pipelab-org / pipelock

What it does

• Ordered URL scanner pipeline. URL length and parsing checks, scheme validation, CRLF and path-traversal detection, allowlist and blocklist policy, immutable literal-IP SSRF and core-DLP floors, configured DLP, path, query and subdomain entr
• DLP. 65 built-in patterns for API keys, tokens, credentials, cryptocurrency keys, environment secrets, and financial identifiers with checksum validation. BIP-39 seed phrase detection uses dictionary lookup, sliding windows, and SHA-256 che
• Response scanning. 34 built-in prompt-injection and state/control poisoning patterns, plus 6-pass normalization for zero-width characters, homoglyphs, leetspeak, optional whitespace, vowel folding, base64, and hex. Actions are block, strip,
• Wording policy. prompt_injection_detection controls supported regex wording checks separately from DLP and independent security controls. Omitted configuration retains existing behavior; off and warn-only reduce coverage as described in the
• Large JSON responses. forward HTTP, intercepted HTTPS and reverse proxy paths can inspect oversized complete JSON within bounded memory budgets. This is explicitly partial field and adjacent-pair inspection, with its limits recorded in evid