103 matches across 7 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | lib/routes-deprecated/hackerone/search.js | 33 | item: response.data.data.hacktivity_items.edges.map((item) => { |
| CRITICAL | lib/routes-deprecated/missevan/drama.js | 10 | dramaResp.data.info.episodes.episode.map((item) => |
| CRITICAL | lib/routes-deprecated/itslaw/judgements.js | 15 | const items = response.data.data.searchResult.judgements.map((item) => { |
| CRITICAL | lib/routes-deprecated/touhougarakuta/index.js | 31 | item: response.data.result.pageContext.articles.map((article, i) => { |
| CRITICAL | lib/routes/konghq/blog-posts.ts | 44 | const posts = nextData.props.pageProps.cardsPaged.cards.map((item) => { |
| CRITICAL | lib/routes/civitai/user.ts | 59 | const list = article.result.data.json.items.map((item) => ({ |
| CRITICAL | lib/routes/thepaper/utils.tsx | 81 | ChannelIdToName: (nodeId, next_data) => next_data.props.appProps.menu.channelList.find((c) => c.nodeId.toString() == |
| CRITICAL | lib/routes/thepaper/utils.tsx | 82 | ListIdToName: (listId, next_data) => next_data.props.appProps.menu.channelList.flatMap((c) => c.childNodeList || []) |
| CRITICAL | lib/routes/vice/topic.tsx | 56 | const list = nextData.props.pageProps.listPageData.articles.map((item) => ({ |
| CRITICAL | lib/routes/futunn/video.ts | 37 | const items = response.data.data.videoList.list.map((item) => ({ |
| CRITICAL | lib/routes/futunn/live.ts | 67 | const items = response.data.data.data.news.map((item) => { |
| CRITICAL | lib/routes/deltaio/blog.ts | 45 | const items = data.result.data.allMdx.edges.map(({ node }) => ({ |
| CRITICAL | lib/routes/bilibili/mall-new.ts | 44 | const type = response.data.data.vo.cateTabs.find((item) => item.cateType === response.data.data.vo.currentCateType). |
| CRITICAL | lib/routes/odaily/activity.ts | 43 | let items = response.data.data.items.data.map((item) => ({ |
| CRITICAL | lib/routes/odaily/user.ts | 46 | let items = response.data.data.items.data.map((item) => ({ |
| CRITICAL | lib/routes/sustainabilitymag/articles.ts | 117 | const list = results.data.paginatedWidget.articles.results.map((item) => ({ |
| CRITICAL | lib/routes/youtube/community.tsx | 61 | (tab) => tab.tabRenderer.endpoint.commandMetadata.webCommandMetadata.url.endsWith('/posts') || tab.tabRenderer.e |
| CRITICAL | lib/routes/scmp/topic.ts | 67 | const list = apiResponse.data.node.contents.edges.map(({ node }) => ({ |
| CRITICAL | lib/routes/taptap/common/review.ts | 77 | description: review.moment.review.contents.text + (review.moment.review.contents.images ? review.moment.revi |
| CRITICAL | lib/routes/gocn/news.ts | 27 | const items = response.data.data.articlePageList.list.map((item) => ({ |
| CRITICAL | lib/routes/guancha/member.ts | 65 | items = response.data.data.courses.data.map((item) => { |
| CRITICAL | lib/routes/github/star.ts | 65 | const data = response.data.data.repository.stargazers.edges.toReversed(); |
| CRITICAL | lib/routes/github/discussions.ts | 113 | const categoryItem = response.data.data.repository.discussionCategories.nodes.find((item) => item.name === categ |
| CRITICAL | lib/routes/github/discussions.ts | 147 | const data = response.data.data.repository.discussions.nodes.filter((item) => (closed === null ? item : item.closed |
| CRITICAL | lib/routes/xiaoyuzhou/podcast.ts | 73 | let episodes = page_data.props.pageProps.podcast.episodes.map((item) => ({ |
| CRITICAL | lib/routes/wired/tag.ts | 83 | item.category = [...new Set([...item.category, ...preloadedState.transformed.article.tagCloud.tags.map(( |
| CRITICAL | lib/routes/rattibha/user.tsx | 60 | title: item.thread.t.info.text.split('\n')[0], |
| CRITICAL | lib/routes/rattibha/user.tsx | 80 | {raw(item.thread.t.info.text.replaceAll('\n', '<br>'))} |
| CRITICAL | lib/routes/houxu/index.tsx | 45 | <p>{raw(item.object.last.link.description.replaceAll('\r\n', '<br>'))}</p> |
| CRITICAL | lib/routes/theverge/index.ts | 61 | return b.images.map((i) => `<figure><img src="${i.image.thumbnails.horizontal.url.split('?')[0]}" alt="${i.a |
| CRITICAL | lib/routes/theverge/index.ts | 81 | return `<figure><img src="${b.leftImage.thumbnails.horizontal.url.split('?')[0]}" alt="${b.leftImage.alt}" / |
| CRITICAL | lib/routes/theverge/index.ts | 88 | return `<div><figure><img src="${product.image.thumbnails.horizontal.url.split('?')[0]}" alt="${product.imag |
| CRITICAL | lib/routes/theverge/index.ts | 110 | const node = nextData.props.pageProps.hydration.responses.find((x) => x.operationName === 'PostLayoutQue |
| CRITICAL | lib/routes/nikkei/asia/index.ts | 39 | const list = response.data.data.getLatestHeadlines.items.map((item) => ({ ...item, link: new URL(item.path, 'https:/ |
| CRITICAL | lib/routes/zcool/top.ts | 50 | const list = data.props.pageProps.listResult.data.map((item) => ({ |
| CRITICAL | lib/routes/zcool/user.ts | 84 | image: data.props.pageProps.userInfo.avatar.includes('?x-oss-process') ? data.props.pageProps.userInfo.avatar.sp |
| CRITICAL | lib/routes/matters/latest.ts | 52 | const item = response.data.viewer.recommendation.feed.edges.map(({ node }) => parseItem(node)); |
| CRITICAL | lib/routes/linkedin/cn/utils.tsx | 93 | jobs: resp.data.data.searchSearchHitsByJob.elements.map((e) => e.target.jobPosting), |
| CRITICAL | lib/routes/binance/launchpool.ts | 34 | const articles = appData.appState.loader.dataByRouteId.d969.catalogs.find((catalog) => catalog.catalogId === 48).art |
| CRITICAL | lib/routes/afr/navigation.ts | 53 | const list = response.data.pageByNavigationPath.page.latestStoriesConnection.edges.map(({ node }) => ({ |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .oxlintrc.json | 121 | "@typescript-eslint/consistent-generic-constructors": "error", |
| LOW | .github/workflows/codeql.yml | 1 | # For most projects, this workflow file will not need changing; you simply need |
| LOW | .github/workflows/codeql.yml | 61 | |
| LOW | lib/shims/dotenv-config.ts | 1 | // No-op shim for dotenv/config in Cloudflare Workers |
| LOW | lib/routes/chnmuseum/xwzt.ts | 41 | }); |
| LOW | lib/routes/pixiv/token.ts | 41 | } |
| LOW | lib/routes/pixiv/token.ts | 61 | // await tickToken(tryGet); // 启动tickToken |
| LOW | lib/routes/pixiv/novel-api/content/utils.ts | 81 | } |
| LOW | lib/routes/twitter/user.ts | 21 | // description: 'Please see above for details.', |
| LOW | lib/routes/twitter/api/web-api/utils.ts | 141 | // 1. ofetch does not forward `dispatcher` to its internal fetch() call |
| LOW | lib/routes/bilibili/ranking.ts | 21 | // 10 kichiku https://api.bilibili.com/x/web-interface/ranking/v2?rid=1007&type=all&web_location=333.934&w_rid=&wts= |
| LOW | lib/routes/bilibili/cache.ts | 101 | const subUrl = navResponse.data.wbi_img.sub_url; |
| LOW | lib/routes/1point3acres/offer.tsx | 61 | |
| LOW | lib/routes/1point3acres/offer.tsx | 81 | // ); |
| LOW | lib/routes/the/util.ts | 1 | // This file is intentionally left minimal after migration from the.bi (WordPress) to river.to (custom SSR). |
| LOW | lib/routes/jump/discount.tsx | 141 | |
| LOW | lib/routes/nature/news-and-comment.ts | 1 | // example usage: `/nature/news-and-comment/ng` |
| LOW | lib/routes/nature/research.ts | 1 | // example usage: `/nature/research/ng` |
| LOW | lib/routes/nature/cover.ts | 1 | import { load } from 'cheerio'; |
| LOW | lib/routes/cockroachlabs/blog.ts | 41 | // <a href="href.."> |
| LOW | lib/routes/cockroachlabs/blog.ts | 61 | const items = await Promise.all( |
| LOW | lib/routes/wechat/tgchannel.ts | 61 | for (let mark of highlightMarks) { |
| LOW | lib/routes/wechat/tgchannel.ts | 81 | // 第 4 个元素: <a href="${用于 link priview 的预览图 url}"><i><b>🔗</b></i></a> |
| LOW | lib/routes/wechat/tgchannel.ts | 101 | if (authorNode && authorNode.type === 'text') { |
| LOW | lib/routes/jike/utils.ts | 101 | // 5. 图片 |
| LOW | lib/routes/gov/general/general.ts | 1 | import { load } from 'cheerio'; |
| LOW | lib/routes/gov/general/general.ts | 21 | // defaultPath: 'zwgk/zcjd/', // 默认路径。假设网址是 a.b.gov.cn/c/d/ 则输入 c/d/。访问 gov/b/ |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | scripts/workflow/format-description.ts | 113 | function remarkLiftClosingDirective() { |
| LOW | lib/routes/zju/sis/index.ts | 68 | async function enrichNewsItemWithDetails(item: DataItem, refererUrl: string): Promise<DataItem> { |
| LOW | lib/routes/pixiv/novel-api/content/utils.ts | 8 | export function convertPixivProtocolExtended(caption: string): string { |
| LOW | lib/routes/wikipedia/current-events.ts | 47 | function parseCurrentEventsTemplate(wikitext: string): string | null { |
| LOW | lib/routes/wikipedia/current-events.ts | 118 | function closeAllListsAndAddParagraph(state: ListProcessorState): void { |
| LOW | lib/routes/sdo/ff14risingstones/api.ts | 35 | export async function getNoviceNetworkRecruitDetail(recruitID: number) { |
| LOW | lib/routes/sdo/ff14risingstones/api.ts | 53 | export async function getFreeCompanyRecruitDetail(recruitID: number) { |
| LOW | lib/routes/bilibili/video.ts | 174 | async function fetchVideoListFromBrowser(uid: string): Promise<VideoListData> { |
| LOW | lib/routes/jimmyspa/news.ts | 92 | function convertHtmlDateToStandardFormat(htmlContent: string): Date | undefined { |
| LOW | lib/routes/medium/graphql.ts | 38 | async function getWebInlineRecommendedFeedQuery(user, cookie, pagingLimit = 20) { |
| LOW | lib/routes/medium/graphql.ts | 42 | async function getWebInlineTopicFeedQuery(user, tagSlug, cookie, pagingLimit = 20) { |
| LOW | lib/routes/medium/graphql.ts | 46 | async function getUserCatalogMainContentQuery(user, catalogId, cookie, pagingLimit = 20) { |
| LOW | lib/routes/medium/graphql.ts | 88 | function newWebInlineRecommendedFeedQuery(pagingLimit = 5) { |
| LOW | lib/routes/medium/graphql.ts | 124 | function newWebInlineTopicFeedQuery(tagSlug, pagingLimit = 5) { |
| LOW | lib/routes/medium/graphql.ts | 162 | function newUserCatalogMainContentQuery(catalogId, pagingLimit = 20) { |
| LOW | lib/routes/the/index.ts | 157 | function extractFromMaterialBlocks($: CheerioAPI, pageUrl: string): DataItem[] { |
| LOW | lib/routes/youtube/api/subtitles.ts | 52 | function createSrtAttachmentFromSrt(srt: string): Array<{ url: string; mime_type: string; title: string }> { |
| LOW | lib/routes/misskey/utils.tsx | 99 | async function getUserTimelineByUsername(username, site, { withRenotes = false, mediaOnly = false }) { |
| LOW | lib/routes/dailypush/utils.ts | 264 | export async function enhanceItemsWithSummaries(browser: Browser, items: ArticleItem[]): Promise<DataItem[]> { |
| LOW | lib/routes/mrdx/utils.ts | 1 | function getElementChildrenInnerText(element) { |
| LOW | lib/routes/sohu/mobile.ts | 86 | function extractPlateBlockNewsLists(jsonData: any) { |
| LOW | lib/routes/linkedin/utils.ts | 46 | function parseParamsToSearchParams(params, map) { |
| LOW | lib/routes/linkedin/utils.ts | 178 | function parseRelativeShorthandDate(shorthand) { |
| LOW | lib/routes/gov/moa/moa.ts | 232 | async function getLatestDataArticleDetail(id) { |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | lib/routes/uber/blog.ts | 70 | // Traverse the JSON to find the content node, which is more robust against format changes. |
| MEDIUM | lib/routes/freecomputerbooks/index.tsx | 51 | // Needing more robust processing if some day more such elements show up. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | lib/routes-deprecated/dcinside/board.js | 22 | async function getData(ctx, link) { |
| LOW | lib/routes/oreno3d/main.tsx | 72 | async function getData(response) { |
| LOW | lib/routes/szse/notice.ts | 39 | function getData(jscontent, option) { |
| LOW | lib/routes/cgtn/podcast.ts | 6 | async function getData(category, id) { |
| LOW | lib/routes/nber/common.tsx | 11 | async function getData(url) { |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | lib/routes/perplexity/blog.ts | 57 | // Step 1: Extract featured article using data-framer-name attribute |
| LOW | lib/routes/perplexity/blog.ts | 71 | // Step 2: Extract regular articles using data-framer-name="Article Card" |
| LOW | lib/routes/perplexity/blog.ts | 106 | // Step 3: Fetch detail pages for items missing pubDate (e.g., featured article) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | lib/routes/google/alerts.ts | 29 | params: `[null,[null,null,null,[null,"${keyword}","com",[null,"en","US"],null,null,null,0,0],null,3,[[null,1 |
| LOW | lib/routes/mrdx/daily.ts | 52 | // eg: `<a class="foo" daoxiang="foo-bar.htm">Lorem ipsum</a>` |