secure-scan 1.2.2

package/dist/rules/vulnerabilities/rules/authentication.js

@@ -0,0 +1,419 @@
+"use strict";
+/**
+ * @fileoverview Authentication and Session Vulnerabilities Detection Rules
+ * @module rules/vulnerabilities/rules/authentication
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticationRules = void 0;
+const types_1 = require("../types");
+const constants_1 = require("../constants");
+exports.authenticationRules = [
+    {
+        id: 'VUL-AUTH-001',
+        name: 'Weak Password Hashing - MD5/SHA1',
+        description: 'Detects use of weak hashing algorithms for passwords.',
+        version: '1.0.0',
+        vulnerabilityType: types_1.VulnerabilityType.BROKEN_AUTHENTICATION,
+        category: types_1.VulnerabilityCategory.CRYPTOGRAPHIC_FAILURE,
+        languages: [
+            types_1.SupportedLanguage.JAVASCRIPT, types_1.SupportedLanguage.TYPESCRIPT,
+            types_1.SupportedLanguage.PYTHON, types_1.SupportedLanguage.PHP,
+            types_1.SupportedLanguage.JAVA, types_1.SupportedLanguage.CSHARP
+        ],
+        severity: types_1.VulnerabilitySeverity.HIGH,
+        confidence: types_1.ConfidenceLevel.HIGH,
+        baseScore: 80,
+        patterns: [
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-md5-password',
+                pattern: '(?:md5|sha1)\\s*\\([^)]*(?:password|passwd|pwd)',
+                flags: 'gi',
+                weight: 1.0,
+                description: 'MD5/SHA1 on password'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-crypto-md5',
+                pattern: 'createHash\\s*\\([\'"](?:md5|sha1)[\'"]\\)',
+                flags: 'gi',
+                weight: 0.90,
+                description: 'crypto.createHash with weak algorithm'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-hashlib-weak',
+                pattern: 'hashlib\\.(?:md5|sha1)\\s*\\([^)]*(?:password|encode)',
+                flags: 'gi',
+                weight: 1.0,
+                description: 'Python hashlib with weak hash'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-messagedigest-weak',
+                pattern: 'MessageDigest\\.getInstance\\s*\\([\'"](?:MD5|SHA-?1)[\'"]\\)',
+                flags: 'gi',
+                weight: 0.95,
+                description: 'Java MessageDigest with weak algorithm'
+            }
+        ],
+        impact: {
+            confidentiality: 'high',
+            integrity: 'medium',
+            availability: 'low',
+            technicalImpact: 'Password hashes can be cracked quickly using rainbow tables or GPU attacks.',
+            businessImpact: 'Mass credential compromise, account takeover.'
+        },
+        exploitability: {
+            attackVector: 'network',
+            attackComplexity: 'low',
+            privilegesRequired: 'none',
+            userInteraction: 'none',
+            knownExploits: true
+        },
+        remediation: {
+            summary: 'Use bcrypt, scrypt, or Argon2 for password hashing.',
+            steps: [
+                'Replace MD5/SHA1 with bcrypt, scrypt, or Argon2id',
+                'Use appropriate work factor (cost)',
+                'Migrate existing password hashes on next login',
+                'Salt is automatically handled by modern algorithms'
+            ],
+            secureCodeExample: `// Node.js - Use bcrypt
+const bcrypt = require('bcrypt');
+const hash = await bcrypt.hash(password, 12);
+const isValid = await bcrypt.compare(password, hash);
+
+# Python - Use bcrypt or argon2
+import bcrypt
+hashed = bcrypt.hashpw(password.encode(), bcrypt.gensalt(12))
+
+// Java - Use BCrypt
+String hash = BCrypt.hashpw(password, BCrypt.gensalt(12));`,
+            effort: 'medium',
+            priority: 'high'
+        },
+        standards: {
+            owasp: [constants_1.OWASP_TOP_10_2021.A02, constants_1.OWASP_TOP_10_2021.A07],
+            cwe: [constants_1.CWE_REFERENCES.CWE_328, constants_1.CWE_REFERENCES.CWE_916]
+        },
+        tags: ['authentication', 'password', 'hashing', 'cryptography'],
+        enabled: true
+    },
+    {
+        id: 'VUL-AUTH-002',
+        name: 'Insecure Session Configuration',
+        description: 'Detects insecure session cookie settings.',
+        version: '1.0.0',
+        vulnerabilityType: types_1.VulnerabilityType.BROKEN_AUTHENTICATION,
+        category: types_1.VulnerabilityCategory.BROKEN_ACCESS_CONTROL,
+        languages: [types_1.SupportedLanguage.JAVASCRIPT, types_1.SupportedLanguage.TYPESCRIPT],
+        severity: types_1.VulnerabilitySeverity.MEDIUM,
+        confidence: types_1.ConfidenceLevel.HIGH,
+        baseScore: 60,
+        patterns: [
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-cookie-no-httponly',
+                pattern: 'cookie\\s*[({][^}]*httpOnly\\s*:\\s*false',
+                flags: 'gi',
+                weight: 0.95,
+                description: 'Cookie without httpOnly'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-cookie-no-secure',
+                pattern: 'cookie\\s*[({][^}]*secure\\s*:\\s*false',
+                flags: 'gi',
+                weight: 0.90,
+                description: 'Cookie without secure flag'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-session-no-samsite',
+                pattern: 'session\\s*\\([^)]*(?!sameSite)',
+                flags: 'gi',
+                weight: 0.70,
+                description: 'Session without sameSite'
+            }
+        ],
+        impact: {
+            confidentiality: 'high',
+            integrity: 'medium',
+            availability: 'low',
+            technicalImpact: 'Session hijacking via XSS (no httpOnly) or MITM (no secure).',
+            businessImpact: 'Account takeover, session theft.'
+        },
+        exploitability: {
+            attackVector: 'network',
+            attackComplexity: 'low',
+            privilegesRequired: 'none',
+            userInteraction: 'required'
+        },
+        remediation: {
+            summary: 'Enable httpOnly, secure, and sameSite flags on session cookies.',
+            steps: [
+                'Set httpOnly: true to prevent JavaScript access',
+                'Set secure: true to require HTTPS',
+                'Set sameSite: "strict" or "lax" for CSRF protection',
+                'Use short session expiration'
+            ],
+            secureCodeExample: `// Express session configuration
+app.use(session({
+  secret: process.env.SESSION_SECRET,
+  resave: false,
+  saveUninitialized: false,
+  cookie: {
+    httpOnly: true,
+    secure: true,
+    sameSite: 'strict',
+    maxAge: 3600000 // 1 hour
+  }
+}));`,
+            effort: 'low',
+            priority: 'high'
+        },
+        standards: {
+            owasp: [constants_1.OWASP_TOP_10_2021.A07],
+            cwe: [constants_1.CWE_REFERENCES.CWE_614, constants_1.CWE_REFERENCES.CWE_1004]
+        },
+        tags: ['authentication', 'session', 'cookie', 'csrf'],
+        enabled: true
+    },
+    {
+        id: 'VUL-AUTH-003',
+        name: 'JWT None Algorithm',
+        description: 'Detects JWT configuration that may allow "none" algorithm.',
+        version: '1.0.0',
+        vulnerabilityType: types_1.VulnerabilityType.BROKEN_AUTHENTICATION,
+        category: types_1.VulnerabilityCategory.CRYPTOGRAPHIC_FAILURE,
+        languages: [types_1.SupportedLanguage.JAVASCRIPT, types_1.SupportedLanguage.TYPESCRIPT],
+        severity: types_1.VulnerabilitySeverity.CRITICAL,
+        confidence: types_1.ConfidenceLevel.MEDIUM,
+        baseScore: 90,
+        patterns: [
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-jwt-no-algorithm',
+                pattern: 'jwt\\.verify\\s*\\([^)]*,\\s*null',
+                flags: 'gi',
+                weight: 1.0,
+                description: 'JWT verify with null secret'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-jwt-algorithms-none',
+                pattern: 'algorithms\\s*:\\s*\\[[^\\]]*[\'"]none[\'"]',
+                flags: 'gi',
+                weight: 1.0,
+                description: 'JWT algorithms includes none'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-jwt-no-verify',
+                pattern: 'jwt\\.decode\\s*\\([^)]*(?!verify)',
+                flags: 'gi',
+                weight: 0.80,
+                description: 'JWT decode without verify'
+            }
+        ],
+        impact: {
+            confidentiality: 'high',
+            integrity: 'high',
+            availability: 'low',
+            technicalImpact: 'Complete authentication bypass. Attacker can forge any JWT.',
+            businessImpact: 'Full account takeover, privilege escalation.'
+        },
+        exploitability: {
+            attackVector: 'network',
+            attackComplexity: 'low',
+            privilegesRequired: 'none',
+            userInteraction: 'none',
+            knownExploits: true
+        },
+        remediation: {
+            summary: 'Always specify allowed algorithms explicitly. Never allow "none".',
+            steps: [
+                'Specify algorithms explicitly in verify options',
+                'Never include "none" in allowed algorithms',
+                'Use asymmetric algorithms (RS256) for distributed systems',
+                'Validate issuer and audience claims'
+            ],
+            secureCodeExample: `const jwt = require('jsonwebtoken');
+
+// Secure: Explicit algorithm
+const decoded = jwt.verify(token, secret, {
+  algorithms: ['HS256'],
+  issuer: 'my-app',
+  audience: 'my-users'
+});
+
+// For asymmetric keys
+const decoded = jwt.verify(token, publicKey, {
+  algorithms: ['RS256']
+});`,
+            effort: 'low',
+            priority: 'immediate'
+        },
+        standards: {
+            owasp: [constants_1.OWASP_TOP_10_2021.A02, constants_1.OWASP_TOP_10_2021.A07],
+            cwe: [constants_1.CWE_REFERENCES.CWE_327, constants_1.CWE_REFERENCES.CWE_347]
+        },
+        tags: ['authentication', 'jwt', 'critical'],
+        enabled: true
+    },
+    {
+        id: 'VUL-AUTH-004',
+        name: 'Missing Authentication Check',
+        description: 'Detects routes or handlers that may lack authentication checks.',
+        version: '1.0.0',
+        vulnerabilityType: types_1.VulnerabilityType.BROKEN_ACCESS_CONTROL,
+        category: types_1.VulnerabilityCategory.BROKEN_ACCESS_CONTROL,
+        languages: [types_1.SupportedLanguage.JAVASCRIPT, types_1.SupportedLanguage.TYPESCRIPT],
+        severity: types_1.VulnerabilitySeverity.HIGH,
+        confidence: types_1.ConfidenceLevel.LOW,
+        baseScore: 70,
+        patterns: [
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-route-no-middleware',
+                pattern: 'app\\.(?:get|post|put|delete|patch)\\s*\\([\'"][^\'"]+[\'"]\\s*,\\s*(?:async\\s+)?\\(?(?:req|request)',
+                flags: 'gi',
+                weight: 0.60,
+                description: 'Route without middleware'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-admin-route',
+                pattern: 'app\\.(?:get|post|put|delete)\\s*\\([\'"](?:/admin|/api/admin)',
+                flags: 'gi',
+                weight: 0.70,
+                description: 'Admin route (verify auth)'
+            }
+        ],
+        impact: {
+            confidentiality: 'high',
+            integrity: 'high',
+            availability: 'medium',
+            technicalImpact: 'Unauthorized access to sensitive functionality.',
+            businessImpact: 'Data breach, privilege escalation.'
+        },
+        exploitability: {
+            attackVector: 'network',
+            attackComplexity: 'low',
+            privilegesRequired: 'none',
+            userInteraction: 'none'
+        },
+        remediation: {
+            summary: 'Apply authentication middleware to all protected routes.',
+            steps: [
+                'Use authentication middleware on protected routes',
+                'Apply authorization checks for role-based access',
+                'Use global middleware with exclusion list',
+                'Audit all routes for proper authentication'
+            ],
+            secureCodeExample: `const authMiddleware = require('./middleware/auth');
+const adminMiddleware = require('./middleware/admin');
+
+// Apply to individual routes
+app.get('/api/users', authMiddleware, getUsers);
+
+// Apply to all routes in a router
+const adminRouter = express.Router();
+adminRouter.use(authMiddleware, adminMiddleware);
+adminRouter.get('/settings', getSettings);
+
+// Global middleware with exclusions
+app.use((req, res, next) => {
+  const publicPaths = ['/login', '/register', '/public'];
+  if (publicPaths.includes(req.path)) return next();
+  return authMiddleware(req, res, next);
+});`,
+            effort: 'medium',
+            priority: 'high'
+        },
+        standards: {
+            owasp: [constants_1.OWASP_TOP_10_2021.A01, constants_1.OWASP_TOP_10_2021.A07],
+            cwe: [constants_1.CWE_REFERENCES.CWE_306, constants_1.CWE_REFERENCES.CWE_862]
+        },
+        tags: ['authentication', 'authorization', 'access-control'],
+        enabled: true
+    },
+    {
+        id: 'VUL-AUTH-005',
+        name: 'Timing Attack Vulnerable Comparison',
+        description: 'Detects string comparisons for secrets that are vulnerable to timing attacks.',
+        version: '1.0.0',
+        vulnerabilityType: types_1.VulnerabilityType.BROKEN_AUTHENTICATION,
+        category: types_1.VulnerabilityCategory.CRYPTOGRAPHIC_FAILURE,
+        languages: [
+            types_1.SupportedLanguage.JAVASCRIPT, types_1.SupportedLanguage.TYPESCRIPT,
+            types_1.SupportedLanguage.PYTHON
+        ],
+        severity: types_1.VulnerabilitySeverity.MEDIUM,
+        confidence: types_1.ConfidenceLevel.MEDIUM,
+        baseScore: 55,
+        patterns: [
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-timing-token',
+                pattern: '(?:token|secret|key|signature)\\s*(?:===?|!==?)\\s*(?:req\\.|user\\.|expected)',
+                flags: 'gi',
+                weight: 0.85,
+                description: 'Direct secret comparison'
+            },
+            {
+                type: types_1.PatternType.REGEX,
+                patternId: 'auth-timing-password',
+                pattern: '(?:password|hash)\\s*===?\\s*(?:stored|expected|user)',
+                flags: 'gi',
+                weight: 0.80,
+                description: 'Direct password/hash comparison'
+            }
+        ],
+        impact: {
+            confidentiality: 'medium',
+            integrity: 'medium',
+            availability: 'low',
+            technicalImpact: 'Secrets can be revealed byte-by-byte through timing analysis.',
+            businessImpact: 'API key extraction, token forgery.'
+        },
+        exploitability: {
+            attackVector: 'network',
+            attackComplexity: 'high',
+            privilegesRequired: 'none',
+            userInteraction: 'none'
+        },
+        remediation: {
+            summary: 'Use constant-time comparison functions for secret comparison.',
+            steps: [
+                'Use crypto.timingSafeEqual() in Node.js',
+                'Use hmac.compare_digest() in Python',
+                'Use MessageDigest.isEqual() in Java',
+                'Ensure both values have same length before comparison'
+            ],
+            secureCodeExample: `// Node.js - Constant-time comparison
+const crypto = require('crypto');
+
+function safeCompare(a, b) {
+  if (a.length !== b.length) return false;
+  return crypto.timingSafeEqual(Buffer.from(a), Buffer.from(b));
+}
+
+# Python - Constant-time comparison
+import hmac
+def safe_compare(a, b):
+    return hmac.compare_digest(a, b)`,
+            effort: 'low',
+            priority: 'medium'
+        },
+        standards: {
+            owasp: [constants_1.OWASP_TOP_10_2021.A02],
+            cwe: [constants_1.CWE_REFERENCES.CWE_208]
+        },
+        tags: ['authentication', 'timing-attack', 'cryptography'],
+        enabled: true
+    }
+];
+exports.default = exports.authenticationRules;
+//# sourceMappingURL=authentication.js.map

package/dist/rules/vulnerabilities/rules/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../../src/rules/vulnerabilities/rules/authentication.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,oCAQkB;AAClB,4CAAiE;AAEpD,QAAA,mBAAmB,GAAwB;IACtD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,OAAO;QAChB,iBAAiB,EAAE,yBAAiB,CAAC,qBAAqB;QAC1D,QAAQ,EAAE,6BAAqB,CAAC,qBAAqB;QACrD,SAAS,EAAE;YACT,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU;YAC1D,yBAAiB,CAAC,MAAM,EAAE,yBAAiB,CAAC,GAAG;YAC/C,yBAAiB,CAAC,IAAI,EAAE,yBAAiB,CAAC,MAAM;SACjD;QACD,QAAQ,EAAE,6BAAqB,CAAC,IAAI;QACpC,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,iDAAiD;gBAC1D,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,sBAAsB;aACpC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,4CAA4C;gBACrD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,uCAAuC;aACrD;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,uDAAuD;gBAChE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,yBAAyB;gBACpC,OAAO,EAAE,+DAA+D;gBACxE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,wCAAwC;aACtD;SACF;QACD,MAAM,EAAE;YACN,eAAe,EAAE,MAAM;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,6EAA6E;YAC9F,cAAc,EAAE,+CAA+C;SAChE;QACD,cAAc,EAAE;YACd,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,MAAM;YAC1B,eAAe,EAAE,MAAM;YACvB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE;YACX,OAAO,EAAE,qDAAqD;YAC9D,KAAK,EAAE;gBACL,mDAAmD;gBACnD,oCAAoC;gBACpC,gDAAgD;gBAChD,oDAAoD;aACrD;YACD,iBAAiB,EAAE;;;;;;;;;;2DAUkC;YACrD,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,MAAM;SACjB;QACD,SAAS,EAAE;YACT,KAAK,EAAE,CAAC,6BAAiB,CAAC,GAAG,EAAE,6BAAiB,CAAC,GAAG,CAAC;YACrD,GAAG,EAAE,CAAC,0BAAc,CAAC,OAAO,EAAE,0BAAc,CAAC,OAAO,CAAC;SACtD;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC;QAC/D,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,OAAO;QAChB,iBAAiB,EAAE,yBAAiB,CAAC,qBAAqB;QAC1D,QAAQ,EAAE,6BAAqB,CAAC,qBAAqB;QACrD,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,6BAAqB,CAAC,MAAM;QACtC,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,yBAAyB;gBACpC,OAAO,EAAE,2CAA2C;gBACpD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,yBAAyB;aACvC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,uBAAuB;gBAClC,OAAO,EAAE,yCAAyC;gBAClD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,4BAA4B;aAC1C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,yBAAyB;gBACpC,OAAO,EAAE,iCAAiC;gBAC1C,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,0BAA0B;aACxC;SACF;QACD,MAAM,EAAE;YACN,eAAe,EAAE,MAAM;YACvB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,8DAA8D;YAC/E,cAAc,EAAE,kCAAkC;SACnD;QACD,cAAc,EAAE;YACd,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,MAAM;YAC1B,eAAe,EAAE,UAAU;SAC5B;QACD,WAAW,EAAE;YACX,OAAO,EAAE,iEAAiE;YAC1E,KAAK,EAAE;gBACL,iDAAiD;gBACjD,mCAAmC;gBACnC,qDAAqD;gBACrD,8BAA8B;aAC/B;YACD,iBAAiB,EAAE;;;;;;;;;;;KAWpB;YACC,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,MAAM;SACjB;QACD,SAAS,EAAE;YACT,KAAK,EAAE,CAAC,6BAAiB,CAAC,GAAG,CAAC;YAC9B,GAAG,EAAE,CAAC,0BAAc,CAAC,OAAO,EAAE,0BAAc,CAAC,QAAQ,CAAC;SACvD;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC;QACrD,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,OAAO;QAChB,iBAAiB,EAAE,yBAAiB,CAAC,qBAAqB;QAC1D,QAAQ,EAAE,6BAAqB,CAAC,qBAAqB;QACrD,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,6BAAqB,CAAC,QAAQ;QACxC,UAAU,EAAE,uBAAe,CAAC,MAAM;QAClC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,uBAAuB;gBAClC,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,OAAO,EAAE,6CAA6C;gBACtD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,8BAA8B;aAC5C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,oCAAoC;gBAC7C,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,2BAA2B;aACzC;SACF;QACD,MAAM,EAAE;YACN,eAAe,EAAE,MAAM;YACvB,SAAS,EAAE,MAAM;YACjB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,6DAA6D;YAC9E,cAAc,EAAE,8CAA8C;SAC/D;QACD,cAAc,EAAE;YACd,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,MAAM;YAC1B,eAAe,EAAE,MAAM;YACvB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE;YACX,OAAO,EAAE,mEAAmE;YAC5E,KAAK,EAAE;gBACL,iDAAiD;gBACjD,4CAA4C;gBAC5C,2DAA2D;gBAC3D,qCAAqC;aACtC;YACD,iBAAiB,EAAE;;;;;;;;;;;;IAYrB;YACE,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,WAAW;SACtB;QACD,SAAS,EAAE;YACT,KAAK,EAAE,CAAC,6BAAiB,CAAC,GAAG,EAAE,6BAAiB,CAAC,GAAG,CAAC;YACrD,GAAG,EAAE,CAAC,0BAAc,CAAC,OAAO,EAAE,0BAAc,CAAC,OAAO,CAAC;SACtD;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,UAAU,CAAC;QAC3C,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,iEAAiE;QAC9E,OAAO,EAAE,OAAO;QAChB,iBAAiB,EAAE,yBAAiB,CAAC,qBAAqB;QAC1D,QAAQ,EAAE,6BAAqB,CAAC,qBAAqB;QACrD,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,6BAAqB,CAAC,IAAI;QACpC,UAAU,EAAE,uBAAe,CAAC,GAAG;QAC/B,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,OAAO,EAAE,uGAAuG;gBAChH,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,0BAA0B;aACxC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,gEAAgE;gBACzE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,2BAA2B;aACzC;SACF;QACD,MAAM,EAAE;YACN,eAAe,EAAE,MAAM;YACvB,SAAS,EAAE,MAAM;YACjB,YAAY,EAAE,QAAQ;YACtB,eAAe,EAAE,iDAAiD;YAClE,cAAc,EAAE,oCAAoC;SACrD;QACD,cAAc,EAAE;YACd,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,MAAM;YAC1B,eAAe,EAAE,MAAM;SACxB;QACD,WAAW,EAAE;YACX,OAAO,EAAE,0DAA0D;YACnE,KAAK,EAAE;gBACL,mDAAmD;gBACnD,kDAAkD;gBAClD,2CAA2C;gBAC3C,4CAA4C;aAC7C;YACD,iBAAiB,EAAE;;;;;;;;;;;;;;;;IAgBrB;YACE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,MAAM;SACjB;QACD,SAAS,EAAE;YACT,KAAK,EAAE,CAAC,6BAAiB,CAAC,GAAG,EAAE,6BAAiB,CAAC,GAAG,CAAC;YACrD,GAAG,EAAE,CAAC,0BAAc,CAAC,OAAO,EAAE,0BAAc,CAAC,OAAO,CAAC;SACtD;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,CAAC;QAC3D,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EAAE,+EAA+E;QAC5F,OAAO,EAAE,OAAO;QAChB,iBAAiB,EAAE,yBAAiB,CAAC,qBAAqB;QAC1D,QAAQ,EAAE,6BAAqB,CAAC,qBAAqB;QACrD,SAAS,EAAE;YACT,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU;YAC1D,yBAAiB,CAAC,MAAM;SACzB;QACD,QAAQ,EAAE,6BAAqB,CAAC,MAAM;QACtC,UAAU,EAAE,uBAAe,CAAC,MAAM;QAClC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,gFAAgF;gBACzF,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,0BAA0B;aACxC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,uDAAuD;gBAChE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,iCAAiC;aAC/C;SACF;QACD,MAAM,EAAE;YACN,eAAe,EAAE,QAAQ;YACzB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,+DAA+D;YAChF,cAAc,EAAE,oCAAoC;SACrD;QACD,cAAc,EAAE;YACd,YAAY,EAAE,SAAS;YACvB,gBAAgB,EAAE,MAAM;YACxB,kBAAkB,EAAE,MAAM;YAC1B,eAAe,EAAE,MAAM;SACxB;QACD,WAAW,EAAE;YACX,OAAO,EAAE,+DAA+D;YACxE,KAAK,EAAE;gBACL,yCAAyC;gBACzC,qCAAqC;gBACrC,qCAAqC;gBACrC,uDAAuD;aACxD;YACD,iBAAiB,EAAE;;;;;;;;;;;qCAWY;YAC/B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,QAAQ;SACnB;QACD,SAAS,EAAE;YACT,KAAK,EAAE,CAAC,6BAAiB,CAAC,GAAG,CAAC;YAC9B,GAAG,EAAE,CAAC,0BAAc,CAAC,OAAO,CAAC;SAC9B;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,cAAc,CAAC;QACzD,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,kBAAe,2BAAmB,CAAC"}

package/dist/rules/vulnerabilities/rules/commandInjection.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview Command Injection Detection Rules
+ * @module rules/vulnerabilities/rules/commandInjection
+ */
+import { VulnerabilityRule } from '../types';
+export declare const commandInjectionRules: VulnerabilityRule[];
+export default commandInjectionRules;
+//# sourceMappingURL=commandInjection.d.ts.map

package/dist/rules/vulnerabilities/rules/commandInjection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandInjection.d.ts","sourceRoot":"","sources":["../../../../src/rules/vulnerabilities/rules/commandInjection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,iBAAiB,EAOlB,MAAM,UAAU,CAAC;AAGlB,eAAO,MAAM,qBAAqB,EAAE,iBAAiB,EAgSpD,CAAC;AAEF,eAAe,qBAAqB,CAAC"}