/** * SMI-5881 section 4.4 — SSRF_INSTRUCTION_PATTERNS word-boundary corrections. * * A leading `\b` was added around every verb alternation (fetch/request/ * curl/wget/get/open/load/read/connect/send) — without it, these verbs * matched as a SUBSTRING of an unrelated word ("get" inside "budget"/ * "target"/"forget"/"widget"/"gadget", "connect" inside "disconnect", "load" * inside "download"/"reload", "open" inside "reopen", "read" inside "bread"/ * "spread"/"thread", "fetch" inside "prefetch"). A trailing `\b` was also * added after the bare `localhost` literal so "localhosting" no longer * matches via a "localhost" prefix. * * Every existing `\s` quantifier is UNCHANGED — replacing them with * newline-exclusive character classes was tried and reverted (it silently * broke detection of a verb and its target split across a real line break, * a genuine evasion). This suite confirms that regression did NOT happen. */ export {}; //# sourceMappingURL=scanner-ssrf-word-boundary.test.d.ts.map