"""
Configuration des modules de scanning
===================================

Paramètres spécifiques pour chaque module de vérification.
"""

# Configuration TLS/SSL
TLS_CONFIG = {
    "timeout": 10,
    "verify_chain": True,
    "check_expiration": True,
    "min_days_before_expiry": 30,
    "preferred_ciphers": ["ECDHE", "AES256", "SHA256"]
}

# Configuration Headers de sécurité
HEADERS_CONFIG = {
    "required_headers": [
        "Strict-Transport-Security",
        "Content-Security-Policy", 
        "X-Frame-Options",
        "X-Content-Type-Options",
        "Referrer-Policy"
    ],
    "deprecated_headers": [
        "X-XSS-Protection"
    ],
    "timeout": 15
}

# Configuration injection
INJECTION_CONFIG = {
    "sql_payloads": ["'", "1' OR '1'='1", "1; DROP TABLE users--"],
    "xss_payloads": ["<script>alert(1)</script>", "javascript:alert(1)"],
    "timeout": 20,
    "max_payloads_per_test": 5
}

# Configuration SAST
SAST_CONFIG = {
    "max_files": 1000,
    "max_file_size_mb": 10,
    "excluded_extensions": [".exe", ".bin", ".jpg", ".png", ".gif"],
    "excluded_directories": [
        ".git", ".svn", "node_modules", "__pycache__", 
        ".venv", "venv", "build", "dist"
    ],
    "secret_patterns": {
        "api_key": r"api[_-]?key\s*=\s*['\"][^'\"]{20,}['\"]",
        "password": r"password\s*=\s*['\"][^'\"]{8,}['\"]",
        "token": r"token\s*=\s*['\"][^'\"]{32,}['\"]"
    }
}