Enum SecurityRuleId 

pub enum SecurityRuleId {
    EvalUsage,
    NewFunctionUsage,
    ProcessBinding,
    ProcessDlopen,
    ProtoPollution,
    RequireCacheManip,
    HardcodedSecret,
    DynamicImport,
    DefinePropertyAbuse,
    NetworkExfiltration,
    SensitivePathWrite,
    ProcessEnvAccess,
    TimerAbuse,
    ProxyReflect,
    WithStatement,
    DebuggerStatement,
    ConsoleInfoLeak,
    ChildProcessSpawn,
    ConstructorEscape,
    NativeModuleRequire,
    GlobalMutation,
    SymlinkCreation,
    PermissionChange,
    SocketListener,
    WebAssemblyUsage,
    ArgumentsCallerAccess,
}

Stable rule identifiers. Each variant is a versioned detection rule whose semantics are frozen once shipped. Add new variants; never rename or redefine existing ones.

Variants

EvalUsage

Dynamic code execution via eval().

NewFunctionUsage

Dynamic code execution via new Function(...).

ProcessBinding

Native module loading via process.binding().

ProcessDlopen

Native addon loading via process.dlopen().

ProtoPollution

Prototype pollution via __proto__ assignment.

RequireCacheManip

require.cache manipulation for module hijacking.

HardcodedSecret

Hardcoded secret or API key pattern.

DynamicImport

Dynamic import() expression (runtime code loading).

DefinePropertyAbuse

Object.defineProperty on global or prototype objects.

NetworkExfiltration

Network exfiltration pattern (fetch/XMLHttpRequest to constructed URL).

SensitivePathWrite

Writes to sensitive filesystem paths.

ProcessEnvAccess

process.env access for reading environment variables.

TimerAbuse

Timer abuse (very short-interval setInterval).

ProxyReflect

Proxy / Reflect interception patterns.

WithStatement

with statement usage (scope chain manipulation).

DebuggerStatement

debugger statement left in source.

ConsoleInfoLeak

console usage that may leak information.

ChildProcessSpawn

Command execution via child_process.exec/spawn/execFile/fork.

ConstructorEscape

Sandbox escape via constructor.constructor('return this')().

NativeModuleRequire

Native addon require via .node/.so/.dylib file extension.

GlobalMutation

globalThis/global property mutation (sandbox escape vector).

SymlinkCreation

Symlink/hard-link creation for path traversal.

PermissionChange

fs.chmod/fs.chown permission elevation.

SocketListener

net.createServer/dgram.createSocket unauthorized listeners.

WebAssemblyUsage

WebAssembly.instantiate/compile sandbox bypass.

ArgumentsCallerAccess

arguments.callee.caller stack introspection.

Implementations

impl SecurityRuleId

pub const fn name(self) -> &'static str

Short human-readable name for this rule.

pub const fn default_tier(self) -> RiskTier

Default risk tier for this rule.

Trait Implementations

impl Clone for SecurityRuleId

fn clone(&self) -> SecurityRuleId

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityRuleId

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecurityRuleId

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for SecurityRuleId

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for SecurityRuleId

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SecurityRuleId

fn eq(&self, other: &SecurityRuleId) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecurityRuleId

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for SecurityRuleId

impl Eq for SecurityRuleId

impl StructuralPartialEq for SecurityRuleId