vibe-guard
Version:
██ Vibe-Guard Security Scanner - 28 essential security rules to catch vulnerabilities before they catch you! Zero dependencies, instant setup, works everywhere, optimized performance. Detects SQL injection, XSS, exposed secrets, CSRF, CORS issues, contain
45 lines • 1.64 kB
TypeScript
import { BaseRule, FileContent, SecurityIssue } from '../types';
export declare class MissingSecurityHeadersRule extends BaseRule {
readonly name = "missing-security-headers";
readonly description = "Detects missing HTTP security headers with context-aware analysis";
readonly severity: "medium";
private readonly securityHeaders;
private readonly serverPatterns;
private readonly safePatterns;
check(fileContent: FileContent): SecurityIssue[];
private analyzeContext;
private isInComment;
private isInString;
private isInConfiguration;
private isInTestFile;
private isInDocumentation;
private isSafeContext;
private detectLanguage;
private detectFramework;
private detectConfigurationType;
private hasServerCode;
private hasSecurityHeaders;
protected findMatches(content: string, pattern: RegExp): Array<{
match: RegExpMatchArray;
line: number;
column: number;
lineContent: string;
}>;
private checkMissingHeaders;
private hasSecurityHeader;
private findReportLocation;
private determineSeverity;
private isDevelopmentContext;
private getRemediationMessage;
private getFrameworkSpecificSuggestion;
private getConfigurationSpecificSuggestion;
private validateCSP;
private validateXFrameOptions;
private validateXContentTypeOptions;
private validateXXSSProtection;
private validateHSTS;
private validateReferrerPolicy;
private validatePermissionsPolicy;
private validateXPermittedCrossDomainPolicies;
}
//# sourceMappingURL=missing-security-headers.d.ts.map