input' },
89
+ 'req.query': { pattern: /req\.query(?:\.\w+|\[\s*['"`]\w+['"`]\s*\])?/g, category: 'user_input' },
90
+ 'req.params': { pattern: /req\.params(?:\.\w+|\[\s*['"`]\w+['"`]\s*\])?/g, category: 'user_input' },
91
+ 'req.headers': { pattern: /req\.headers(?:\.\w+|\[\s*['"`]\w+['"`]\s*\])?/g, category: 'user_input' },
92
+ 'req.cookies': { pattern: /req\.cookies(?:\.\w+|\[\s*['"`]\w+['"`]\s*\])?/g, category: 'user_input' },
93
+ // Browser
94
+ 'location': { pattern: /(?:window\.)?location\.(?:search|hash|href|pathname)/g, category: 'user_input' },
95
+ 'document.URL': { pattern: /document\.(?:URL|documentURI|baseURI)/g, category: 'user_input' },
96
+ 'document.referrer': { pattern: /document\.referrer/g, category: 'user_input' },
97
+ 'document.cookie': { pattern: /document\.cookie/g, category: 'user_input' },
98
+ // Forms
99
+ 'FormData': { pattern: /new\s+FormData\s*\(/g, category: 'user_input' },
100
+ 'URLSearchParams': { pattern: /new\s+URLSearchParams\s*\(/g, category: 'user_input' },
101
+ // DOM
102
+ 'innerHTML': { pattern: /\.innerHTML/g, category: 'user_input' },
103
+ 'innerText': { pattern: /\.innerText/g, category: 'user_input' },
104
+ 'textContent': { pattern: /\.textContent/g, category: 'user_input' },
105
+ 'value': { pattern: /\.value\b/g, category: 'user_input' },
106
+ // Environment
107
+ 'process.env': { pattern: /process\.env(?:\.\w+|\[\s*['"`]\w+['"`]\s*\])?/g, category: 'environment' }
108
+ };
109
+ /**
110
+ * Common taint sources for Python
111
+ */
112
+ exports.PYTHON_TAINT_SOURCES = {
113
+ // Flask
114
+ 'request.args': { pattern: /request\.args\.get\s*\(/g, category: 'user_input' },
115
+ 'request.form': { pattern: /request\.form\.get\s*\(/g, category: 'user_input' },
116
+ 'request.data': { pattern: /request\.(?:data|json|get_json\(\))/g, category: 'user_input' },
117
+ 'request.headers': { pattern: /request\.headers\.get\s*\(/g, category: 'user_input' },
118
+ 'request.cookies': { pattern: /request\.cookies\.get\s*\(/g, category: 'user_input' },
119
+ // Django
120
+ 'GET': { pattern: /request\.GET\.get\s*\(/g, category: 'user_input' },
121
+ 'POST': { pattern: /request\.POST\.get\s*\(/g, category: 'user_input' },
122
+ // Standard input
123
+ 'input': { pattern: /\binput\s*\(/g, category: 'user_input' },
124
+ 'raw_input': { pattern: /\braw_input\s*\(/g, category: 'user_input' },
125
+ 'sys.argv': { pattern: /sys\.argv/g, category: 'user_input' },
126
+ // File
127
+ 'open': { pattern: /\bopen\s*\(/g, category: 'file' },
128
+ 'read': { pattern: /\.read\s*\(/g, category: 'file' },
129
+ // Environment
130
+ 'os.environ': { pattern: /os\.environ(?:\.get\s*\(|\[)/g, category: 'environment' },
131
+ 'os.getenv': { pattern: /os\.getenv\s*\(/g, category: 'environment' }
132
+ };
133
+ /**
134
+ * Common taint sources for PHP
135
+ */
136
+ exports.PHP_TAINT_SOURCES = {
137
+ '$_GET': { pattern: /\$_GET\s*\[/g, category: 'user_input' },
138
+ '$_POST': { pattern: /\$_POST\s*\[/g, category: 'user_input' },
139
+ '$_REQUEST': { pattern: /\$_REQUEST\s*\[/g, category: 'user_input' },
140
+ '$_COOKIE': { pattern: /\$_COOKIE\s*\[/g, category: 'user_input' },
141
+ '$_FILES': { pattern: /\$_FILES\s*\[/g, category: 'user_input' },
142
+ '$_SERVER': { pattern: /\$_SERVER\s*\[/g, category: 'user_input' },
143
+ '$_ENV': { pattern: /\$_ENV\s*\[/g, category: 'environment' },
144
+ 'file_get_contents': { pattern: /file_get_contents\s*\(/g, category: 'file' },
145
+ 'fread': { pattern: /fread\s*\(/g, category: 'file' }
146
+ };
147
+ /**
148
+ * Common taint sources for Java
149
+ */
150
+ exports.JAVA_TAINT_SOURCES = {
151
+ 'getParameter': { pattern: /\.getParameter\s*\(/g, category: 'user_input' },
152
+ 'getParameterValues': { pattern: /\.getParameterValues\s*\(/g, category: 'user_input' },
153
+ 'getHeader': { pattern: /\.getHeader\s*\(/g, category: 'user_input' },
154
+ 'getCookies': { pattern: /\.getCookies\s*\(/g, category: 'user_input' },
155
+ 'getInputStream': { pattern: /\.getInputStream\s*\(/g, category: 'user_input' },
156
+ 'getReader': { pattern: /\.getReader\s*\(/g, category: 'user_input' },
157
+ 'getPathVariable': { pattern: /@PathVariable/g, category: 'user_input' },
158
+ 'getRequestBody': { pattern: /@RequestBody/g, category: 'user_input' },
159
+ 'System.getenv': { pattern: /System\.getenv\s*\(/g, category: 'environment' },
160
+ 'System.getProperty': { pattern: /System\.getProperty\s*\(/g, category: 'environment' }
161
+ };
162
+ /**
163
+ * Common taint sources for C#
164
+ */
165
+ exports.CSHARP_TAINT_SOURCES = {
166
+ 'Request.Form': { pattern: /Request\.Form\[/g, category: 'user_input' },
167
+ 'Request.QueryString': { pattern: /Request\.QueryString\[/g, category: 'user_input' },
168
+ 'Request.Headers': { pattern: /Request\.Headers\[/g, category: 'user_input' },
169
+ 'Request.Cookies': { pattern: /Request\.Cookies\[/g, category: 'user_input' },
170
+ 'FromBody': { pattern: /\[FromBody\]/g, category: 'user_input' },
171
+ 'FromQuery': { pattern: /\[FromQuery\]/g, category: 'user_input' },
172
+ 'FromRoute': { pattern: /\[FromRoute\]/g, category: 'user_input' },
173
+ 'Environment.GetEnvironmentVariable': { pattern: /Environment\.GetEnvironmentVariable\s*\(/g, category: 'environment' },
174
+ 'Console.ReadLine': { pattern: /Console\.ReadLine\s*\(/g, category: 'user_input' }
175
+ };
176
+ // ============================================================================
177
+ // DANGEROUS SINKS BY VULNERABILITY TYPE
178
+ // ============================================================================
179
+ /**
180
+ * SQL Injection sinks
181
+ */
182
+ exports.SQL_INJECTION_SINKS = {
183
+ // Generic SQL
184
+ 'query': /\.query\s*\(/g,
185
+ 'execute': /\.execute\s*\(/g,
186
+ 'exec': /\.exec\s*\(/g,
187
+ 'raw': /\.raw\s*\(/g,
188
+ 'rawQuery': /\.rawQuery\s*\(/g,
189
+ // JavaScript
190
+ 'mysql.query': /mysql\s*\.\s*query\s*\(/g,
191
+ 'pg.query': /(?:pool|client)\s*\.\s*query\s*\(/g,
192
+ 'sequelize.query': /sequelize\s*\.\s*query\s*\(/g,
193
+ // Python
194
+ 'cursor.execute': /cursor\s*\.\s*execute\s*\(/g,
195
+ 'cursor.executemany': /cursor\s*\.\s*executemany\s*\(/g,
196
+ // PHP
197
+ 'mysql_query': /mysql_query\s*\(/g,
198
+ 'mysqli_query': /mysqli_query\s*\(/g,
199
+ 'pg_query': /pg_query\s*\(/g,
200
+ 'PDO::query': /->query\s*\(/g,
201
+ // Java
202
+ 'Statement.execute': /(?:Statement|PreparedStatement)\s*\.\s*execute(?:Query|Update)?\s*\(/g,
203
+ 'createQuery': /\.createQuery\s*\(/g,
204
+ 'createNativeQuery': /\.createNativeQuery\s*\(/g,
205
+ // C#
206
+ 'SqlCommand': /new\s+SqlCommand\s*\(/g,
207
+ 'ExecuteReader': /\.ExecuteReader\s*\(/g,
208
+ 'ExecuteNonQuery': /\.ExecuteNonQuery\s*\(/g,
209
+ 'ExecuteScalar': /\.ExecuteScalar\s*\(/g
210
+ };
211
+ /**
212
+ * Command Injection sinks
213
+ */
214
+ exports.COMMAND_INJECTION_SINKS = {
215
+ // JavaScript
216
+ 'exec': /(?:child_process\s*\.\s*)?exec\s*\(/g,
217
+ 'execSync': /(?:child_process\s*\.\s*)?execSync\s*\(/g,
218
+ 'spawn': /(?:child_process\s*\.\s*)?spawn\s*\(/g,
219
+ 'spawnSync': /(?:child_process\s*\.\s*)?spawnSync\s*\(/g,
220
+ 'execFile': /(?:child_process\s*\.\s*)?execFile\s*\(/g,
221
+ // Python
222
+ 'os.system': /os\s*\.\s*system\s*\(/g,
223
+ 'os.popen': /os\s*\.\s*popen\s*\(/g,
224
+ 'subprocess': /subprocess\s*\.\s*(?:call|run|Popen|check_output)\s*\(/g,
225
+ 'commands': /commands\s*\.\s*(?:getoutput|getstatusoutput)\s*\(/g,
226
+ // PHP
227
+ 'php_system': /\bsystem\s*\(/g,
228
+ 'php_exec': /\bexec\s*\(/g,
229
+ 'shell_exec': /shell_exec\s*\(/g,
230
+ 'passthru': /passthru\s*\(/g,
231
+ 'popen': /popen\s*\(/g,
232
+ 'proc_open': /proc_open\s*\(/g,
233
+ 'backtick': /`[^`]*\$[^`]*`/g,
234
+ // Java
235
+ 'Runtime.exec': /Runtime\s*\.\s*getRuntime\s*\(\s*\)\s*\.\s*exec\s*\(/g,
236
+ 'ProcessBuilder': /new\s+ProcessBuilder\s*\(/g,
237
+ // C#
238
+ 'Process.Start': /Process\s*\.\s*Start\s*\(/g
239
+ };
240
+ /**
241
+ * XSS sinks
242
+ */
243
+ exports.XSS_SINKS = {
244
+ // DOM
245
+ 'innerHTML': /\.innerHTML\s*=/g,
246
+ 'outerHTML': /\.outerHTML\s*=/g,
247
+ 'document.write': /document\s*\.\s*write(?:ln)?\s*\(/g,
248
+ 'insertAdjacentHTML': /\.insertAdjacentHTML\s*\(/g,
249
+ // jQuery
250
+ 'html': /\$\([^)]*\)\s*\.\s*html\s*\(/g,
251
+ 'append': /\$\([^)]*\)\s*\.\s*(?:append|prepend|after|before)\s*\(/g,
252
+ // React (dangerous)
253
+ 'dangerouslySetInnerHTML': /dangerouslySetInnerHTML\s*=\s*\{/g,
254
+ // Angular
255
+ 'bypassSecurityTrustHtml': /bypassSecurityTrust(?:Html|Script|Url|ResourceUrl)/g,
256
+ // Vue
257
+ 'v-html': /v-html\s*=/g,
258
+ // Template engines (server-side)
259
+ 'render_template_string': /render_template_string\s*\(/g,
260
+ 'Jinja2': /Template\s*\([^)]*\)\s*\.\s*render\s*\(/g,
261
+ // PHP
262
+ 'echo': /echo\s+\$_(?:GET|POST|REQUEST)/g,
263
+ 'print': /print\s+\$_(?:GET|POST|REQUEST)/g
264
+ };
265
+ /**
266
+ * Path Traversal sinks
267
+ */
268
+ exports.PATH_TRAVERSAL_SINKS = {
269
+ // JavaScript
270
+ 'readFile': /(?:fs\s*\.\s*)?read(?:File|FileSync)\s*\(/g,
271
+ 'writeFile': /(?:fs\s*\.\s*)?write(?:File|FileSync)\s*\(/g,
272
+ 'createReadStream': /(?:fs\s*\.\s*)?createReadStream\s*\(/g,
273
+ 'createWriteStream': /(?:fs\s*\.\s*)?createWriteStream\s*\(/g,
274
+ 'unlink': /(?:fs\s*\.\s*)?unlink(?:Sync)?\s*\(/g,
275
+ 'readdir': /(?:fs\s*\.\s*)?readdir(?:Sync)?\s*\(/g,
276
+ 'stat': /(?:fs\s*\.\s*)?stat(?:Sync)?\s*\(/g,
277
+ 'access': /(?:fs\s*\.\s*)?access(?:Sync)?\s*\(/g,
278
+ 'sendFile': /\.sendFile\s*\(/g,
279
+ 'download': /\.download\s*\(/g,
280
+ 'res.render': /res\s*\.\s*render\s*\(/g,
281
+ // Python
282
+ 'open': /\bopen\s*\(/g,
283
+ 'os.path.join': /os\s*\.\s*path\s*\.\s*join\s*\(/g,
284
+ 'shutil': /shutil\s*\.\s*(?:copy|move|rmtree)\s*\(/g,
285
+ 'send_file': /send_file\s*\(/g,
286
+ // PHP
287
+ 'include': /\b(?:include|include_once|require|require_once)\s*[\s(]/g,
288
+ 'file_get_contents': /file_get_contents\s*\(/g,
289
+ 'file_put_contents': /file_put_contents\s*\(/g,
290
+ 'fopen': /fopen\s*\(/g,
291
+ 'readfile': /readfile\s*\(/g,
292
+ 'file': /\bfile\s*\(/g,
293
+ // Java
294
+ 'FileInputStream': /new\s+FileInputStream\s*\(/g,
295
+ 'FileOutputStream': /new\s+FileOutputStream\s*\(/g,
296
+ 'FileReader': /new\s+FileReader\s*\(/g,
297
+ 'Files.read': /Files\s*\.\s*read(?:AllBytes|AllLines|String)\s*\(/g,
298
+ // C#
299
+ 'File.Read': /File\s*\.\s*Read(?:AllText|AllBytes|AllLines)\s*\(/g,
300
+ 'File.Write': /File\s*\.\s*Write(?:AllText|AllBytes|AllLines)\s*\(/g,
301
+ 'StreamReader': /new\s+StreamReader\s*\(/g
302
+ };
303
+ /**
304
+ * SSRF sinks
305
+ */
306
+ exports.SSRF_SINKS = {
307
+ // JavaScript
308
+ 'fetch': /\bfetch\s*\(/g,
309
+ 'axios': /axios\s*\.(?:get|post|put|delete|patch|request)\s*\(/g,
310
+ 'request': /\brequest\s*\(/g,
311
+ 'http.request': /https?\s*\.\s*(?:get|request)\s*\(/g,
312
+ 'got': /\bgot\s*\(/g,
313
+ 'node-fetch': /\bfetch\s*\(/g,
314
+ // Python
315
+ 'requests': /requests\s*\.(?:get|post|put|delete|patch)\s*\(/g,
316
+ 'urllib': /urllib\s*\.\s*(?:request\s*\.\s*)?(?:urlopen|Request)\s*\(/g,
317
+ 'httplib': /http\.client\s*\.\s*HTTPConnection\s*\(/g,
318
+ 'aiohttp': /aiohttp\s*\.\s*(?:ClientSession|request)\s*\(/g,
319
+ // PHP
320
+ 'curl': /curl_(?:exec|init|setopt)\s*\(/g,
321
+ 'file_get_contents': /file_get_contents\s*\(\s*\$/g,
322
+ 'fopen_url': /fopen\s*\(\s*['"]https?:/g,
323
+ // Java
324
+ 'URL.openConnection': /(?:URL|URI)\s*\.\s*open(?:Connection|Stream)\s*\(/g,
325
+ 'HttpClient_java': /HttpClient\s*\.(?:newHttpClient|send)\s*\(/g,
326
+ 'RestTemplate': /RestTemplate\s*\.(?:getForObject|postForObject|exchange)\s*\(/g,
327
+ // C#
328
+ 'HttpClient_csharp': /HttpClient\s*\.(?:GetAsync|PostAsync|SendAsync)\s*\(/g,
329
+ 'WebRequest': /WebRequest\s*\.Create\s*\(/g,
330
+ 'WebClient': /WebClient\s*\.(?:Download|Upload)(?:String|Data|File)\s*\(/g
331
+ };
332
+ /**
333
+ * Deserialization sinks
334
+ */
335
+ exports.DESERIALIZATION_SINKS = {
336
+ // JavaScript
337
+ 'JSON.parse': /JSON\s*\.\s*parse\s*\(/g,
338
+ 'eval': /\beval\s*\(/g,
339
+ 'Function': /new\s+Function\s*\(/g,
340
+ 'deserialize': /deserialize\s*\(/g,
341
+ 'js_unserialize': /unserialize\s*\(/g,
342
+ // Python
343
+ 'pickle': /pickle\s*\.(?:load|loads)\s*\(/g,
344
+ 'yaml.load': /yaml\s*\.\s*(?:load|unsafe_load)\s*\(/g,
345
+ 'marshal': /marshal\s*\.(?:load|loads)\s*\(/g,
346
+ 'shelve': /shelve\s*\.\s*open\s*\(/g,
347
+ // PHP
348
+ 'php_unserialize': /\bunserialize\s*\(/g,
349
+ // Java
350
+ 'ObjectInputStream': /ObjectInputStream\s*\.readObject\s*\(/g,
351
+ 'XMLDecoder': /XMLDecoder\s*\.readObject\s*\(/g,
352
+ 'XStream': /XStream\s*\.fromXML\s*\(/g,
353
+ // C#
354
+ 'BinaryFormatter': /BinaryFormatter\s*\.Deserialize\s*\(/g,
355
+ 'XmlSerializer': /XmlSerializer\s*\.Deserialize\s*\(/g,
356
+ 'JsonConvert': /JsonConvert\s*\.DeserializeObject\s*\(/g,
357
+ 'DataContractSerializer': /DataContractSerializer\s*\.ReadObject\s*\(/g
358
+ };
359
+ // ============================================================================
360
+ // SANITIZERS
361
+ // ============================================================================
362
+ /**
363
+ * Common sanitizers for SQL Injection
364
+ */
365
+ exports.SQL_SANITIZERS = {
366
+ 'parameterized': /\?\s*,|:\w+|@\w+|\$\d+/g,
367
+ 'preparedStatement': /prepare(?:d)?(?:Statement)?\s*\(/gi,
368
+ 'escape': /escape(?:String|Id|Literal)?\s*\(/gi,
369
+ 'quote': /quote\s*\(/gi,
370
+ 'sanitize': /sanitize\s*\(/gi,
371
+ 'bindParam': /bind(?:Param|Value)\s*\(/gi,
372
+ 'placeholders': /%s|%d|\?\?/g
373
+ };
374
+ /**
375
+ * Common sanitizers for XSS
376
+ */
377
+ exports.XSS_SANITIZERS = {
378
+ 'htmlEncode': /(?:html)?(?:encode|escape|entities)\s*\(/gi,
379
+ 'sanitizeHtml': /sanitize(?:Html)?\s*\(/gi,
380
+ 'DOMPurify': /DOMPurify\s*\.\s*sanitize\s*\(/g,
381
+ 'escapeHtml': /escapeHtml\s*\(/gi,
382
+ 'textContent': /\.textContent\s*=/g,
383
+ 'createTextNode': /createTextNode\s*\(/g,
384
+ 'encodeURIComponent': /encodeURIComponent\s*\(/g,
385
+ 'htmlspecialchars': /htmlspecialchars\s*\(/g,
386
+ 'strip_tags': /strip_tags\s*\(/g,
387
+ 'bleach': /bleach\s*\.\s*clean\s*\(/g
388
+ };
389
+ /**
390
+ * Common sanitizers for Command Injection
391
+ */
392
+ exports.COMMAND_SANITIZERS = {
393
+ 'escapeshellarg': /escapeshellarg\s*\(/g,
394
+ 'escapeshellcmd': /escapeshellcmd\s*\(/g,
395
+ 'shlex.quote': /shlex\s*\.\s*quote\s*\(/g,
396
+ 'shellescape': /shellescape\s*\(/gi,
397
+ 'ProcessBuilder': /new\s+ProcessBuilder\s*\(\s*\[/g // Array form is safer
398
+ };
399
+ /**
400
+ * Common sanitizers for Path Traversal
401
+ */
402
+ exports.PATH_SANITIZERS = {
403
+ 'basename': /(?:path\s*\.\s*)?basename\s*\(/gi,
404
+ 'normalize': /(?:path\s*\.\s*)?normalize\s*\(/gi,
405
+ 'realpath': /realpath\s*\(/gi,
406
+ 'resolve': /(?:path\s*\.\s*)?resolve\s*\(/gi,
407
+ 'isAbsolute': /(?:path\s*\.\s*)?isAbsolute\s*\(/gi,
408
+ 'startsWith': /\.startsWith\s*\(/g,
409
+ 'includes': /\.includes\s*\(\s*['"`]\.\.['"`]\s*\)/g
410
+ };
411
+ // ============================================================================
412
+ // SECURITY STANDARD REFERENCES
413
+ // ============================================================================
414
+ /**
415
+ * OWASP Top 10 2021 mapping
416
+ */
417
+ exports.OWASP_TOP_10_2021 = {
418
+ A01: { id: 'A01:2021', name: 'Broken Access Control', url: 'https://owasp.org/Top10/A01_2021-Broken_Access_Control/' },
419
+ A02: { id: 'A02:2021', name: 'Cryptographic Failures', url: 'https://owasp.org/Top10/A02_2021-Cryptographic_Failures/' },
420
+ A03: { id: 'A03:2021', name: 'Injection', url: 'https://owasp.org/Top10/A03_2021-Injection/' },
421
+ A04: { id: 'A04:2021', name: 'Insecure Design', url: 'https://owasp.org/Top10/A04_2021-Insecure_Design/' },
422
+ A05: { id: 'A05:2021', name: 'Security Misconfiguration', url: 'https://owasp.org/Top10/A05_2021-Security_Misconfiguration/' },
423
+ A06: { id: 'A06:2021', name: 'Vulnerable and Outdated Components', url: 'https://owasp.org/Top10/A06_2021-Vulnerable_and_Outdated_Components/' },
424
+ A07: { id: 'A07:2021', name: 'Identification and Authentication Failures', url: 'https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/' },
425
+ A08: { id: 'A08:2021', name: 'Software and Data Integrity Failures', url: 'https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures/' },
426
+ A09: { id: 'A09:2021', name: 'Security Logging and Monitoring Failures', url: 'https://owasp.org/Top10/A09_2021-Security_Logging_and_Monitoring_Failures/' },
427
+ A10: { id: 'A10:2021', name: 'Server-Side Request Forgery (SSRF)', url: 'https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/' }
428
+ };
429
+ /**
430
+ * Common CWE references
431
+ */
432
+ exports.CWE_REFERENCES = {
433
+ // Injection
434
+ CWE_89: { id: 'CWE-89', title: 'SQL Injection', url: 'https://cwe.mitre.org/data/definitions/89.html' },
435
+ CWE_78: { id: 'CWE-78', title: 'OS Command Injection', url: 'https://cwe.mitre.org/data/definitions/78.html' },
436
+ CWE_79: { id: 'CWE-79', title: 'Cross-site Scripting (XSS)', url: 'https://cwe.mitre.org/data/definitions/79.html' },
437
+ CWE_94: { id: 'CWE-94', title: 'Code Injection', url: 'https://cwe.mitre.org/data/definitions/94.html' },
438
+ CWE_90: { id: 'CWE-90', title: 'LDAP Injection', url: 'https://cwe.mitre.org/data/definitions/90.html' },
439
+ CWE_91: { id: 'CWE-91', title: 'XML Injection', url: 'https://cwe.mitre.org/data/definitions/91.html' },
440
+ // XSS subtypes
441
+ CWE_80: { id: 'CWE-80', title: 'Improper Neutralization of Script-Related HTML Tags', url: 'https://cwe.mitre.org/data/definitions/80.html' },
442
+ // Request Forgery
443
+ CWE_352: { id: 'CWE-352', title: 'Cross-Site Request Forgery (CSRF)', url: 'https://cwe.mitre.org/data/definitions/352.html' },
444
+ CWE_918: { id: 'CWE-918', title: 'Server-Side Request Forgery (SSRF)', url: 'https://cwe.mitre.org/data/definitions/918.html' },
445
+ // Deserialization
446
+ CWE_502: { id: 'CWE-502', title: 'Deserialization of Untrusted Data', url: 'https://cwe.mitre.org/data/definitions/502.html' },
447
+ CWE_1321: { id: 'CWE-1321', title: 'Prototype Pollution', url: 'https://cwe.mitre.org/data/definitions/1321.html' },
448
+ // File Handling
449
+ CWE_22: { id: 'CWE-22', title: 'Path Traversal', url: 'https://cwe.mitre.org/data/definitions/22.html' },
450
+ CWE_434: { id: 'CWE-434', title: 'Unrestricted Upload of File with Dangerous Type', url: 'https://cwe.mitre.org/data/definitions/434.html' },
451
+ CWE_73: { id: 'CWE-73', title: 'External Control of File Name or Path', url: 'https://cwe.mitre.org/data/definitions/73.html' },
452
+ CWE_98: { id: 'CWE-98', title: 'Improper Control of Filename for Include/Require Statement', url: 'https://cwe.mitre.org/data/definitions/98.html' },
453
+ // Authentication
454
+ CWE_798: { id: 'CWE-798', title: 'Use of Hard-coded Credentials', url: 'https://cwe.mitre.org/data/definitions/798.html' },
455
+ CWE_287: { id: 'CWE-287', title: 'Improper Authentication', url: 'https://cwe.mitre.org/data/definitions/287.html' },
456
+ CWE_384: { id: 'CWE-384', title: 'Session Fixation', url: 'https://cwe.mitre.org/data/definitions/384.html' },
457
+ CWE_613: { id: 'CWE-613', title: 'Insufficient Session Expiration', url: 'https://cwe.mitre.org/data/definitions/613.html' },
458
+ CWE_259: { id: 'CWE-259', title: 'Use of Hard-coded Password', url: 'https://cwe.mitre.org/data/definitions/259.html' },
459
+ CWE_306: { id: 'CWE-306', title: 'Missing Authentication for Critical Function', url: 'https://cwe.mitre.org/data/definitions/306.html' },
460
+ CWE_862: { id: 'CWE-862', title: 'Missing Authorization', url: 'https://cwe.mitre.org/data/definitions/862.html' },
461
+ CWE_614: { id: 'CWE-614', title: 'Sensitive Cookie in HTTPS Session Without Secure Attribute', url: 'https://cwe.mitre.org/data/definitions/614.html' },
462
+ CWE_1004: { id: 'CWE-1004', title: 'Sensitive Cookie Without HttpOnly Flag', url: 'https://cwe.mitre.org/data/definitions/1004.html' },
463
+ CWE_347: { id: 'CWE-347', title: 'Improper Verification of Cryptographic Signature', url: 'https://cwe.mitre.org/data/definitions/347.html' },
464
+ CWE_916: { id: 'CWE-916', title: 'Use of Password Hash With Insufficient Computational Effort', url: 'https://cwe.mitre.org/data/definitions/916.html' },
465
+ CWE_208: { id: 'CWE-208', title: 'Observable Timing Discrepancy', url: 'https://cwe.mitre.org/data/definitions/208.html' },
466
+ // Cryptography
467
+ CWE_327: { id: 'CWE-327', title: 'Use of a Broken or Risky Cryptographic Algorithm', url: 'https://cwe.mitre.org/data/definitions/327.html' },
468
+ CWE_328: { id: 'CWE-328', title: 'Reversible One-Way Hash', url: 'https://cwe.mitre.org/data/definitions/328.html' },
469
+ CWE_330: { id: 'CWE-330', title: 'Use of Insufficiently Random Values', url: 'https://cwe.mitre.org/data/definitions/330.html' },
470
+ CWE_326: { id: 'CWE-326', title: 'Inadequate Encryption Strength', url: 'https://cwe.mitre.org/data/definitions/326.html' },
471
+ CWE_321: { id: 'CWE-321', title: 'Use of Hard-coded Cryptographic Key', url: 'https://cwe.mitre.org/data/definitions/321.html' },
472
+ CWE_295: { id: 'CWE-295', title: 'Improper Certificate Validation', url: 'https://cwe.mitre.org/data/definitions/295.html' },
473
+ // Access Control
474
+ CWE_284: { id: 'CWE-284', title: 'Improper Access Control', url: 'https://cwe.mitre.org/data/definitions/284.html' },
475
+ CWE_639: { id: 'CWE-639', title: 'Authorization Bypass Through User-Controlled Key', url: 'https://cwe.mitre.org/data/definitions/639.html' },
476
+ // Information Disclosure
477
+ CWE_200: { id: 'CWE-200', title: 'Exposure of Sensitive Information', url: 'https://cwe.mitre.org/data/definitions/200.html' },
478
+ CWE_209: { id: 'CWE-209', title: 'Generation of Error Message Containing Sensitive Information', url: 'https://cwe.mitre.org/data/definitions/209.html' },
479
+ CWE_532: { id: 'CWE-532', title: 'Insertion of Sensitive Information into Log File', url: 'https://cwe.mitre.org/data/definitions/532.html' },
480
+ // Configuration
481
+ CWE_16: { id: 'CWE-16', title: 'Configuration', url: 'https://cwe.mitre.org/data/definitions/16.html' },
482
+ CWE_942: { id: 'CWE-942', title: 'Permissive Cross-domain Policy with Untrusted Domains', url: 'https://cwe.mitre.org/data/definitions/942.html' },
483
+ CWE_489: { id: 'CWE-489', title: 'Active Debug Code', url: 'https://cwe.mitre.org/data/definitions/489.html' },
484
+ CWE_693: { id: 'CWE-693', title: 'Protection Mechanism Failure', url: 'https://cwe.mitre.org/data/definitions/693.html' }
485
+ };
486
+ // ============================================================================
487
+ // PATTERN COLLECTIONS
488
+ // ============================================================================
489
+ /**
490
+ * Hardcoded secrets patterns
491
+ */
492
+ exports.HARDCODED_SECRETS_PATTERNS = {
493
+ // API Keys
494
+ aws_access_key: /(?:AWS|aws)?[_-]?(?:ACCESS|access)?[_-]?KEY[_-]?ID\s*[=:]\s*['"]?[A-Z0-9]{20}['"]?/g,
495
+ aws_secret_key: /(?:AWS|aws)?[_-]?SECRET[_-]?(?:ACCESS)?[_-]?KEY\s*[=:]\s*['"]?[A-Za-z0-9/+=]{40}['"]?/g,
496
+ generic_api_key: /(?:api[_-]?key|apikey|api_secret)\s*[=:]\s*['"][a-zA-Z0-9_\-]{16,}['"]/gi,
497
+ github_token: /(?:gh[pousr]|github)[_-]?(?:token|pat|key)\s*[=:]\s*['"]?[a-zA-Z0-9_]{36,}['"]?/gi,
498
+ slack_token: /xox[baprs]-[0-9]{10,}-[a-zA-Z0-9-]+/g,
499
+ stripe_key: /(?:sk|pk)_(?:test|live)_[a-zA-Z0-9]{24,}/g,
500
+ // Passwords
501
+ password_assignment: /(?:password|passwd|pwd|secret)\s*[=:]\s*['"][^'"]{8,}['"]/gi,
502
+ // Private keys
503
+ private_key: /-----BEGIN\s+(?:RSA|DSA|EC|OPENSSH|ENCRYPTED)?\s*PRIVATE\s+KEY-----/g,
504
+ // Connection strings
505
+ connection_string: /(?:mongodb|postgres|mysql|redis):\/\/[^:]+:[^@]+@[^\s'"]+/gi,
506
+ // JWT secrets
507
+ jwt_secret: /(?:jwt[_-]?secret|secret[_-]?key)\s*[=:]\s*['"][a-zA-Z0-9_\-]{16,}['"]/gi
508
+ };
509
+ /**
510
+ * Dangerous function patterns
511
+ */
512
+ exports.DANGEROUS_FUNCTIONS = {
513
+ // JavaScript/TypeScript
514
+ eval: /\beval\s*\(/g,
515
+ function_constructor: /new\s+Function\s*\(/g,
516
+ settimeout_string: /setTimeout\s*\(\s*['"`]/g,
517
+ setinterval_string: /setInterval\s*\(\s*['"`]/g,
518
+ // PHP
519
+ php_eval: /\beval\s*\(\s*\$/g,
520
+ php_create_function: /create_function\s*\(/g,
521
+ php_assert: /\bassert\s*\(\s*\$/g,
522
+ php_preg_replace_e: /preg_replace\s*\(\s*['"].*\/e['"]/g,
523
+ // Python
524
+ python_eval: /\beval\s*\(/g,
525
+ python_exec: /\bexec\s*\(/g,
526
+ python_compile: /\bcompile\s*\(/g
527
+ };
528
+ /**
529
+ * Weak cryptography patterns
530
+ */
531
+ exports.WEAK_CRYPTO_PATTERNS = {
532
+ // Weak algorithms
533
+ md5: /\bMD5\b|\.md5\s*\(|hashlib\.md5/gi,
534
+ sha1: /\bSHA1\b|\.sha1\s*\(|hashlib\.sha1|SHA-1/gi,
535
+ des: /\bDES\b|DESede|TripleDES/gi,
536
+ rc4: /\bRC4\b|ARCFOUR/gi,
537
+ // Weak modes
538
+ ecb_mode: /ECB|MODE_ECB/gi,
539
+ // Weak random
540
+ math_random: /Math\.random\s*\(\)/g,
541
+ random_random: /random\.random\s*\(\)/g,
542
+ rand_function: /\brand\s*\(\s*\)/g
543
+ };
544
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rules/vulnerabilities/constants/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,CAAC;CACC,CAAC;AAEX;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;CACV,CAAC;AAEX;;GAEG;AACU,QAAA,qBAAqB,GAAG;IACnC,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,IAAI;IACT,SAAS,EAAE,IAAI;CACP,CAAC;AAEX,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;GAEG;AACU,QAAA,MAAM,GAAG;IACpB,yCAAyC;IACzC,aAAa,EAAE,GAAG;IAClB,wCAAwC;IACxC,YAAY,EAAE,IAAI;IAClB,4CAA4C;IAC5C,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM;IACtC,mCAAmC;IACnC,aAAa,EAAE,MAAM;IACrB,kCAAkC;IAClC,uBAAuB,EAAE,GAAG;IAC5B,gCAAgC;IAChC,qBAAqB,EAAE,GAAG;IAC1B,+BAA+B;IAC/B,eAAe,EAAE,EAAE;IACnB,qCAAqC;IACrC,eAAe,EAAE,KAAK;CACd,CAAC;AAEX,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACU,QAAA,uBAAuB,GAAG;IACrC,SAAS,EAAE,IAAI;IACf,YAAY,EAAE,IAAI;IAClB,cAAc,EAAE,IAAI;IACpB,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;CACL,CAAC;AAEX,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;GAEG;AACU,QAAA,gBAAgB,GAAG;IAC9B,aAAa;IACb,UAAU,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/F,WAAW,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,YAAY,EAAE;IACjG,YAAY,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,QAAQ,EAAE,YAAY,EAAE;IACnG,aAAa,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrG,aAAa,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,YAAY,EAAE;IAErG,UAAU;IACV,UAAU,EAAE,EAAE,OAAO,EAAE,uDAAuD,EAAE,QAAQ,EAAE,YAAY,EAAE;IACxG,cAAc,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7F,mBAAmB,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/E,iBAAiB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAE3E,QAAQ;IACR,UAAU,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvE,iBAAiB,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,YAAY,EAAE;IAErF,MAAM;IACN,WAAW,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE;IAChE,WAAW,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE;IAChE,aAAa,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACpE,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;IAE1D,cAAc;IACd,aAAa,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,aAAa,EAAE;CAC9F,CAAC;AAEX;;GAEG;AACU,QAAA,oBAAoB,GAAG;IAClC,QAAQ;IACR,cAAc,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/E,cAAc,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/E,cAAc,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC3F,iBAAiB,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrF,iBAAiB,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,YAAY,EAAE;IAErF,SAAS;IACT,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrE,MAAM,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,YAAY,EAAE;IAEvE,iBAAiB;IACjB,OAAO,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7D,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrE,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;IAE7D,OAAO;IACP,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrD,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IAErD,cAAc;IACd,YAAY,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,QAAQ,EAAE,aAAa,EAAE;IACnF,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,EAAE;CAC7D,CAAC;AAEX;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC5D,QAAQ,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC9D,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACpE,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAClE,SAAS,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAChE,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAClE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC7D,mBAAmB,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC7E,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE;CAC7C,CAAC;AAEX;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,cAAc,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC3E,oBAAoB,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvF,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrE,YAAY,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvE,gBAAgB,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/E,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrE,iBAAiB,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACxE,gBAAgB,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE;IACtE,eAAe,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC7E,oBAAoB,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,aAAa,EAAE;CAC/E,CAAC;AAEX;;GAEG;AACU,QAAA,oBAAoB,GAAG;IAClC,cAAc,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvE,qBAAqB,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACrF,iBAAiB,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7E,iBAAiB,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7E,UAAU,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE;IAChE,WAAW,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAClE,WAAW,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAClE,oCAAoC,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,QAAQ,EAAE,aAAa,EAAE;IACvH,kBAAkB,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,YAAY,EAAE;CAC1E,CAAC;AAEX,+EAA+E;AAC/E,wCAAwC;AACxC,+EAA+E;AAE/E;;GAEG;AACU,QAAA,mBAAmB,GAAG;IACjC,cAAc;IACd,OAAO,EAAE,eAAe;IACxB,SAAS,EAAE,iBAAiB;IAC5B,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,aAAa;IACpB,UAAU,EAAE,kBAAkB;IAE9B,aAAa;IACb,aAAa,EAAE,0BAA0B;IACzC,UAAU,EAAE,oCAAoC;IAChD,iBAAiB,EAAE,8BAA8B;IAEjD,SAAS;IACT,gBAAgB,EAAE,6BAA6B;IAC/C,oBAAoB,EAAE,iCAAiC;IAEvD,MAAM;IACN,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,oBAAoB;IACpC,UAAU,EAAE,gBAAgB;IAC5B,YAAY,EAAE,eAAe;IAE7B,OAAO;IACP,mBAAmB,EAAE,uEAAuE;IAC5F,aAAa,EAAE,qBAAqB;IACpC,mBAAmB,EAAE,2BAA2B;IAEhD,KAAK;IACL,YAAY,EAAE,wBAAwB;IACtC,eAAe,EAAE,uBAAuB;IACxC,iBAAiB,EAAE,yBAAyB;IAC5C,eAAe,EAAE,uBAAuB;CAChC,CAAC;AAEX;;GAEG;AACU,QAAA,uBAAuB,GAAG;IACrC,aAAa;IACb,MAAM,EAAE,sCAAsC;IAC9C,UAAU,EAAE,0CAA0C;IACtD,OAAO,EAAE,uCAAuC;IAChD,WAAW,EAAE,2CAA2C;IACxD,UAAU,EAAE,0CAA0C;IAEtD,SAAS;IACT,WAAW,EAAE,wBAAwB;IACrC,UAAU,EAAE,uBAAuB;IACnC,YAAY,EAAE,yDAAyD;IACvE,UAAU,EAAE,qDAAqD;IAEjE,MAAM;IACN,YAAY,EAAE,gBAAgB;IAC9B,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,kBAAkB;IAChC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,aAAa;IACtB,WAAW,EAAE,iBAAiB;IAC9B,UAAU,EAAE,iBAAiB;IAE7B,OAAO;IACP,cAAc,EAAE,uDAAuD;IACvE,gBAAgB,EAAE,4BAA4B;IAE9C,KAAK;IACL,eAAe,EAAE,4BAA4B;CACrC,CAAC;AAEX;;GAEG;AACU,QAAA,SAAS,GAAG;IACvB,MAAM;IACN,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,kBAAkB;IAC/B,gBAAgB,EAAE,oCAAoC;IACtD,oBAAoB,EAAE,4BAA4B;IAElD,SAAS;IACT,MAAM,EAAE,+BAA+B;IACvC,QAAQ,EAAE,0DAA0D;IAEpE,oBAAoB;IACpB,yBAAyB,EAAE,mCAAmC;IAE9D,UAAU;IACV,yBAAyB,EAAE,qDAAqD;IAEhF,MAAM;IACN,QAAQ,EAAE,aAAa;IAEvB,iCAAiC;IACjC,wBAAwB,EAAE,8BAA8B;IACxD,QAAQ,EAAE,0CAA0C;IAEpD,MAAM;IACN,MAAM,EAAE,iCAAiC;IACzC,OAAO,EAAE,kCAAkC;CACnC,CAAC;AAEX;;GAEG;AACU,QAAA,oBAAoB,GAAG;IAClC,aAAa;IACb,UAAU,EAAE,4CAA4C;IACxD,WAAW,EAAE,6CAA6C;IAC1D,kBAAkB,EAAE,uCAAuC;IAC3D,mBAAmB,EAAE,wCAAwC;IAC7D,QAAQ,EAAE,sCAAsC;IAChD,SAAS,EAAE,uCAAuC;IAClD,MAAM,EAAE,oCAAoC;IAC5C,QAAQ,EAAE,sCAAsC;IAChD,UAAU,EAAE,kBAAkB;IAC9B,UAAU,EAAE,kBAAkB;IAC9B,YAAY,EAAE,yBAAyB;IAEvC,SAAS;IACT,MAAM,EAAE,cAAc;IACtB,cAAc,EAAE,kCAAkC;IAClD,QAAQ,EAAE,0CAA0C;IACpD,WAAW,EAAE,iBAAiB;IAE9B,MAAM;IACN,SAAS,EAAE,0DAA0D;IACrE,mBAAmB,EAAE,yBAAyB;IAC9C,mBAAmB,EAAE,yBAAyB;IAC9C,OAAO,EAAE,aAAa;IACtB,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,cAAc;IAEtB,OAAO;IACP,iBAAiB,EAAE,6BAA6B;IAChD,kBAAkB,EAAE,8BAA8B;IAClD,YAAY,EAAE,wBAAwB;IACtC,YAAY,EAAE,qDAAqD;IAEnE,KAAK;IACL,WAAW,EAAE,qDAAqD;IAClE,YAAY,EAAE,sDAAsD;IACpE,cAAc,EAAE,0BAA0B;CAClC,CAAC;AAEX;;GAEG;AACU,QAAA,UAAU,GAAG;IACxB,aAAa;IACb,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,uDAAuD;IAChE,SAAS,EAAE,iBAAiB;IAC5B,cAAc,EAAE,qCAAqC;IACrD,KAAK,EAAE,aAAa;IACpB,YAAY,EAAE,eAAe;IAE7B,SAAS;IACT,UAAU,EAAE,kDAAkD;IAC9D,QAAQ,EAAE,6DAA6D;IACvE,SAAS,EAAE,0CAA0C;IACrD,SAAS,EAAE,gDAAgD;IAE3D,MAAM;IACN,MAAM,EAAE,iCAAiC;IACzC,mBAAmB,EAAE,8BAA8B;IACnD,WAAW,EAAE,2BAA2B;IAExC,OAAO;IACP,oBAAoB,EAAE,oDAAoD;IAC1E,iBAAiB,EAAE,6CAA6C;IAChE,cAAc,EAAE,gEAAgE;IAEhF,KAAK;IACL,mBAAmB,EAAE,uDAAuD;IAC5E,YAAY,EAAE,6BAA6B;IAC3C,WAAW,EAAE,6DAA6D;CAClE,CAAC;AAEX;;GAEG;AACU,QAAA,qBAAqB,GAAG;IACnC,aAAa;IACb,YAAY,EAAE,yBAAyB;IACvC,MAAM,EAAE,cAAc;IACtB,UAAU,EAAE,sBAAsB;IAClC,aAAa,EAAE,mBAAmB;IAClC,gBAAgB,EAAE,mBAAmB;IAErC,SAAS;IACT,QAAQ,EAAE,iCAAiC;IAC3C,WAAW,EAAE,wCAAwC;IACrD,SAAS,EAAE,kCAAkC;IAC7C,QAAQ,EAAE,0BAA0B;IAEpC,MAAM;IACN,iBAAiB,EAAE,qBAAqB;IAExC,OAAO;IACP,mBAAmB,EAAE,wCAAwC;IAC7D,YAAY,EAAE,iCAAiC;IAC/C,SAAS,EAAE,2BAA2B;IAEtC,KAAK;IACL,iBAAiB,EAAE,uCAAuC;IAC1D,eAAe,EAAE,qCAAqC;IACtD,aAAa,EAAE,yCAAyC;IACxD,wBAAwB,EAAE,6CAA6C;CAC/D,CAAC;AAEX,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;GAEG;AACU,QAAA,cAAc,GAAG;IAC5B,eAAe,EAAE,yBAAyB;IAC1C,mBAAmB,EAAE,oCAAoC;IACzD,QAAQ,EAAE,qCAAqC;IAC/C,OAAO,EAAE,cAAc;IACvB,UAAU,EAAE,iBAAiB;IAC7B,WAAW,EAAE,4BAA4B;IACzC,cAAc,EAAE,aAAa;CACrB,CAAC;AAEX;;GAEG;AACU,QAAA,cAAc,GAAG;IAC5B,YAAY,EAAE,4CAA4C;IAC1D,cAAc,EAAE,0BAA0B;IAC1C,WAAW,EAAE,iCAAiC;IAC9C,YAAY,EAAE,mBAAmB;IACjC,aAAa,EAAE,oBAAoB;IACnC,gBAAgB,EAAE,sBAAsB;IACxC,oBAAoB,EAAE,0BAA0B;IAChD,kBAAkB,EAAE,wBAAwB;IAC5C,YAAY,EAAE,kBAAkB;IAChC,QAAQ,EAAE,2BAA2B;CAC7B,CAAC;AAEX;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,gBAAgB,EAAE,sBAAsB;IACxC,aAAa,EAAE,0BAA0B;IACzC,aAAa,EAAE,oBAAoB;IACnC,gBAAgB,EAAE,iCAAiC,CAAC,sBAAsB;CAClE,CAAC;AAEX;;GAEG;AACU,QAAA,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,WAAW,EAAE,mCAAmC;IAChD,UAAU,EAAE,iBAAiB;IAC7B,SAAS,EAAE,iCAAiC;IAC5C,YAAY,EAAE,oCAAoC;IAClD,YAAY,EAAE,oBAAoB;IAClC,UAAU,EAAE,wCAAwC;CAC5C,CAAC;AAEX,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,yDAAyD,EAAE;IACtH,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,0DAA0D,EAAE;IACxH,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,6CAA6C,EAAE;IAC9F,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,mDAAmD,EAAE;IAC1G,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,6DAA6D,EAAE;IAC9H,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,sEAAsE,EAAE;IAChJ,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,4CAA4C,EAAE,GAAG,EAAE,8EAA8E,EAAE;IAChK,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,wEAAwE,EAAE;IACpJ,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,0CAA0C,EAAE,GAAG,EAAE,4EAA4E,EAAE;IAC5J,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,0EAA0E,EAAE;CAC5I,CAAC;AAEX;;GAEG;AACU,QAAA,cAAc,GAAG;IAC5B,YAAY;IACZ,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,gDAAgD,EAAE;IACvG,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,GAAG,EAAE,gDAAgD,EAAE;IAC9G,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,4BAA4B,EAAE,GAAG,EAAE,gDAAgD,EAAE;IACpH,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,gDAAgD,EAAE;IACxG,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,gDAAgD,EAAE;IACxG,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,gDAAgD,EAAE;IAEvG,eAAe;IACf,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,qDAAqD,EAAE,GAAG,EAAE,gDAAgD,EAAE;IAE7I,kBAAkB;IAClB,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mCAAmC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC9H,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,oCAAoC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAE/H,kBAAkB;IAClB,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mCAAmC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC9H,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,EAAE,kDAAkD,EAAE;IAEnH,gBAAgB;IAChB,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,gDAAgD,EAAE;IACxG,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,iDAAiD,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC5I,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,uCAAuC,EAAE,GAAG,EAAE,gDAAgD,EAAE;IAC/H,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,4DAA4D,EAAE,GAAG,EAAE,gDAAgD,EAAE;IAEpJ,iBAAiB;IACjB,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC1H,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACpH,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC7G,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC5H,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,4BAA4B,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACvH,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,8CAA8C,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACzI,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAClH,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,4DAA4D,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACvJ,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,wCAAwC,EAAE,GAAG,EAAE,kDAAkD,EAAE;IACtI,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,kDAAkD,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC7I,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACxJ,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAE1H,eAAe;IACf,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,kDAAkD,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC7I,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACpH,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAChI,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,gCAAgC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC3H,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAChI,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAE5H,iBAAiB;IACjB,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACpH,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,kDAAkD,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAE7I,yBAAyB;IACzB,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mCAAmC,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC9H,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,8DAA8D,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACzJ,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,kDAAkD,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAE7I,gBAAgB;IAChB,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,gDAAgD,EAAE;IACvG,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,uDAAuD,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAClJ,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,iDAAiD,EAAE;IAC9G,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,iDAAiD,EAAE;CACjH,CAAC;AAEX,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,0BAA0B,GAAG;IACxC,WAAW;IACX,cAAc,EAAE,qFAAqF;IACrG,cAAc,EAAE,wFAAwF;IACxG,eAAe,EAAE,0EAA0E;IAC3F,YAAY,EAAE,mFAAmF;IACjG,WAAW,EAAE,sCAAsC;IACnD,UAAU,EAAE,2CAA2C;IAEvD,YAAY;IACZ,mBAAmB,EAAE,6DAA6D;IAElF,eAAe;IACf,WAAW,EAAE,sEAAsE;IAEnF,qBAAqB;IACrB,iBAAiB,EAAE,6DAA6D;IAEhF,cAAc;IACd,UAAU,EAAE,0EAA0E;CAC9E,CAAC;AAEX;;GAEG;AACU,QAAA,mBAAmB,GAAG;IACjC,wBAAwB;IACxB,IAAI,EAAE,cAAc;IACpB,oBAAoB,EAAE,sBAAsB;IAC5C,iBAAiB,EAAE,0BAA0B;IAC7C,kBAAkB,EAAE,2BAA2B;IAE/C,MAAM;IACN,QAAQ,EAAE,mBAAmB;IAC7B,mBAAmB,EAAE,uBAAuB;IAC5C,UAAU,EAAE,qBAAqB;IACjC,kBAAkB,EAAE,oCAAoC;IAExD,SAAS;IACT,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,cAAc,EAAE,iBAAiB;CACzB,CAAC;AAEX;;GAEG;AACU,QAAA,oBAAoB,GAAG;IAClC,kBAAkB;IAClB,GAAG,EAAE,mCAAmC;IACxC,IAAI,EAAE,4CAA4C;IAClD,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,mBAAmB;IAExB,aAAa;IACb,QAAQ,EAAE,gBAAgB;IAE1B,cAAc;IACd,WAAW,EAAE,sBAAsB;IACnC,aAAa,EAAE,wBAAwB;IACvC,aAAa,EAAE,mBAAmB;CAC1B,CAAC"}