vtcode-core 0.99.2

Core library for VT Code - a Rust-based terminal coding agent
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

//! Security domain constants for web_fetch tool
//!
//! Contains built-in blocklists for sensitive domains and patterns,
//! plus malicious indicators to prevent access to dangerous URLs.

/// Built-in blocklist domains (used in restricted mode)
pub const BUILTIN_BLOCKED_DOMAINS: &[&str] = &[
    // Banking & Financial
    "paypal.com",
    "stripe.com",
    "square.com",
    "interac.ca",
    "wire.com",
    // Authentication & Identity
    "github.com/login",
    "gitlab.com/users/login",
    "okta.com",
    "auth0.com",
    "accounts.google.com",
    "login.microsoftonline.com",
    "login.apple.com",
    // Email providers
    "mail.google.com",
    "outlook.live.com",
    "icloud.com/mail",
    // Personal/Private services
    "myfitnesspal.com",
    "health.apple.com",
    "health.google.com",
    // VPN & Proxy services
    "expressvpn.com",
    "nordvpn.com",
    // Medical & Health records
    "healthvault.com",
    "epic.com",
    "cerner.com",
    // Legal documents
    "docusign.com",
    "adobe.com/sign",
];

/// Built-in blocked patterns (used in restricted mode)
pub const BUILTIN_BLOCKED_PATTERNS: &[&str] = &[
    "password=",
    "token=",
    "api_key=",
    "secret=",
    "auth=",
    "session=",
    "cookie=",
    "oauth",
    "bearer%20",
    "x-auth",
    "authorization:",
    "/admin",
    "/private",
    "/internal",
    "/secret",
];

/// Common malware delivery and phishing patterns
pub const MALICIOUS_PATTERNS: &[&str] = &[
    // Obfuscation and evasion
    ".zip\"",
    ".exe\"",
    ".scr\"",
    ".bat\"",
    ".cmd\"",
    ".vbs\"",
    ".ps1\"",
    // Domain confusion (typosquatting indicators)
    "g00gle",
    "g0ogle",
    "gooogle",
    "micr0soft",
    "micro$oft",
    "amaz0n",
    "facebk",
    "faceb00k",
    // Suspicious subdomains
    "admin.",
    "backup.",
    "dev.",
    "test.",
    "temp.",
    "tmp.",
    // Known malware hosting patterns
    "bit.ly/",
    "short.link/",
    "tinyurl.com/",
    "goo.gl/",
];