Skip to content

feat: implement public API route detection and enhance unprotected route auditing#89

Merged
drbarzaga merged 1 commit intomainfrom
chore/detect-unprotected-api-routes
Apr 5, 2026
Merged

feat: implement public API route detection and enhance unprotected route auditing#89
drbarzaga merged 1 commit intomainfrom
chore/detect-unprotected-api-routes

Conversation

@drbarzaga
Copy link
Copy Markdown
Owner

  • Added isPublicApiRoute utility to identify public API routes based on specific path segments and content signatures.
  • Updated unprotectedApiRoute rule to skip auditing for routes identified as public.
  • Introduced comprehensive tests for the new detection logic in detect-public-api-route.test.ts.

…ute auditing

- Added `isPublicApiRoute` utility to identify public API routes based on specific path segments and content signatures.
- Updated `unprotectedApiRoute` rule to skip auditing for routes identified as public.
- Introduced comprehensive tests for the new detection logic in `detect-public-api-route.test.ts`.
@drbarzaga drbarzaga self-assigned this Apr 5, 2026
@drbarzaga drbarzaga merged commit f26d941 into main Apr 5, 2026
4 checks passed
@drbarzaga drbarzaga deleted the chore/detect-unprotected-api-routes branch April 5, 2026 00:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant