UNPKG

@ordojs/security

Version:

Security package for OrdoJS with XSS, CSRF, and injection protection

42 lines 1.33 kB
/** * Path Traversal Prevention * Provides comprehensive protection against path traversal attacks */ import type { PathValidationOptions } from './types'; export declare class PathTraversalPrevention { private static readonly DANGEROUS_PATTERNS; private static readonly DANGEROUS_EXTENSIONS; private static readonly SYSTEM_DIRECTORIES; /** * Validates a file path for traversal attacks */ static validatePath(inputPath: string, options?: PathValidationOptions): { isValid: boolean; errors: string[]; sanitizedPath?: string; }; /** * Sanitizes a path by removing dangerous elements */ static sanitizePath(inputPath: string, options?: PathValidationOptions): string; /** * Creates a safe filename from user input */ static createSafeFilename(filename: string, options?: { maxLength?: number; allowedExtensions?: string[]; defaultExtension?: string; }): string; /** * Validates multiple paths at once */ static validatePaths(paths: string[], options?: PathValidationOptions): { isValid: boolean; results: Array<{ path: string; isValid: boolean; errors: string[]; }>; }; } //# sourceMappingURL=path-traversal-prevention.d.ts.map