[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_192":193,"_194":195},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_133":134,"_35":-7,"_135":-5,"_17":136,"_137":138,"_139":140,"_141":142,"_143":144,"_50":-5,"_145":-5,"_146":-5,"_147":24,"_148":149,"_150":96,"_151":-5,"_152":-5,"_153":154},"routes/_app.x.$handle.$name.branch.$branch.history",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5},"handle","test0","name","xss-scanner","branchName","main","project",{"_29":84,"_13":14,"_33":85,"_86":-5,"_87":24,"_88":89,"_90":89,"_91":92,"_93":-5,"_25":65,"_94":60,"_95":96,"_97":-5,"_98":-5,"_99":20,"_37":38,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":105,"_106":105,"_107":108,"_109":108,"_110":108,"_111":105,"_112":105,"_48":113,"_114":115,"_116":117,"_118":24},"page",0,"history",[26,27,28],"hasNext",false,"userId",{"_29":77,"_31":32,"_33":78,"_35":79,"_37":38,"_39":67,"_40":-5,"_41":70,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":80,"_50":81,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":82},{"_29":67,"_31":32,"_33":68,"_35":69,"_37":38,"_39":30,"_40":-5,"_41":70,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":71,"_50":72,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":73},{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":-5,"_40":-5,"_41":42,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":49,"_50":51,"_52":-5,"_53":-5,"_54":-5,"_55":-5,"_56":57},"id","9ac19c7a-51de-11f1-9272-ee650bb23af1","branchId","85537994-51de-11f1-804c-ee650bb23af1","createdAt",["D",1779015194597],"version",1,"orgId","019e358e-341b-760c-a5ed-21788bc1340f","parentId","incomingCommitId","aiChatMessageId","cb4e4d32-4ad9-417c-8d9c-5ed6892ab3a5","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_29":65,"_37":38,"_11":12,"_66":-5},"file",{"_59":60,"_13":61,"_62":63,"_64":24},"pull","merge","revert","multiple","commits",[58],{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":-5,"_40":-5,"_41":42,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":49,"_50":51,"_52":-5,"_53":-5,"_54":-5},"fileId","9abfdd7c-51de-11f1-9272-ee650bb23af1","main.tsx","fileType","http","deleted","a9251736-a4b7-4694-8dfc-eb60bc302691","avatar","eb705aee-51de-11f1-b52e-ee650bb23af1",["D",1779015329961],2,"0006f4af-8e91-4694-8f4d-ac8a61c59059",{"_29":65,"_37":38,"_11":12,"_66":-5},{"_59":75,"_13":76,"_62":63,"_64":24},[74],{"_29":67,"_31":32,"_33":68,"_35":69,"_37":38,"_39":30,"_40":-5,"_41":70,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":71,"_50":72,"_52":-5,"_53":-5,"_54":-5},"eb6eaac8-51de-11f1-b52e-ee650bb23af1","vulnerable.tsx","f9f5bbd6-51de-11f1-9d2c-ee650bb23af1",["D",1779015354318],3,{"_29":65,"_37":38,"_11":12,"_66":-5},{"_59":60,"_13":61,"_62":63,"_64":24},[83],{"_29":77,"_31":32,"_33":78,"_35":79,"_37":38,"_39":67,"_40":-5,"_41":70,"_43":-5,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":80,"_50":81,"_52":-5,"_53":-5,"_54":-5},"8552b554-51de-11f1-804c-ee650bb23af1",["D",1779015158656],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","A web-based XSS vulnerability scanner","imageUrl","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_132":-5},"org",{"_11":12,"_127":128,"_66":-5,"_25":65,"_129":130,"_131":24},"branch",{"_35":79,"_13":16,"_29":32,"_119":84,"_120":-5,"_121":-5,"_122":-5,"_123":-5,"_124":-5,"_125":14,"_126":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","\">

","tier","free","canRestrictVals","profileImageUrl","path","","adoptOrgId",{"_29":84,"_13":14,"_33":188,"_86":-5,"_87":24,"_88":89,"_90":89,"_91":92,"_93":-5,"_25":65,"_94":60,"_95":96,"_97":-5,"_98":-5,"_99":20,"_37":38,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":105,"_106":105,"_107":108,"_109":108,"_110":108,"_111":105,"_112":105,"_48":189,"_114":190,"_116":191,"_118":24},"tree",[179,180],"files",[179,180],"counts",{"_169":20,"_170":36,"_171":20,"_172":173,"_174":175},"contents",[155,156],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_29":165,"_13":61,"_59":60,"_39":-5,"_31":32,"_158":79,"_159":96,"_33":166,"_35":36,"_62":63,"_161":167,"_64":24,"_163":-5,"_133":168},{"_29":157,"_13":76,"_59":75,"_39":-5,"_31":32,"_158":69,"_159":96,"_33":160,"_35":20,"_62":63,"_161":162,"_64":24,"_163":-5,"_133":164},"eb6eaa28-51de-11f1-b52e-ee650bb23af1","branchVersion","latest",["D",1779015329961],"content","// Intentionally vulnerable endpoint for testing the XSS scanner\n// ⚠️ DO NOT use this pattern in production code!\nexport default async function(req: Request): Promise {\n const url = new URL(req.url);\n const q = url.searchParams.get(\"q\") ?? \"\";\n\n // Intentionally reflecting user input without sanitization\n const html = `\n\n\n Vulnerable Test Page\n \n\n\n

🎯 Vulnerable Test Page

This page intentionally reflects input without sanitization.

You searched for:

${q}

\n \n

⚠️ This page is intentionally vulnerable for educational testing only.

\n\n`;\n\n return new Response(html, { headers: { \"content-type\": \"text/html\" } });\n}\n","label",[76],"f9f41a88-51de-11f1-9d2c-ee650bb23af1",["D",1779015354318],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { renderToString } from \"https://esm.sh/react-dom@18.2.0/server\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst XSS_PAYLOADS = [\n ``,\n `

`,\n ``,\n `

History