@ordojs/security
Version:
Security package for OrdoJS with XSS, CSRF, and injection protection
42 lines • 1.33 kB
TypeScript
/**
* Path Traversal Prevention
* Provides comprehensive protection against path traversal attacks
*/
import type { PathValidationOptions } from './types';
export declare class PathTraversalPrevention {
private static readonly DANGEROUS_PATTERNS;
private static readonly DANGEROUS_EXTENSIONS;
private static readonly SYSTEM_DIRECTORIES;
/**
* Validates a file path for traversal attacks
*/
static validatePath(inputPath: string, options?: PathValidationOptions): {
isValid: boolean;
errors: string[];
sanitizedPath?: string;
};
/**
* Sanitizes a path by removing dangerous elements
*/
static sanitizePath(inputPath: string, options?: PathValidationOptions): string;
/**
* Creates a safe filename from user input
*/
static createSafeFilename(filename: string, options?: {
maxLength?: number;
allowedExtensions?: string[];
defaultExtension?: string;
}): string;
/**
* Validates multiple paths at once
*/
static validatePaths(paths: string[], options?: PathValidationOptions): {
isValid: boolean;
results: Array<{
path: string;
isValid: boolean;
errors: string[];
}>;
};
}
//# sourceMappingURL=path-traversal-prevention.d.ts.map