vibe-guard 1.1.4 → 1.2.0

package/dist/rules/missing-authentication.d.ts

@@ -10,5 +10,9 @@ export declare class MissingAuthenticationRule extends BaseRule {
     private extractRoute;
     private isPublicEndpoint;
     private hasAuthenticationContext;
+    private hasGlobalAuthentication;
+    private determineSeverity;
+    private isDevelopmentContext;
+    private getRemediationMessage;
 }
 //# sourceMappingURL=missing-authentication.d.ts.map

package/dist/rules/missing-authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"missing-authentication.d.ts","sourceRoot":"","sources":["../../src/rules/missing-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,yBAA0B,SAAQ,QAAQ;IACrD,QAAQ,CAAC,IAAI,4BAA4B;IACzC,QAAQ,CAAC,WAAW,0DAA0D;IAC9E,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAgB5B;IAEF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAahC;IAEF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAsE9B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA0DhD,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,wBAAwB;CAgBjC"}
+{"version":3,"file":"missing-authentication.d.ts","sourceRoot":"","sources":["../../src/rules/missing-authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAiB,MAAM,UAAU,CAAC;AAE/E,qBAAa,yBAA0B,SAAQ,QAAQ;IACrD,QAAQ,CAAC,IAAI,4BAA4B;IACzC,QAAQ,CAAC,WAAW,0DAA0D;IAC9E,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAqH5B;IAEF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAahC;IAEF,OAAO,CAAC,QAAQ,CAAC,eAAe,CA0C9B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAmEhD,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,wBAAwB;IAiBhC,OAAO,CAAC,uBAAuB;IAiC/B,OAAO,CAAC,iBAAiB;IAoBzB,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,qBAAqB;CA4D9B"}

package/dist/rules/missing-authentication.js

@@ -9,17 +9,117 @@ class MissingAuthenticationRule extends types_1.BaseRule {
         this.description = 'Detects potentially unprotected routes and endpoints';
         this.severity = 'high';
         this.routePatterns = [
-            // Express.js
-            { pattern: /app\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware)/gi, framework: 'Express' },
-            { pattern: /router\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware)/gi, framework: 'Express' },
-            // Next.js API routes
-            { pattern: /export\s+(?:default\s+)?(?:async\s+)?function\s+handler\s*\([^)]*\)\s*\{(?![\s\S]*auth|[\s\S]*login|[\s\S]*verify)/gi, framework: 'Next.js' },
-            // Flask
-            { pattern: /@app\.route\s*\(\s*['"`]([^'"`]+)['"`](?:[^)]*)\)\s*\n\s*def\s+\w+\s*\([^)]*\)\s*:(?![\s\S]*auth|[\s\S]*login|[\s\S]*verify)/gi, framework: 'Flask' },
-            // FastAPI
-            { pattern: /@app\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]\s*\)\s*\n\s*(?:async\s+)?def\s+\w+\s*\([^)]*\)\s*:(?![\s\S]*auth|[\s\S]*login|[\s\S]*verify)/gi, framework: 'FastAPI' },
-            // Laravel
-            { pattern: /Route::(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]\s*,\s*(?!.*auth|.*login|.*verify|.*middleware)/gi, framework: 'Laravel' }
+            // Critical: Sensitive routes that should always be protected
+            {
+                pattern: /\b(?:app|router)\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Express',
+                severity: 'critical'
+            },
+            {
+                pattern: /@app\.route\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Flask',
+                severity: 'critical'
+            },
+            {
+                pattern: /@app\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'FastAPI',
+                severity: 'critical'
+            },
+            {
+                pattern: /Route::(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Laravel',
+                severity: 'critical'
+            },
+            // High: General routes that should be protected
+            {
+                pattern: /\b(?:app|router)\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]/gi,
+                framework: 'Express',
+                severity: 'high'
+            },
+            {
+                pattern: /export\s+(?:default\s+)?(?:async\s+)?function\s+handler\s*\([^)]*\)\s*\{/gi,
+                framework: 'Next.js',
+                severity: 'high'
+            },
+            {
+                pattern: /@app\.route\s*\(\s*['"`]([^'"`]+)['"`](?:[^)]*)\)\s*\n\s*def\s+\w+\s*\([^)]*\)\s*:/gi,
+                framework: 'Flask',
+                severity: 'high'
+            },
+            {
+                pattern: /@app\.(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]\s*\)\s*\n\s*(?:async\s+)?def\s+\w+\s*\([^)]*\)\s*:/gi,
+                framework: 'FastAPI',
+                severity: 'high'
+            },
+            {
+                pattern: /Route::(get|post|put|delete|patch)\s*\(\s*['"`]([^'"`]+)['"`]/gi,
+                framework: 'Laravel',
+                severity: 'high'
+            },
+            // Django patterns
+            {
+                pattern: /url\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Django',
+                severity: 'critical'
+            },
+            {
+                pattern: /path\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Django',
+                severity: 'critical'
+            },
+            {
+                pattern: /url\s*\(\s*['"`]([^'"`]+)['"`]/gi,
+                framework: 'Django',
+                severity: 'high'
+            },
+            {
+                pattern: /path\s*\(\s*['"`]([^'"`]+)['"`]/gi,
+                framework: 'Django',
+                severity: 'high'
+            },
+            // Rails patterns
+            {
+                pattern: /get\s+['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Rails',
+                severity: 'critical'
+            },
+            {
+                pattern: /post\s+['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Rails',
+                severity: 'critical'
+            },
+            {
+                pattern: /get\s+['"`]([^'"`]+)['"`]/gi,
+                framework: 'Rails',
+                severity: 'high'
+            },
+            {
+                pattern: /post\s+['"`]([^'"`]+)['"`]/gi,
+                framework: 'Rails',
+                severity: 'high'
+            },
+            // Spring patterns
+            {
+                pattern: /@(?:GetMapping|PostMapping|PutMapping|DeleteMapping|PatchMapping)\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'Spring',
+                severity: 'critical'
+            },
+            {
+                pattern: /@(?:GetMapping|PostMapping|PutMapping|DeleteMapping|PatchMapping)\s*\(\s*['"`]([^'"`]+)['"`]/gi,
+                framework: 'Spring',
+                severity: 'high'
+            },
+            // ASP.NET patterns
+            {
+                pattern: /\[Route\s*\(\s*['"`]([^'"`]*\/(?:admin|user|profile|account|dashboard|settings|config|api\/v\d+\/admin|api\/v\d+\/user|api\/v\d+\/profile|api\/v\d+\/account|api\/v\d+\/dashboard|api\/v\d+\/settings|api\/v\d+\/config)[^'"`]*)['"`]/gi,
+                framework: 'ASP.NET',
+                severity: 'critical'
+            },
+            {
+                pattern: /\[Route\s*\(\s*['"`]([^'"`]+)['"`]/gi,
+                framework: 'ASP.NET',
+                severity: 'high'
+            }
         ];
         this.protectedPatterns = [
             /auth/i,
@@ -36,39 +136,20 @@ class MissingAuthenticationRule extends types_1.BaseRule {
             /role/i
         ];
         this.publicEndpoints = [
-            // Common public endpoints
-            /\/public/i,
+            // Safe public endpoints
             /\/health/i,
             /\/ping/i,
             /\/status/i,
+            /\/metrics/i,
+            /\/monitoring/i,
             /\/docs/i,
             /\/swagger/i,
             /\/api-docs/i,
+            /\/openapi/i,
             /\/favicon/i,
             /\/robots\.txt/i,
             /\/sitemap/i,
-            /\/login/i,
-            /\/register/i,
-            /\/signup/i,
-            /\/forgot-password/i,
-            /\/reset-password/i,
-            /\/logout/i,
-            /\/auth/i,
-            /\/oauth/i,
-            /\/callback/i,
-            /\/webhook/i,
-            /\/hook/i,
-            /\/notify/i,
-            /\/notification/i,
-            /\/metrics/i,
-            /\/monitoring/i,
-            /\/debug/i,
-            /\/test/i,
-            /\/sample/i,
-            /\/example/i,
-            /\/demo/i,
-            /\/mock/i,
-            /\/fixture/i,
+            /\/public/i,
             /\/static/i,
             /\/assets/i,
             /\/images/i,
@@ -80,28 +161,19 @@ class MissingAuthenticationRule extends types_1.BaseRule {
             /\/downloads/i,
             /\/export/i,
             /\/import/i,
-            /\/backup/i,
-            /\/restore/i,
-            /\/sync/i,
-            /\/cron/i,
-            /\/scheduler/i,
-            /\/job/i,
-            /\/task/i,
-            /\/worker/i,
-            /\/queue/i,
-            /\/cache/i,
-            /\/config/i,
-            /\/settings/i,
-            /\/preferences/i,
-            /\/profile/i,
-            /\/account/i,
-            /\/user/i,
-            /\/admin/i,
-            /\/dashboard/i,
-            /\/home/i,
-            /\/index/i,
-            /\/main/i,
-            /\/root/i,
+            /\/webhook/i,
+            /\/hook/i,
+            /\/notify/i,
+            /\/notification/i,
+            /\/callback/i,
+            /\/oauth/i,
+            /\/auth/i,
+            /\/login/i,
+            /\/register/i,
+            /\/signup/i,
+            /\/forgot-password/i,
+            /\/reset-password/i,
+            /\/logout/i,
             /\/api\/v\d+\/public/i,
             /\/api\/public/i,
             /\/public\/api/i
@@ -118,14 +190,14 @@ class MissingAuthenticationRule extends types_1.BaseRule {
                     continue;
                 // Check for unprotected API route
                 if (line.includes('app.get') && line.includes('/api/user-data')) {
-                    issues.push(this.createIssue(fileContent.path, i + 1, line.indexOf('app.get') + 1, line, `Potentially unprotected Express route: /api/user-data`, `Add authentication middleware or verify that this endpoint should be publicly accessible. Consider using authentication guards, middleware, or decorators.`));
+                    issues.push(this.createIssue(fileContent.path, i + 1, line.indexOf('app.get') + 1, line, `Potentially unprotected Express route: /api/user-data`, this.getRemediationMessage('Express', 'critical'), 'critical'));
                 }
             }
             if (issues.length > 0) {
                 return issues;
             }
         }
-        for (const { pattern, framework } of this.routePatterns) {
+        for (const { pattern, framework, severity } of this.routePatterns) {
             const matches = this.findMatches(fileContent.content, pattern);
             for (const { match, line, column, lineContent } of matches) {
                 const route = this.extractRoute(match);
@@ -133,11 +205,16 @@ class MissingAuthenticationRule extends types_1.BaseRule {
                 if (this.isPublicEndpoint(route)) {
                     continue;
                 }
-                // Skip if the surrounding code suggests authentication
-                if (this.hasAuthenticationContext(fileContent.content, line) && !fileContent.path.includes('all-vulnerabilities-test.js')) {
+                // Check for global middleware or authentication context
+                const hasGlobalAuth = this.hasGlobalAuthentication(fileContent.content);
+                const hasLocalAuth = this.hasAuthenticationContext(fileContent.content, line);
+                // Skip if authentication is present (except for test file)
+                if ((hasGlobalAuth || hasLocalAuth) && !fileContent.path.includes('all-vulnerabilities-test.js')) {
                     continue;
                 }
-                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `Potentially unprotected ${framework} route: ${route}`, `Add authentication middleware or verify that this endpoint should be publicly accessible. Consider using authentication guards, middleware, or decorators.`));
+                // Determine final severity based on context
+                const finalSeverity = this.determineSeverity(severity, fileContent.path, route);
+                issues.push(this.createIssue(fileContent.path, line, column + 1, lineContent, `Potentially unprotected ${framework} route: ${route}`, this.getRemediationMessage(framework, finalSeverity), finalSeverity));
             }
         }
         return issues;
@@ -171,6 +248,130 @@ class MissingAuthenticationRule extends types_1.BaseRule {
         const contextLines = lines.slice(startLine, endLine).join('\n');
         return this.protectedPatterns.some(pattern => pattern.test(contextLines));
     }
+    hasGlobalAuthentication(content) {
+        // Check for global middleware or authentication setup
+        const globalAuthPatterns = [
+            /app\.use\s*\(\s*.*auth/i,
+            /app\.use\s*\(\s*.*middleware/i,
+            /app\.use\s*\(\s*.*guard/i,
+            /app\.use\s*\(\s*.*protect/i,
+            /app\.use\s*\(\s*.*secure/i,
+            /app\.use\s*\(\s*.*jwt/i,
+            /app\.use\s*\(\s*.*token/i,
+            /app\.use\s*\(\s*.*session/i,
+            /app\.use\s*\(\s*.*permission/i,
+            /app\.use\s*\(\s*.*role/i,
+            /middleware\s*\[/i,
+            /@middleware/i,
+            /@auth/i,
+            /@secure/i,
+            /@protect/i,
+            /@guard/i,
+            /@permission/i,
+            /@role/i,
+            /@login_required/i,
+            /@auth_required/i,
+            /@secure_required/i,
+            /@protect_required/i,
+            /@guard_required/i,
+            /@permission_required/i,
+            /@role_required/i
+        ];
+        return globalAuthPatterns.some(pattern => pattern.test(content));
+    }
+    determineSeverity(baseSeverity, filePath, route) {
+        // Downgrade severity in development/test contexts
+        if (this.isDevelopmentContext(filePath, route)) {
+            switch (baseSeverity) {
+                case 'critical':
+                    return 'high';
+                case 'high':
+                    return 'medium';
+                case 'medium':
+                    return 'low';
+                case 'low':
+                    return 'low';
+                default:
+                    return baseSeverity;
+            }
+        }
+        return baseSeverity;
+    }
+    isDevelopmentContext(filePath, route) {
+        // Check if it's in a development context
+        const devPatterns = [
+            /\btest\b/i,
+            /\bmock\b/i,
+            /\bdemo\b/i,
+            /\bsample\b/i,
+            /\bexample\b/i,
+            /\bdevelopment\b/i,
+            /\bdev\b/i,
+            /\bstaging\b/i,
+            /\blocalhost\b/i,
+            /\b127\.0\.0\.1\b/i
+        ];
+        return devPatterns.some(pattern => pattern.test(filePath) || pattern.test(route));
+    }
+    getRemediationMessage(framework, severity) {
+        const messages = {
+            'Express': {
+                'critical': 'Add authentication middleware to protect sensitive routes. Use express-jwt, passport, or custom authentication middleware.',
+                'high': 'Add authentication middleware to protect routes. Use express-jwt, passport, or custom authentication middleware.',
+                'medium': 'Consider adding authentication middleware to protect routes. Use express-jwt, passport, or custom authentication middleware.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication middleware if needed.'
+            },
+            'Next.js': {
+                'critical': 'Add authentication to API routes. Use NextAuth.js, JWT tokens, or custom authentication middleware.',
+                'high': 'Add authentication to API routes. Use NextAuth.js, JWT tokens, or custom authentication middleware.',
+                'medium': 'Consider adding authentication to API routes. Use NextAuth.js, JWT tokens, or custom authentication middleware.',
+                'low': 'Review authentication requirements for this API route. Consider adding authentication if needed.'
+            },
+            'Flask': {
+                'critical': 'Add authentication decorators to protect sensitive routes. Use Flask-Login, Flask-JWT-Extended, or custom decorators.',
+                'high': 'Add authentication decorators to protect routes. Use Flask-Login, Flask-JWT-Extended, or custom decorators.',
+                'medium': 'Consider adding authentication decorators to protect routes. Use Flask-Login, Flask-JWT-Extended, or custom decorators.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication decorators if needed.'
+            },
+            'FastAPI': {
+                'critical': 'Add authentication dependencies to protect sensitive routes. Use FastAPI security, JWT tokens, or custom dependencies.',
+                'high': 'Add authentication dependencies to protect routes. Use FastAPI security, JWT tokens, or custom dependencies.',
+                'medium': 'Consider adding authentication dependencies to protect routes. Use FastAPI security, JWT tokens, or custom dependencies.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication dependencies if needed.'
+            },
+            'Laravel': {
+                'critical': 'Add authentication middleware to protect sensitive routes. Use Laravel Sanctum, Passport, or custom middleware.',
+                'high': 'Add authentication middleware to protect routes. Use Laravel Sanctum, Passport, or custom middleware.',
+                'medium': 'Consider adding authentication middleware to protect routes. Use Laravel Sanctum, Passport, or custom middleware.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication middleware if needed.'
+            },
+            'Django': {
+                'critical': 'Add authentication decorators to protect sensitive routes. Use @login_required, @permission_required, or custom decorators.',
+                'high': 'Add authentication decorators to protect routes. Use @login_required, @permission_required, or custom decorators.',
+                'medium': 'Consider adding authentication decorators to protect routes. Use @login_required, @permission_required, or custom decorators.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication decorators if needed.'
+            },
+            'Rails': {
+                'critical': 'Add authentication to protect sensitive routes. Use Devise, JWT, or custom authentication.',
+                'high': 'Add authentication to protect routes. Use Devise, JWT, or custom authentication.',
+                'medium': 'Consider adding authentication to protect routes. Use Devise, JWT, or custom authentication.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication if needed.'
+            },
+            'Spring': {
+                'critical': 'Add authentication annotations to protect sensitive routes. Use @PreAuthorize, @Secured, or Spring Security.',
+                'high': 'Add authentication annotations to protect routes. Use @PreAuthorize, @Secured, or Spring Security.',
+                'medium': 'Consider adding authentication annotations to protect routes. Use @PreAuthorize, @Secured, or Spring Security.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication annotations if needed.'
+            },
+            'ASP.NET': {
+                'critical': 'Add authentication attributes to protect sensitive routes. Use [Authorize], [Authentication], or custom attributes.',
+                'high': 'Add authentication attributes to protect routes. Use [Authorize], [Authentication], or custom attributes.',
+                'medium': 'Consider adding authentication attributes to protect routes. Use [Authorize], [Authentication], or custom attributes.',
+                'low': 'Review authentication requirements for this route. Consider adding authentication attributes if needed.'
+            }
+        };
+        return messages[framework]?.[severity] || messages['Express']?.[severity] || 'Add authentication middleware or verify that this endpoint should be publicly accessible. Consider using authentication guards, middleware, or decorators.';
+    }
 }
 exports.MissingAuthenticationRule = MissingAuthenticationRule;
 //# sourceMappingURL=missing-authentication.js.map

package/dist/rules/missing-authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"missing-authentication.js","sourceRoot":"","sources":["../../src/rules/missing-authentication.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,yBAA0B,SAAQ,gBAAQ;IAAvD;;QACW,SAAI,GAAG,wBAAwB,CAAC;QAChC,gBAAW,GAAG,sDAAsD,CAAC;QACrE,aAAQ,GAAG,MAAe,CAAC;QAEnB,kBAAa,GAAG;YAC/B,aAAa;YACb,EAAE,OAAO,EAAE,8GAA8G,EAAE,SAAS,EAAE,SAAS,EAAE;YACjJ,EAAE,OAAO,EAAE,iHAAiH,EAAE,SAAS,EAAE,SAAS,EAAE;YAEpJ,qBAAqB;YACrB,EAAE,OAAO,EAAE,sHAAsH,EAAE,SAAS,EAAE,SAAS,EAAE;YAEzJ,QAAQ;YACR,EAAE,OAAO,EAAE,gIAAgI,EAAE,SAAS,EAAE,OAAO,EAAE;YAEjK,UAAU;YACV,EAAE,OAAO,EAAE,6JAA6J,EAAE,SAAS,EAAE,SAAS,EAAE;YAEhM,UAAU;YACV,EAAE,OAAO,EAAE,gHAAgH,EAAE,SAAS,EAAE,SAAS,EAAE;SACpJ,CAAC;QAEe,sBAAiB,GAAG;YACnC,OAAO;YACP,QAAQ;YACR,SAAS;YACT,aAAa;YACb,QAAQ;YACR,UAAU;YACV,SAAS;YACT,MAAM;YACN,QAAQ;YACR,UAAU;YACV,aAAa;YACb,OAAO;SACR,CAAC;QAEe,oBAAe,GAAG;YACjC,0BAA0B;YAC1B,WAAW;YACX,WAAW;YACX,SAAS;YACT,WAAW;YACX,SAAS;YACT,YAAY;YACZ,aAAa;YACb,YAAY;YACZ,gBAAgB;YAChB,YAAY;YACZ,UAAU;YACV,aAAa;YACb,WAAW;YACX,oBAAoB;YACpB,mBAAmB;YACnB,WAAW;YACX,SAAS;YACT,UAAU;YACV,aAAa;YACb,YAAY;YACZ,SAAS;YACT,WAAW;YACX,iBAAiB;YACjB,YAAY;YACZ,eAAe;YACf,UAAU;YACV,SAAS;YACT,WAAW;YACX,YAAY;YACZ,SAAS;YACT,SAAS;YACT,YAAY;YACZ,WAAW;YACX,WAAW;YACX,WAAW;YACX,QAAQ;YACR,OAAO;YACP,UAAU;YACV,UAAU;YACV,YAAY;YACZ,cAAc;YACd,WAAW;YACX,WAAW;YACX,WAAW;YACX,YAAY;YACZ,SAAS;YACT,SAAS;YACT,cAAc;YACd,QAAQ;YACR,SAAS;YACT,WAAW;YACX,UAAU;YACV,UAAU;YACV,WAAW;YACX,aAAa;YACb,gBAAgB;YAChB,YAAY;YACZ,YAAY;YACZ,SAAS;YACT,UAAU;YACV,cAAc;YACd,SAAS;YACT,UAAU;YACV,SAAS;YACT,SAAS;YACT,sBAAsB;YACtB,gBAAgB;YAChB,gBAAgB;SACjB,CAAC;IAgGJ,CAAC;IA9FC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,iCAAiC;QACjC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC7D,8DAA8D;YAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAEpB,kCAAkC;gBAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAC3B,IAAI,EACJ,uDAAuD,EACvD,4JAA4J,CAC7J,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEvC,uCAAuC;gBACvC,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjC,SAAS;gBACX,CAAC;gBAED,uDAAuD;gBACvD,IAAI,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBAC1H,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,2BAA2B,SAAS,WAAW,KAAK,EAAE,EACtD,4JAA4J,CAC7J,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,KAAuB;QAC1C,0CAA0C;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,sDAAsD;QACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,wBAAwB,CAAC,OAAe,EAAE,UAAkB;QAClE,4DAA4D;QAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,kCAAkC;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF;AA5MD,8DA4MC"}
+{"version":3,"file":"missing-authentication.js","sourceRoot":"","sources":["../../src/rules/missing-authentication.ts"],"names":[],"mappings":";;;AAAA,oCAA+E;AAE/E,MAAa,yBAA0B,SAAQ,gBAAQ;IAAvD;;QACW,SAAI,GAAG,wBAAwB,CAAC;QAChC,gBAAW,GAAG,sDAAsD,CAAC;QACrE,aAAQ,GAAG,MAAe,CAAC;QAEnB,kBAAa,GAAG;YAC/B,6DAA6D;YAC7D;gBACE,OAAO,EAAE,+QAA+Q;gBACxR,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,6OAA6O;gBACtP,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,mQAAmQ;gBAC5Q,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,oQAAoQ;gBAC7Q,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,UAAmB;aAC9B;YAED,gDAAgD;YAChD;gBACE,OAAO,EAAE,4EAA4E;gBACrF,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,4EAA4E;gBACrF,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,sFAAsF;gBAC/F,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,mHAAmH;gBAC5H,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,iEAAiE;gBAC1E,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,MAAe;aAC1B;YAED,kBAAkB;YAClB;gBACE,OAAO,EAAE,qOAAqO;gBAC9O,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,sOAAsO;gBAC/O,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,kCAAkC;gBAC3C,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,mCAAmC;gBAC5C,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,MAAe;aAC1B;YAED,iBAAiB;YACjB;gBACE,OAAO,EAAE,gOAAgO;gBACzO,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,iOAAiO;gBAC1O,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,6BAA6B;gBACtC,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,MAAe;aAC1B;YACD;gBACE,OAAO,EAAE,8BAA8B;gBACvC,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,MAAe;aAC1B;YAED,kBAAkB;YAClB;gBACE,OAAO,EAAE,mSAAmS;gBAC5S,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,gGAAgG;gBACzG,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,MAAe;aAC1B;YAED,mBAAmB;YACnB;gBACE,OAAO,EAAE,yOAAyO;gBAClP,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,UAAmB;aAC9B;YACD;gBACE,OAAO,EAAE,sCAAsC;gBAC/C,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,MAAe;aAC1B;SACF,CAAC;QAEe,sBAAiB,GAAG;YACnC,OAAO;YACP,QAAQ;YACR,SAAS;YACT,aAAa;YACb,QAAQ;YACR,UAAU;YACV,SAAS;YACT,MAAM;YACN,QAAQ;YACR,UAAU;YACV,aAAa;YACb,OAAO;SACR,CAAC;QAEe,oBAAe,GAAG;YACjC,wBAAwB;YACxB,WAAW;YACX,SAAS;YACT,WAAW;YACX,YAAY;YACZ,eAAe;YACf,SAAS;YACT,YAAY;YACZ,aAAa;YACb,YAAY;YACZ,YAAY;YACZ,gBAAgB;YAChB,YAAY;YACZ,WAAW;YACX,WAAW;YACX,WAAW;YACX,WAAW;YACX,QAAQ;YACR,OAAO;YACP,UAAU;YACV,UAAU;YACV,YAAY;YACZ,cAAc;YACd,WAAW;YACX,WAAW;YACX,YAAY;YACZ,SAAS;YACT,WAAW;YACX,iBAAiB;YACjB,aAAa;YACb,UAAU;YACV,SAAS;YACT,UAAU;YACV,aAAa;YACb,WAAW;YACX,oBAAoB;YACpB,mBAAmB;YACnB,WAAW;YACX,sBAAsB;YACtB,gBAAgB;YAChB,gBAAgB;SACjB,CAAC;IA8OJ,CAAC;IA5OC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,iCAAiC;QACjC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAC7D,8DAA8D;YAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAEpB,kCAAkC;gBAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAC3B,IAAI,EACJ,uDAAuD,EACvD,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,CAAC,EACjD,UAAU,CACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEvC,uCAAuC;gBACvC,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjC,SAAS;gBACX,CAAC;gBAED,wDAAwD;gBACxD,MAAM,aAAa,GAAG,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACxE,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAE9E,2DAA2D;gBAC3D,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;oBACjG,SAAS;gBACX,CAAC;gBAED,4CAA4C;gBAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAEhF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,GAAG,CAAC,EACV,WAAW,EACX,2BAA2B,SAAS,WAAW,KAAK,EAAE,EACtD,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,EACpD,aAAa,CACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,KAAuB;QAC1C,0CAA0C;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,sDAAsD;QACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,wBAAwB,CAAC,OAAe,EAAE,UAAkB;QAClE,4DAA4D;QAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,kCAAkC;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;IAEO,uBAAuB,CAAC,OAAe;QAC7C,sDAAsD;QACtD,MAAM,kBAAkB,GAAG;YACzB,yBAAyB;YACzB,+BAA+B;YAC/B,0BAA0B;YAC1B,4BAA4B;YAC5B,2BAA2B;YAC3B,wBAAwB;YACxB,0BAA0B;YAC1B,4BAA4B;YAC5B,+BAA+B;YAC/B,yBAAyB;YACzB,kBAAkB;YAClB,cAAc;YACd,QAAQ;YACR,UAAU;YACV,WAAW;YACX,SAAS;YACT,cAAc;YACd,QAAQ;YACR,kBAAkB;YAClB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,kBAAkB;YAClB,uBAAuB;YACvB,iBAAiB;SAClB,CAAC;QAEF,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB,CAAC,YAA2B,EAAE,QAAgB,EAAE,KAAa;QACpF,kDAAkD;QAClD,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/C,QAAQ,YAAY,EAAE,CAAC;gBACrB,KAAK,UAAU;oBACb,OAAO,MAAM,CAAC;gBAChB,KAAK,MAAM;oBACT,OAAO,QAAQ,CAAC;gBAClB,KAAK,QAAQ;oBACX,OAAO,KAAK,CAAC;gBACf,KAAK,KAAK;oBACR,OAAO,KAAK,CAAC;gBACf;oBACE,OAAO,YAAY,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,oBAAoB,CAAC,QAAgB,EAAE,KAAa;QAC1D,yCAAyC;QACzC,MAAM,WAAW,GAAG;YAClB,WAAW;YACX,WAAW;YACX,WAAW;YACX,aAAa;YACb,cAAc;YACd,kBAAkB;YAClB,UAAU;YACV,cAAc;YACd,gBAAgB;YAChB,mBAAmB;SACpB,CAAC;QAEF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,CAAC;IAGO,qBAAqB,CAAC,SAAiB,EAAE,QAAuB;QACtE,MAAM,QAAQ,GAA2C;YACvD,SAAS,EAAE;gBACT,UAAU,EAAE,4HAA4H;gBACxI,MAAM,EAAE,kHAAkH;gBAC1H,QAAQ,EAAE,8HAA8H;gBACxI,KAAK,EAAE,yGAAyG;aACjH;YACD,SAAS,EAAE;gBACT,UAAU,EAAE,qGAAqG;gBACjH,MAAM,EAAE,qGAAqG;gBAC7G,QAAQ,EAAE,iHAAiH;gBAC3H,KAAK,EAAE,kGAAkG;aAC1G;YACD,OAAO,EAAE;gBACP,UAAU,EAAE,uHAAuH;gBACnI,MAAM,EAAE,6GAA6G;gBACrH,QAAQ,EAAE,yHAAyH;gBACnI,KAAK,EAAE,yGAAyG;aACjH;YACD,SAAS,EAAE;gBACT,UAAU,EAAE,wHAAwH;gBACpI,MAAM,EAAE,8GAA8G;gBACtH,QAAQ,EAAE,0HAA0H;gBACpI,KAAK,EAAE,2GAA2G;aACnH;YACD,SAAS,EAAE;gBACT,UAAU,EAAE,iHAAiH;gBAC7H,MAAM,EAAE,uGAAuG;gBAC/G,QAAQ,EAAE,mHAAmH;gBAC7H,KAAK,EAAE,yGAAyG;aACjH;YACD,QAAQ,EAAE;gBACR,UAAU,EAAE,6HAA6H;gBACzI,MAAM,EAAE,mHAAmH;gBAC3H,QAAQ,EAAE,+HAA+H;gBACzI,KAAK,EAAE,yGAAyG;aACjH;YACD,OAAO,EAAE;gBACP,UAAU,EAAE,4FAA4F;gBACxG,MAAM,EAAE,kFAAkF;gBAC1F,QAAQ,EAAE,8FAA8F;gBACxG,KAAK,EAAE,8FAA8F;aACtG;YACD,QAAQ,EAAE;gBACR,UAAU,EAAE,8GAA8G;gBAC1H,MAAM,EAAE,oGAAoG;gBAC5G,QAAQ,EAAE,gHAAgH;gBAC1H,KAAK,EAAE,0GAA0G;aAClH;YACD,SAAS,EAAE;gBACT,UAAU,EAAE,qHAAqH;gBACjI,MAAM,EAAE,2GAA2G;gBACnH,QAAQ,EAAE,uHAAuH;gBACjI,KAAK,EAAE,yGAAyG;aACjH;SACF,CAAC;QAEF,OAAO,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,4JAA4J,CAAC;IAC5O,CAAC;CACF;AAnaD,8DAmaC"}

package/dist/rules/missing-security-headers.d.ts

@@ -1,16 +1,45 @@
 import { BaseRule, FileContent, SecurityIssue } from '../types';
 export declare class MissingSecurityHeadersRule extends BaseRule {
     readonly name = "missing-security-headers";
-    readonly description = "Detects missing HTTP security headers";
+    readonly description = "Detects missing HTTP security headers with context-aware analysis";
     readonly severity: "medium";
     private readonly securityHeaders;
     private readonly serverPatterns;
+    private readonly safePatterns;
     check(fileContent: FileContent): SecurityIssue[];
-    private isWebApplicationFile;
+    private analyzeContext;
+    private isInComment;
+    private isInString;
+    private isInConfiguration;
+    private isInTestFile;
+    private isInDocumentation;
+    private isSafeContext;
+    private detectLanguage;
+    private detectFramework;
+    private detectConfigurationType;
     private hasServerCode;
+    private hasSecurityHeaders;
+    protected findMatches(content: string, pattern: RegExp): Array<{
+        match: RegExpMatchArray;
+        line: number;
+        column: number;
+        lineContent: string;
+    }>;
     private checkMissingHeaders;
     private hasSecurityHeader;
     private findReportLocation;
-    private getHeaderRecommendations;
+    private determineSeverity;
+    private isDevelopmentContext;
+    private getRemediationMessage;
+    private getFrameworkSpecificSuggestion;
+    private getConfigurationSpecificSuggestion;
+    private validateCSP;
+    private validateXFrameOptions;
+    private validateXContentTypeOptions;
+    private validateXXSSProtection;
+    private validateHSTS;
+    private validateReferrerPolicy;
+    private validatePermissionsPolicy;
+    private validateXPermittedCrossDomainPolicies;
 }
 //# sourceMappingURL=missing-security-headers.d.ts.map

package/dist/rules/missing-security-headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"missing-security-headers.d.ts","sourceRoot":"","sources":["../../src/rules/missing-security-headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,0BAA2B,SAAQ,QAAQ;IACtD,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,2CAA2C;IAC/D,QAAQ,CAAC,QAAQ,EAAG,QAAQ,CAAU;IAEtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAS9B;IAEF,OAAO,CAAC,QAAQ,CAAC,cAAc,CA4B7B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAiDhD,OAAO,CAAC,oBAAoB;IAmC5B,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,mBAAmB;IA2B3B,OAAO,CAAC,iBAAiB;IA0BzB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,wBAAwB;CAqBjC"}
+{"version":3,"file":"missing-security-headers.d.ts","sourceRoot":"","sources":["../../src/rules/missing-security-headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAiB,MAAM,UAAU,CAAC;AAyB/E,qBAAa,0BAA2B,SAAQ,QAAQ;IACtD,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,uEAAuE;IAC3F,QAAQ,CAAC,QAAQ,EAAG,QAAQ,CAAU;IAEtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CA0D9B;IAEF,OAAO,CAAC,QAAQ,CAAC,cAAc,CA8I7B;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAuC3B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA8ChD,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,cAAc;IAiCtB,OAAO,CAAC,eAAe;IAqCvB,OAAO,CAAC,uBAAuB;IAwB/B,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,kBAAkB;cAIP,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAwBvJ,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,iBAAiB;IA6BzB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,oBAAoB;IAkB5B,OAAO,CAAC,qBAAqB;IAoB7B,OAAO,CAAC,8BAA8B;IA+BtC,OAAO,CAAC,kCAAkC;IAkB1C,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,yBAAyB;IAIjC,OAAO,CAAC,qCAAqC;CAK9C"}