@enclave-vm/ast - npm Package Compare versions

Comparing version 2.10.0 to 2.10.1

package.json

 {
   "name": "@enclave-vm/ast",
-  "version": "2.10.0",
+  "version": "2.10.1",
   "description": "A production-ready AST security guard for JavaScript - validate, protect, and enforce code safety with extensible rules",
@@ -5,0 +5,0 @@ "author": "AgentFront <[e-mail]>",

rules/resource-exhaustion.rule.d.ts

@@ -55,2 +55,11 @@ import { ValidationRule, ValidationContext, ValidationSeverity } from '../interfaces';
     /**
+     * Check if a call expression could be coercing a dangerous string
+     * Detects patterns like:
+     * - String(['constructor']) - array coercion
+     * - String.fromCharCode(...) - character code building
+     * - ['constructor'].toString() - array method coercion
+     * - ['constructor'].join('') - array join coercion
+     */
+    private isSuspiciousCoercionCall;
+    /**
      * Try to evaluate a string concatenation expression
@@ -57,0 +66,0 @@ * Returns the result if it's a simple string concat, or null if too complex

No alert changes

Improved metrics

Total package byte prevSize

618464

0.84%

Lines of code

16919

0.68%

No dependency changes