文件
websafe-kb/08-threat-intel/repro-profiles/system-family/vite-proxy-boundary.yaml

65 行
1.6 KiB
YAML

profile_id: vite-proxy-boundary
system_id: vite
match_rules:
keywords:
- proxy
- middleware
vuln_family: proxy-boundary
provisioning_mode: real
verification_mode: real
artifact_mode: local-fixture
artifact_source:
strategy: local-minimal-fixture
runner_id: vite.proxy-boundary
fixture_path: /Users/x/websafe/00-environments/templates/fixtures/vite/proxy-boundary
required_services:
- app
seed_actions:
- kind: note
message: Seed proxy boundary fixture with baseline banner.
baseline_actions:
- kind: http-get
path: /
attack_actions:
- kind: note
message: Runner proves forwarded proxy boundary state change locally.
browser_assertions:
required: true
success_criteria:
- Proxy boundary proof banner is visible in the captured browser evidence.
success_assertions:
- name: baseline-ok
type: baseline-ok
- name: runner-success
type: runner-success
- name: browser-present
type: browser-present
services:
app:
image: node:22-alpine
working_dir: /workspace
command:
- node
- /workspace/00-environments/templates/fixtures/shared/node_fixture.mjs
environment:
LAB_FIXTURE_SCENARIO: /workspace/00-environments/templates/fixtures/vite/proxy-boundary/scenario.json
PORT: "5173"
ports:
- 18401:5173
volumes:
- /Users/x/websafe:/workspace:ro
healthcheck:
test:
- CMD-SHELL
- wget -q -O - http://127.0.0.1:5173/healthz >/dev/null 2>&1 || exit 1
interval: 2s
timeout: 2s
retries: 20
baseline_urls:
- http://127.0.0.1:18401/
ready_timeout_seconds: 45
cleanup_policy: destroy
destructive_risk: low
allowed_target_types:
- lab-local