ssrf-agent-guard 0.1.5 → 0.1.6

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+import { Agent as HttpAgent } from 'http';
+import { Agent as HttpsAgent } from 'https';
+import { IsValidDomainOptions } from './lib/types';
+type CustomAgent = HttpAgent | HttpsAgent;
+/**
+ * Patches an http.Agent or https.Agent to enforce an HOST/IP check
+ * before and after a DNS lookup.
+ *
+ * @param url The URL or another input to determine the agent type.
+ * @param isValidDomainOptions Options for validating domain names.
+ * @returns The patched CustomAgent instance.
+ */
+declare const ssrfAgentGuard: (url: string, isValidDomainOptions?: IsValidDomainOptions) => CustomAgent;
+export default ssrfAgentGuard;

package/dist/lib/types.d.ts

@@ -0,0 +1,27 @@
+export interface Options {
+    protocal?: string;
+    metadataHosts?: string[];
+    mode?: 'block' | 'report' | 'allow';
+    policy?: PolicyOptions;
+    blockCloudMetadata?: boolean;
+    detectDnsRebinding?: boolean;
+    logger?: (level: 'info' | 'warn' | 'error', msg: string, meta?: any) => void;
+}
+export interface PolicyOptions {
+    allowDomains?: string[];
+    denyDomains?: string[];
+    denyTLD?: string[];
+}
+export interface BlockEvent {
+    url: string;
+    reason: string;
+    ip?: string;
+    timestamp: number;
+}
+export interface IsValidDomainOptions {
+    subdomain?: boolean;
+    wildcard?: boolean;
+    allowUnicode?: boolean;
+    topLevel?: boolean;
+}
+export declare const CLOUD_METADATA_HOSTS: string[];

package/dist/lib/utils.d.ts

@@ -0,0 +1,5 @@
+import { IsValidDomainOptions } from './types';
+/**
+ * High-level validation for hostnames (domains + public IPs).
+ */
+export declare function isSafeHost(hostname: string, isValidDomainOptions?: IsValidDomainOptions): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ssrf-agent-guard",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "A TypeScript SSRF protection library for Node.js (express/axios) with advanced policies, DNS rebinding detection and cloud metadata protection.",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",