@sun-asterisk/sunlint/rules/security/S036_lfi_rfi_protection/config.json

☀️ SunLint - Multi-language static analysis tool for code quality and security | Sun* Engineering Standards

{
  "id": "S036",
  "name": "LFI and RFI Protection - Prevent Local and Remote File Inclusion",
  "category": "security",
  "description": "S036 - Prevent Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerabilities by validating file paths and using allowlists.",
  "severity": "error",
  "enabled": true,
  "patterns": {
    "include": ["**/*.js", "**/*.ts", "**/*.jsx", "**/*.tsx", "**/*.php", "**/*.py"],
    "exclude": [
      "**/*.test.*",
      "**/*.spec.*",
      "__tests__/**",
      "__mocks__/**",
      "**/node_modules/**",
      "**/dist/**",
      "**/build/**"
    ]
  }
}