generated from camaraproject/Template_API_Repository
-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Create camara-security-no-secrets-in-path-or-query-parameters.js
- Loading branch information
1 parent
546b963
commit 650115f
Showing
1 changed file
with
26 additions
and
0 deletions.
There are no files selected for viewing
26 changes: 26 additions & 0 deletions
26
lint_function/camara-security-no-secrets-in-path-or-query-parameters.js
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,26 @@ | ||
// CAMARA Project - support function for Spectral linter | ||
// 31.01.2024 - initial version | ||
|
||
const sensitiveData = ['MSISDN','IMSI','phoneNumber']; | ||
|
||
export default async function (input) { | ||
|
||
// Iterate over properties of the input object | ||
for (const path in input) { | ||
|
||
if (typeof path === 'string') { | ||
for (const word of sensitiveData ) { | ||
const regex = new RegExp(`\\b${word}\\b`, 'g'); // Use a regular expression to match 'word' as a standalone word | ||
|
||
if (regex.test(path)) { | ||
|
||
const warningRuleName = 'camara-security-no-secrets-in-path-or-query-parameters'; | ||
const description = `sensitiveData Data found in path: Consider avoiding the use of sensitiveData data '${word}'`; | ||
const location = `paths.${path}`; | ||
console.log(`warning ${warningRuleName} ${description} ${location}`); | ||
|
||
} | ||
} | ||
} | ||
} | ||
} |