xypriss 9.10.19 → 9.10.21

package/dist/src/middleware/built-in/security/UriNormalizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UriNormalizer.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/UriNormalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,aAAa;IA2CtB,4EAA4E;IAC5E,aAAa;IACb,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACI,MAAM,CAAC,aAAa,CAAC,OAAe;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC;QAEzB,4DAA4D;QAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAEvD,oCAAoC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAErC,mDAAmD;QACnD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE/C,uDAAuD;QACvD,MAAM,SAAS,GAAG,aAAa,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAEvE,wDAAwD;QACxD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEjD,2EAA2E;QAC3E,MAAM,gBAAgB,GAClB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAEpD,wCAAwC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE1D,iCAAiC;QACjC,OAAO,gBAAgB,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACI,MAAM,CAAC,cAAc,CACxB,OAAe,EACf,GAAW,EACX,YAAoB,aAAa,CAAC,qBAAqB;QAEvD,sDAAsD;QACtD,IAAI,CAAC,CAAC,OAAO,YAAY,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CACf,oFAAoF,OAAO,OAAO,EAAE,CACvG,CAAC;QACN,CAAC;QAED,2DAA2D;QAC3D,IAAI,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,yBAAyB,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,aAAa,CAAC,mBAAmB,CACtD,GAAG,CAAC,MAAM,EACV,SAAS,CACZ,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC1C,EAAE,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE;gBACnD,OAAO,EAAE,gBAAgB;aAC5B,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YAClB,oDAAoD;YACpD,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,8BAA8B,CACpC,2BAA2B,gBAAgB,sBAAsB,GAAG,CAAC,MAAM,8BAA8B,EACzG,gBAAgB,EAChB,GAAG,CAAC,MAAM,CACb,CAAC;YACN,CAAC;YACD,6DAA6D;YAC7D,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,iCAAiC;IACjC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;;OAkBG;IACK,MAAM,CAAC,eAAe,CAAC,GAAW;QACtC,IAAI,OAAO,GAAG,GAAG,CAAC;QAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3D,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACD,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACL,6DAA6D;gBAC7D,MAAM;YACV,CAAC;YAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnB,0CAA0C;gBAC1C,MAAM;YACV,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;OAgBG;IACK,MAAM,CAAC,sBAAsB,CAAC,GAAW;QAC7C,4CAA4C;QAC5C,OAAO,GAAG,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,4EAA4E;IAC5E,uCAAuC;IACvC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;;;;OAoBG;IACK,MAAM,CAAC,eAAe,CAAC,IAAY;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACnB,qCAAqC;gBACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnB,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChB,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;QAED,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,4EAA4E;IAC5E,yCAAyC;IACzC,4EAA4E;IAE5E;;;;;;;;;;;;;;;;;OAiBG;IACK,MAAM,CAAC,mBAAmB,CAAC,MAAc,EAAE,MAAc;QAC7D,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACzB,aAAa,CAAC,0BAA0B,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,MAAM,CAAC,gBAAgB,CAAC,KAAc;QAC1C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE5C,MAAM,SAAS,GAAG,KAA8B,CAAC;QACjD,IAAI,SAAS,CAAC,IAAI,KAAK,8BAA8B;YAAE,OAAO,IAAI,CAAC;QAEnE,kDAAkD;QAClD,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;;AA3WD,4EAA4E;AAC5E,oBAAoB;AACpB,4EAA4E;AAE5E;;;GAGG;AACqB,mCAAqB,GAAG,EAAE,CAAC;AAEnD;;;;;;;GAOG;AACqB,uCAAyB,GAAG,EAAE,CAAC;AAEvD;;;;;;GAMG;AACqB,mCAAqB,GAAG,EAAE,CAAC;AAEnD;;;;GAIG;AACqB,wCAA0B,GAAG,CAAC,CAAC;AAEvD;;;GAGG;AACqB,kCAAoB,GAAG,GAAG,CAAC;AAsUvD,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAiBrD;;;;OAIG;IACH,YAAY,OAAe,EAAE,SAAiB,EAAE,WAAmB;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QAtBnB,sDAAsD;QAC7B,SAAI,GAAG,gCAAgC,CAAC;QAsB7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,yDAAyD;QACzD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACJ"}

package/dist/src/middleware/built-in/security/XXEProtector.d.ts

@@ -1,36 +0,0 @@
-/**
- * XXE (XML External Entity) Protection Module
- *
- * Detects and prevents XXE attacks in XML parsing
- * Uses libxmljs2 for secure XML parsing
- */
-import { SecurityDetectionResult, SecurityModuleConfig } from './types';
-interface XXEConfig extends SecurityModuleConfig {
-    allowDTD?: boolean;
-    allowExternalEntities?: boolean;
-    maxEntityExpansions?: number;
-}
-declare class XXEProtector {
-    private config;
-    private readonly dangerousPatterns;
-    constructor(config?: XXEConfig);
-    /**
-     * Detect XXE attempts in XML content
-     */
-    detect(xmlContent: string | null | undefined): SecurityDetectionResult;
-    /**
-     * Sanitize XML by removing dangerous constructs
-     */
-    private sanitizeXML;
-    /**
-     * Safe XML parsing helper (returns parsed object or null)
-     * Note: In production, use a library like 'libxmljs2' with secure defaults
-     */
-    safeParseXML(xmlContent: string): any | null;
-    private getPatternName;
-    private logAttempt;
-    updateConfig(newConfig: Partial<XXEConfig>): void;
-    getConfig(): Required<XXEConfig>;
-}
-export default XXEProtector;
-//# sourceMappingURL=XXEProtector.d.ts.map

package/dist/src/middleware/built-in/security/XXEProtector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"XXEProtector.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XXEProtector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAExE,UAAU,SAAU,SAAQ,oBAAoB;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,cAAM,YAAY;IACd,OAAO,CAAC,MAAM,CAAsB;IAGpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAwBhC;gBAEU,MAAM,GAAE,SAAc;IAclC;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,uBAAuB;IAqEtE;;OAEG;IACH,OAAO,CAAC,WAAW;IAkBnB;;;OAGG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAuB5C,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,UAAU;IAQlB,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI;IAIjD,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;CAGnC;AAED,eAAe,YAAY,CAAC"}

package/dist/src/middleware/built-in/security/XXEProtector.js

@@ -1,172 +0,0 @@
-/**
- * XXE (XML External Entity) Protection Module
- *
- * Detects and prevents XXE attacks in XML parsing
- * Uses libxmljs2 for secure XML parsing
- */
-class XXEProtector {
-    constructor(config = {}) {
-        // Dangerous XXE patterns
-        this.dangerousPatterns = [
-            // External entity declarations
-            /<!ENTITY\s+\w+\s+SYSTEM\s+/gi,
-            /<!ENTITY\s+\w+\s+PUBLIC\s+/gi,
-            // Parameter entities
-            /<!ENTITY\s+%\s+\w+/gi,
-            // External DTD
-            /<!DOCTYPE\s+\w+\s+SYSTEM\s+/gi,
-            /<!DOCTYPE\s+\w+\s+PUBLIC\s+/gi,
-            // File protocol
-            /SYSTEM\s+["']file:\/\//gi,
-            // HTTP/HTTPS external resources
-            /SYSTEM\s+["'](https?|ftp):\/\//gi,
-            // PHP wrappers (common in XXE)
-            /php:\/\//gi,
-            /expect:\/\//gi,
-            // Data URIs
-            /data:\/\//gi,
-        ];
-        this.config = {
-            enabled: config.enabled ?? true,
-            strictMode: config.strictMode ?? true,
-            logAttempts: config.logAttempts ?? true,
-            blockOnDetection: config.blockOnDetection ?? true,
-            falsePositiveThreshold: config.falsePositiveThreshold ?? 0.5,
-            customPatterns: config.customPatterns ?? [],
-            allowDTD: config.allowDTD ?? false,
-            allowExternalEntities: config.allowExternalEntities ?? false,
-            maxEntityExpansions: config.maxEntityExpansions ?? 0,
-        };
-    }
-    /**
-     * Detect XXE attempts in XML content
-     */
-    detect(xmlContent) {
-        if (!xmlContent || typeof xmlContent !== 'string') {
-            return {
-                isMalicious: false,
-                confidence: 0,
-                detectedPatterns: [],
-                riskLevel: 'LOW',
-            };
-        }
-        const result = {
-            isMalicious: false,
-            confidence: 0,
-            detectedPatterns: [],
-            sanitizedInput: xmlContent,
-            riskLevel: 'LOW',
-        };
-        // Check for dangerous patterns
-        let riskScore = 0;
-        this.dangerousPatterns.forEach((pattern, index) => {
-            const matches = xmlContent.match(pattern);
-            if (matches) {
-                const patternName = this.getPatternName(index);
-                result.detectedPatterns.push(`${patternName}: ${matches.length} occurrence(s)`);
-                riskScore += 0.7;
-            }
-        });
-        // Check for DTD if not allowed
-        if (!this.config.allowDTD && /<!DOCTYPE/gi.test(xmlContent)) {
-            result.detectedPatterns.push('DTD declaration (not allowed)');
-            riskScore += 0.5;
-        }
-        // Check for entity declarations
-        if (!this.config.allowExternalEntities && /<!ENTITY/gi.test(xmlContent)) {
-            result.detectedPatterns.push('Entity declaration (not allowed)');
-            riskScore += 0.6;
-        }
-        // Calculate confidence
-        result.confidence = Math.min(riskScore, 1.0);
-        // Determine risk level
-        if (result.confidence >= 0.8) {
-            result.riskLevel = 'CRITICAL';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= this.config.falsePositiveThreshold) {
-            result.riskLevel = 'HIGH';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= 0.3) {
-            result.riskLevel = 'MEDIUM';
-            result.isMalicious = this.config.strictMode;
-        }
-        // Sanitize XML
-        if (result.confidence >= 0.3) {
-            result.sanitizedInput = this.sanitizeXML(xmlContent);
-        }
-        // Log attempts
-        if (this.config.logAttempts && result.confidence >= 0.5) {
-            this.logAttempt(result);
-        }
-        return result;
-    }
-    /**
-     * Sanitize XML by removing dangerous constructs
-     */
-    sanitizeXML(xml) {
-        let sanitized = xml;
-        // Remove DOCTYPE declarations
-        sanitized = sanitized.replace(/<!DOCTYPE[^>]*>/gi, '');
-        // Remove ENTITY declarations
-        sanitized = sanitized.replace(/<!ENTITY[^>]*>/gi, '');
-        // Remove SYSTEM references
-        sanitized = sanitized.replace(/SYSTEM\s+["'][^"']*["']/gi, '');
-        // Remove PUBLIC references
-        sanitized = sanitized.replace(/PUBLIC\s+["'][^"']*["']/gi, '');
-        return sanitized;
-    }
-    /**
-     * Safe XML parsing helper (returns parsed object or null)
-     * Note: In production, use a library like 'libxmljs2' with secure defaults
-     */
-    safeParseXML(xmlContent) {
-        const detection = this.detect(xmlContent);
-        if (detection.isMalicious) {
-            if (this.config.blockOnDetection) {
-                throw new Error(`XXE attack detected: ${detection.detectedPatterns.join(', ')}`);
-            }
-            return null;
-        }
-        // In production, use a secure XML parser here
-        // Example with libxmljs2:
-        // const libxmljs = require('libxmljs2');
-        // return libxmljs.parseXml(detection.sanitizedInput, {
-        //     noent: false,  // Disable entity substitution
-        //     dtdload: false, // Disable DTD loading
-        //     dtdvalid: false, // Disable DTD validation
-        //     nonet: true,    // Disable network access
-        // });
-        return { warning: 'Use a secure XML parser library in production' };
-    }
-    getPatternName(index) {
-        const names = [
-            'External SYSTEM entity',
-            'External PUBLIC entity',
-            'Parameter entity',
-            'DOCTYPE SYSTEM',
-            'DOCTYPE PUBLIC',
-            'File protocol',
-            'HTTP/HTTPS external resource',
-            'PHP wrapper',
-            'Data URI',
-        ];
-        return names[index] || `Pattern ${index}`;
-    }
-    logAttempt(result) {
-        console.warn('[XXE] Attack detected:', {
-            timestamp: new Date().toISOString(),
-            confidence: result.confidence,
-            patterns: result.detectedPatterns,
-        });
-    }
-    updateConfig(newConfig) {
-        this.config = { ...this.config, ...newConfig };
-    }
-    getConfig() {
-        return { ...this.config };
-    }
-}
-export default XXEProtector;
-//# sourceMappingURL=XXEProtector.js.map

package/dist/src/middleware/built-in/security/XXEProtector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"XXEProtector.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XXEProtector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,MAAM,YAAY;IA8Bd,YAAY,SAAoB,EAAE;QA3BlC,yBAAyB;QACR,sBAAiB,GAAG;YACjC,+BAA+B;YAC/B,8BAA8B;YAC9B,8BAA8B;YAE9B,qBAAqB;YACrB,sBAAsB;YAEtB,eAAe;YACf,+BAA+B;YAC/B,+BAA+B;YAE/B,gBAAgB;YAChB,0BAA0B;YAE1B,gCAAgC;YAChC,kCAAkC;YAElC,+BAA+B;YAC/B,YAAY;YACZ,eAAe;YAEf,YAAY;YACZ,aAAa;SAChB,CAAC;QAGE,IAAI,CAAC,MAAM,GAAG;YACV,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;YACjD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;YAC5D,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;YAClC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,KAAK;YAC5D,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,CAAC;SACvD,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAqC;QACxC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO;gBACH,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,CAAC;gBACb,gBAAgB,EAAE,EAAE;gBACpB,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAA4B;YACpC,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,EAAE;YACpB,cAAc,EAAE,UAAU;YAC1B,SAAS,EAAE,KAAK;SACnB,CAAC;QAEF,+BAA+B;QAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,KAAK,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;gBAChF,SAAS,IAAI,GAAG,CAAC;YACrB,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9D,SAAS,IAAI,GAAG,CAAC;QACrB,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACjE,SAAS,IAAI,GAAG,CAAC;QACrB,CAAC;QAED,uBAAuB;QACvB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAE7C,uBAAuB;QACvB,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC;YAC9B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACjE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC;YAC1B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC;YAC5B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAChD,CAAC;QAED,eAAe;QACf,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YACtD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW;QAC3B,IAAI,SAAS,GAAG,GAAG,CAAC;QAEpB,8BAA8B;QAC9B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAEvD,6BAA6B;QAC7B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAEtD,2BAA2B;QAC3B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QAE/D,2BAA2B;QAC3B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QAE/D,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,UAAkB;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE1C,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,8CAA8C;QAC9C,0BAA0B;QAC1B,yCAAyC;QACzC,uDAAuD;QACvD,oDAAoD;QACpD,6CAA6C;QAC7C,iDAAiD;QACjD,gDAAgD;QAChD,MAAM;QAEN,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IACxE,CAAC;IAEO,cAAc,CAAC,KAAa;QAChC,MAAM,KAAK,GAAG;YACV,wBAAwB;YACxB,wBAAwB;YACxB,kBAAkB;YAClB,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,8BAA8B;YAC9B,aAAa;YACb,UAAU;SACb,CAAC;QACF,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,WAAW,KAAK,EAAE,CAAC;IAC9C,CAAC;IAEO,UAAU,CAAC,MAA+B;QAC9C,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;SACpC,CAAC,CAAC;IACP,CAAC;IAED,YAAY,CAAC,SAA6B;QACtC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,CAAC;IAED,SAAS;QACL,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;CACJ;AAED,eAAe,YAAY,CAAC"}

package/dist/src/middleware/built-in/security/XyPrissCors.d.ts

@@ -1,12 +0,0 @@
-export interface XyPrissCorsOptions {
-    origin?: boolean | string | RegExp | (string | RegExp)[] | ((origin: string | undefined, callback: (err: Error | null, allow?: boolean | string) => void) => void);
-    methods?: string | string[];
-    allowedHeaders?: string | string[];
-    exposedHeaders?: string | string[];
-    credentials?: boolean;
-    maxAge?: number;
-    optionsSuccessStatus?: number;
-    preflightContinue?: boolean;
-}
-export declare function xyprissCors(options?: XyPrissCorsOptions): (req: any, res: any, next: any) => void;
-//# sourceMappingURL=XyPrissCors.d.ts.map

package/dist/src/middleware/built-in/security/XyPrissCors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"XyPrissCors.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissCors.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,kBAAkB;IAC/B,MAAM,CAAC,EACD,OAAO,GACP,MAAM,GACN,MAAM,GACN,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GACnB,CAAC,CACG,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,KAAK,IAAI,KAC9D,IAAI,CAAC,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,SAcpB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAqG/D"}

package/dist/src/middleware/built-in/security/XyPrissCors.js

@@ -1,94 +0,0 @@
-export function xyprissCors(options = {}) {
-    const defaultOptions = {
-        origin: true,
-        methods: "GET,HEAD,PUT,PATCH,POST,DELETE",
-        preflightContinue: false,
-        optionsSuccessStatus: 204,
-    };
-    const config = Object.assign({}, defaultOptions, options);
-    return function corsMiddleware(req, res, next) {
-        const currentOrigin = req.headers ? req.headers.origin : undefined;
-        const appendVary = (headerStr, field) => {
-            if (headerStr === "*")
-                return headerStr;
-            const parts = headerStr.split(",").map((s) => s.trim());
-            if (!parts.includes(field)) {
-                parts.push(field);
-            }
-            return parts.join(", ");
-        };
-        const applyHeaders = (originAllowed) => {
-            if (originAllowed === true || originAllowed === "*") {
-                res.setHeader("Access-Control-Allow-Origin", "*");
-            }
-            else if (typeof originAllowed === "string") {
-                res.setHeader("Access-Control-Allow-Origin", originAllowed);
-                const vary = res.getHeader("Vary") || "";
-                res.setHeader("Vary", appendVary(String(vary), "Origin"));
-            }
-            if (config.credentials) {
-                res.setHeader("Access-Control-Allow-Credentials", "true");
-            }
-            if (config.exposedHeaders) {
-                const eh = Array.isArray(config.exposedHeaders)
-                    ? config.exposedHeaders.join(",")
-                    : config.exposedHeaders;
-                res.setHeader("Access-Control-Expose-Headers", eh);
-            }
-            if (req.method === "OPTIONS") {
-                if (config.methods) {
-                    const m = Array.isArray(config.methods)
-                        ? config.methods.join(",")
-                        : config.methods;
-                    res.setHeader("Access-Control-Allow-Methods", m);
-                }
-                if (config.allowedHeaders) {
-                    const ah = Array.isArray(config.allowedHeaders)
-                        ? config.allowedHeaders.join(",")
-                        : config.allowedHeaders;
-                    res.setHeader("Access-Control-Allow-Headers", ah);
-                }
-                else if (req.headers &&
-                    req.headers["access-control-request-headers"]) {
-                    res.setHeader("Access-Control-Allow-Headers", req.headers["access-control-request-headers"]);
-                    const vary = res.getHeader("Vary") || "";
-                    res.setHeader("Vary", appendVary(String(vary), "Access-Control-Request-Headers"));
-                }
-                if (config.maxAge !== undefined && config.maxAge !== null) {
-                    res.setHeader("Access-Control-Max-Age", String(config.maxAge));
-                }
-                if (!config.preflightContinue) {
-                    res.statusCode = config.optionsSuccessStatus || 204;
-                    // For typical frameworks setting Content-Length to 0 is cleanly handled
-                    res.setHeader("Content-Length", "0");
-                    res.end();
-                    return;
-                }
-            }
-            next();
-        };
-        if (typeof config.origin === "function") {
-            const originFn = config.origin;
-            originFn(currentOrigin, (err, allow) => {
-                if (err)
-                    return next(err);
-                if (allow) {
-                    applyHeaders(allow);
-                }
-                else {
-                    next();
-                }
-            });
-        }
-        else if (config.origin === true || config.origin === "*") {
-            applyHeaders("*");
-        }
-        else if (typeof config.origin === "string") {
-            applyHeaders(config.origin);
-        }
-        else {
-            next();
-        }
-    };
-}
-//# sourceMappingURL=XyPrissCors.js.map

package/dist/src/middleware/built-in/security/XyPrissCors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"XyPrissCors.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissCors.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IACxD,MAAM,cAAc,GAAG;QACnB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,gCAAgC;QACzC,iBAAiB,EAAE,KAAK;QACxB,oBAAoB,EAAE,GAAG;KAC5B,CAAC;IAEF,MAAM,MAAM,GAAuB,MAAM,CAAC,MAAM,CAC5C,EAAE,EACF,cAAc,EACd,OAAO,CACV,CAAC;IAEF,OAAO,SAAS,cAAc,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QACxD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnE,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAE;YACpD,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,CAAC,aAA+B,EAAE,EAAE;YACrD,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC3C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;oBACjC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;wBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;wBAC3C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;wBACjC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC5B,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;gBACtD,CAAC;qBAAM,IACH,GAAG,CAAC,OAAO;oBACX,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAC/C,CAAC;oBACC,GAAG,CAAC,SAAS,CACT,8BAA8B,EAC9B,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAChD,CAAC;oBACF,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACzC,GAAG,CAAC,SAAS,CACT,MAAM,EACN,UAAU,CACN,MAAM,CAAC,IAAI,CAAC,EACZ,gCAAgC,CACnC,CACJ,CAAC;gBACN,CAAC;gBAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBACxD,GAAG,CAAC,SAAS,CACT,wBAAwB,EACxB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CACxB,CAAC;gBACN,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBAC5B,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,oBAAoB,IAAI,GAAG,CAAC;oBACpD,wEAAwE;oBACxE,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;oBACrC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACX,CAAC;YACL,CAAC;YACD,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAkB,CAAC;YAC3C,QAAQ,CACJ,aAAa,EACb,CAAC,GAAiB,EAAE,KAAwB,EAAE,EAAE;gBAC5C,IAAI,GAAG;oBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,KAAK,EAAE,CAAC;oBACR,YAAY,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACJ,IAAI,EAAE,CAAC;gBACX,CAAC;YACL,CAAC,CACJ,CAAC;QACN,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,YAAY,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3C,YAAY,CAAC,MAAM,CAAC,MAAgB,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACJ,IAAI,EAAE,CAAC;QACX,CAAC;IACL,CAAC,CAAC;AACN,CAAC"}

package/dist/src/middleware/built-in/security/XyPrissHPP.d.ts

@@ -1,7 +0,0 @@
-export interface XyPrissHPPOptions {
-    checkQuery?: boolean;
-    checkBody?: boolean;
-    whitelist?: string[];
-}
-export declare function xyprissHPP(options?: XyPrissHPPOptions): (req: any, res: any, next: any) => void;
-//# sourceMappingURL=XyPrissHPP.d.ts.map

package/dist/src/middleware/built-in/security/XyPrissHPP.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"XyPrissHPP.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissHPP.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,SA0CnB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAa9D"}

package/dist/src/middleware/built-in/security/XyPrissHPP.js

@@ -1,48 +0,0 @@
-export function xyprissHPP(options = {}) {
-    const checkQuery = options.checkQuery !== false;
-    const checkBody = options.checkBody !== false;
-    const whitelist = Array.isArray(options.whitelist)
-        ? options.whitelist.filter((w) => typeof w === "string")
-        : [];
-    function putAside(req, keyReqPart, keyPolluted) {
-        const reqPart = req[keyReqPart];
-        if (!reqPart || typeof reqPart !== "object")
-            return;
-        let reqPolluted = req[keyPolluted];
-        if (reqPolluted === undefined) {
-            reqPolluted = req[keyPolluted] = {};
-            const parameters = Object.keys(reqPart);
-            for (let i = 0; i < parameters.length; i++) {
-                const paramKey = parameters[i];
-                const paramValue = reqPart[paramKey];
-                if (!Array.isArray(paramValue)) {
-                    continue;
-                }
-                reqPolluted[paramKey] = paramValue;
-                // Prends le dernier élément du tableau pour éviter la pollution de variables multiples
-                reqPart[paramKey] = paramValue[paramValue.length - 1];
-            }
-        }
-        if (whitelist.length > 0) {
-            for (let k = 0; k < whitelist.length; k++) {
-                const whitelistedParam = whitelist[k];
-                if (reqPolluted[whitelistedParam]) {
-                    reqPart[whitelistedParam] = reqPolluted[whitelistedParam];
-                    delete reqPolluted[whitelistedParam];
-                }
-            }
-        }
-    }
-    return function hppMiddleware(req, res, next) {
-        if (checkQuery && req.query) {
-            putAside(req, "query", "queryPolluted");
-        }
-        if (checkBody && req.body) {
-            // Optionnellement, vérifier le header Content-Type pour url-encoded ou autres formats
-            // mais ici on s'aligne globalement sur ce qui a déjà été parsé.
-            putAside(req, "body", "bodyPolluted");
-        }
-        next();
-    };
-}
-//# sourceMappingURL=XyPrissHPP.js.map

package/dist/src/middleware/built-in/security/XyPrissHPP.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"XyPrissHPP.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/XyPrissHPP.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC;IAET,SAAS,QAAQ,CAAC,GAAQ,EAAE,UAAkB,EAAE,WAAmB;QAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QAEpD,IAAI,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;QAEnC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YAEpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAErC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC7B,SAAS;gBACb,CAAC;gBAED,WAAW,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;gBACnC,uFAAuF;gBACvF,OAAO,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBAChC,OAAO,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;oBAC1D,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,SAAS,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QACvD,IAAI,UAAU,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,sFAAsF;YACtF,gEAAgE;YAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC"}

package/dist/src/middleware/built-in/security/index.d.ts

@@ -1,20 +0,0 @@
-/**
- * XyPriss Built-in Security Modules
- *
- * Comprehensive security protection modules to protect servers
- * with intelligent false positive avoidance
- *
- * Note: XSS protection is already handled by security-middleware.ts using 'xss' library
- * Note: CSRF protection is already handled by BuiltInMiddleware using 'csrf-csrf' library
- *
- */
-export { default as SQLInjectionDetector } from "./SQLInjectionDetector";
-export { default as PathTraversalDetector } from "./PathTraversalDetector";
-export { default as CommandInjectionDetector } from "./CommandInjectionDetector";
-export { default as XXEProtector } from "./XXEProtector";
-export { default as LDAPInjectionDetector } from "./LDAPInjectionDetector";
-export { BrowserOnlyProtector } from "./BrowserOnlyProtector";
-export { TerminalOnlyProtector } from "./TerminalOnlyProtector";
-export { MobileOnlyProtector, type MobileOnlyConfig, } from "./MobileOnlyProtector";
-export * from "./types";
-//# sourceMappingURL=index.d.ts.map

package/dist/src/middleware/built-in/security/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACH,mBAAmB,EACnB,KAAK,gBAAgB,GACxB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,SAAS,CAAC"}

package/dist/src/middleware/built-in/security/index.js

@@ -1,20 +0,0 @@
-/**
- * XyPriss Built-in Security Modules
- *
- * Comprehensive security protection modules to protect servers
- * with intelligent false positive avoidance
- *
- * Note: XSS protection is already handled by security-middleware.ts using 'xss' library
- * Note: CSRF protection is already handled by BuiltInMiddleware using 'csrf-csrf' library
- *
- */
-export { default as SQLInjectionDetector } from "./SQLInjectionDetector";
-export { default as PathTraversalDetector } from "./PathTraversalDetector";
-export { default as CommandInjectionDetector } from "./CommandInjectionDetector";
-export { default as XXEProtector } from "./XXEProtector";
-export { default as LDAPInjectionDetector } from "./LDAPInjectionDetector";
-export { BrowserOnlyProtector } from "./BrowserOnlyProtector";
-export { TerminalOnlyProtector } from "./TerminalOnlyProtector";
-export { MobileOnlyProtector, } from "./MobileOnlyProtector";
-export * from "./types";
-//# sourceMappingURL=index.js.map

package/dist/src/middleware/built-in/security/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACH,mBAAmB,GAEtB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,SAAS,CAAC"}

package/dist/src/middleware/built-in/security/types.d.ts

@@ -1,147 +0,0 @@
-/**
- * Common types for security modules
- */
-export interface SecurityDetectionResult {
-    isMalicious: boolean;
-    confidence: number;
-    detectedPatterns: string[];
-    sanitizedInput?: string;
-    riskLevel: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
-    metadata?: Record<string, any>;
-}
-export interface SecurityModuleConfig {
-    enabled?: boolean;
-    strictMode?: boolean;
-    logAttempts?: boolean;
-    blockOnDetection?: boolean;
-    falsePositiveThreshold?: number;
-    customPatterns?: RegExp[];
-}
-export interface ContextInfo {
-    fieldName?: string;
-    fieldType?: string;
-    userRole?: string;
-    ipAddress?: string;
-    userAgent?: string;
-    requestPath?: string;
-}
-export interface RequestSignatureConfig {
-    /** Custom header name for the signature (default: "XP-Request-Sig") */
-    headerName?: string;
-    /** The secret value that must match the header */
-    secret: string;
-    /** Custom error message for blocked requests */
-    errorMessage?: string;
-    /** HTTP status code for blocked requests */
-    statusCode?: number;
-    /** Enable debug logging */
-    debug?: boolean;
-    /** Case-sensitive comparison (default: true) */
-    caseSensitive?: boolean;
-    /** Trim whitespace from header value (default: true) */
-    trimValue?: boolean;
-    /** Maximum allowed header length to prevent DoS (default: 512) */
-    maxHeaderLength?: number;
-    /** Rate limiting: max failed attempts before temporary block (default: 5) */
-    maxFailedAttempts?: number;
-    /** Rate limiting: block duration in milliseconds (default: 15 minutes) */
-    blockDuration?: number;
-    /** Disable rate limiting entirely (default: false) */
-    disableRateLimiting?: boolean;
-    /** Scale factor for rate limiting thresholds (default: 1.0) */
-    rateLimitScaleFactor?: number;
-    /** Minimum secret length requirement (default: 32) */
-    minSecretLength?: number;
-    /** Enable timing attack protection (default: true) */
-    timingSafeComparison?: boolean;
-    /** Reject requests with suspicious patterns (default: true) */
-    rejectSuspiciousPatterns?: boolean;
-}
-export interface FailedAttempt {
-    count: number;
-    blockedUntil: number | null;
-    lastAttempt: number;
-}
-/**
- * Browser-Only Protection Configuration
- *
- * Blocks non-browser requests (cURL, Postman, scripts) while allowing legitimate browser access.
- * Useful for APIs that should only be accessed through web browsers.
- *
- * @example Enable with defaults:
- * ```typescript
- * browserOnly: true
- * ```
- *
- * @example Custom configuration:
- * ```typescript
- * browserOnly: {
- *   requireSecFetch: true,
- *   blockAutomationTools: true,
- *   allowOriginRequests: true,
- *   errorMessage: "Browser access required"
- * }
- * ```
- */
-export interface BrowserOnlyConfig {
-    /** Enable browser-only protection (default: true when config provided) */
-    enable?: boolean;
-    /** Block requests without Sec-Fetch headers */
-    requireSecFetch?: boolean;
-    /** Block requests with curl/wget user agents */
-    blockAutomationTools?: boolean;
-    /** Require complex Accept header */
-    requireComplexAccept?: boolean;
-    /** Allow requests with Origin header (CORS) */
-    allowOriginRequests?: boolean;
-    /** Custom error message */
-    errorMessage?: string;
-    /** HTTP status code for blocked requests */
-    statusCode?: number;
-    /** Custom validation function */
-    customValidator?: (req: any) => boolean;
-    /** Enable debug logging */
-    debug?: boolean;
-}
-/**
- * Terminal-Only Protection Configuration
- *
- * Blocks browser requests while allowing terminal/API tools.
- * Perfect for API-only endpoints or development tools.
- *
- * @example Enable with defaults:
- * ```typescript
- * terminalOnly: true
- * ```
- *
- * @example Custom configuration:
- * ```typescript
- * terminalOnly: {
- *   blockSecFetch: true,
- *   allowedTools: ["curl", "wget"],
- *   blockBrowserIndicators: true,
- *   debug: true
- * }
- * ```
- */
-export interface TerminalOnlyConfig {
-    /** Enable terminal-only protection (default: true when config provided) */
-    enable?: boolean;
-    /** Block requests with Sec-Fetch headers (browsers) */
-    blockSecFetch?: boolean;
-    /** Allow specific automation tools (whitelist approach) */
-    allowedTools?: string[];
-    /** Block requests with complex browser headers */
-    blockBrowserIndicators?: boolean;
-    /** Require simple Accept header */
-    requireSimpleAccept?: boolean;
-    /** Custom error message */
-    errorMessage?: string;
-    /** HTTP status code for blocked requests */
-    statusCode?: number;
-    /** Custom validation function */
-    customValidator?: (req: any) => boolean;
-    /** Enable debug logging */
-    debug?: boolean;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/src/middleware/built-in/security/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACnC,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IAEf,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,+DAA+D;IAC/D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,sDAAsD;IACtD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,+DAA+D;IAC/D,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,iBAAiB;IAC9B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,gDAAgD;IAChD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,oCAAoC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IAExC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IAC/B,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,uDAAuD;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,kDAAkD;IAClD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,mCAAmC;IACnC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;IACxC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB"}

package/dist/src/middleware/built-in/security/types.js

@@ -1,5 +0,0 @@
-/**
- * Common types for security modules
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/src/middleware/built-in/security/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}