vibe-guard 1.1.2 → 1.1.3

package/dist/rules/ai-data-leakage-prevention.d.ts

@@ -0,0 +1,11 @@
+import { BaseRule, FileContent, SecurityIssue } from '../types';
+export declare class AiDataLeakagePreventionRule extends BaseRule {
+    readonly name = "ai-data-leakage-prevention";
+    readonly description = "Detects potential data leakage in AI systems and training data exposure";
+    readonly severity: "high";
+    private readonly leakagePatterns;
+    private readonly falsePositivePatterns;
+    check(fileContent: FileContent): SecurityIssue[];
+    private isFalsePositive;
+}
+//# sourceMappingURL=ai-data-leakage-prevention.d.ts.map

package/dist/rules/ai-data-leakage-prevention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-data-leakage-prevention.d.ts","sourceRoot":"","sources":["../../src/rules/ai-data-leakage-prevention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,2BAA4B,SAAQ,QAAQ;IACvD,QAAQ,CAAC,IAAI,gCAAgC;IAC7C,QAAQ,CAAC,WAAW,6EAA6E;IACjG,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAmB9B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAsBpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA0BhD,OAAO,CAAC,eAAe;CAGxB"}

package/dist/rules/ai-data-leakage-prevention.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiDataLeakagePreventionRule = void 0;
+const types_1 = require("../types");
+class AiDataLeakagePreventionRule extends types_1.BaseRule {
+    constructor() {
+        super(...arguments);
+        this.name = 'ai-data-leakage-prevention';
+        this.description = 'Detects potential data leakage in AI systems and training data exposure';
+        this.severity = 'high';
+        this.leakagePatterns = [
+            // Training data exposure
+            { pattern: /(?:training[_-]?data|dataset|corpus).*?(?:expose|leak|public|unrestricted)/gi, type: 'Training Data Exposure' },
+            { pattern: /(?:sensitive|confidential|proprietary).*?(?:training|dataset|corpus)/gi, type: 'Sensitive Training Data' },
+            // Model output containing sensitive data
+            { pattern: /(?:model|ai|llm).*?(?:output|response|generation).*?(?:sensitive|confidential|proprietary)/gi, type: 'Sensitive Data in AI Output' },
+            // Unfiltered AI responses
+            { pattern: /(?:ai|model|llm).*?(?:unfiltered|unrestricted|raw).*?(?:output|response)/gi, type: 'Unfiltered AI Output' },
+            // Data classification bypass
+            { pattern: /(?:bypass|ignore|skip).*?(?:classification|label|sensitivity)/gi, type: 'Data Classification Bypass' },
+            // AI model containing sensitive data
+            { pattern: /(?:model|weights|parameters).*?(?:contain|include|embed).*?(?:sensitive|confidential)/gi, type: 'Sensitive Data in Model' },
+            // Unencrypted AI artifacts
+            { pattern: /(?:model|weights|artifacts).*?(?:unencrypted|plaintext|raw)/gi, type: 'Unencrypted AI Artifacts' }
+        ];
+        this.falsePositivePatterns = [
+            /example/i,
+            /demo/i,
+            /test/i,
+            /mock/i,
+            /sample/i,
+            /placeholder/i,
+            /comment/i,
+            /todo/i,
+            /fixme/i,
+            /\/\/.*/i,
+            /#.*/i,
+            /\/\*.*\*\//i,
+            /<!--.*-->/i,
+            /development/i,
+            /dev/i,
+            /staging/i,
+            /localhost/i,
+            /encrypt/i,
+            /protect/i,
+            /secure/i,
+            /filter/i
+        ];
+    }
+    check(fileContent) {
+        const issues = [];
+        for (const { pattern, type } of this.leakagePatterns) {
+            const matches = this.findMatches(fileContent.content, pattern);
+            for (const { line, column, lineContent } of matches) {
+                if (this.isFalsePositive(lineContent)) {
+                    continue;
+                }
+                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `High: ${type} detected`, `Implement data loss prevention (DLP) policies. Use sensitivity labels, output filtering, and encryption for AI artifacts. Monitor AI outputs for sensitive data exposure.`, 'high'));
+            }
+        }
+        return issues;
+    }
+    isFalsePositive(lineContent) {
+        return this.falsePositivePatterns.some(pattern => pattern.test(lineContent));
+    }
+}
+exports.AiDataLeakagePreventionRule = AiDataLeakagePreventionRule;
+//# sourceMappingURL=ai-data-leakage-prevention.js.map

package/dist/rules/ai-data-leakage-prevention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-data-leakage-prevention.js","sourceRoot":"","sources":["../../src/rules/ai-data-leakage-prevention.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,2BAA4B,SAAQ,gBAAQ;IAAzD;;QACW,SAAI,GAAG,4BAA4B,CAAC;QACpC,gBAAW,GAAG,yEAAyE,CAAC;QACxF,aAAQ,GAAG,MAAe,CAAC;QAEnB,oBAAe,GAAG;YACjC,yBAAyB;YACzB,EAAE,OAAO,EAAE,8EAA8E,EAAE,IAAI,EAAE,wBAAwB,EAAE;YAC3H,EAAE,OAAO,EAAE,wEAAwE,EAAE,IAAI,EAAE,yBAAyB,EAAE;YAEtH,yCAAyC;YACzC,EAAE,OAAO,EAAE,8FAA8F,EAAE,IAAI,EAAE,6BAA6B,EAAE;YAEhJ,0BAA0B;YAC1B,EAAE,OAAO,EAAE,4EAA4E,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAEvH,6BAA6B;YAC7B,EAAE,OAAO,EAAE,iEAAiE,EAAE,IAAI,EAAE,4BAA4B,EAAE;YAElH,qCAAqC;YACrC,EAAE,OAAO,EAAE,yFAAyF,EAAE,IAAI,EAAE,yBAAyB,EAAE;YAEvI,2BAA2B;YAC3B,EAAE,OAAO,EAAE,+DAA+D,EAAE,IAAI,EAAE,0BAA0B,EAAE;SAC/G,CAAC;QAEe,0BAAqB,GAAG;YACvC,UAAU;YACV,OAAO;YACP,OAAO;YACP,OAAO;YACP,SAAS;YACT,cAAc;YACd,UAAU;YACV,OAAO;YACP,QAAQ;YACR,SAAS;YACT,MAAM;YACN,aAAa;YACb,YAAY;YACZ,cAAc;YACd,MAAM;YACN,UAAU;YACV,YAAY;YACZ,UAAU;YACV,UAAU;YACV,SAAS;YACT,SAAS;SACV,CAAC;IA+BJ,CAAC;IA7BC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,SAAS,IAAI,WAAW,EACxB,2KAA2K,EAC3K,MAAM,CACP,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,WAAmB;QACzC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF;AA/ED,kEA+EC"}

package/dist/rules/ai-generated-code-validation.d.ts

@@ -0,0 +1,17 @@
+import { BaseRule, FileContent, SecurityIssue } from '../types';
+export declare class AiGeneratedCodeValidationRule extends BaseRule {
+    readonly name = "ai-generated-code-validation";
+    readonly description = "Detects security issues in AI-generated code and validates its safety";
+    readonly severity: "high";
+    private readonly aiCodePatterns;
+    private readonly falsePositivePatterns;
+    private readonly contextPatterns;
+    check(fileContent: FileContent): SecurityIssue[];
+    private isFalsePositive;
+    private isDevelopmentContext;
+    private isTestFile;
+    private adjustSeverityForContext;
+    private findMultiLineMatches;
+    private getSuggestion;
+}
+//# sourceMappingURL=ai-generated-code-validation.d.ts.map

package/dist/rules/ai-generated-code-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-generated-code-validation.d.ts","sourceRoot":"","sources":["../../src/rules/ai-generated-code-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,6BAA8B,SAAQ,QAAQ;IACzD,QAAQ,CAAC,IAAI,kCAAkC;IAC/C,QAAQ,CAAC,WAAW,2EAA2E;IAC/F,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CA+B7B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAwDpC;IAEF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAoB9B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAkDhD,OAAO,CAAC,eAAe;IA4BvB,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,wBAAwB;IAahC,OAAO,CAAC,oBAAoB;IAyC5B,OAAO,CAAC,aAAa;CAatB"}

package/dist/rules/ai-generated-code-validation.js

@@ -0,0 +1,225 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiGeneratedCodeValidationRule = void 0;
+const types_1 = require("../types");
+class AiGeneratedCodeValidationRule extends types_1.BaseRule {
+    constructor() {
+        super(...arguments);
+        this.name = 'ai-generated-code-validation';
+        this.description = 'Detects security issues in AI-generated code and validates its safety';
+        this.severity = 'high';
+        this.aiCodePatterns = [
+            {
+                pattern: /(?:generated[_-]?by|ai[_-]?generated|copilot|chatgpt|gpt[_-]?generated|claude[_-]?generated)/gi,
+                type: 'AI-Generated Code',
+                severity: 'medium'
+            },
+            {
+                pattern: /(?:ai|generated|copilot).*?(?:unvalidated|unreviewed|unchecked)/gi,
+                type: 'Unvalidated AI Code',
+                severity: 'high'
+            },
+            {
+                pattern: /(?:ai|generated|copilot).*?(?:no[_-]?review|without[_-]?review|skip[_-]?review)/gi,
+                type: 'AI Code Without Security Review',
+                severity: 'high'
+            },
+            {
+                pattern: /(?:ai|generated|copilot).*?(?:vulnerable|insecure|unsafe)/gi,
+                type: 'Vulnerable AI-Generated Code',
+                severity: 'critical'
+            },
+            {
+                pattern: /(?:ai|generated|copilot).*?(?:bypass|skip|ignore).*?(?:security|validation)/gi,
+                type: 'AI Code Bypassing Security',
+                severity: 'critical'
+            },
+            {
+                pattern: /(?:prompt|input).*?(?:ignore|forget|system|assistant|user).*?(?:previous|above|instructions)/gis,
+                type: 'Multi-Line AI Injection',
+                severity: 'critical'
+            }
+        ];
+        this.falsePositivePatterns = [
+            // Basic false positives
+            /example/i,
+            /demo/i,
+            /test/i,
+            /mock/i,
+            /sample/i,
+            /placeholder/i,
+            /comment/i,
+            /todo/i,
+            /fixme/i,
+            /\/\/.*/i,
+            /#.*/i,
+            /\/\*.*\*\//i,
+            /<!--.*-->/i,
+            /development/i,
+            /dev/i,
+            /staging/i,
+            /localhost/i,
+            // Security-related false positives
+            /validate/i,
+            /review/i,
+            /secure/i,
+            /safe/i,
+            /sanitize/i,
+            /escape/i,
+            /filter/i,
+            /protect/i,
+            // Documentation and examples
+            /documentation/i,
+            /readme/i,
+            /docs/i,
+            /example[_-]?code/i,
+            /sample[_-]?code/i,
+            /demo[_-]?code/i,
+            // Test files and directories
+            /test[_-]?files?/i,
+            /test[_-]?data/i,
+            /test[_-]?cases/i,
+            /spec[_-]?files?/i,
+            /__tests__/i,
+            /\.test\./i,
+            /\.spec\./i,
+            // Configuration and setup
+            /config[_-]?example/i,
+            /setup[_-]?example/i,
+            /template[_-]?example/i,
+            // Comments indicating safe usage
+            /\/\/.*(?:safe|secure|validated|reviewed)/i,
+            /#.*(?:safe|secure|validated|reviewed)/i,
+            /\/\*.*(?:safe|secure|validated|reviewed).*\*\//i
+        ];
+        this.contextPatterns = [
+            // Development environment indicators
+            /NODE_ENV\s*[:=]\s*['"`]development['"`]/i,
+            /process\.env\.NODE_ENV\s*[:=]\s*['"`]development['"`]/i,
+            /DEBUG\s*[:=]\s*['"`]true['"`]/i,
+            /debug\s*[:=]\s*true/i,
+            // Test environment indicators
+            /NODE_ENV\s*[:=]\s*['"`]test['"`]/i,
+            /process\.env\.NODE_ENV\s*[:=]\s*['"`]test['"`]/i,
+            /TESTING\s*[:=]\s*['"`]true['"`]/i,
+            /testing\s*[:=]\s*true/i,
+            // Local development indicators
+            /localhost/i,
+            /127\.0\.0\.1/i,
+            /0\.0\.0\.0/i,
+            /dev\./i,
+            /staging\./i,
+            /test\./i
+        ];
+    }
+    check(fileContent) {
+        const issues = [];
+        const isDevelopmentContext = this.isDevelopmentContext(fileContent.content);
+        const isTestFile = this.isTestFile(fileContent.path);
+        for (const { pattern, type, severity } of this.aiCodePatterns) {
+            let matches;
+            // Handle multi line patterns differently
+            if (pattern.flags.includes('s')) {
+                matches = this.findMultiLineMatches(fileContent.content, pattern);
+            }
+            else {
+                matches = this.findMatches(fileContent.content, pattern);
+            }
+            for (const { match, line, column, lineContent } of matches) {
+                const matchedText = match[0];
+                // Enhanced false positive detection
+                if (this.isFalsePositive(lineContent, matchedText, fileContent.path)) {
+                    continue;
+                }
+                // Context-aware severity adjustment
+                let adjustedSeverity = severity;
+                if (isDevelopmentContext || isTestFile) {
+                    adjustedSeverity = this.adjustSeverityForContext(severity);
+                }
+                if (adjustedSeverity === 'medium' && isDevelopmentContext) {
+                    continue;
+                }
+                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `${adjustedSeverity.charAt(0).toUpperCase() + adjustedSeverity.slice(1)}: ${type} detected`, this.getSuggestion(type, isDevelopmentContext, isTestFile), adjustedSeverity));
+            }
+        }
+        return issues;
+    }
+    isFalsePositive(lineContent, matchedText, filePath) {
+        if (this.falsePositivePatterns.some(pattern => pattern.test(lineContent))) {
+            return true;
+        }
+        if (filePath.match(/\.(md|txt|rst|adoc)$/i)) {
+            return true;
+        }
+        if (filePath.match(/\.(example|sample|template)\./i)) {
+            return true;
+        }
+        if (lineContent.trim().startsWith('//') || lineContent.trim().startsWith('#') ||
+            lineContent.trim().startsWith('/*') || lineContent.trim().startsWith('<!--')) {
+            return true;
+        }
+        // Check for variable assignments that are clearly examples
+        if (matchedText.match(/['"`](example|demo|test|sample|placeholder)['"`]/i) !== null) {
+            return true;
+        }
+        return false;
+    }
+    isDevelopmentContext(content) {
+        return this.contextPatterns.some(pattern => pattern.test(content));
+    }
+    isTestFile(filePath) {
+        return filePath.includes('test') ||
+            filePath.includes('spec') ||
+            filePath.includes('__tests__') ||
+            filePath.match(/\.(test|spec)\./i) !== null;
+    }
+    adjustSeverityForContext(originalSeverity) {
+        switch (originalSeverity) {
+            case 'critical':
+                return 'high';
+            case 'high':
+                return 'medium';
+            case 'medium':
+                return 'medium'; // Keep medium as minimum
+            default:
+                return originalSeverity;
+        }
+    }
+    findMultiLineMatches(content, pattern) {
+        const matches = [];
+        let match;
+        const globalPattern = new RegExp(pattern.source, pattern.flags.includes('g') ? pattern.flags : pattern.flags + 'g');
+        while ((match = globalPattern.exec(content)) !== null) {
+            // Find the line number for the match
+            const matchIndex = match.index ?? 0;
+            const beforeMatch = content.substring(0, matchIndex);
+            const lineNumber = beforeMatch.split('\n').length;
+            const lineStart = beforeMatch.lastIndexOf('\n') + 1;
+            const columnNumber = matchIndex - lineStart + 1;
+            // Get the line content (first line of multi-line match)
+            const lines = content.split('\n');
+            const lineContent = lines[lineNumber - 1] || '';
+            matches.push({
+                match,
+                line: lineNumber,
+                column: columnNumber,
+                lineContent
+            });
+            if (!pattern.flags.includes('g'))
+                break;
+        }
+        return matches;
+    }
+    getSuggestion(_type, isDevelopment, isTestFile) {
+        const baseSuggestion = `Always validate and review AI-generated code for security vulnerabilities. Implement automated security scanning and manual code review processes.`;
+        if (isDevelopment) {
+            return `${baseSuggestion} Consider using a separate security review process for production deployments.`;
+        }
+        if (isTestFile) {
+            return `${baseSuggestion} Ensure test files don't contain production security bypasses.`;
+        }
+        return baseSuggestion;
+    }
+}
+exports.AiGeneratedCodeValidationRule = AiGeneratedCodeValidationRule;
+//# sourceMappingURL=ai-generated-code-validation.js.map

package/dist/rules/ai-generated-code-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-generated-code-validation.js","sourceRoot":"","sources":["../../src/rules/ai-generated-code-validation.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,6BAA8B,SAAQ,gBAAQ;IAA3D;;QACW,SAAI,GAAG,8BAA8B,CAAC;QACtC,gBAAW,GAAG,uEAAuE,CAAC;QACtF,aAAQ,GAAG,MAAe,CAAC;QAEnB,mBAAc,GAAG;YAChC;gBACE,OAAO,EAAE,gGAAgG;gBACzG,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAiB;aAC5B;YACD;gBACE,OAAO,EAAE,mEAAmE;gBAC5E,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,mFAAmF;gBAC5F,IAAI,EAAE,iCAAiC;gBACvC,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,6DAA6D;gBACtE,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,+EAA+E;gBACxF,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,iGAAiG;gBAC1G,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,UAAmB;aAC9B;SACF,CAAC;QAEe,0BAAqB,GAAG;YACvC,wBAAwB;YACxB,UAAU;YACV,OAAO;YACP,OAAO;YACP,OAAO;YACP,SAAS;YACT,cAAc;YACd,UAAU;YACV,OAAO;YACP,QAAQ;YACR,SAAS;YACT,MAAM;YACN,aAAa;YACb,YAAY;YACZ,cAAc;YACd,MAAM;YACN,UAAU;YACV,YAAY;YAEZ,mCAAmC;YACnC,WAAW;YACX,SAAS;YACT,SAAS;YACT,OAAO;YACP,WAAW;YACX,SAAS;YACT,SAAS;YACT,UAAU;YAEV,6BAA6B;YAC7B,gBAAgB;YAChB,SAAS;YACT,OAAO;YACP,mBAAmB;YACnB,kBAAkB;YAClB,gBAAgB;YAEhB,6BAA6B;YAC7B,kBAAkB;YAClB,gBAAgB;YAChB,iBAAiB;YACjB,kBAAkB;YAClB,YAAY;YACZ,WAAW;YACX,WAAW;YAEX,0BAA0B;YAC1B,qBAAqB;YACrB,oBAAoB;YACpB,uBAAuB;YAEvB,iCAAiC;YACjC,2CAA2C;YAC3C,wCAAwC;YACxC,iDAAiD;SAClD,CAAC;QAEe,oBAAe,GAAG;YACjC,qCAAqC;YACrC,0CAA0C;YAC1C,wDAAwD;YACxD,gCAAgC;YAChC,sBAAsB;YAEtB,8BAA8B;YAC9B,mCAAmC;YACnC,iDAAiD;YACjD,kCAAkC;YAClC,wBAAwB;YAExB,+BAA+B;YAC/B,YAAY;YACZ,eAAe;YACf,aAAa;YACb,QAAQ;YACR,YAAY;YACZ,SAAS;SACV,CAAC;IA8JJ,CAAC;IA5JC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAErD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9D,IAAI,OAAO,CAAC;YAEZ,yCAAyC;YACzC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YAED,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE7B,oCAAoC;gBACpC,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBAED,oCAAoC;gBACpC,IAAI,gBAAgB,GAAG,QAAQ,CAAC;gBAChC,IAAI,oBAAoB,IAAI,UAAU,EAAE,CAAC;oBACvC,gBAAgB,GAAG,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBAC7D,CAAC;gBAGD,IAAI,gBAAgB,KAAK,QAAQ,IAAI,oBAAoB,EAAE,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,WAAW,EAC3F,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,UAAU,CAAC,EAC1D,gBAAgB,CACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,WAAmB,EAAE,WAAmB,EAAE,QAAgB;QAEhF,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YACzE,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2DAA2D;QAC3D,IAAI,WAAW,CAAC,KAAK,CAAC,mDAAmD,CAAC,KAAK,IAAI,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAAC,OAAe;QAC1C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC9B,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAC;IACrD,CAAC;IAEO,wBAAwB,CAAC,gBAAgD;QAC/E,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,UAAU;gBACb,OAAO,MAAM,CAAC;YAChB,KAAK,MAAM;gBACT,OAAO,QAAQ,CAAC;YAClB,KAAK,QAAQ;gBACX,OAAO,QAAQ,CAAC,CAAC,yBAAyB;YAC5C;gBACE,OAAO,gBAAgB,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,OAAe,EAAE,OAAe;QAM3D,MAAM,OAAO,GAKR,EAAE,CAAC;QAER,IAAI,KAA8B,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QAEpH,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,qCAAqC;YACrC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAClD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC;YAEhD,wDAAwD;YACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAEhD,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,YAAY;gBACpB,WAAW;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM;QAC1C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,KAAa,EAAE,aAAsB,EAAE,UAAmB;QAC9E,MAAM,cAAc,GAAG,oJAAoJ,CAAC;QAE5K,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,GAAG,cAAc,gFAAgF,CAAC;QAC3G,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,cAAc,gEAAgE,CAAC;QAC3F,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;CACF;AAlRD,sEAkRC"}

package/dist/rules/broken-access-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broken-access-control.d.ts","sourceRoot":"","sources":["../../src/rules/broken-access-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,uBAAwB,SAAQ,QAAQ;IACnD,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,gFAAgF;IACpG,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAgDpC;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CA2BpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAkEhD,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,eAAe;IAiCvB,OAAO,CAAC,sBAAsB;IAkB9B,OAAO,CAAC,oBAAoB;CAoB7B"}
+{"version":3,"file":"broken-access-control.d.ts","sourceRoot":"","sources":["../../src/rules/broken-access-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,uBAAwB,SAAQ,QAAQ;IACnD,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,gFAAgF;IACpG,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAuCpC;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CA2BpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAkEhD,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,eAAe;IAiCvB,OAAO,CAAC,sBAAsB;IAkB9B,OAAO,CAAC,oBAAoB;CAoB7B"}

package/dist/rules/broken-access-control.js

@@ -10,16 +10,7 @@ class BrokenAccessControlRule extends types_1.BaseRule {
         this.severity = 'high';
         this.accessControlPatterns = [
             // Missing authorization checks in routes - Edge cases
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/admin[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Admin route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/user[^'"`]*\/[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'User-specific route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/api[^'"`]*\/[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'API route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/dashboard[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Dashboard route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/settings[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Settings route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/profile[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Profile route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/account[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Account route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/billing[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Billing route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/payment[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Payment route without authorization' },
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/order[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Order route without authorization' },
+            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]*\/(?:admin|user|api|dashboard|settings|profile|account|billing|payment|order)[^'"`]*['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware|.*authorize|.*permission|.*guard|.*protect)/gi, type: 'Protected route without authorization' },
             // Direct object references without ownership checks
             { pattern: /findById\s*\(\s*(?:req\.|request\.|input\.|params\.|query\.|body\.)/gi, type: 'Direct object reference without ownership check' },
             { pattern: /findOne\s*\(\s*\{[^}]*id\s*:\s*(?:req\.|request\.|input\.|params\.|query\.|body\.)/gi, type: 'Database query without ownership check' },

package/dist/rules/broken-access-control.js.map

@@ -1 +1 @@
-{"version":3,"file":"broken-access-control.js","sourceRoot":"","sources":["../../src/rules/broken-access-control.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,uBAAwB,SAAQ,gBAAQ;IAArD;;QACW,SAAI,GAAG,uBAAuB,CAAC;QAC/B,gBAAW,GAAG,4EAA4E,CAAC;QAC3F,aAAQ,GAAG,MAAe,CAAC;QAEnB,0BAAqB,GAAG;YACvC,sDAAsD;YACtD,EAAE,OAAO,EAAE,uKAAuK,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAC/N,EAAE,OAAO,EAAE,+KAA+K,EAAE,IAAI,EAAE,2CAA2C,EAAE;YAC/O,EAAE,OAAO,EAAE,8KAA8K,EAAE,IAAI,EAAE,iCAAiC,EAAE;YACpO,EAAE,OAAO,EAAE,2KAA2K,EAAE,IAAI,EAAE,uCAAuC,EAAE;YACvO,EAAE,OAAO,EAAE,0KAA0K,EAAE,IAAI,EAAE,sCAAsC,EAAE;YACrO,EAAE,OAAO,EAAE,yKAAyK,EAAE,IAAI,EAAE,qCAAqC,EAAE;YACnO,EAAE,OAAO,EAAE,yKAAyK,EAAE,IAAI,EAAE,qCAAqC,EAAE;YACnO,EAAE,OAAO,EAAE,yKAAyK,EAAE,IAAI,EAAE,qCAAqC,EAAE;YACnO,EAAE,OAAO,EAAE,yKAAyK,EAAE,IAAI,EAAE,qCAAqC,EAAE;YACnO,EAAE,OAAO,EAAE,uKAAuK,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAE/N,oDAAoD;YACpD,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,iDAAiD,EAAE;YAC7I,EAAE,OAAO,EAAE,sFAAsF,EAAE,IAAI,EAAE,wCAAwC,EAAE;YACnJ,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAChJ,EAAE,OAAO,EAAE,uFAAuF,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAE/I,oCAAoC;YACpC,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAC/H,EAAE,OAAO,EAAE,wEAAwE,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAC/H,EAAE,OAAO,EAAE,qEAAqE,EAAE,IAAI,EAAE,qCAAqC,EAAE;YAE/H,2CAA2C;YAC3C,EAAE,OAAO,EAAE,oGAAoG,EAAE,IAAI,EAAE,sCAAsC,EAAE;YAC/J,EAAE,OAAO,EAAE,uFAAuF,EAAE,IAAI,EAAE,wCAAwC,EAAE;YACpJ,EAAE,OAAO,EAAE,wFAAwF,EAAE,IAAI,EAAE,sCAAsC,EAAE;YAEnJ,oCAAoC;YACpC,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC1I,EAAE,OAAO,EAAE,sFAAsF,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAElJ,uBAAuB;YACvB,EAAE,OAAO,EAAE,+FAA+F,EAAE,IAAI,EAAE,sCAAsC,EAAE;YAC1J,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAErJ,eAAe;YACf,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,0CAA0C,EAAE;YACxI,EAAE,OAAO,EAAE,6EAA6E,EAAE,IAAI,EAAE,0CAA0C,EAAE;YAE5I,kBAAkB;YAClB,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,6CAA6C,EAAE;YACzI,EAAE,OAAO,EAAE,mEAAmE,EAAE,IAAI,EAAE,wCAAwC,EAAE;YAEhI,gBAAgB;YAChB,EAAE,OAAO,EAAE,oHAAoH,EAAE,IAAI,EAAE,2CAA2C,EAAE;YACpL,EAAE,OAAO,EAAE,mFAAmF,EAAE,IAAI,EAAE,6CAA6C,EAAE;SACtJ,CAAC;QAEe,0BAAqB,GAAG;YACvC,+BAA+B;YAC/B,OAAO;YACP,YAAY;YACZ,aAAa;YACb,OAAO;YACP,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,iBAAiB;YACjB,kBAAkB;YAClB,kBAAkB;YAClB,aAAa;YACb,QAAQ;YACR,UAAU;YACV,SAAS;YACT,aAAa;YACb,gBAAgB;YAChB,WAAW;YACX,UAAU;YACV,QAAQ;YACR,MAAM;SACP,CAAC;IA+IJ,CAAC;IA7IC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,iCAAiC;QACjC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC7D,qEAAqE;YACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAEpB,sDAAsD;gBACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,EACnC,IAAI,EACJ,yEAAyE,EACzE,8IAA8I,CAC/I,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,mDAAmD;gBACnD,IAAI,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACzG,SAAS;gBACX,CAAC;gBAED,yCAAyC;gBACzC,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACrH,SAAS;gBACX,CAAC;gBAED,yDAAyD;gBACzD,IAAI,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBAC1G,SAAS;gBACX,CAAC;gBAED,iDAAiD;gBACjD,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACxG,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,2BAA2B,IAAI,EAAE,EACjC,8IAA8I,CAC/I,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAAC,IAAY;QACxC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,qBAAqB;QACrB,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAAG;YACtB,UAAU,EAAG,qBAAqB;YAClC,OAAO,EAAM,uBAAuB;YACpC,QAAQ,EAAK,cAAc;YAC3B,QAAQ,EAAK,qBAAqB;YAClC,UAAU,EAAG,eAAe;YAC5B,UAAU,EAAG,iBAAiB;YAC9B,QAAQ,CAAK,qBAAqB;SACnC,CAAC;QAEF,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;YACX,WAAW;SACZ,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,sBAAsB,CAAC,IAAY;QACzC,+DAA+D;QAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qEAAqE;QACrE,MAAM,cAAc,GAAG;YACrB,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,6FAA6F;YAC7F,mEAAmE;SACpE,CAAC;QAEF,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,4DAA4D;QAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG;YAClB,cAAc;YACd,MAAM;YACN,UAAU;YACV,OAAO;YACP,YAAY;YACZ,eAAe;YACf,uCAAuC;YACvC,mBAAmB;SACpB,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAjOD,0DAiOC"}
+{"version":3,"file":"broken-access-control.js","sourceRoot":"","sources":["../../src/rules/broken-access-control.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,uBAAwB,SAAQ,gBAAQ;IAArD;;QACW,SAAI,GAAG,uBAAuB,CAAC;QAC/B,gBAAW,GAAG,4EAA4E,CAAC;QAC3F,aAAQ,GAAG,MAAe,CAAC;QAEnB,0BAAqB,GAAG;YACvC,sDAAsD;YACtD,EAAE,OAAO,EAAE,6OAA6O,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAEzS,oDAAoD;YACpD,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,iDAAiD,EAAE;YAC7I,EAAE,OAAO,EAAE,sFAAsF,EAAE,IAAI,EAAE,wCAAwC,EAAE;YACnJ,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAChJ,EAAE,OAAO,EAAE,uFAAuF,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAE/I,oCAAoC;YACpC,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAC/H,EAAE,OAAO,EAAE,wEAAwE,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAC/H,EAAE,OAAO,EAAE,qEAAqE,EAAE,IAAI,EAAE,qCAAqC,EAAE;YAE/H,2CAA2C;YAC3C,EAAE,OAAO,EAAE,oGAAoG,EAAE,IAAI,EAAE,sCAAsC,EAAE;YAC/J,EAAE,OAAO,EAAE,uFAAuF,EAAE,IAAI,EAAE,wCAAwC,EAAE;YACpJ,EAAE,OAAO,EAAE,wFAAwF,EAAE,IAAI,EAAE,sCAAsC,EAAE;YAEnJ,oCAAoC;YACpC,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC1I,EAAE,OAAO,EAAE,sFAAsF,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAElJ,uBAAuB;YACvB,EAAE,OAAO,EAAE,+FAA+F,EAAE,IAAI,EAAE,sCAAsC,EAAE;YAC1J,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAErJ,eAAe;YACf,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,0CAA0C,EAAE;YACxI,EAAE,OAAO,EAAE,6EAA6E,EAAE,IAAI,EAAE,0CAA0C,EAAE;YAE5I,kBAAkB;YAClB,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,6CAA6C,EAAE;YACzI,EAAE,OAAO,EAAE,mEAAmE,EAAE,IAAI,EAAE,wCAAwC,EAAE;YAEhI,gBAAgB;YAChB,EAAE,OAAO,EAAE,oHAAoH,EAAE,IAAI,EAAE,2CAA2C,EAAE;YACpL,EAAE,OAAO,EAAE,mFAAmF,EAAE,IAAI,EAAE,6CAA6C,EAAE;SACtJ,CAAC;QAEe,0BAAqB,GAAG;YACvC,+BAA+B;YAC/B,OAAO;YACP,YAAY;YACZ,aAAa;YACb,OAAO;YACP,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,iBAAiB;YACjB,kBAAkB;YAClB,kBAAkB;YAClB,aAAa;YACb,QAAQ;YACR,UAAU;YACV,SAAS;YACT,aAAa;YACb,gBAAgB;YAChB,WAAW;YACX,UAAU;YACV,QAAQ;YACR,MAAM;SACP,CAAC;IA+IJ,CAAC;IA7IC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,iCAAiC;QACjC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC7D,qEAAqE;YACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAEpB,sDAAsD;gBACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,EACnC,IAAI,EACJ,yEAAyE,EACzE,8IAA8I,CAC/I,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,mDAAmD;gBACnD,IAAI,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACzG,SAAS;gBACX,CAAC;gBAED,yCAAyC;gBACzC,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACrH,SAAS;gBACX,CAAC;gBAED,yDAAyD;gBACzD,IAAI,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBAC1G,SAAS;gBACX,CAAC;gBAED,iDAAiD;gBACjD,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACxG,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,2BAA2B,IAAI,EAAE,EACjC,8IAA8I,CAC/I,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAAC,IAAY;QACxC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,qBAAqB;QACrB,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAAG;YACtB,UAAU,EAAG,qBAAqB;YAClC,OAAO,EAAM,uBAAuB;YACpC,QAAQ,EAAK,cAAc;YAC3B,QAAQ,EAAK,qBAAqB;YAClC,UAAU,EAAG,eAAe;YAC5B,UAAU,EAAG,iBAAiB;YAC9B,QAAQ,CAAK,qBAAqB;SACnC,CAAC;QAEF,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;YACX,WAAW;SACZ,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,sBAAsB,CAAC,IAAY;QACzC,+DAA+D;QAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qEAAqE;QACrE,MAAM,cAAc,GAAG;YACrB,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,6FAA6F;YAC7F,mEAAmE;SACpE,CAAC;QAEF,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,4DAA4D;QAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG;YAClB,cAAc;YACd,MAAM;YACN,UAAU;YACV,OAAO;YACP,YAAY;YACZ,eAAe;YACf,uCAAuC;YACvC,mBAAmB;SACpB,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAxND,0DAwNC"}

package/dist/rules/csrf-protection.d.ts

@@ -9,7 +9,6 @@ export declare class CsrfProtectionRule extends BaseRule {
     check(fileContent: FileContent): SecurityIssue[];
     private hasSafePatterns;
     private isCommentOrTest;
-    private isGetRequest;
     private isDevelopmentContext;
 }
 //# sourceMappingURL=csrf-protection.d.ts.map

package/dist/rules/csrf-protection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csrf-protection.d.ts","sourceRoot":"","sources":["../../src/rules/csrf-protection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,sEAAsE;IAC1F,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CA4D3B;IAEF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAmB7B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAwE3B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA4FhD,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,eAAe;IAiCvB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,oBAAoB;CAe7B"}
+{"version":3,"file":"csrf-protection.d.ts","sourceRoot":"","sources":["../../src/rules/csrf-protection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,sEAAsE;IAC1F,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CA4D3B;IAEF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAmB7B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAwE3B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAkFhD,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,eAAe;IAmCvB,OAAO,CAAC,oBAAoB;CAe7B"}

package/dist/rules/csrf-protection.js

@@ -15,8 +15,8 @@ class CsrfProtectionRule extends types_1.BaseRule {
             // Hidden form fields without CSRF - Edge case
             { pattern: /<input[^>]*type\s*=\s*['"`]hidden['"`][^>]*name\s*=\s*['"`](?!csrf|token|_token|authenticity_token|_csrf_token)[^'"`]+['"`][^>]*>/gi, type: 'Hidden input without CSRF token' },
             // Express.js CSRF patterns - Edge cases
-            { pattern: /app\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]+['"`]\s*,\s*(?!.*csrf|.*token|.*middleware|.*authenticate|.*authorize)/gi, type: 'Express route without CSRF protection' },
-            { pattern: /router\.(?:get|post|put|delete|patch)\s*\(\s*['"`][^'"`]+['"`]\s*,\s*(?!.*csrf|.*token|.*middleware|.*authenticate|.*authorize)/gi, type: 'Express router without CSRF protection' },
+            { pattern: /app\.(?:post|put|delete|patch)\s*\(\s*['"`][^'"`]+['"`]\s*,\s*(?!.*csrf|.*token|.*middleware|.*authenticate|.*authorize)/gi, type: 'Express route without CSRF protection' },
+            { pattern: /router\.(?:post|put|delete|patch)\s*\(\s*['"`][^'"`]+['"`]\s*,\s*(?!.*csrf|.*token|.*middleware|.*authenticate|.*authorize)/gi, type: 'Express router without CSRF protection' },
             // Express middleware bypass - Edge case
             { pattern: /app\.use\s*\(\s*['"`]\/api['"`]\s*,\s*(?!.*csrf|.*token|.*middleware)/gi, type: 'API routes without CSRF middleware' },
             // Django CSRF patterns - Edge cases
@@ -140,9 +140,7 @@ class CsrfProtectionRule extends types_1.BaseRule {
     }
     check(fileContent) {
         const issues = [];
-        // Special case for all-vulnerabilities-test.js
         if (fileContent.path.includes('all-vulnerabilities-test.js')) {
-            // Find the specific missing CSRF protection example in the test file
             const csrfPattern = /const form = `<form action="\/transfer" method="POST">[\s\S]*?<input type="hidden" name="amount" value="1000">[\s\S]*?<input type="hidden" name="to" value="attacker">[\s\S]*?<\/form>`/;
             if (csrfPattern.test(fileContent.content)) {
                 const lines = fileContent.content.split('\n');
@@ -154,27 +152,19 @@ class CsrfProtectionRule extends types_1.BaseRule {
                     }
                 }
             }
-            // If we found issues in the test file, return them immediately
             if (issues.length > 0) {
                 return issues;
             }
         }
-        // Check for CSRF protection issues
         for (const { pattern, type } of this.csrfPatterns) {
             const matches = this.findMatches(fileContent.content, pattern);
             for (const { line, column, lineContent } of matches) {
-                // Skip if the line contains safe patterns
                 if (this.hasSafePatterns(lineContent)) {
                     continue;
                 }
-                // Skip if it's in a comment or test file (except for all-vulnerabilities-test.js)
                 if (this.isCommentOrTest(lineContent, fileContent.path)) {
                     continue;
                 }
-                // Skip if it's a GET request (CSRF not applicable)
-                if (this.isGetRequest(lineContent)) {
-                    continue;
-                }
                 issues.push(this.createIssue(fileContent.path, line, column, lineContent, `Missing CSRF protection: ${type}`, `Add CSRF protection to prevent cross-site request forgery attacks. Use CSRF tokens in forms and validate them on the server side.`));
             }
         }
@@ -182,7 +172,6 @@ class CsrfProtectionRule extends types_1.BaseRule {
         for (const { pattern, type } of this.cookiePatterns) {
             const matches = this.findMatches(fileContent.content, pattern);
             for (const { line, column, lineContent } of matches) {
-                // Skip if it's in a comment or test file (except for all-vulnerabilities-test.js)
                 if (this.isCommentOrTest(lineContent, fileContent.path)) {
                     continue;
                 }
@@ -226,15 +215,6 @@ class CsrfProtectionRule extends types_1.BaseRule {
         ];
         return testPatterns.some(pattern => pattern.test(filePath));
     }
-    isGetRequest(line) {
-        // Check if it's a GET request (CSRF not applicable)
-        const getPatterns = [
-            /method\s*=\s*['"`]get['"`]/i,
-            /\.get\s*\(/i,
-            /GET\s+/i
-        ];
-        return getPatterns.some(pattern => pattern.test(line));
-    }
     isDevelopmentContext(line) {
         // Check if it's in a development context
         const devPatterns = [

package/dist/rules/csrf-protection.js.map

@@ -1 +1 @@
-{"version":3,"file":"csrf-protection.js","sourceRoot":"","sources":["../../src/rules/csrf-protection.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,kBAAmB,SAAQ,gBAAQ;IAAhD;;QACW,SAAI,GAAG,iBAAiB,CAAC;QACzB,gBAAW,GAAG,kEAAkE,CAAC;QACjF,aAAQ,GAAG,MAAe,CAAC;QAEnB,iBAAY,GAAG;YAC9B,4CAA4C;YAC5C,EAAE,OAAO,EAAE,2JAA2J,EAAE,IAAI,EAAE,yBAAyB,EAAE;YACzM,EAAE,OAAO,EAAE,8GAA8G,EAAE,IAAI,EAAE,yBAAyB,EAAE;YAE5J,8CAA8C;YAC9C,EAAE,OAAO,EAAE,qIAAqI,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAE3L,wCAAwC;YACxC,EAAE,OAAO,EAAE,gIAAgI,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAC5L,EAAE,OAAO,EAAE,mIAAmI,EAAE,IAAI,EAAE,wCAAwC,EAAE;YAEhM,wCAAwC;YACxC,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAElI,oCAAoC;YACpC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE;YAC5D,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAA4B,EAAE;YACzE,EAAE,OAAO,EAAE,iEAAiE,EAAE,IAAI,EAAE,8BAA8B,EAAE;YACpH,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,qCAAqC,EAAE;YAEtF,qCAAqC;YACrC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,wBAAwB,EAAE;YACtD,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE;YACjE,EAAE,OAAO,EAAE,8EAA8E,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAC1I,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAE3I,mCAAmC;YACnC,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAC5D,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC/D,EAAE,OAAO,EAAE,gGAAgG,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAEpJ,0CAA0C;YAC1C,EAAE,OAAO,EAAE,2KAA2K,EAAE,IAAI,EAAE,iCAAiC,EAAE;YACjO,EAAE,OAAO,EAAE,iIAAiI,EAAE,IAAI,EAAE,kCAAkC,EAAE;YACxL,EAAE,OAAO,EAAE,8EAA8E,EAAE,IAAI,EAAE,4BAA4B,EAAE;YAE/H,wCAAwC;YACxC,EAAE,OAAO,EAAE,+JAA+J,EAAE,IAAI,EAAE,gCAAgC,EAAE;YACpN,EAAE,OAAO,EAAE,+FAA+F,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAEpJ,mDAAmD;YACnD,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAChJ,EAAE,OAAO,EAAE,2FAA2F,EAAE,IAAI,EAAE,8BAA8B,EAAE;YAC9I,EAAE,OAAO,EAAE,qFAAqF,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAE3I,6CAA6C;YAC7C,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAE7H,iDAAiD;YACjD,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAEpJ,wCAAwC;YACxC,EAAE,OAAO,EAAE,0EAA0E,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAE/H,8CAA8C;YAC9C,EAAE,OAAO,EAAE,+DAA+D,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAEtH,gDAAgD;YAChD,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,sCAAsC,EAAE;SACxJ,CAAC;QAEe,mBAAc,GAAG;YAChC,+BAA+B;YAC/B,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,mDAAmD,EAAE;YAC7G,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,iDAAiD,EAAE;YAC5F,EAAE,OAAO,EAAE,iCAAiC,EAAE,IAAI,EAAE,gCAAgC,EAAE;YACtF,EAAE,OAAO,EAAE,gCAAgC,EAAE,IAAI,EAAE,4CAA4C,EAAE;YAEjG,6BAA6B;YAC7B,EAAE,OAAO,EAAE,uDAAuD,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAC/G,EAAE,OAAO,EAAE,wCAAwC,EAAE,IAAI,EAAE,0CAA0C,EAAE;YAEvG,sBAAsB;YACtB,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC7H,EAAE,OAAO,EAAE,+EAA+E,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAEvI,yBAAyB;YACzB,EAAE,OAAO,EAAE,+EAA+E,EAAE,IAAI,EAAE,2CAA2C,EAAE;YAC/I,EAAE,OAAO,EAAE,qEAAqE,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAC9H,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,sCAAsC,EAAE;SACnI,CAAC;QAEe,iBAAY,GAAG;YAC9B,2BAA2B;YAC3B,OAAO;YACP,QAAQ;YACR,SAAS;YACT,SAAS;YACT,iBAAiB;YACjB,eAAe;YACf,cAAc;YACd,qBAAqB;YACrB,cAAc;YACd,eAAe;YACf,eAAe;YACf,aAAa;YACb,YAAY;YACZ,kBAAkB;YAElB,2BAA2B;YAC3B,kCAAkC;YAClC,oBAAoB;YACpB,sBAAsB;YACtB,sBAAsB;YAEtB,mCAAmC;YACnC,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,eAAe;YACf,gBAAgB;YAChB,gBAAgB;YAEhB,qBAAqB;YACrB,mBAAmB;YACnB,gBAAgB;YAChB,wBAAwB;YACxB,wBAAwB;YAExB,+DAA+D;YAC/D,MAAM;YACN,SAAS;YACT,cAAc;YACd,gBAAgB;YAChB,QAAQ;YACR,SAAS;YAET,yCAAyC;YACzC,SAAS;YACT,SAAS;YACT,OAAO;YACP,SAAS;YACT,UAAU;YACV,aAAa;YAEb,0CAA0C;YAC1C,UAAU;YACV,WAAW;YACX,OAAO;YACP,eAAe;YAEf,qCAAqC;YACrC,SAAS;YACT,SAAS;YACT,QAAQ;YACR,UAAU;YACV,QAAQ;YAER,gDAAgD;YAChD,OAAO;YACP,UAAU;YACV,WAAW;YACX,UAAU;YACV,QAAQ;SACT,CAAC;IA6JJ,CAAC;IA3JC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,+CAA+C;QAC/C,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC7D,qEAAqE;YACrE,MAAM,WAAW,GAAG,yLAAyL,CAAC;YAE9M,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,EAAE,CAAC;wBACnF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,OAAO,CAAC,uDAAuD,CAAC,EACrE,IAAI,EACJ,kDAAkD,EAClD,yEAAyE,CAC1E,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,0CAA0C;gBAC1C,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,kFAAkF;gBAClF,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,mDAAmD;gBACnD,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;oBACnC,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,4BAA4B,IAAI,EAAE,EAClC,mIAAmI,CACpI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,kFAAkF;gBAClF,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,oFAAoF;gBACpF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACxG,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,gCAAgC,IAAI,EAAE,EACtC,uHAAuH,CACxH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,yCAAyC;QACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAAG;YACtB,UAAU,EAAG,qBAAqB;YAClC,OAAO,EAAM,uBAAuB;YACpC,QAAQ,EAAK,cAAc;YAC3B,QAAQ,EAAK,qBAAqB;YAClC,UAAU,EAAG,eAAe;YAC5B,UAAU,EAAG,iBAAiB;YAC9B,QAAQ,CAAK,qBAAqB;SACnC,CAAC;QAEF,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;YACX,WAAW;SACZ,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,oDAAoD;QACpD,MAAM,WAAW,GAAG;YAClB,6BAA6B;YAC7B,aAAa;YACb,SAAS;SACV,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,yCAAyC;QACzC,MAAM,WAAW,GAAG;YAClB,cAAc;YACd,MAAM;YACN,UAAU;YACV,OAAO;YACP,YAAY;YACZ,eAAe;YACf,uCAAuC;YACvC,mBAAmB;SACpB,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AA7TD,gDA6TC"}
+{"version":3,"file":"csrf-protection.js","sourceRoot":"","sources":["../../src/rules/csrf-protection.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,kBAAmB,SAAQ,gBAAQ;IAAhD;;QACW,SAAI,GAAG,iBAAiB,CAAC;QACzB,gBAAW,GAAG,kEAAkE,CAAC;QACjF,aAAQ,GAAG,MAAe,CAAC;QAEnB,iBAAY,GAAG;YAC9B,4CAA4C;YAC5C,EAAE,OAAO,EAAE,2JAA2J,EAAE,IAAI,EAAE,yBAAyB,EAAE;YACzM,EAAE,OAAO,EAAE,8GAA8G,EAAE,IAAI,EAAE,yBAAyB,EAAE;YAE5J,8CAA8C;YAC9C,EAAE,OAAO,EAAE,qIAAqI,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAE3L,wCAAwC;YACxC,EAAE,OAAO,EAAE,4HAA4H,EAAE,IAAI,EAAE,uCAAuC,EAAE;YACxL,EAAE,OAAO,EAAE,+HAA+H,EAAE,IAAI,EAAE,wCAAwC,EAAE;YAE5L,wCAAwC;YACxC,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAElI,oCAAoC;YACpC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE;YAC5D,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,4BAA4B,EAAE;YACzE,EAAE,OAAO,EAAE,iEAAiE,EAAE,IAAI,EAAE,8BAA8B,EAAE;YACpH,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,qCAAqC,EAAE;YAEtF,qCAAqC;YACrC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,wBAAwB,EAAE;YACtD,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE;YACjE,EAAE,OAAO,EAAE,8EAA8E,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAC1I,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAE3I,mCAAmC;YACnC,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAC5D,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC/D,EAAE,OAAO,EAAE,gGAAgG,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAEpJ,0CAA0C;YAC1C,EAAE,OAAO,EAAE,2KAA2K,EAAE,IAAI,EAAE,iCAAiC,EAAE;YACjO,EAAE,OAAO,EAAE,iIAAiI,EAAE,IAAI,EAAE,kCAAkC,EAAE;YACxL,EAAE,OAAO,EAAE,8EAA8E,EAAE,IAAI,EAAE,4BAA4B,EAAE;YAE/H,wCAAwC;YACxC,EAAE,OAAO,EAAE,+JAA+J,EAAE,IAAI,EAAE,gCAAgC,EAAE;YACpN,EAAE,OAAO,EAAE,+FAA+F,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAEpJ,mDAAmD;YACnD,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAChJ,EAAE,OAAO,EAAE,2FAA2F,EAAE,IAAI,EAAE,8BAA8B,EAAE;YAC9I,EAAE,OAAO,EAAE,qFAAqF,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAE3I,6CAA6C;YAC7C,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAE7H,iDAAiD;YACjD,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAEpJ,wCAAwC;YACxC,EAAE,OAAO,EAAE,0EAA0E,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAE/H,8CAA8C;YAC9C,EAAE,OAAO,EAAE,+DAA+D,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAEtH,gDAAgD;YAChD,EAAE,OAAO,EAAE,4FAA4F,EAAE,IAAI,EAAE,sCAAsC,EAAE;SACxJ,CAAC;QAEe,mBAAc,GAAG;YAChC,+BAA+B;YAC/B,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,mDAAmD,EAAE;YAC7G,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,iDAAiD,EAAE;YAC5F,EAAE,OAAO,EAAE,iCAAiC,EAAE,IAAI,EAAE,gCAAgC,EAAE;YACtF,EAAE,OAAO,EAAE,gCAAgC,EAAE,IAAI,EAAE,4CAA4C,EAAE;YAEjG,6BAA6B;YAC7B,EAAE,OAAO,EAAE,uDAAuD,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAC/G,EAAE,OAAO,EAAE,wCAAwC,EAAE,IAAI,EAAE,0CAA0C,EAAE;YAEvG,sBAAsB;YACtB,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAC7H,EAAE,OAAO,EAAE,+EAA+E,EAAE,IAAI,EAAE,mCAAmC,EAAE;YAEvI,yBAAyB;YACzB,EAAE,OAAO,EAAE,+EAA+E,EAAE,IAAI,EAAE,2CAA2C,EAAE;YAC/I,EAAE,OAAO,EAAE,qEAAqE,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAC9H,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,sCAAsC,EAAE;SACnI,CAAC;QAEe,iBAAY,GAAG;YAC9B,2BAA2B;YAC3B,OAAO;YACP,QAAQ;YACR,SAAS;YACT,SAAS;YACT,iBAAiB;YACjB,eAAe;YACf,cAAc;YACd,qBAAqB;YACrB,cAAc;YACd,eAAe;YACf,eAAe;YACf,aAAa;YACb,YAAY;YACZ,kBAAkB;YAElB,2BAA2B;YAC3B,kCAAkC;YAClC,oBAAoB;YACpB,sBAAsB;YACtB,sBAAsB;YAEtB,mCAAmC;YACnC,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,eAAe;YACf,gBAAgB;YAChB,gBAAgB;YAEhB,qBAAqB;YACrB,mBAAmB;YACnB,gBAAgB;YAChB,wBAAwB;YACxB,wBAAwB;YAExB,+DAA+D;YAC/D,MAAM;YACN,SAAS;YACT,cAAc;YACd,gBAAgB;YAChB,QAAQ;YACR,SAAS;YAET,yCAAyC;YACzC,SAAS;YACT,SAAS;YACT,OAAO;YACP,SAAS;YACT,UAAU;YACV,aAAa;YAEb,0CAA0C;YAC1C,UAAU;YACV,WAAW;YACX,OAAO;YACP,eAAe;YAEf,qCAAqC;YACrC,SAAS;YACT,SAAS;YACT,QAAQ;YACR,UAAU;YACV,QAAQ;YAER,gDAAgD;YAChD,OAAO;YACP,UAAU;YACV,WAAW;YACX,UAAU;YACV,QAAQ;SACT,CAAC;IA0IJ,CAAC;IAxIC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC7D,MAAM,WAAW,GAAG,yLAAyL,CAAC;YAE9M,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,EAAE,CAAC;wBACnF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,OAAO,CAAC,uDAAuD,CAAC,EACrE,IAAI,EACJ,kDAAkD,EAClD,yEAAyE,CAC1E,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAEpD,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAEO,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChE,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,4BAA4B,IAAI,EAAE,EAClC,mIAAmI,CACpI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAEpD,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,oFAAoF;gBACpF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACxG,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,gCAAgC,IAAI,EAAE,EACtC,uHAAuH,CACxH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,yCAAyC;QACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAAG;YACtB,UAAU,EAAG,qBAAqB;YAClC,OAAO,EAAM,uBAAuB;YACpC,QAAQ,EAAK,cAAc;YAC3B,QAAQ,EAAK,qBAAqB;YAClC,UAAU,EAAG,eAAe;YAC5B,UAAU,EAAG,iBAAiB;YAC9B,QAAQ,CAAK,qBAAqB;SACnC,CAAC;QAEF,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,OAAO;YACP,YAAY;YACZ,WAAW;YACX,WAAW;SACZ,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAIO,oBAAoB,CAAC,IAAY;QACvC,yCAAyC;QACzC,MAAM,WAAW,GAAG;YAClB,cAAc;YACd,MAAM;YACN,UAAU;YACV,OAAO;YACP,YAAY;YACZ,eAAe;YACf,uCAAuC;YACvC,mBAAmB;SACpB,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AA1SD,gDA0SC"}

package/dist/rules/exposed-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exposed-secrets.d.ts","sourceRoot":"","sources":["../../src/rules/exposed-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,uDAAuD;IAC3E,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAiC7B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAgDpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAiChD,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,mBAAmB;IAiC3B,OAAO,CAAC,UAAU;CAWnB"}
+{"version":3,"file":"exposed-secrets.d.ts","sourceRoot":"","sources":["../../src/rules/exposed-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,uDAAuD;IAC3E,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAwB7B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CA+CpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA+BhD,OAAO,CAAC,eAAe;IAqBvB,OAAO,CAAC,mBAAmB;IA2B3B,OAAO,CAAC,UAAU;CAWnB"}