ai-debug-local-mcp
Version:
🎯 ENHANCED AI GUIDANCE v4.1.2: Dramatically improved tool descriptions help AI users choose the right tools instead of 'close enough' options. Ultra-fast keyboard automation (10x speed), universal recording, multi-ecosystem debugging support, and compreh
95 lines • 2.79 kB
TypeScript
import { Page } from 'playwright';
export interface SecurityAnalysis {
environmentVariables: {
exposed: string[];
properlyPrefixed: string[];
warnings: string[];
};
headers: {
csp: boolean;
xFrameOptions: string;
permissionsPolicy: boolean;
cors: string;
hsts?: boolean;
missingHeaders: string[];
};
}
export interface MiddlewareAnalysis {
middlewareFiles: Array<{
path: string;
size: number;
exports: string[];
}>;
executionPath: string[];
rewriteRules: Array<{
source: string;
destination: string;
condition?: string;
}>;
redirects: Array<{
source: string;
destination: string;
permanent: boolean;
}>;
performance: {
averageExecutionTime: number;
slowestMiddleware: string;
totalTime: number;
};
}
export interface SecurityAuditResult {
score: number;
issues: string[];
recommendations: string[];
criticalFindings: string[];
environmentAnalysis: SecurityAnalysis['environmentVariables'];
headerAnalysis: SecurityAnalysis['headers'];
}
export interface SecurityReport {
summary: string;
analysis: SecurityAnalysis;
middleware: MiddlewareAnalysis | null;
audit: SecurityAuditResult;
suggestions: string[];
}
/**
* NextJSSecurityAnalyzer - Analyzes Next.js security configuration and vulnerabilities
*
* This module handles:
* - Security header analysis and validation
* - Environment variable exposure detection
* - Middleware security analysis
* - CORS and CSP configuration validation
* - Security audit reporting
*/
export declare class NextJSSecurityAnalyzer {
/**
* Analyze the security configuration of a Next.js application
*/
analyzeSecurityConfiguration(page: Page): Promise<SecurityAnalysis>;
/**
* Analyze middleware security configuration and performance
*/
analyzeMiddlewareSecurity(page: Page): Promise<MiddlewareAnalysis | null>;
/**
* Perform comprehensive security audit
*/
auditSecurityConfiguration(securityAnalysis: SecurityAnalysis, middlewareAnalysis: MiddlewareAnalysis | null): SecurityAuditResult;
/**
* Get specific security improvement suggestions
*/
getSecuritySuggestions(securityAnalysis: SecurityAnalysis): string[];
/**
* Generate comprehensive security analysis report
*/
generateSecurityReport(page: Page): Promise<SecurityReport>;
/**
* Validate CORS configuration security
*/
validateCORSConfiguration(corsHeader: string): {
isSecure: boolean;
issues: string[];
recommendations: string[];
};
}
//# sourceMappingURL=nextjs-security-analyzer.d.ts.map