vibe-guard
Version:
██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain
42 lines • 1.55 kB
TypeScript
import { BaseRule, FileContent, SecurityIssue } from '../types';
export declare class DirectoryTraversalRule extends BaseRule {
readonly name = "directory-traversal";
readonly description = "Detects potential directory traversal vulnerabilities with context-aware analysis";
readonly severity: "high";
private readonly traversalPatterns;
private readonly multiLineCommentPatterns;
private readonly safePatterns;
private readonly falsePositivePatterns;
check(fileContent: FileContent): SecurityIssue[];
private detectLanguage;
private detectFramework;
private hasPathSanitization;
private hasValidation;
private analyzeContext;
private isSafeContext;
private isInComment;
private isInString;
private isInTestFile;
private isInDocumentation;
private isInDevelopment;
private calculateConfidence;
private calculateSeverity;
private getLineContext;
private generateSuggestion;
private validateFileOperation;
private validateExpressStatic;
private validateExpressSendFile;
private validatePathConcatenation;
private validateTemplateLiteralPath;
private validateHardcodedTraversal;
private validateFileConstructor;
private validateJavaFileInputStream;
private validatePHPFopen;
private validatePHPFileGetContents;
private validatePythonOpen;
private validatePythonPathJoin;
private validatePathJoin;
private validateModuleImport;
private validatePHPInclude;
}
//# sourceMappingURL=directory-traversal.d.ts.map