vibe-guard
Version:
██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain
43 lines • 1.6 kB
TypeScript
import { BaseRule, FileContent, SecurityIssue } from '../types';
export declare class InsecureHttpRule extends BaseRule {
readonly name = "insecure-http";
readonly description = "Detects insecure HTTP usage instead of HTTPS with context-aware analysis";
readonly severity: "medium";
private readonly httpPatterns;
private readonly safePatterns;
private readonly multiLineCommentPatterns;
check(fileContent: FileContent): SecurityIssue[];
private findHttpUrlsInTestFile;
private isDevelopmentContext;
private extractUrl;
private analyzeContext;
private isSafeContext;
private calculateConfidence;
private calculateSeverity;
private detectLanguage;
private detectFramework;
private hasHttpsConfiguration;
private hasSecurityHeaders;
private isInComment;
private isInTestFile;
private isInDocumentation;
private isInDevelopment;
private isFalsePositive;
private validateHttpApiEndpoint;
private validateHttpFetchRequest;
private validateHttpAxiosRequest;
private validateHttpServerCreation;
private validateHttpModuleImport;
private validateHttpProtocolConfig;
private validateInsecureConfig;
private validateHttpServerBinding;
private validateInsecureCookieConfig;
private validateInsecureCookieSecurity;
private validateMixedContentResource;
private validateMixedContentLink;
private validateHttpSpringMapping;
private validatePermissiveHostConfig;
private validateHttpUrl;
private generateSuggestion;
}
//# sourceMappingURL=insecure-http.d.ts.map