([^<]*)<\\/title>/i)?.[1]); console.log('len',t.length); console.log('scripts',[...t.matchAll(/<script[^>]+src=[\"']([^\"']+)/gi)].map(m=>m[1])); console.log('links',[...t.matchAll(/<link[^>]+href=[\"']([^\"']+)/gi)].map(m=>m[1]).slice(0,20)); console.log('meta',[...t.matchAll(/<meta[^>]+(?:name|property)=[\"']([^\"']+)[\"'][^>]+content=[\"']([^\"']*)/gi)].map(m=>[m[1],m[2]]).slice(0,20)); console.log('htmlsample',t.slice(0,4000));\n for(const p of ['/manifest.json','/robots.txt','/sitemap.xml']){try{const x=await fetch(site+p);console.log(p,x.status,(await x.text()).slice(0,1500))}catch(e){console.log(p,'ERR',String(e))}}\n}\n","createdAt",["D",1788686966040],"branchVersion","branchId","a60129f4-4b4a-4cc7-b51c-2e496c599624","id","de9e2e41-dcf0-40d9-8fb9-7e8479a61d54","splitta-api-inspect",["D",1788678534261],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Inspect Splitta frontend API calls","imageUrl","019c0a19-6135-710e-ad14-690e8d52c7bc","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019c0a19-6135-710e-ad14-6cc836b76307","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_100":96},"org",{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},"branch",{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"isOwned",23,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","jonasolof","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zOHcxaWpkTDhVV1pzZ0NETm1KVDdjWUVnNnQifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":290,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":291,"_77":292,"_79":293,"_81":24},"tree",[237,238,239,240,241,242,243,244,245,246,247,248,249],"files",[237,238,239,240,241,242,243,244,245,246,247,248,249],"counts",{"_227":59,"_228":157,"_229":59,"_230":231,"_232":233},"contents",[123,124,125,126,127,128,129,130,131,132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":220,"_31":221,"_29":222,"_139":-5,"_39":40,"_38":223,"_141":142,"_36":224,"_13":59,"_32":33,"_34":225,"_23":24,"_145":-5,"_26":226},{"_41":213,"_31":214,"_29":215,"_139":-5,"_39":40,"_38":216,"_141":142,"_36":217,"_13":59,"_32":33,"_34":218,"_23":24,"_145":-5,"_26":219},{"_41":206,"_31":207,"_29":208,"_139":-5,"_39":40,"_38":209,"_141":142,"_36":210,"_13":59,"_32":33,"_34":211,"_23":24,"_145":-5,"_26":212},{"_41":199,"_31":200,"_29":201,"_139":-5,"_39":40,"_38":202,"_141":24,"_36":203,"_13":59,"_32":33,"_34":204,"_23":24,"_145":-5,"_26":205},{"_41":196,"_31":27,"_29":30,"_139":-5,"_39":40,"_38":14,"_141":142,"_36":197,"_13":59,"_32":33,"_34":35,"_23":24,"_145":-5,"_26":198},{"_41":189,"_31":190,"_29":191,"_139":-5,"_39":40,"_38":192,"_141":142,"_36":193,"_13":59,"_32":33,"_34":194,"_23":24,"_145":-5,"_26":195},{"_41":182,"_31":183,"_29":184,"_139":-5,"_39":40,"_38":185,"_141":142,"_36":186,"_13":59,"_32":33,"_34":187,"_23":24,"_145":-5,"_26":188},{"_41":175,"_31":176,"_29":177,"_139":-5,"_39":40,"_38":178,"_141":142,"_36":179,"_13":59,"_32":33,"_34":180,"_23":24,"_145":-5,"_26":181},{"_41":168,"_31":169,"_29":170,"_139":-5,"_39":40,"_38":171,"_141":142,"_36":172,"_13":59,"_32":33,"_34":173,"_23":24,"_145":-5,"_26":174},{"_41":161,"_31":162,"_29":163,"_139":-5,"_39":40,"_38":164,"_141":142,"_36":165,"_13":59,"_32":33,"_34":166,"_23":24,"_145":-5,"_26":167},{"_41":154,"_31":155,"_29":156,"_139":-5,"_39":40,"_38":157,"_141":142,"_36":158,"_13":59,"_32":33,"_34":159,"_23":24,"_145":-5,"_26":160},{"_41":147,"_31":148,"_29":149,"_139":-5,"_39":40,"_38":150,"_141":142,"_36":151,"_13":59,"_32":20,"_34":152,"_23":24,"_145":-5,"_26":153},{"_41":136,"_31":137,"_29":138,"_139":-5,"_39":40,"_38":140,"_141":142,"_36":143,"_13":59,"_32":33,"_34":144,"_23":24,"_145":-5,"_26":146},"69981da4-d61f-4761-8d7f-3d4a92f9281c","owner-search.ts","9e5de9b6-a9c6-11f1-9ce9-1607ee4eb77e","parentId",12,"latest",true,["D",1788680595065],"const h=await (await fetch('https://splitta.app/contact')).text(); console.log(h.match(/data-cfemail=\"([0-9a-f]+)\"/i)?.[1]||'none');","label",[137],"c7e62eb3-64a8-4cc7-bae7-5fc4d1653132","noop.txt","9aa65786-a9c6-11f1-a853-1607ee4eb77e",11,["D",1788680588827],"temp",[148],"ec3dfe94-30e2-4e4a-9dfb-7116bf7ae9bc","main.ts","d2102b3e-a9c1-11f1-bfed-1607ee4eb77e",1,["D",1788678534300],"const html = await (await fetch('https://splitta.app/groups')).text();\nconsole.log('HTML_STATUS', html.slice(0, 120));\nconst urls = [...html.matchAll(/<script[^>]+src=[\"']([^\"']+)[\"']/g)].map(m=>new URL(m[1], 'https://splitta.app').href);\nconsole.log('SCRIPTS', urls);\nfor (const url of urls) {\n try {\n const txt = await (await fetch(url)).text();\n const hits = [...txt.matchAll(/https:\\/\\/[^\"'`\\\\s]+supabase\\.co|eyJ[a-zA-Z0-9._-]{40,}|get_expenses_by_group|expenseTitle|paid_by|splittareString|from\\([\"'][^\"']+[\"']\\)/g)].map(m=>m[0]);\n if (hits.length) console.log('HITS', url, [...new Set(hits)].slice(0,100));\n } catch (e) { console.log('ERR', url, String(e)); }\n}",[155],"fd287a20-ef26-4590-8fc3-820ac10499a3","inspect.ts","e0072ca6-a9c1-11f1-801f-1607ee4eb77e",2,["D",1788678557741],"for (const path of ['/groups','/groups/new','/group/new']) {\n const r = await fetch('https://splitta.app' + path, { redirect: 'manual' });\n const t = await r.text();\n console.log(path, r.status, r.headers.get('location'));\n console.log(t.slice(0,12000));\n}",[162],"aa1d9da5-7441-4a44-8949-b5846aff99e1","form-fields.ts","f439a2c6-a9c1-11f1-866f-1607ee4eb77e",4,["D",1788678591625],"const r=await fetch('https://splitta.app/groups/create'); const t=await r.text();\nfor (const m of t.matchAll(/<(input|textarea|button)[\\s\\S]*?>/gi)) { const s=m[0]; if (/name=|hx-post|type=\"submit\"/i.test(s)) console.log(s.replace(/\\s+/g,' ')); }",[169],"7e0d2924-469f-4dc7-9c4f-f233a33e40a6","expense-selects.ts","2b0ba5e2-a9c2-11f1-811e-1607ee4eb77e",8,["D",1788678683576],"const t=await (await fetch('https://splitta.app/g/9FIfr7s3Mksi5W8gfQH06/expenses/new')).text();\nfor(const id of ['paid_by','split_type']){const m=t.match(new RegExp(`<select[^>]+id=\"${id}\"[\\\\s\\\\S]*?<\\\\/select>`)); console.log(id,m?.[0].replace(/\\s+/g,' '));}",[176],"0c2f2ca6-7d51-43b9-b84c-1c67a766b28c","expense-new-form.ts","23023988-a9c2-11f1-bf02-1607ee4eb77e",7,["D",1788678670080],"import makeFetchCookie from 'npm:fetch-cookie';\nimport { CookieJar } from 'npm:tough-cookie';\nconst f=makeFetchCookie(fetch,new CookieJar()); const base='https://splitta.app'; const code='9FIfr7s3Mksi5W8gfQH06';\nconst g=await f(`${base}/g/${code}`); const gh=await g.text();\nconsole.log('participants', [...gh.matchAll(/<option[^>]+value=\"([^\"]*)\"[^>]*>([^<]*)<\\/option>/g)].map(m=>[m[1],m[2].trim()]));\nconsole.log('csrf',gh.match(/name=\"csrf-token\" content=\"([^\"]+)\"/)?.[1]);\nconst n=await f(`${base}/g/${code}/expenses/new`); const nh=await n.text(); console.log('new status',n.status,'url',n.url);\nfor(const m of nh.matchAll(/<(form|input|select|option|textarea|button)[\\s\\S]*?>/gi)){const s=m[0].replace(/\\s+/g,' '); if(/name=|action=|hx-post|type=\"submit\"/i.test(s)) console.log(s)}",[183],"943be50e-5b6d-41da-a11b-2cf783ea144d","expense-form.ts","15d7473a-a9c2-11f1-a01a-1607ee4eb77e",6,["D",1788678648020],"const path='/g/9FIfr7s3Mksi5W8gfQH06';\nconst r=await fetch('https://splitta.app'+path);\nconst t=await r.text();\nconsole.log('status',r.status);\nfor (const line of t.split('\\n')) if (/expense|utgift|form|input|button|href=|hx-|csrf|name=/i.test(line)) console.log(line.trim());",[190],"0d08f4fa-ce55-4ac5-8392-d520d0223626",["D",1788686966040],[27],"651ed1b7-ca94-4748-a3f1-bbd19c386535","decode-contact.ts","98cb75b8-a9c6-11f1-a78d-1607ee4eb77e",10,["D",1788680585717],"const html=await (await fetch('https://splitta.app/contact')).text();\nconst m=html.match(/data-cfemail=\"([0-9a-f]+)\"/i);\nif(!m){console.log('no cfemail'); console.log(html.slice(0,4000));} else {const hex=m[1]; const key=parseInt(hex.slice(0,2),16); let out=''; for(let i=2;i<hex.length;i+=2) out+=String.fromCharCode(parseInt(hex.slice(i,i+2),16)^key); console.log(out);}\n",[200],"ac138c05-1902-45ef-9306-5b9cdb33582f","create-test-group.ts","0b1a8122-a9c2-11f1-be47-1607ee4eb77e",5,["D",1788678629998],"import makeFetchCookie from 'npm:fetch-cookie';\nimport { CookieJar } from 'npm:tough-cookie';\nconst f=makeFetchCookie(fetch,new CookieJar());\nconst base='https://splitta.app';\nconst first=await f(base+'/groups/create');\nconst html=await first.text();\nconst token=html.match(/name=\"csrf\" value=\"([^\"]+)\"/)?.[1];\nif(!token) throw new Error('csrf token not found');\nconst body=new URLSearchParams({csrf:token,name:'keepalive-test',currency_code:'SEK',description:'Disposable keepalive group'});\nbody.append('participant_name[]','keepalive');\nbody.append('participant_phone[]','');\nconst r=await f(base+'/groups/create',{method:'POST',redirect:'manual',headers:{'content-type':'application/x-www-form-urlencoded'},body});\nconsole.log('status',r.status,'location',r.headers.get('location'));\nconsole.log((await r.text()).slice(0,2000));",[207],"42f5f7c0-c89e-46e1-b86f-bdab7bf1d47a","create-form.ts","eb4f5728-a9c1-11f1-a449-1607ee4eb77e",3,["D",1788678576668],"const r = await fetch('https://splitta.app/groups/create');\nconst t = await r.text();\nconsole.log('status', r.status);\nconsole.log('set-cookie', r.headers.get('set-cookie'));\nfor (const line of t.split('\\n')) {\n if (/form|input|select|option|button|hx-|csrf|name=|action=|method=/i.test(line)) console.log(line.trim());\n}",[214],"237545f5-6f59-44dc-b8f6-51c6aafa39b5","contact-owner.ts","930206ce-a9c6-11f1-a600-1607ee4eb77e",9,["D",1788680575965],"const html=await (await fetch('https://splitta.app/contact')).text();\nconsole.log(html);\n",[221],"pulls","branches","forks","envVars",{"_234":59,"_236":59},"connections",{"_234":59,"_235":59},"count","unfilledCount","emptyCount",{"_41":220,"_31":221,"_29":222,"_139":-5,"_39":40,"_38":223,"_141":142,"_36":287,"_13":59,"_32":33,"_34":225,"_23":24,"_145":-5,"_251":288,"_26":289},{"_41":213,"_31":214,"_29":215,"_139":-5,"_39":40,"_38":216,"_141":142,"_36":284,"_13":59,"_32":33,"_34":218,"_23":24,"_145":-5,"_251":285,"_26":286},{"_41":206,"_31":207,"_29":208,"_139":-5,"_39":40,"_38":209,"_141":142,"_36":281,"_13":59,"_32":33,"_34":211,"_23":24,"_145":-5,"_251":282,"_26":283},{"_41":199,"_31":200,"_29":201,"_139":-5,"_39":40,"_38":202,"_141":24,"_36":278,"_13":59,"_32":33,"_34":204,"_23":24,"_145":-5,"_251":279,"_26":280},{"_41":196,"_31":27,"_29":30,"_139":-5,"_39":40,"_38":14,"_141":142,"_36":275,"_13":59,"_32":33,"_34":35,"_23":24,"_145":-5,"_251":276,"_26":277},{"_41":189,"_31":190,"_29":191,"_139":-5,"_39":40,"_38":192,"_141":142,"_36":272,"_13":59,"_32":33,"_34":194,"_23":24,"_145":-5,"_251":273,"_26":274},{"_41":182,"_31":183,"_29":184,"_139":-5,"_39":40,"_38":185,"_141":142,"_36":269,"_13":59,"_32":33,"_34":187,"_23":24,"_145":-5,"_251":270,"_26":271},{"_41":175,"_31":176,"_29":177,"_139":-5,"_39":40,"_38":178,"_141":142,"_36":266,"_13":59,"_32":33,"_34":180,"_23":24,"_145":-5,"_251":267,"_26":268},{"_41":168,"_31":169,"_29":170,"_139":-5,"_39":40,"_38":171,"_141":142,"_36":263,"_13":59,"_32":33,"_34":173,"_23":24,"_145":-5,"_251":264,"_26":265},{"_41":161,"_31":162,"_29":163,"_139":-5,"_39":40,"_38":164,"_141":142,"_36":260,"_13":59,"_32":33,"_34":166,"_23":24,"_145":-5,"_251":261,"_26":262},{"_41":154,"_31":155,"_29":156,"_139":-5,"_39":40,"_38":157,"_141":142,"_36":257,"_13":59,"_32":33,"_34":159,"_23":24,"_145":-5,"_251":258,"_26":259},{"_41":147,"_31":148,"_29":149,"_139":-5,"_39":40,"_38":150,"_141":142,"_36":254,"_13":59,"_32":20,"_34":152,"_23":24,"_145":-5,"_251":255,"_26":256},{"_41":136,"_31":137,"_29":138,"_139":-5,"_39":40,"_38":140,"_141":142,"_36":250,"_13":59,"_32":33,"_34":144,"_23":24,"_145":-5,"_251":252,"_26":253},["D",1788680595065],"children",[],[137],["D",1788680588827],[],[148],["D",1788678534300],[],[155],["D",1788678557741],[],[162],["D",1788678591625],[],[169],["D",1788678683576],[],[176],["D",1788678670080],[],[183],["D",1788678648020],[],[190],["D",1788686966040],[],[27],["D",1788680585717],[],[200],["D",1788678629998],[],[207],["D",1788678576668],[],[214],["D",1788680575965],[],[221],["D",1788678534261],{"_93":92,"_100":96},{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"ctx",{"_75":-5,"_120":327,"_328":329,"_330":331,"_332":24,"_333":24,"_334":24,"_335":142,"_336":-5,"_337":-7,"_338":-7,"_339":59,"_340":24,"_341":24,"_342":-5,"_343":24,"_344":24,"_345":24,"_346":-5},"ENV",{"_298":299,"_300":301,"_302":83,"_303":304,"_305":306,"_307":308,"_309":310,"_311":312,"_313":314,"_315":316,"_317":318,"_319":320,"_321":322,"_323":324,"_325":326},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"] </article></body></html>

Diff · v13