xypriss 9.6.97 → 9.7.0

package/dist/esm/src/middleware/built-in/security/SQLInjectionDetector.js

@@ -16,7 +16,7 @@ class SQLInjectionDetector {
             /\/\*.*?\*\/(or|OR|and|AND)\/\*.*?\*\//gi,
             // Time-based with specific syntax (enhanced)
             /(sleep|SLEEP|waitfor|WAITFOR|delay|DELAY)\s*\(.*?\)/gi,
-            /(waitfor|WAITFOR)\s+(delay|DELAY)\s+'/gi,
+            /waitfor\s+delay\s+/i,
             // System stored procedures
             /(exec|EXEC|execute|EXECUTE)\s+(sp_|xp_)\w+/gi,
             // Information schema with specific queries
@@ -27,8 +27,8 @@ class SQLInjectionDetector {
             /0x(27|22|5C|2D|2D)/gi, // ', ", \, --
             // Multiple quotes for quote breaking
             /('{3,}|"{3,})/g,
-            // Stacked queries with dangerous operations
-            /;(\s)*(drop|delete|insert|update|create|alter)(\s)+/gi,
+            // Stacked queries
+            /;\s*(drop|delete|insert|update|create|alter|select)\b/i,
         ];
         // Medium risk patterns (require context analysis)
         this.mediumRiskPatterns = [
@@ -44,6 +44,18 @@ class SQLInjectionDetector {
             // Wildcards
             /[%_]/g,
         ];
+        this.referencePayloads = [
+            "1' OR '1'='1",
+            "admin'--",
+            "' UNION SELECT NULL,NULL,NULL--",
+            "'; WAITFOR DELAY '0:0:5'--",
+            "1 OR 1=1;--",
+            "') OR ('1'='1",
+            "1/0",
+            "CHAR(113)+CHAR(118)+CHAR(112)+CHAR(113)",
+            "SELECT * FROM users",
+            "DROP TABLE customers",
+        ];
         // Characters that are suspicious in certain contexts
         this.contextSensitiveChars = /[';\"\\%_]/g;
         this.config = {
@@ -53,6 +65,7 @@ class SQLInjectionDetector {
             logAttempts: config.logAttempts ?? true,
             contextualAnalysis: config.contextualAnalysis ?? true,
             falsePositiveThreshold: config.falsePositiveThreshold ?? 0.6,
+            proximityThreshold: config.proximityThreshold ?? 0.85,
         };
     }
     /**
@@ -84,28 +97,31 @@ class SQLInjectionDetector {
         this.highRiskPatterns.forEach((pattern, index) => {
             const matches = input.match(pattern);
             if (matches) {
-                const patternName = this.getHighRiskPatternName(index);
-                result.detectedPatterns.push(`${patternName}: ${matches.join(", ")}`);
-                highRiskScore += this.getHighRiskPatternWeight(index);
+                result.detectedPatterns.push(`Pattern Match: ${matches.join(", ")}`);
+                highRiskScore += 0.3;
             }
         });
-        // Medium-risk pattern analysis (context-dependent)
-        let mediumRiskScore = 0;
-        if (this.config.contextualAnalysis) {
-            mediumRiskScore = this.analyzeContext(input, context || "");
-        }
-        else {
-            // Basic medium risk analysis without context
-            this.mediumRiskPatterns.forEach((pattern, index) => {
-                const matches = input.match(pattern);
-                if (matches) {
-                    mediumRiskScore += 0.1 * matches.length; // Lower weight for medium risk
-                }
-            });
+        // 1. Medium risk patterns (accumulative)
+        let mediumMatches = 0;
+        this.mediumRiskPatterns.forEach((pattern) => {
+            const matches = input.match(pattern);
+            if (matches) {
+                mediumMatches += matches.length;
+            }
+        });
+        // Cap medium match contribution to prevent false positives in large structured data
+        const maxMediumMatches = 20;
+        const cappedMediumMatches = Math.min(mediumMatches, maxMediumMatches);
+        let mediumRiskScore = cappedMediumMatches * 0.1;
+        // 2. Proximity analysis (Levenshtein) - Complementary to regex
+        const proximityScore = this.calculateMaxProximity(input);
+        if (proximityScore > 0.4) {
+            highRiskScore += proximityScore * 0.5;
+            result.detectedPatterns.push(`Proximity Match (${Math.round(proximityScore * 100)}%)`);
         }
         // Contextual analysis for legitimate use cases
         const legitimacyScore = this.calculateLegitimacyScore(input);
-        // Calculate confidence with false positive mitigation
+        // 3. Final confidence calculation
         const rawScore = highRiskScore + mediumRiskScore * 0.3;
         result.confidence = Math.max(0, rawScore - legitimacyScore);
         result.confidence = Math.min(result.confidence, 1.0);
@@ -186,10 +202,25 @@ class SQLInjectionDetector {
      */
     calculateLegitimacyScore(input) {
         let legitimacyScore = 0;
+        // JSON check - Structured data often triggers false positives due to quotes/braces
+        if ((input.startsWith("{") && input.endsWith("}")) ||
+            (input.startsWith("[") && input.endsWith("]"))) {
+            try {
+                // Quick check for JSON validity
+                JSON.parse(input);
+                legitimacyScore += 0.8; // Significant boost for valid JSON
+            }
+            catch (e) {
+                // Not valid JSON, but maybe partial JSON
+                if (input.includes('":') || input.includes('",')) {
+                    legitimacyScore += 0.3;
+                }
+            }
+        }
         // Natural language indicators
         const naturalWords = input.match(/\b[a-zA-Z]{3,}\b/g);
-        if (naturalWords && naturalWords.length > 2) {
-            legitimacyScore += 0.2; // Looks like natural text
+        if (naturalWords && naturalWords.length > 5) {
+            legitimacyScore += 0.4; // More weight for clearly natural text
         }
         // Check for common legitimate patterns
         const legitimatePatterns = [
@@ -200,20 +231,71 @@ class SQLInjectionDetector {
         ];
         legitimatePatterns.forEach((pattern) => {
             if (pattern.test(input)) {
-                legitimacyScore += 0.15;
+                legitimacyScore += 0.2;
             }
         });
-        // Length-based legitimacy (very short or very specific lengths are more suspicious)
-        if (input.length > 10 && input.length < 200) {
-            legitimacyScore += 0.1;
-        }
         // Check for balanced quotes (legitimate text often has balanced quotes)
         const singleQuotes = (input.match(/'/g) || []).length;
         const doubleQuotes = (input.match(/"/g) || []).length;
-        if (singleQuotes % 2 === 0 && doubleQuotes % 2 === 0) {
-            legitimacyScore += 0.1;
+        if (singleQuotes > 0 &&
+            singleQuotes % 2 === 0 &&
+            doubleQuotes % 2 === 0) {
+            legitimacyScore += 0.15;
+        }
+        return Math.min(legitimacyScore, 1.2); // Cap increased to allow full offset of medium risk
+    }
+    calculateMaxProximity(input) {
+        const normalizedInput = input.toLowerCase().replace(/\s+/g, " ");
+        let maxProximity = 0;
+        // Optimized proximity check: only check near suspicious characters to save CPU
+        const suspiciousIndices = [];
+        for (let i = 0; i < input.length; i++) {
+            if (["'", '"', ";", "-", "#", "u", "s", "d"].includes(input[i].toLowerCase())) {
+                suspiciousIndices.push(i);
+            }
+        }
+        // Limit the number of checks for very large strings
+        const maxChecks = 50;
+        const stride = Math.ceil(suspiciousIndices.length / maxChecks);
+        this.referencePayloads.forEach((payload) => {
+            const normalizedPayload = payload.toLowerCase();
+            const pLen = normalizedPayload.length;
+            for (let i = 0; i < suspiciousIndices.length; i += stride) {
+                const start = Math.max(0, suspiciousIndices[i] - 5);
+                const end = Math.min(normalizedInput.length, start + pLen + 10);
+                const chunk = normalizedInput.substring(start, end);
+                if (chunk.length < pLen / 2)
+                    continue;
+                const distance = this.levenshteinDistance(normalizedPayload, chunk);
+                const similarity = 1 - distance / Math.max(pLen, chunk.length);
+                if (similarity > maxProximity) {
+                    maxProximity = similarity;
+                }
+            }
+        });
+        return maxProximity;
+    }
+    levenshteinDistance(a, b) {
+        const matrix = [];
+        for (let i = 0; i <= b.length; i++) {
+            matrix[i] = [i];
+        }
+        for (let j = 0; j <= a.length; j++) {
+            matrix[0][j] = j;
+        }
+        for (let i = 1; i <= b.length; i++) {
+            for (let j = 1; j <= a.length; j++) {
+                if (b.charAt(i - 1) === a.charAt(j - 1)) {
+                    matrix[i][j] = matrix[i - 1][j - 1];
+                }
+                else {
+                    matrix[i][j] = Math.min(matrix[i - 1][j - 1] + 1, // substitution
+                    matrix[i][j - 1] + 1, // insertion
+                    matrix[i - 1][j] + 1);
+                }
+            }
         }
-        return Math.min(legitimacyScore, 0.5); // Cap legitimacy score
+        return matrix[b.length][a.length];
     }
     /**
      * Smart sanitization that preserves legitimate content
@@ -240,10 +322,7 @@ class SQLInjectionDetector {
     validateAndSanitize(input, throwOnDetection = false) {
         const result = this.detect(input);
         if (result.isMalicious && throwOnDetection) {
-            throw new Error(`SQL injection attempt detected. Confidence: ${(result.confidence * 100).toFixed(1)}%. `
-            // +
-            //     `Patterns: ${result.detectedPatterns.join(", ")}`
-            );
+            throw new Error(`SQL injection attempt detected. Confidence: ${(result.confidence * 100).toFixed(1)}%. `);
         }
         return result.sanitizedInput || "";
     }

package/dist/esm/src/middleware/built-in/security/SQLInjectionDetector.js.map

@@ -1 +1 @@
-{"version":3,"file":"SQLInjectionDetector.js","sources":["../../../../../../src/middleware/built-in/security/SQLInjectionDetector.ts"],"sourcesContent":[null],"names":[],"mappings":"AAiBA,MAAM,oBAAoB,CAAA;AAmEtB,IAAA,WAAA,CAAY,SAA6B,EAAE,EAAA;;AA/D1B,QAAA,IAAA,CAAA,gBAAgB,GAAG;;YAEhC,oDAAoD;;YAGpD,uEAAuE;YACvE,cAAc;;YAGd,8EAA8E;YAC9E,gFAAgF;;YAGhF,+BAA+B;;YAG/B,yCAAyC;;YAGzC,uDAAuD;YACvD,yCAAyC;;YAGzC,8CAA8C;;YAG9C,sEAAsE;;YAGtE,wEAAwE;;AAGxE,YAAA,sBAAsB;;YAGtB,gBAAgB;;YAGhB,uDAAuD;SAC1D;;AAGgB,QAAA,IAAA,CAAA,kBAAkB,GAAG;;YAElC,6DAA6D;;YAG7D,8BAA8B;;YAG9B,IAAI;YACJ,IAAI;;YAGJ,SAAS;;YAGT,OAAO;SACV;;QAGgB,IAAA,CAAA,qBAAqB,GAAG,aAAa;QAGlD,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;AACtC,YAAA,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,2BAA2B;AAChE,YAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;AACnC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;AACvC,YAAA,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;AACrD,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;SAC/D;IACL;AAEA;;AAEG;IACH,MAAM,CACF,KAAgC,EAChC,OAAgB,EAAA;QAEhB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACrC,OAAO;AACH,gBAAA,WAAW,EAAE,KAAK;AAClB,gBAAA,UAAU,EAAE,CAAC;AACb,gBAAA,gBAAgB,EAAE,EAAE;AACpB,gBAAA,SAAS,EAAE,KAAK;aACnB;QACL;AAEA,QAAA,MAAM,MAAM,GAAoB;AAC5B,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,gBAAgB,EAAE,EAAE;AACpB,YAAA,cAAc,EAAE,KAAK;AACrB,YAAA,SAAS,EAAE,KAAK;SACnB;;QAGD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;AACtC,YAAA,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;AACzB,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACpD;;QAGA,IAAI,aAAa,GAAG,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;gBACT,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;AACtD,gBAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CACxB,GAAG,WAAW,CAAA,EAAA,EAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,CAC1C;AACD,gBAAA,aAAa,IAAI,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;YACzD;AACJ,QAAA,CAAC,CAAC;;QAGF,IAAI,eAAe,GAAG,CAAC;AACvB,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;YAChC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;QAC/D;aAAO;;YAEH,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;gBAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACpC,IAAI,OAAO,EAAE;oBACT,eAAe,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC5C;AACJ,YAAA,CAAC,CAAC;QACN;;QAGA,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;;AAG5D,QAAA,MAAM,QAAQ,GAAG,aAAa,GAAG,eAAe,GAAG,GAAG;AACtD,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,CAAC;AAC3D,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC;;AAGpD,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AAC1B,YAAA,MAAM,CAAC,SAAS,GAAG,UAAU;AAC7B,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;aAAO,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AAChE,YAAA,MAAM,CAAC,SAAS,GAAG,MAAM;AACzB,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;AAAO,aAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACjC,YAAA,MAAM,CAAC,SAAS,GAAG,QAAQ;AAC3B,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC/B;aAAO;AACH,YAAA,MAAM,CAAC,SAAS,GAAG,KAAK;AACxB,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK;QAC9B;;AAGA,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACrD,YAAA,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAClC;;AAGA,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACrD;AAEA,QAAA,OAAO,MAAM;IACjB;AAEA;;AAEG;IACK,cAAc,CAAC,KAAa,EAAE,OAAe,EAAA;QACjD,IAAI,KAAK,GAAG,CAAC;;AAGb,QAAA,MAAM,gBAAgB,GAAG;YACrB,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,aAAa;YACb,SAAS;YACT,QAAQ;YACR,SAAS;YACT,OAAO;YACP,SAAS;YACT,SAAS;YACT,OAAO;SACV;QAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,KAChD,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACtC;QAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,IAAI,YAAY,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM;;gBAGvC,IAAI,iBAAiB,EAAE;AACnB,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;;AAGA,gBAAA,IAAI,KAAK,KAAK,CAAC,IAAI,iBAAiB,EAAE;;AAElC,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;gBAEA,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;;AAE5B,oBAAA,IACI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;AACxB,wBAAA,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EACjC;wBACE,YAAY,IAAI,GAAG;oBACvB;gBACJ;gBAEA,KAAK,IAAI,YAAY;YACzB;AACJ,QAAA,CAAC,CAAC;AAEF,QAAA,OAAO,KAAK;IAChB;AAEA;;AAEG;AACK,IAAA,wBAAwB,CAAC,KAAa,EAAA;QAC1C,IAAI,eAAe,GAAG,CAAC;;QAGvB,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACrD,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;AACzC,YAAA,eAAe,IAAI,GAAG,CAAC;QAC3B;;AAGA,QAAA,MAAM,kBAAkB,GAAG;AACvB,YAAA,4BAA4B;AAC5B,YAAA,0BAA0B;AAC1B,YAAA,wBAAwB;AACxB,YAAA,0BAA0B;SAC7B;AAED,QAAA,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;AACnC,YAAA,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACrB,eAAe,IAAI,IAAI;YAC3B;AACJ,QAAA,CAAC,CAAC;;AAGF,QAAA,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;YACzC,eAAe,IAAI,GAAG;QAC1B;;AAGA,QAAA,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM;AACrD,QAAA,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM;AACrD,QAAA,IAAI,YAAY,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,GAAG,CAAC,KAAK,CAAC,EAAE;YAClD,eAAe,IAAI,GAAG;QAC1B;QAEA,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1C;AAEA;;AAEG;AACH,IAAA,aAAa,CAAC,KAAa,EAAA;AACvB,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,KAAK;QAExB,IAAI,SAAS,GAAG,KAAK;;QAGrB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACjD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;;QAGlD,MAAM,gBAAgB,GAAG,yCAAyC;QAClE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC;;QAGvD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;;QAGhD,SAAS,GAAG,SAAS,CAAC,OAAO,CACzB,+DAA+D,EAC/D,KAAK,CACR;AAED,QAAA,OAAO,SAAS,CAAC,IAAI,EAAE;IAC3B;AAEA;;AAEG;AACH,IAAA,mBAAmB,CACf,KAAa,EACb,gBAAA,GAA4B,KAAK,EAAA;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AAEjC,QAAA,IAAI,MAAM,CAAC,WAAW,IAAI,gBAAgB,EAAE;AACxC,YAAA,MAAM,IAAI,KAAK,CACX,CAAA,4CAAA,EAA+C,CAC3C,MAAM,CAAC,UAAU,GAAG,GAAG,EACzB,OAAO,CAAC,CAAC,CAAC,CAAA,GAAA;;;aAGf;QACL;AAEA,QAAA,OAAO,MAAM,CAAC,cAAc,IAAI,EAAE;IACtC;AAEA;;AAEG;IACH,wBAAwB,CACpB,KAAa,EACb,MAAa,EAAA;;QAGb,IAAI,kBAAkB,GAAG,KAAK;QAC9B,MAAM,UAAU,GAAU,EAAE;QAE5B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,KAAI;AAC5B,YAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AACjC,gBAAA,IAAI,MAAM,CAAC,WAAW,EAAE;AACpB,oBAAA,MAAM,IAAI,KAAK,CACX,aAAa,KAAK,CAAA,iCAAA,CAAmC,CACxD;gBACL;AACA,gBAAA,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1C;iBAAO;AACH,gBAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1B;AACJ,QAAA,CAAC,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE;IAC5D;AAEQ,IAAA,sBAAsB,CAAC,KAAa,EAAA;AACxC,QAAA,MAAM,KAAK,GAAG;YACV,qBAAqB;YACrB,qBAAqB;YACrB,wBAAwB;YACxB,qBAAqB;YACrB,sBAAsB;YACtB,qBAAqB;YACrB,8BAA8B;YAC9B,kBAAkB;YAClB,sBAAsB;YACtB,uBAAuB;YACvB,0BAA0B;YAC1B,oBAAoB;YACpB,uBAAuB;YACvB,uBAAuB;YACvB,sBAAsB;SACzB;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,kBAAA,EAAqB,KAAK,EAAE;IACvD;AAEQ,IAAA,wBAAwB,CAAC,KAAa,EAAA;;AAE1C,QAAA,MAAM,OAAO,GAAG;AACZ,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;SACN;AACD,QAAA,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG;IAChC;IAEQ,UAAU,CAAC,KAAa,EAAE,MAAuB,EAAA;AACrD,QAAA,OAAO,CAAC,IAAI,CAAC,CAAA,+BAAA,CAAiC,EAAE;AAC5C,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC;YAClE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;AACpC,SAAA,CAAC;IACN;AAEA;;AAEG;AACH,IAAA,YAAY,CAAC,SAAsC,EAAA;AAC/C,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE;IAClD;AAEA;;AAEG;IACH,SAAS,GAAA;AACL,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;IAC7B;AACH;;;;"}
+{"version":3,"file":"SQLInjectionDetector.js","sources":["../../../../../../src/middleware/built-in/security/SQLInjectionDetector.ts"],"sourcesContent":[null],"names":[],"mappings":"AAkBA,MAAM,oBAAoB,CAAA;AAgFtB,IAAA,WAAA,CAAY,SAAsC,EAAE,EAAA;;AA5EnC,QAAA,IAAA,CAAA,gBAAgB,GAAG;;YAEhC,oDAAoD;;YAGpD,uEAAuE;YACvE,cAAc;;YAGd,8EAA8E;YAC9E,gFAAgF;;YAGhF,+BAA+B;;YAG/B,yCAAyC;;YAGzC,uDAAuD;YACvD,qBAAqB;;YAGrB,8CAA8C;;YAG9C,sEAAsE;;YAGtE,wEAAwE;;AAGxE,YAAA,sBAAsB;;YAGtB,gBAAgB;;YAGhB,wDAAwD;SAC3D;;AAGgB,QAAA,IAAA,CAAA,kBAAkB,GAAG;;YAElC,6DAA6D;;YAG7D,8BAA8B;;YAG9B,IAAI;YACJ,IAAI;;YAGJ,SAAS;;YAGT,OAAO;SACV;AAEgB,QAAA,IAAA,CAAA,iBAAiB,GAAG;YACjC,cAAc;YACd,UAAU;YACV,iCAAiC;YACjC,4BAA4B;YAC5B,aAAa;YACb,eAAe;YACf,KAAK;YACL,yCAAyC;YACzC,qBAAqB;YACrB,sBAAsB;SACzB;;QAGgB,IAAA,CAAA,qBAAqB,GAAG,aAAa;QAGlD,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;AACtC,YAAA,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,2BAA2B;AAChE,YAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;AACnC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;AACvC,YAAA,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;AACrD,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;AAC5D,YAAA,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;SACxD;IACL;AAEA;;AAEG;IACH,MAAM,CACF,KAAgC,EAChC,OAAgB,EAAA;QAEhB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACrC,OAAO;AACH,gBAAA,WAAW,EAAE,KAAK;AAClB,gBAAA,UAAU,EAAE,CAAC;AACb,gBAAA,gBAAgB,EAAE,EAAE;AACpB,gBAAA,SAAS,EAAE,KAAK;aACnB;QACL;AAEA,QAAA,MAAM,MAAM,GAAoB;AAC5B,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,gBAAgB,EAAE,EAAE;AACpB,YAAA,cAAc,EAAE,KAAK;AACrB,YAAA,SAAS,EAAE,KAAK;SACnB;;QAGD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;AACtC,YAAA,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;AACzB,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACpD;;QAGA,IAAI,aAAa,GAAG,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CACxB,CAAA,eAAA,EAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,CACzC;gBACD,aAAa,IAAI,GAAG;YACxB;AACJ,QAAA,CAAC,CAAC;;QAGF,IAAI,aAAa,GAAG,CAAC;QACrB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;YACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,aAAa,IAAI,OAAO,CAAC,MAAM;YACnC;AACJ,QAAA,CAAC,CAAC;;QAGF,MAAM,gBAAgB,GAAG,EAAE;QAC3B,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC;AACrE,QAAA,IAAI,eAAe,GAAG,mBAAmB,GAAG,GAAG;;QAG/C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;AACxD,QAAA,IAAI,cAAc,GAAG,GAAG,EAAE;AACtB,YAAA,aAAa,IAAI,cAAc,GAAG,GAAG;AACrC,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CACxB,oBAAoB,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,CAAA,EAAA,CAAI,CAC3D;QACL;;QAGA,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;;AAG5D,QAAA,MAAM,QAAQ,GAAG,aAAa,GAAG,eAAe,GAAG,GAAG;AACtD,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,CAAC;AAC3D,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC;;AAGpD,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AAC1B,YAAA,MAAM,CAAC,SAAS,GAAG,UAAU;AAC7B,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;aAAO,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AAChE,YAAA,MAAM,CAAC,SAAS,GAAG,MAAM;AACzB,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;AAAO,aAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACjC,YAAA,MAAM,CAAC,SAAS,GAAG,QAAQ;AAC3B,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC/B;aAAO;AACH,YAAA,MAAM,CAAC,SAAS,GAAG,KAAK;AACxB,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK;QAC9B;;AAGA,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACrD,YAAA,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAClC;;AAGA,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACrD;AAEA,QAAA,OAAO,MAAM;IACjB;AAEA;;AAEG;IACK,cAAc,CAAC,KAAa,EAAE,OAAe,EAAA;QACjD,IAAI,KAAK,GAAG,CAAC;;AAGb,QAAA,MAAM,gBAAgB,GAAG;YACrB,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,aAAa;YACb,SAAS;YACT,QAAQ;YACR,SAAS;YACT,OAAO;YACP,SAAS;YACT,SAAS;YACT,OAAO;SACV;QAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,KAChD,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACtC;QAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,IAAI,YAAY,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM;;gBAGvC,IAAI,iBAAiB,EAAE;AACnB,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;;AAGA,gBAAA,IAAI,KAAK,KAAK,CAAC,IAAI,iBAAiB,EAAE;;AAElC,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;gBAEA,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;;AAE5B,oBAAA,IACI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;AACxB,wBAAA,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EACjC;wBACE,YAAY,IAAI,GAAG;oBACvB;gBACJ;gBAEA,KAAK,IAAI,YAAY;YACzB;AACJ,QAAA,CAAC,CAAC;AAEF,QAAA,OAAO,KAAK;IAChB;AAEA;;AAEG;AACK,IAAA,wBAAwB,CAAC,KAAa,EAAA;QAC1C,IAAI,eAAe,GAAG,CAAC;;AAGvB,QAAA,IACI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC7C,aAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAChD;AACE,YAAA,IAAI;;AAEA,gBAAA,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;AACjB,gBAAA,eAAe,IAAI,GAAG,CAAC;YAC3B;YAAE,OAAO,CAAC,EAAE;;AAER,gBAAA,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;oBAC9C,eAAe,IAAI,GAAG;gBAC1B;YACJ;QACJ;;QAGA,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACrD,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;AACzC,YAAA,eAAe,IAAI,GAAG,CAAC;QAC3B;;AAGA,QAAA,MAAM,kBAAkB,GAAG;AACvB,YAAA,4BAA4B;AAC5B,YAAA,0BAA0B;AAC1B,YAAA,wBAAwB;AACxB,YAAA,0BAA0B;SAC7B;AAED,QAAA,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;AACnC,YAAA,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACrB,eAAe,IAAI,GAAG;YAC1B;AACJ,QAAA,CAAC,CAAC;;AAGF,QAAA,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM;AACrD,QAAA,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM;QACrD,IACI,YAAY,GAAG,CAAC;YAChB,YAAY,GAAG,CAAC,KAAK,CAAC;AACtB,YAAA,YAAY,GAAG,CAAC,KAAK,CAAC,EACxB;YACE,eAAe,IAAI,IAAI;QAC3B;QAEA,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1C;AAEQ,IAAA,qBAAqB,CAAC,KAAa,EAAA;AACvC,QAAA,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;QAChE,IAAI,YAAY,GAAG,CAAC;;QAGpB,MAAM,iBAAiB,GAAa,EAAE;AACtC,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,YAAA,IACI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAC7C,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CACzB,EACH;AACE,gBAAA,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B;QACJ;;QAGA,MAAM,SAAS,GAAG,EAAE;AACpB,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC;QAE9D,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;AACvC,YAAA,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE;AAC/C,YAAA,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM;AAErC,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE;AACvD,gBAAA,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACnD,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC/D,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;AAEnD,gBAAA,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC;oBAAE;gBAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CACrC,iBAAiB,EACjB,KAAK,CACR;AACD,gBAAA,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;AAE9D,gBAAA,IAAI,UAAU,GAAG,YAAY,EAAE;oBAC3B,YAAY,GAAG,UAAU;gBAC7B;YACJ;AACJ,QAAA,CAAC,CAAC;AAEF,QAAA,OAAO,YAAY;IACvB;IAEQ,mBAAmB,CAAC,CAAS,EAAE,CAAS,EAAA;QAC5C,MAAM,MAAM,GAAe,EAAE;AAE7B,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChC,YAAA,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnB;AAEA,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAChC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACpB;AAEA,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChC,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChC,gBAAA,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;AACrC,oBAAA,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC;qBAAO;oBACH,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CACnB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;oBACxB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;oBACpB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CACvB;gBACL;YACJ;QACJ;QAEA,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrC;AAEA;;AAEG;AACH,IAAA,aAAa,CAAC,KAAa,EAAA;AACvB,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,KAAK;QAExB,IAAI,SAAS,GAAG,KAAK;;QAGrB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACjD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;;QAGlD,MAAM,gBAAgB,GAAG,yCAAyC;QAClE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC;;QAGvD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;;QAGhD,SAAS,GAAG,SAAS,CAAC,OAAO,CACzB,+DAA+D,EAC/D,KAAK,CACR;AAED,QAAA,OAAO,SAAS,CAAC,IAAI,EAAE;IAC3B;AAEA;;AAEG;AACH,IAAA,mBAAmB,CACf,KAAa,EACb,gBAAA,GAA4B,KAAK,EAAA;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AAEjC,QAAA,IAAI,MAAM,CAAC,WAAW,IAAI,gBAAgB,EAAE;AACxC,YAAA,MAAM,IAAI,KAAK,CACX,+CAA+C,CAC3C,MAAM,CAAC,UAAU,GAAG,GAAG,EACzB,OAAO,CAAC,CAAC,CAAC,CAAA,GAAA,CAAK,CAGpB;QACL;AAEA,QAAA,OAAO,MAAM,CAAC,cAAc,IAAI,EAAE;IACtC;AAEA;;AAEG;IACH,wBAAwB,CACpB,KAAa,EACb,MAAa,EAAA;;QAGb,IAAI,kBAAkB,GAAG,KAAK;QAC9B,MAAM,UAAU,GAAU,EAAE;QAE5B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,KAAI;AAC5B,YAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AACjC,gBAAA,IAAI,MAAM,CAAC,WAAW,EAAE;AACpB,oBAAA,MAAM,IAAI,KAAK,CACX,aAAa,KAAK,CAAA,iCAAA,CAAmC,CACxD;gBACL;AACA,gBAAA,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1C;iBAAO;AACH,gBAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1B;AACJ,QAAA,CAAC,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE;IAC5D;AAEQ,IAAA,sBAAsB,CAAC,KAAa,EAAA;AACxC,QAAA,MAAM,KAAK,GAAG;YACV,qBAAqB;YACrB,qBAAqB;YACrB,wBAAwB;YACxB,qBAAqB;YACrB,sBAAsB;YACtB,qBAAqB;YACrB,8BAA8B;YAC9B,kBAAkB;YAClB,sBAAsB;YACtB,uBAAuB;YACvB,0BAA0B;YAC1B,oBAAoB;YACpB,uBAAuB;YACvB,uBAAuB;YACvB,sBAAsB;SACzB;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,kBAAA,EAAqB,KAAK,EAAE;IACvD;AAEQ,IAAA,wBAAwB,CAAC,KAAa,EAAA;;AAE1C,QAAA,MAAM,OAAO,GAAG;AACZ,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;SACN;AACD,QAAA,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG;IAChC;IAEQ,UAAU,CAAC,KAAa,EAAE,MAAuB,EAAA;AACrD,QAAA,OAAO,CAAC,IAAI,CAAC,CAAA,+BAAA,CAAiC,EAAE;AAC5C,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC;YAClE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;AACpC,SAAA,CAAC;IACN;AAEA;;AAEG;AACH,IAAA,YAAY,CAAC,SAAsC,EAAA;AAC/C,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE;IAClD;AAEA;;AAEG;IACH,SAAS,GAAA;AACL,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;IAC7B;AACH;;;;"}

package/dist/esm/src/middleware/built-in/security/UriNormalizer.js

@@ -0,0 +1,391 @@
+import * as vm from 'vm';
+
+/**
+ * @module UriNormalizer
+ *
+ * Normalization and security utilities for URIs and paths.
+ *
+ * ### Supported Threats
+ * - Path traversal (including encoded variants: `%2F`, `%2E`, double-encoded `%2520`)
+ * - Injection of null bytes and control characters
+ * - ReDoS attacks via sandbox execution with an adaptive timeout
+ * - Backslash smuggling (`\..\..\`)
+ * - Unicode normalized segments (NFC) to prevent traversal homoglyphs
+ *
+ * ### Non-regression Guarantees (no false positives)
+ * - Legitimate paths with encoded special characters are preserved correctly.
+ * - The trailing slash is preserved if present in the original input.
+ * - Internal empty segments are cleanly removed (`//` collapse).
+ * - The root `/` is always returned for an empty or null input.
+ *
+ * @example
+ * ```ts
+ * UriNormalizer.normalizePath("/foo/%2E%2E/bar");   // => "/bar"
+ * UriNormalizer.normalizePath("/a//b/../c/");        // => "/a/c/"
+ * UriNormalizer.safeRegexCheck(/^[a-z]+$/, "hello"); // => true
+ * ```
+ */
+class UriNormalizer {
+    // ─────────────────────────────────────────────────────────────────────────
+    // Public API
+    // ─────────────────────────────────────────────────────────────────────────
+    /**
+     * Normalizes a URI path by resolving `.` and `..` segments, multiple
+     * slashes, backslashes, null bytes, control characters, and all URI
+     * encodings (including double-encodings such as `%2520`).
+     *
+     * Normalization follows this strict order to eliminate bypass vectors:
+     * 1. Iterative decoding until stabilization (anti double-encoding).
+     * 2. Unicode NFC normalization (anti homoglyphs).
+     * 3. Replacement of backslashes with forward slashes.
+     * 4. Removal of null bytes and control characters.
+     * 5. Collapse of multiple slashes.
+     * 6. Resolution of `.` and `..` segments.
+     * 7. Restoration of the trailing slash if the original input had one.
+     *
+     * ### Guaranteed Behaviors
+     * - `""` or `null`/`undefined` → `"/"`
+     * - Paths where all segments resolve above the root are clipped
+     *   to `"/"` (no underflow possible).
+     * - The trailing slash is faithfully preserved or removed based on the input.
+     * - Unicode control characters (U+0000–U+001F, U+007F–U+009F)
+     *   are systematically removed.
+     *
+     * @param {string} pathStr - The raw path to normalize (can be encoded).
+     * @returns {string} The normalized path, always prefixed with `/`.
+     *
+     * @example
+     * ```ts
+     * UriNormalizer.normalizePath("/foo/bar");              // "/foo/bar"
+     * UriNormalizer.normalizePath("/foo/../bar");           // "/bar"
+     * UriNormalizer.normalizePath("/foo/%2E%2E/bar");       // "/bar"
+     * UriNormalizer.normalizePath("/foo/%252E%252E/bar");   // "/bar"  (double-encoded)
+     * UriNormalizer.normalizePath("/a//b/./c/");            // "/a/b/c/"
+     * UriNormalizer.normalizePath("\\foo\\..\\bar");        // "/bar"
+     * UriNormalizer.normalizePath("/foo/\0bar");            // "/foo/bar"
+     * UriNormalizer.normalizePath("");                      // "/"
+     * ```
+     */
+    static normalizePath(pathStr) {
+        if (!pathStr)
+            return "/";
+        // Step 1: Iterative decoding to neutralize double-encodings
+        const decoded = UriNormalizer.iterativeDecode(pathStr);
+        // Step 2: Unicode NFC normalization
+        const nfc = decoded.normalize("NFC");
+        // Step 3: Replace backslashes with forward slashes
+        const forwardSlashed = nfc.replace(/\\/g, "/");
+        // Step 4: Removal of null bytes and control characters
+        const sanitized = UriNormalizer.stripControlCharacters(forwardSlashed);
+        // Step 5: Collapse multiple slashes (e.g., `///` → `/`)
+        const collapsed = sanitized.replace(/\/+/g, "/");
+        // Memorize trailing slash before resolution (it will be lost during split)
+        const hasTrailingSlash = collapsed.endsWith("/") && collapsed.length > 1;
+        // Step 6: Resolve `.` and `..` segments
+        const resolved = UriNormalizer.resolveSegments(collapsed);
+        // Step 7: Restore trailing slash
+        return hasTrailingSlash ? resolved + "/" : resolved;
+    }
+    /**
+     * Executes a regex test with a strict timeout to prevent ReDoS
+     * (Regular Expression Denial of Service) attacks.
+     *
+     * ### Protection Strategy
+     * - Short strings (< {@link REGEX_VM_LENGTH_THRESHOLD} characters) are
+     *   tested directly for performance, but the threshold has been lowered to
+     *   20 to cover catastrophic patterns on short repetitions.
+     * - Beyond the threshold, the regex is executed in an isolated Node.js VM
+     *   context with an adaptive timeout calculated by {@link computeRegexTimeout}.
+     * - In the event of a timeout or VM error, the method returns `false` **and**
+     *   throws a typed error to distinguish a real ReDoS from a false positive.
+     *
+     * ### Error Differentiation
+     * - `UriNormalizerRegexTimeoutError`: timeout reached → probable ReDoS.
+     * - Any other internal exception is propagated as-is to avoid hiding
+     *   caller layer bugs.
+     *
+     * @param {RegExp}  pattern   - The regular expression to evaluate.
+     * @param {string}  str       - The string to test against.
+     * @param {number}  [timeoutMs] - Base timeout in ms (default: {@link REGEX_BASE_TIMEOUT_MS}).
+     *                                Automatically increased based on `str` length.
+     * @returns {boolean} `true` if the regex matches, `false` otherwise or on timeout.
+     * @throws {TypeError}                    If `pattern` is not a RegExp instance.
+     * @throws {UriNormalizerRegexTimeoutError} If the VM timeout is reached (probable ReDoS).
+     *
+     * @example
+     * ```ts
+     * // Basic usage
+     * UriNormalizer.safeRegexCheck(/^[a-z]+$/, "hello");          // true
+     * UriNormalizer.safeRegexCheck(/^[a-z]+$/, "Hello");          // false
+     *
+     * // Potentially catastrophic pattern on long input
+     * try {
+     *   UriNormalizer.safeRegexCheck(/(a+)+$/, "a".repeat(5000) + "!");
+     * } catch (e) {
+     *   if (e instanceof UriNormalizerRegexTimeoutError) {
+     *     console.warn("ReDoS blocked: ", e.message);
+     *   }
+     * }
+     * ```
+     */
+    static safeRegexCheck(pattern, str, timeoutMs = UriNormalizer.REGEX_BASE_TIMEOUT_MS) {
+        // Strict pattern validation for a clear error message
+        if (!(pattern instanceof RegExp)) {
+            throw new TypeError(`UriNormalizer.safeRegexCheck: "pattern" must be an instance of RegExp, received: ${typeof pattern}`);
+        }
+        // Fast path for very short strings (negligible ReDoS risk)
+        if (str.length < UriNormalizer.REGEX_VM_LENGTH_THRESHOLD) {
+            return pattern.test(str);
+        }
+        // Calculate adaptive timeout
+        const effectiveTimeout = UriNormalizer.computeRegexTimeout(str.length, timeoutMs);
+        try {
+            const sandbox = { result: false, pattern, str };
+            const context = vm.createContext(sandbox);
+            vm.runInContext("result = pattern.test(str)", context, {
+                timeout: effectiveTimeout,
+            });
+            return sandbox.result;
+        }
+        catch (e) {
+            // Distinguish a VM timeout from an unexpected error
+            if (UriNormalizer.isVmTimeoutError(e)) {
+                throw new UriNormalizerRegexTimeoutError(`Regex exceeded timeout (${effectiveTimeout}ms) on an input of ${str.length} characters. Possible ReDoS.`, effectiveTimeout, str.length);
+            }
+            // Propagate any other VM error (e.g., internal syntax error)
+            throw e;
+        }
+    }
+    // ─────────────────────────────────────────────────────────────────────────
+    // Private Methods — URI Decoding
+    // ─────────────────────────────────────────────────────────────────────────
+    /**
+     * Iteratively decodes a URI path until it is stable (idempotent),
+     * neutralizing double-encodings and cascading encodings.
+     *
+     * **Example of bypass without this protection:**
+     * ```
+     * %2520  →  (1st decode)  %20  →  (2nd decode)  " "
+     * %252E%252E  →  %2E%2E  →  ..   ← hidden traversal
+     * ```
+     *
+     * The loop is bounded to {@link MAX_DECODE_ITERATIONS} to prevent any
+     * infinite loop on pathological synthetic inputs. If the limit is reached,
+     * the last stable state is returned without throwing an exception.
+     *
+     * @param {string} raw - The raw string, potentially multi-encoded.
+     * @returns {string} The fully decoded string.
+     *
+     * @private
+     */
+    static iterativeDecode(raw) {
+        let current = raw;
+        for (let i = 0; i < UriNormalizer.MAX_DECODE_ITERATIONS; i++) {
+            let next;
+            try {
+                next = decodeURIComponent(current);
+            }
+            catch {
+                // Malformed URI (e.g., `%GG`): abort and keep previous state
+                break;
+            }
+            if (next === current) {
+                // Idempotence reached: decoding is stable
+                break;
+            }
+            current = next;
+        }
+        return current;
+    }
+    // ─────────────────────────────────────────────────────────────────────────
+    // Private Methods — String Sanitization
+    // ─────────────────────────────────────────────────────────────────────────
+    /**
+     * Strips all ASCII and Unicode control characters from a string.
+     *
+     * The removed ranges are:
+     * - U+0000–U+001F: C0 control characters (including null byte, tab, LF, CR...)
+     * - U+007F       : DEL
+     * - U+0080–U+009F: C1 control characters
+     *
+     * These characters can be exploited to bypass filters relying on naive
+     * string comparisons or to cause unexpected behavior in downstream parsers
+     * (e.g., HTTP servers, file systems).
+     *
+     * @param {string} str - The string to sanitize.
+     * @returns {string} The string without control characters.
+     *
+     * @private
+     */
+    static stripControlCharacters(str) {
+        // eslint-disable-next-line no-control-regex
+        return str.replace(/[\u0000-\u001F\u007F-\u009F]/g, "");
+    }
+    // ─────────────────────────────────────────────────────────────────────────
+    // Private Methods — Segment Resolution
+    // ─────────────────────────────────────────────────────────────────────────
+    /**
+     * Resolves `.` (current directory) and `..` (parent directory) segments
+     * from a normalized path (without double-slashes or residual encodings).
+     *
+     * The stack can never go below the root: a `..` at the head of the path
+     * is silently ignored, preventing any underflow to `../`.
+     *
+     * @param {string} path - The pre-normalized path (consolidated slashes, decoded).
+     * @returns {string} The path with all `.` and `..` segments resolved,
+     *                   always prefixed by `/`.
+     *
+     * @example
+     * ```ts
+     * // (private method — internal illustration)
+     * resolveSegments("/a/b/../../c")  // "/c"
+     * resolveSegments("/../../../etc") // "/etc"  ← no underflow
+     * resolveSegments("/a/./b")        // "/a/b"
+     * ```
+     *
+     * @private
+     */
+    static resolveSegments(path) {
+        const parts = path.split("/");
+        const stack = [];
+        for (const segment of parts) {
+            if (segment === "..") {
+                // Never exceed root (anti-underflow)
+                if (stack.length > 0) {
+                    stack.pop();
+                }
+            }
+            else if (segment !== "." && segment !== "") {
+                stack.push(segment);
+            }
+        }
+        return "/" + stack.join("/");
+    }
+    // ─────────────────────────────────────────────────────────────────────────
+    // Private Methods — ReDoS / VM Utilities
+    // ─────────────────────────────────────────────────────────────────────────
+    /**
+     * Calculates an adaptive timeout for executing a regex in the VM sandbox,
+     * adding a delta proportional to the length of the string being tested.
+     *
+     * ### Formula
+     * ```
+     * timeout = min(baseMs + floor(length / 1000) * PER_1K, MAX_TIMEOUT)
+     * ```
+     *
+     * This avoids false positives on long legitimate inputs while maintaining
+     * a hard ceiling ({@link REGEX_MAX_TIMEOUT_MS}) to contain severe ReDoS.
+     *
+     * @param {number} length   - Length of the tested string.
+     * @param {number} baseMs   - Base timeout provided by the caller.
+     * @returns {number} The effective timeout in milliseconds.
+     *
+     * @private
+     */
+    static computeRegexTimeout(length, baseMs) {
+        const delta = Math.floor(length / 1000) *
+            UriNormalizer.REGEX_TIMEOUT_PER_1K_CHARS;
+        return Math.min(baseMs + delta, UriNormalizer.REGEX_MAX_TIMEOUT_MS);
+    }
+    /**
+     * Determines whether an error thrown by `vm.runInContext` is a timeout
+     * overrun (i.e. a Node.js script interruption).
+     *
+     * Node.js does not provide a dedicated error class for this type of error.
+     * Detection relies on the `ERR_SCRIPT_EXECUTION_TIMEOUT` error code and/or
+     * the error message (`"Script execution timed out"`), which are stable since Node 10.
+     *
+     * @param {unknown} error - The exception to inspect.
+     * @returns {boolean} `true` if the error is a VM timeout, `false` otherwise.
+     *
+     * @private
+     */
+    static isVmTimeoutError(error) {
+        if (!(error instanceof Error))
+            return false;
+        const nodeError = error;
+        if (nodeError.code === "ERR_SCRIPT_EXECUTION_TIMEOUT")
+            return true;
+        // Fallback to the message for older Node versions
+        return error.message.toLowerCase().includes("timed out");
+    }
+}
+// ─────────────────────────────────────────────────────────────────────────
+// Private Constants
+// ─────────────────────────────────────────────────────────────────────────
+/**
+ * Maximum number of URI decoding iterations to stop infinite loops
+ * on pathological inputs (e.g., synthetic infinite encodings).
+ */
+UriNormalizer.MAX_DECODE_ITERATIONS = 10;
+/**
+ * Minimum length (inclusive) from which regex execution is deferred
+ * to an isolated VM context with a timeout, regardless of the apparent
+ * complexity of the pattern.
+ *
+ * Lowered to 20 chars to cover catastrophic patterns on short
+ * repetitive inputs (e.g., `(a+)+` tested on `"aaaaaaaaaaaaaaaab"`).
+ */
+UriNormalizer.REGEX_VM_LENGTH_THRESHOLD = 20;
+/**
+ * Base VM timeout in milliseconds. It is proportionally increased
+ * according to the string length to avoid false positives on long
+ * legitimate inputs while keeping a hard limit on ReDoS.
+ *
+ * @see {@link UriNormalizer.computeRegexTimeout}
+ */
+UriNormalizer.REGEX_BASE_TIMEOUT_MS = 50;
+/**
+ * Multiplicative factor (ms per 1,000 characters) added to the base
+ * timeout for long strings. This prevents false positives on large
+ * legitimate inputs.
+ */
+UriNormalizer.REGEX_TIMEOUT_PER_1K_CHARS = 5;
+/**
+ * Absolute ceiling for the VM timeout in milliseconds to prevent
+ * a massive input from rendering the timeout useless.
+ */
+UriNormalizer.REGEX_MAX_TIMEOUT_MS = 200;
+// ─────────────────────────────────────────────────────────────────────────────
+// Custom Errors
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Error thrown by {@link UriNormalizer.safeRegexCheck} when regex execution
+ * in the VM context exceeds the allocated timeout.
+ *
+ * This error allows the calling layer to distinguish a true ReDoS block
+ * from a legitimate `false` return (normal non-match), and to apply an
+ * appropriate security policy (log, alert, block the request...).
+ *
+ * @extends {Error}
+ *
+ * @example
+ * ```ts
+ * try {
+ *   UriNormalizer.safeRegexCheck(/(a+)+$/, "a".repeat(10_000) + "!");
+ * } catch (e) {
+ *   if (e instanceof UriNormalizerRegexTimeoutError) {
+ *     console.error(`ReDoS detected (timeout=${e.timeoutMs}ms, len=${e.inputLength})`);
+ *   }
+ * }
+ * ```
+ */
+class UriNormalizerRegexTimeoutError extends Error {
+    /**
+     * @param {string} message     - Descriptive error message.
+     * @param {number} timeoutMs   - Exceeded effective timeout.
+     * @param {number} inputLength - Length of the tested input.
+     */
+    constructor(message, timeoutMs, inputLength) {
+        super(message);
+        /** Class name for reliable instanceof and logging. */
+        this.name = "UriNormalizerRegexTimeoutError";
+        this.timeoutMs = timeoutMs;
+        this.inputLength = inputLength;
+        // Proper prototype chain restoration in TypeScript/Babel
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+
+export { UriNormalizer, UriNormalizerRegexTimeoutError };
+//# sourceMappingURL=UriNormalizer.js.map

package/dist/esm/src/middleware/built-in/security/UriNormalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UriNormalizer.js","sources":["../../../../../../src/middleware/built-in/security/UriNormalizer.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEA;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;MACU,aAAa,CAAA;;;;AA+CtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCG;IACI,OAAO,aAAa,CAAC,OAAe,EAAA;AACvC,QAAA,IAAI,CAAC,OAAO;AAAE,YAAA,OAAO,GAAG;;QAGxB,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC;;QAGtD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;;QAGpC,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;QAG9C,MAAM,SAAS,GAAG,aAAa,CAAC,sBAAsB,CAAC,cAAc,CAAC;;QAGtE,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;;AAGhD,QAAA,MAAM,gBAAgB,GAClB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;;QAGnD,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC;;QAGzD,OAAO,gBAAgB,GAAG,QAAQ,GAAG,GAAG,GAAG,QAAQ;IACvD;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCG;IACI,OAAO,cAAc,CACxB,OAAe,EACf,GAAW,EACX,SAAA,GAAoB,aAAa,CAAC,qBAAqB,EAAA;;AAGvD,QAAA,IAAI,EAAE,OAAO,YAAY,MAAM,CAAC,EAAE;YAC9B,MAAM,IAAI,SAAS,CACf,CAAA,iFAAA,EAAoF,OAAO,OAAO,CAAA,CAAE,CACvG;QACL;;QAGA,IAAI,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,yBAAyB,EAAE;AACtD,YAAA,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5B;;AAGA,QAAA,MAAM,gBAAgB,GAAG,aAAa,CAAC,mBAAmB,CACtD,GAAG,CAAC,MAAM,EACV,SAAS,CACZ;AAED,QAAA,IAAI;YACA,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE;YAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC;AACzC,YAAA,EAAE,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE;AACnD,gBAAA,OAAO,EAAE,gBAAgB;AAC5B,aAAA,CAAC;YACF,OAAO,OAAO,CAAC,MAAM;QACzB;QAAE,OAAO,CAAU,EAAE;;AAEjB,YAAA,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;AACnC,gBAAA,MAAM,IAAI,8BAA8B,CACpC,CAAA,wBAAA,EAA2B,gBAAgB,sBAAsB,GAAG,CAAC,MAAM,CAAA,4BAAA,CAA8B,EACzG,gBAAgB,EAChB,GAAG,CAAC,MAAM,CACb;YACL;;AAEA,YAAA,MAAM,CAAC;QACX;IACJ;;;;AAMA;;;;;;;;;;;;;;;;;;AAkBG;IACK,OAAO,eAAe,CAAC,GAAW,EAAA;QACtC,IAAI,OAAO,GAAG,GAAG;AAEjB,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE;AAC1D,YAAA,IAAI,IAAY;AAChB,YAAA,IAAI;AACA,gBAAA,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC;YACtC;AAAE,YAAA,MAAM;;gBAEJ;YACJ;AAEA,YAAA,IAAI,IAAI,KAAK,OAAO,EAAE;;gBAElB;YACJ;YAEA,OAAO,GAAG,IAAI;QAClB;AAEA,QAAA,OAAO,OAAO;IAClB;;;;AAMA;;;;;;;;;;;;;;;;AAgBG;IACK,OAAO,sBAAsB,CAAC,GAAW,EAAA;;QAE7C,OAAO,GAAG,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC;IAC3D;;;;AAMA;;;;;;;;;;;;;;;;;;;;AAoBG;IACK,OAAO,eAAe,CAAC,IAAY,EAAA;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAC7B,MAAM,KAAK,GAAa,EAAE;AAE1B,QAAA,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE;AACzB,YAAA,IAAI,OAAO,KAAK,IAAI,EAAE;;AAElB,gBAAA,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;oBAClB,KAAK,CAAC,GAAG,EAAE;gBACf;YACJ;iBAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE;AAC1C,gBAAA,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB;QACJ;QAEA,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;IAChC;;;;AAMA;;;;;;;;;;;;;;;;;AAiBG;AACK,IAAA,OAAO,mBAAmB,CAAC,MAAc,EAAE,MAAc,EAAA;QAC7D,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACzB,aAAa,CAAC,0BAA0B;AAC5C,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC;IACvE;AAEA;;;;;;;;;;;;AAYG;IACK,OAAO,gBAAgB,CAAC,KAAc,EAAA;AAC1C,QAAA,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC;AAAE,YAAA,OAAO,KAAK;QAE3C,MAAM,SAAS,GAAG,KAA8B;AAChD,QAAA,IAAI,SAAS,CAAC,IAAI,KAAK,8BAA8B;AAAE,YAAA,OAAO,IAAI;;QAGlE,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC5D;;AA3WA;AACA;AACA;AAEA;;;AAGG;AACqB,aAAA,CAAA,qBAAqB,GAAG,EAAE;AAElD;;;;;;;AAOG;AACqB,aAAA,CAAA,yBAAyB,GAAG,EAAE;AAEtD;;;;;;AAMG;AACqB,aAAA,CAAA,qBAAqB,GAAG,EAAE;AAElD;;;;AAIG;AACqB,aAAA,CAAA,0BAA0B,GAAG,CAAC;AAEtD;;;AAGG;AACqB,aAAA,CAAA,oBAAoB,GAAG,GAAG;AAsUtD;AACA;AACA;AAEA;;;;;;;;;;;;;;;;;;;;AAoBG;AACG,MAAO,8BAA+B,SAAQ,KAAK,CAAA;AAiBrD;;;;AAIG;AACH,IAAA,WAAA,CAAY,OAAe,EAAE,SAAiB,EAAE,WAAmB,EAAA;QAC/D,KAAK,CAAC,OAAO,CAAC;;QArBO,IAAA,CAAA,IAAI,GAAG,gCAAgC;AAsB5D,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS;AAC1B,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW;;QAG9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;IACrD;AACH;;;;"}