/** * `payloadDriver` — adversarial counterpart of `formDriver`. Same form * detection + fill + submit pipeline, but the value provider injects * attack payloads (XSS, SQLi, path traversal, oversized strings, * unicode edge cases). Intended for **authorized security testing of * your own application** — pair with invariants that detect each * attack class (see `payloads.ts`). * * Built on top of `formDriver` to keep the form-detection logic in one * place; this module only swaps in the value provider. */ import { type FieldValueProvider } from "./field-values.js"; import { type FormDriverOptions } from "./form-driver.js"; import { type PayloadSetName } from "./payloads.js"; import type { Driver } from "./types.js"; export interface PayloadDriverOptions extends Omit { /** * Which payload sets to draw from. Either a list of names from the * built-in registry (`["xss", "sqli"]`) or a custom array of strings. * Default: `["xss", "sqli", "path-traversal", "large", "unicode"]`. */ payloads?: ReadonlyArray | ReadonlyArray; /** Override the inner value provider entirely (advanced). */ valueProvider?: FieldValueProvider; name?: string; } export declare function payloadDriver(options?: PayloadDriverOptions): Driver; //# sourceMappingURL=payload-driver.d.ts.map