/** * Copyright (c) 2025 Ofri Peretz * Licensed under the MIT License. Use of this source code is governed by the * MIT license that can be found in the LICENSE file. */ /** * ESLint Rule: no-ssrf * Detects Server-Side Request Forgery (SSRF) vulnerabilities where * user-controlled URLs are passed to HTTP client functions without validation. * * CWE-918: Server-Side Request Forgery (SSRF) * * @see https://cwe.mitre.org/data/definitions/918.html * @see https://owasp.org/www-community/attacks/Server_Side_Request_Forgery */ import type { TSESLint } from '@interlace/eslint-devkit'; export interface Options { /** Ignore in test files. Default: true */ allowInTests?: boolean; } type RuleOptions = [Options?]; export declare const noSsrf: TSESLint.RuleModule<"ssrfVulnerability", RuleOptions, unknown, TSESLint.RuleListener> & { name: string; }; export {};