skills/pbakaus_impeccable
1
0
Fork 0
mirror of https://github.com/pbakaus/impeccable.git synced 2026-09-21 10:36:27 +03:00
Code Issues Packages Projects Releases Wiki Activity

Tighten hook and proxy discovery

Browse Source 
AI assistance disclosure: Codex implemented and verified these fixes under maintainer direction.
This commit is contained in:
Paul Bakaus
2026-09-02 09:35:01 -07:00
parent be43532192
commit 0e1f94acae
4 changed files with 77 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skill/scripts/detect-csp.mjs
+14 -2
View File
@@ -78,10 +78,12 @@ const NUXT_ROUTE_RULES_SIGNALS = [
/\bscript-src\b/,
];
const NEXT_REQUEST_HOOK_FILES = new Set([
const NEXT_MIDDLEWARE_FILES = new Set([
'middleware.ts',
'middleware.js',
'middleware.mjs',
]);
const NEXT_PROXY_FILES = new Set([
'proxy.ts',
'proxy.js',
'proxy.mjs',
@@ -89,6 +91,16 @@ const NEXT_REQUEST_HOOK_FILES = new Set([
const MIDDLEWARE_HINT = /headers\.set\(\s*["']Content-Security-Policy["']/i;
const META_TAG_HINT = /http-equiv\s*=\s*["']Content-Security-Policy["']/i;
function isNextRequestHookFile(relPath, base) {
if (NEXT_MIDDLEWARE_FILES.has(base)) return true;
if (!NEXT_PROXY_FILES.has(base)) return false;
const normalized = relPath.split(path.sep).join('/').toLowerCase();
// Next.js 16 recognizes proxy at the project root or in the optional src/
// directory, alongside app/ or pages/. A same-named helper deeper in the
// tree is not the framework request hook.
return normalized === base || normalized === `src/${base}`;
}
/**
* @param {string} cwd Project root.
* @returns {{ shape: string|null, signals: string[] }}
@@ -142,7 +154,7 @@ export function detectCsp(cwd = process.cwd()) {
// === detect-only shapes ===
if (NEXT_REQUEST_HOOK_FILES.has(base) && MIDDLEWARE_HINT.test(body)) {
if (isNextRequestHookFile(relPath, base) && MIDDLEWARE_HINT.test(body)) {
hits.middleware.push(relPath);
}