fortify2-js/dist/esm/utils/detectInjection.js

MOST POWERFUL JavaScript Security Library! Military-grade cryptography + 19 enhanced object methods + quantum-resistant algorithms + perfect TypeScript support. More powerful than Lodash with built-in security.

import { sqlPatterns, xssPatterns } from './patterns.js';

/**
 *  Function to test input against all patterns
 *  @example
 *  const testInput = "'; DROP TABLE users; --";
    const result = detectInjection(testInput);
    console.log(result);
    // Output: { sql: true, xss: false, type: 'sql', matches: [...] }
 */
function detectInjection(input, patternType = "all") {
    const results = {
        sql: false,
        xss: false,
        type: null,
        matches: [],
    };
    if (patternType === "all" || patternType === "sql") {
        for (const pattern of sqlPatterns) {
            if (pattern.test(input)) {
                results.sql = true;
                results.type = "sql";
                results.matches.push({
                    type: "SQL",
                    pattern: pattern.toString(),
                    match: input.match(pattern),
                });
            }
        }
    }
    if (patternType === "all" || patternType === "xss") {
        for (const pattern of xssPatterns) {
            if (pattern.test(input)) {
                results.xss = true;
                results.type = results.type ? "mixed" : "xss";
                results.matches.push({
                    type: "XSS",
                    pattern: pattern.toString(),
                    match: input.match(pattern),
                });
            }
        }
    }
    return results;
}

export { detectInjection };
//# sourceMappingURL=detectInjection.js.map