verification-layer 0.27.9 → 0.27.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/rule-catalog.json +1 -1
- package/dist/scanners/hipaa2026/patterns.d.ts.map +1 -1
- package/dist/scanners/hipaa2026/patterns.js +4 -2
- package/dist/scanners/hipaa2026/patterns.js.map +1 -1
- package/dist/scanners/hipaa2026/session-false-positive.test.d.ts +2 -0
- package/dist/scanners/hipaa2026/session-false-positive.test.d.ts.map +1 -0
- package/dist/scanners/hipaa2026/session-false-positive.test.js +45 -0
- package/dist/scanners/hipaa2026/session-false-positive.test.js.map +1 -0
- package/dist/scanners/security/dompurify-false-positive.test.d.ts +2 -0
- package/dist/scanners/security/dompurify-false-positive.test.d.ts.map +1 -0
- package/dist/scanners/security/dompurify-false-positive.test.js +39 -0
- package/dist/scanners/security/dompurify-false-positive.test.js.map +1 -0
- package/dist/scanners/security/index.d.ts.map +1 -1
- package/dist/scanners/security/index.js +7 -0
- package/dist/scanners/security/index.js.map +1 -1
- package/package.json +1 -1
package/dist/rule-catalog.json
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../src/scanners/hipaa2026/patterns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,gBA6B1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,EAAE,gBAuBzC,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,EAAE,
|
|
1
|
+
{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../src/scanners/hipaa2026/patterns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,gBA6B1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,EAAE,gBAuBzC,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,EAAE,gBAuBtC,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,0BAA0B,EAAE,gBAqBxC,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,4BAA4B,EAAE,gBAwB1C,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,6BAA6B,EAAE,gBAuB3C,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,wBAAwB,EAAE,gBAetC,CAAC;AAEF,wCAAwC;AACxC,eAAO,MAAM,yBAAyB,EAAE,gBAevC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,+BAA+B,EAAE,gBAmB7C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,gBAAgB,EAUrD,CAAC"}
|
|
@@ -71,11 +71,13 @@ export const SESSION_TIMEOUT_PATTERNS = {
|
|
|
71
71
|
severity: 'high',
|
|
72
72
|
hipaaReference: '45 CFR §164.312(a)(2)(iii) - Session Control (Required)',
|
|
73
73
|
patterns: [
|
|
74
|
-
/
|
|
74
|
+
// Match actual authentication/session configuration, not arbitrary uses of
|
|
75
|
+
// the word "session" (e.g. Stripe Checkout Session or provider SDK objects).
|
|
76
|
+
/(?:express-session|\bsession\b)\.(?:configure|use)(?!.*?(?:maxAge|expires|timeout))/i,
|
|
77
|
+
/app\.use\s*\(\s*session\s*\(/i,
|
|
75
78
|
/maxAge:\s*(?:9[0-9]{5}[0-9]+|[1-9][0-9]{6,})/i,
|
|
76
79
|
/jwt\.sign\([^)]*(?!.*?expiresIn)/i,
|
|
77
80
|
/cookie-session.*?(?!.*?maxAge)/i,
|
|
78
|
-
/session.*?(?!.*?(?:idle|inactivity).*?timeout)/i,
|
|
79
81
|
],
|
|
80
82
|
negativePatterns: [
|
|
81
83
|
/maxAge:\s*[1-9][0-9]{0,5}\b/i,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../src/scanners/hipaa2026/patterns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,oDAAoD;IAC1D,WAAW,EAAE,sGAAsG;IACnH,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,sDAAsD;IACtE,QAAQ,EAAE;QACR,8EAA8E;QAC9E,6EAA6E;QAC7E,4EAA4E;QAC5E,iJAAiJ;QACjJ,2BAA2B;QAC3B,6FAA6F;QAC7F,8BAA8B;QAC9B,sDAAsD;QACtD,+BAA+B;QAC/B,mDAAmD;QACnD,wBAAwB;QACxB,kDAAkD;KACnD;IACD,gBAAgB,EAAE;QAChB,qBAAqB;QACrB,cAAc;QACd,wBAAwB;QACxB,iBAAiB;KAClB;IACD,OAAO,EAAE,yFAAyF;IAClG,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqB;IAC3D,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,wCAAwC;IAC9C,WAAW,EAAE,+DAA+D;IAC5E,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,mDAAmD;IACnE,QAAQ,EAAE;QACR,mGAAmG;QACnG,mGAAmG;QACnG,kDAAkD;QAClD,wFAAwF;QACxF,uDAAuD;QACvD,iDAAiD;KAClD;IACD,gBAAgB,EAAE;QAChB,kBAAkB;QAClB,cAAc;QACd,WAAW;QACX,UAAU;KACX;IACD,OAAO,EAAE,+FAA+F;IACxG,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAqB;IACxD,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mCAAmC;IACzC,WAAW,EAAE,uEAAuE;IACpF,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,yDAAyD;IACzE,QAAQ,EAAE;QACR,
|
|
1
|
+
{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../src/scanners/hipaa2026/patterns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,oDAAoD;IAC1D,WAAW,EAAE,sGAAsG;IACnH,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,sDAAsD;IACtE,QAAQ,EAAE;QACR,8EAA8E;QAC9E,6EAA6E;QAC7E,4EAA4E;QAC5E,iJAAiJ;QACjJ,2BAA2B;QAC3B,6FAA6F;QAC7F,8BAA8B;QAC9B,sDAAsD;QACtD,+BAA+B;QAC/B,mDAAmD;QACnD,wBAAwB;QACxB,kDAAkD;KACnD;IACD,gBAAgB,EAAE;QAChB,qBAAqB;QACrB,cAAc;QACd,wBAAwB;QACxB,iBAAiB;KAClB;IACD,OAAO,EAAE,yFAAyF;IAClG,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqB;IAC3D,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,wCAAwC;IAC9C,WAAW,EAAE,+DAA+D;IAC5E,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,mDAAmD;IACnE,QAAQ,EAAE;QACR,mGAAmG;QACnG,mGAAmG;QACnG,kDAAkD;QAClD,wFAAwF;QACxF,uDAAuD;QACvD,iDAAiD;KAClD;IACD,gBAAgB,EAAE;QAChB,kBAAkB;QAClB,cAAc;QACd,WAAW;QACX,UAAU;KACX;IACD,OAAO,EAAE,+FAA+F;IACxG,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAqB;IACxD,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mCAAmC;IACzC,WAAW,EAAE,uEAAuE;IACpF,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,yDAAyD;IACzE,QAAQ,EAAE;QACR,2EAA2E;QAC3E,6EAA6E;QAC7E,sFAAsF;QACtF,+BAA+B;QAC/B,+CAA+C;QAC/C,mCAAmC;QACnC,iCAAiC;KAClC;IACD,gBAAgB,EAAE;QAChB,8BAA8B;QAC9B,0CAA0C;QAC1C,cAAc;KACf;IACD,OAAO,EAAE,+EAA+E;IACxF,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,oDAAoD;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,qCAAqC;IAC3C,WAAW,EAAE,wEAAwE;IACrF,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,kEAAkE;IAClF,QAAQ,EAAE;QACR,8FAA8F;QAC9F,yEAAyE;QACzE,2LAA2L;QAC3L,sEAAsE;KACvE;IACD,gBAAgB,EAAE;QAChB,kBAAkB;QAClB,wBAAwB;QACxB,sBAAsB;QACtB,oBAAoB;KACrB;IACD,OAAO,EAAE,+FAA+F;IACxG,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,oDAAoD;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAqB;IAC5D,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,uCAAuC;IAC7C,WAAW,EAAE,wEAAwE;IACrF,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,qEAAqE;IACrF,QAAQ,EAAE;QACR,yCAAyC;QACzC,mHAAmH;QACnH,wEAAwE;QACxE,6EAA6E;QAC7E,4HAA4H;QAC5H,oCAAoC;QACpC,kEAAkE;KACnE;IACD,gBAAgB,EAAE;QAChB,uBAAuB;QACvB,4BAA4B;QAC5B,sBAAsB;QACtB,eAAe;KAChB;IACD,OAAO,EAAE,0FAA0F;IACnG,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF,8CAA8C;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAqB;IAC7D,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,sCAAsC;IAC5C,WAAW,EAAE,iFAAiF;IAC9F,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,0DAA0D;IAC1E,QAAQ,EAAE;QACR,+DAA+D;QAC/D,wEAAwE;QACxE,6FAA6F;QAC7F,kGAAkG;KACnG;IACD,gBAAgB,EAAE;QAChB,oBAAoB;QACpB,mBAAmB;QACnB,gBAAgB;QAChB,mBAAmB;QACnB,eAAe;QACf,YAAY;KACb;IACD,OAAO,EAAE,gGAAgG;IACzG,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAqB;IACxD,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,0CAA0C;IAChD,WAAW,EAAE,+EAA+E;IAC5F,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,yDAAyD;IACzE,QAAQ,EAAE;QACR,gEAAgE;QAChE,8BAA8B;QAC9B,qDAAqD;QACrD,gCAAgC;KACjC;IACD,OAAO,EAAE,gEAAgE;IACzE,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,wCAAwC;AACxC,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,4FAA4F;IACzG,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,yDAAyD;IACzE,QAAQ,EAAE;QACR,iEAAiE;QACjE,mDAAmD;QACnD,2CAA2C;QAC3C,kDAAkD;KACnD;IACD,OAAO,EAAE,6DAA6D;IACtE,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,+BAA+B,GAAqB;IAC/D,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,8CAA8C;IACpD,WAAW,EAAE,gFAAgF;IAC7F,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,+CAA+C;IAC/D,QAAQ,EAAE;QACR,mDAAmD;KACpD;IACD,gBAAgB,EAAE;QAChB,kBAAkB;QAClB,YAAY;QACZ,QAAQ;QACR,YAAY;QACZ,kBAAkB;KACnB;IACD,OAAO,EAAE,iFAAiF;IAC1F,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IACzD,YAAY;IACZ,2BAA2B;IAC3B,wBAAwB;IACxB,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,wBAAwB;IACxB,yBAAyB;IACzB,+BAA+B;CAChC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"session-false-positive.test.d.ts","sourceRoot":"","sources":["../../../src/scanners/hipaa2026/session-false-positive.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
import { describe, it, expect, beforeEach, afterEach } from 'vitest';
|
|
2
|
+
import * as fs from 'fs/promises';
|
|
3
|
+
import * as os from 'os';
|
|
4
|
+
import * as path from 'path';
|
|
5
|
+
import { hipaa2026Scanner } from './index.js';
|
|
6
|
+
let tempDir = '';
|
|
7
|
+
async function scanFile(name, content) {
|
|
8
|
+
const file = path.join(tempDir, name);
|
|
9
|
+
await fs.writeFile(file, content, 'utf-8');
|
|
10
|
+
return hipaa2026Scanner.scan([file], { path: tempDir });
|
|
11
|
+
}
|
|
12
|
+
describe('HIPAA-SESSION-001 false-positive regression', () => {
|
|
13
|
+
beforeEach(async () => {
|
|
14
|
+
tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'vlayer-session-regression-'));
|
|
15
|
+
});
|
|
16
|
+
afterEach(async () => {
|
|
17
|
+
await fs.rm(tempDir, { recursive: true, force: true });
|
|
18
|
+
});
|
|
19
|
+
it('does not treat Supabase client/auth usage as local session configuration', async () => {
|
|
20
|
+
const findings = await scanFile('supabase.ts', `
|
|
21
|
+
import { createBrowserClient } from '@supabase/ssr';
|
|
22
|
+
const supabase = createBrowserClient(url, key);
|
|
23
|
+
const { data } = await supabase.auth.getUser();
|
|
24
|
+
`);
|
|
25
|
+
expect(findings.filter((finding) => finding.id === 'HIPAA-SESSION-001')).toHaveLength(0);
|
|
26
|
+
});
|
|
27
|
+
it('does not treat Stripe Checkout Session as an authentication session', async () => {
|
|
28
|
+
const findings = await scanFile('stripe.ts', `
|
|
29
|
+
const session = await stripe.checkout.sessions.create({ mode: 'subscription' });
|
|
30
|
+
if (event.type === 'checkout.session.completed') {
|
|
31
|
+
const checkoutSession = event.data.object;
|
|
32
|
+
console.log(checkoutSession.id);
|
|
33
|
+
}
|
|
34
|
+
`);
|
|
35
|
+
expect(findings.filter((finding) => finding.id === 'HIPAA-SESSION-001')).toHaveLength(0);
|
|
36
|
+
});
|
|
37
|
+
it('still detects express-session configuration without a timeout', async () => {
|
|
38
|
+
const findings = await scanFile('server.ts', `
|
|
39
|
+
import session from 'express-session';
|
|
40
|
+
app.use(session({ secret: process.env.SESSION_SECRET, resave: false }));
|
|
41
|
+
`);
|
|
42
|
+
expect(findings.some((finding) => finding.id === 'HIPAA-SESSION-001')).toBe(true);
|
|
43
|
+
});
|
|
44
|
+
});
|
|
45
|
+
//# sourceMappingURL=session-false-positive.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"session-false-positive.test.js","sourceRoot":"","sources":["../../../src/scanners/hipaa2026/session-false-positive.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,IAAI,OAAO,GAAG,EAAE,CAAC;AAEjB,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAe;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,aAAa,EACb;;;;OAIC,CACF,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,WAAW,EACX;;;;;;OAMC,CACF,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,WAAW,EACX;;;OAGC,CACF,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"dompurify-false-positive.test.d.ts","sourceRoot":"","sources":["../../../src/scanners/security/dompurify-false-positive.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
import { describe, it, expect, beforeEach, afterEach } from 'vitest';
|
|
2
|
+
import { mkdir, rm, writeFile } from 'fs/promises';
|
|
3
|
+
import { join } from 'path';
|
|
4
|
+
import { securityScanner } from './index.js';
|
|
5
|
+
const TEST_DIR = join(process.cwd(), '.tmp-security-sanitizer-regression');
|
|
6
|
+
async function scan(name, content) {
|
|
7
|
+
const file = join(TEST_DIR, name);
|
|
8
|
+
await writeFile(file, content, 'utf-8');
|
|
9
|
+
return securityScanner.scan([file], { path: TEST_DIR });
|
|
10
|
+
}
|
|
11
|
+
describe('dangerouslySetInnerHTML sanitizer regression', () => {
|
|
12
|
+
beforeEach(async () => {
|
|
13
|
+
await mkdir(TEST_DIR, { recursive: true });
|
|
14
|
+
});
|
|
15
|
+
afterEach(async () => {
|
|
16
|
+
await rm(TEST_DIR, { recursive: true, force: true });
|
|
17
|
+
});
|
|
18
|
+
it('still flags raw content passed to dangerouslySetInnerHTML', async () => {
|
|
19
|
+
const findings = await scan('raw.tsx', `export function Post({ content }: { content: string }) {
|
|
20
|
+
return <div dangerouslySetInnerHTML={{ __html: content }} />;
|
|
21
|
+
}`);
|
|
22
|
+
expect(findings.some((finding) => finding.id.includes('dangerous-innerhtml-react'))).toBe(true);
|
|
23
|
+
});
|
|
24
|
+
it('does not flag DOMPurify.sanitize passed directly to __html', async () => {
|
|
25
|
+
const findings = await scan('dompurify.tsx', `import DOMPurify from 'isomorphic-dompurify';
|
|
26
|
+
export function Post({ content }: { content: string }) {
|
|
27
|
+
return <div dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(content) }} />;
|
|
28
|
+
}`);
|
|
29
|
+
expect(findings.some((finding) => finding.id.includes('dangerous-innerhtml-react'))).toBe(false);
|
|
30
|
+
});
|
|
31
|
+
it('does not flag sanitizeHtml passed directly to __html', async () => {
|
|
32
|
+
const findings = await scan('sanitize-html.tsx', `import sanitizeHtml from 'sanitize-html';
|
|
33
|
+
export function Post({ content }: { content: string }) {
|
|
34
|
+
return <div dangerouslySetInnerHTML={{ __html: sanitizeHtml(content) }} />;
|
|
35
|
+
}`);
|
|
36
|
+
expect(findings.some((finding) => finding.id.includes('dangerous-innerhtml-react'))).toBe(false);
|
|
37
|
+
});
|
|
38
|
+
});
|
|
39
|
+
//# sourceMappingURL=dompurify-false-positive.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"dompurify-false-positive.test.js","sourceRoot":"","sources":["../../../src/scanners/security/dompurify-false-positive.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oCAAoC,CAAC,CAAC;AAE3E,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,OAAe;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,SAAS,EACT;;QAEE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,eAAe,EACf;;;QAGE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,mBAAmB,EACnB;;;QAGE,CACH,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAwB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAI7E,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAyOA,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAwB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAI7E,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAyOA,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,OA8D7B,CAAC"}
|
|
@@ -253,6 +253,13 @@ export const securityScanner = {
|
|
|
253
253
|
if (isTestFile && ['hardcoded-password', 'hardcoded-secret'].includes(pattern.id)) {
|
|
254
254
|
continue;
|
|
255
255
|
}
|
|
256
|
+
// A direct call to an established sanitizer at the __html sink is
|
|
257
|
+
// explicit mitigation. Do not suppress custom helpers or variables
|
|
258
|
+
// whose sanitization provenance cannot be established here.
|
|
259
|
+
if (pattern.id === 'dangerous-innerhtml-react' &&
|
|
260
|
+
/__html:\s*(?:(?:DOMPurify|domPurify|dompurify)\.sanitize|sanitizeHtml)\s*\(/i.test(line)) {
|
|
261
|
+
continue;
|
|
262
|
+
}
|
|
256
263
|
findings.push({
|
|
257
264
|
id: `security-${pattern.id}-${lineNum}`,
|
|
258
265
|
category: 'access-control',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,MAAM,iBAAiB,GAQzB;IACH,8BAA8B;IAC9B;QACE,KAAK,EAAE,yCAAyC;QAChD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,2GAA2G;QAC3H,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,oCAAoC;QAC3C,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,0DAA0D;QACvE,cAAc,EAAE,iEAAiE;QACjF,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,4DAA4D;QACzE,cAAc,EAAE,6DAA6D;QAC7E,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,KAAK,EAAE,4CAA4C;QACnD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,8DAA8D;QAC3E,cAAc,EAAE,8DAA8D;KAC/E;IAED,4BAA4B;IAC5B;QACE,KAAK,EAAE,oDAAoD;QAC3D,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,+EAA+E;QAC/F,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,+CAA+C;QACtD,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,qCAAqC;QAClD,cAAc,EAAE,yCAAyC;QACzD,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,6CAA6C;QACpD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2DAA2D;QACxE,cAAc,EAAE,mFAAmF;KACpG;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,4CAA4C;QACzD,cAAc,EAAE,8EAA8E;KAC/F;IACD;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,yCAAyC;QACtD,cAAc,EAAE,qDAAqD;KACtE;IACD;QACE,KAAK,EAAE,wDAAwD;QAC/D,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,kDAAkD;QAC/D,cAAc,EAAE,qEAAqE;KACtF;IACD;QACE,KAAK,EAAE,2CAA2C;QAClD,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,sDAAsD;QACnE,cAAc,EAAE,gEAAgE;KACjF;IAED,+BAA+B;IAC/B;QACE,KAAK,EAAE,mCAAmC;QAC1C,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,qEAAqE;QAClF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,iCAAiC;QACxC,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wEAAwE;QACrF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,mEAAmE;QAChF,cAAc,EAAE,4DAA4D;KAC7E;IAED,oCAAoC;IACpC;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,wFAAwF;QACxG,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,KAAK,EAAE,kDAAkD;QACzD,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,uEAAuE;KACxF;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iEAAiE;QAC9E,cAAc,EAAE,0EAA0E;KAC3F;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,kEAAkE;QAC/E,cAAc,EAAE,iEAAiE;KAClF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,QAAiB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,yEAAyE;KAC1F;IAED,8BAA8B;IAC9B;QACE,KAAK,EAAE,qEAAqE;QAC5E,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,gFAAgF;QAC7F,cAAc,EAAE,0FAA0F;QAC1G,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,gJAAgJ;QACvJ,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,oFAAoF;QACpG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,8CAA8C;QACrD,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,mDAAmD;QAC1D,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,4DAA4D;QAC5E,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,0DAA0D;QACjE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,uEAAuE;QACpF,cAAc,EAAE,wEAAwE;QACxF,OAAO,EAAE,wBAAwB;KAClC;IAED,0BAA0B;IAC1B;QACE,KAAK,EAAE,wCAAwC;QAC/C,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,+EAA+E;QAC5F,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EAAE,+DAA+D;QAC5E,cAAc,EAAE,8EAA8E;QAC9F,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAY;IACtC,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,gBAAgB,EAAE,wCAAwC;IAEpE,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,oDAAoD;YACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEvG,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAE5B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,0CAA0C;4BAC1C,IAAI,UAAU,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gCAClF,SAAS;4BACX,CAAC;4BAED,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,YAAY,OAAO,CAAC,EAAE,IAAI,OAAO,EAAE;gCACvC,QAAQ,EAAE,gBAAgB;gCAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gCACpB,WAAW,EAAE,OAAO,CAAC,WAAW;gCAChC,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,OAAO,CAAC,cAAc;gCACtC,cAAc,EAAE,6BAA6B;gCAC7C,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;gCACrD,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,MAAM,iBAAiB,GAQzB;IACH,8BAA8B;IAC9B;QACE,KAAK,EAAE,yCAAyC;QAChD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,2GAA2G;QAC3H,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,oCAAoC;QAC3C,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,0DAA0D;QACvE,cAAc,EAAE,iEAAiE;QACjF,OAAO,EAAE,oBAAoB;KAC9B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,4DAA4D;QACzE,cAAc,EAAE,6DAA6D;QAC7E,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,KAAK,EAAE,4CAA4C;QACnD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,8DAA8D;QAC3E,cAAc,EAAE,8DAA8D;KAC/E;IAED,4BAA4B;IAC5B;QACE,KAAK,EAAE,oDAAoD;QAC3D,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,wDAAwD;QACrE,cAAc,EAAE,+EAA+E;QAC/F,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,+CAA+C;QACtD,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,qCAAqC;QAClD,cAAc,EAAE,yCAAyC;QACzD,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,6CAA6C;QACpD,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2DAA2D;QACxE,cAAc,EAAE,mFAAmF;KACpG;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,4CAA4C;QACzD,cAAc,EAAE,8EAA8E;KAC/F;IACD;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,yCAAyC;QACtD,cAAc,EAAE,qDAAqD;KACtE;IACD;QACE,KAAK,EAAE,wDAAwD;QAC/D,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,kDAAkD;QAC/D,cAAc,EAAE,qEAAqE;KACtF;IACD;QACE,KAAK,EAAE,2CAA2C;QAClD,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,sDAAsD;QACnE,cAAc,EAAE,gEAAgE;KACjF;IAED,+BAA+B;IAC/B;QACE,KAAK,EAAE,mCAAmC;QAC1C,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,qEAAqE;QAClF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,iCAAiC;QACxC,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wEAAwE;QACrF,cAAc,EAAE,4DAA4D;KAC7E;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,mEAAmE;QAChF,cAAc,EAAE,4DAA4D;KAC7E;IAED,oCAAoC;IACpC;QACE,KAAK,EAAE,+BAA+B;QACtC,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,wFAAwF;QACxG,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,KAAK,EAAE,kDAAkD;QACzD,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,uEAAuE;KACxF;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iEAAiE;QAC9E,cAAc,EAAE,0EAA0E;KAC3F;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,kEAAkE;QAC/E,cAAc,EAAE,iEAAiE;KAClF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,QAAiB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,yEAAyE;KAC1F;IAED,8BAA8B;IAC9B;QACE,KAAK,EAAE,qEAAqE;QAC5E,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,gFAAgF;QAC7F,cAAc,EAAE,0FAA0F;QAC1G,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,gJAAgJ;QACvJ,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,0EAA0E;QACvF,cAAc,EAAE,oFAAoF;QACpG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,8CAA8C;QACrD,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,mFAAmF;QAChG,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,KAAK,EAAE,mDAAmD;QAC1D,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,oEAAoE;QACjF,cAAc,EAAE,4DAA4D;QAC5E,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,KAAK,EAAE,0DAA0D;QACjE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAmB;QAC7B,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,uEAAuE;QACpF,cAAc,EAAE,wEAAwE;QACxF,OAAO,EAAE,wBAAwB;KAClC;IAED,0BAA0B;IAC1B;QACE,KAAK,EAAE,wCAAwC;QAC/C,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,+EAA+E;QAC5F,cAAc,EAAE,iFAAiF;QACjG,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,KAAK,EAAE,uCAAuC;QAC9C,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,MAAe;QACzB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EAAE,+DAA+D;QAC5E,cAAc,EAAE,8EAA8E;QAC9F,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAY;IACtC,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,gBAAgB,EAAE,wCAAwC;IAEpE,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,oDAAoD;YACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEvG,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAE5B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;wBACxC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,0CAA0C;4BAC1C,IAAI,UAAU,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gCAClF,SAAS;4BACX,CAAC;4BAED,kEAAkE;4BAClE,mEAAmE;4BACnE,4DAA4D;4BAC5D,IACE,OAAO,CAAC,EAAE,KAAK,2BAA2B;gCAC1C,8EAA8E,CAAC,IAAI,CAAC,IAAI,CAAC,EACzF,CAAC;gCACD,SAAS;4BACX,CAAC;4BAED,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,YAAY,OAAO,CAAC,EAAE,IAAI,OAAO,EAAE;gCACvC,QAAQ,EAAE,gBAAgB;gCAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gCACpB,WAAW,EAAE,OAAO,CAAC,WAAW;gCAChC,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,OAAO,CAAC,cAAc;gCACtC,cAAc,EAAE,6BAA6B;gCAC7C,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;gCACrD,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "verification-layer",
|
|
3
|
-
"version": "0.27.
|
|
3
|
+
"version": "0.27.11",
|
|
4
4
|
"description": "Open-source HIPAA compliance scanner for healthcare code. 143 rules, 5 HIPAA categories. CLI + CI/CD + VS Code.",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|