Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.
268 matches across 9 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | license_header_checker.py | 23 | def extract_leading_block_comment(content): |
| LOW | server/integrationApiServer.ts | 25 | export function createIntegrationApiServer() { |
| LOW | server/routers/idp/validateOidcCallback.ts | 762 | function normalizeRoleMappingResult(result: unknown): string[] { |
| LOW | server/routers/auth/changePassword.ts | 34 | async function invalidateAllSessionsExceptCurrent( |
| LOW | server/routers/auth/requestEmailVerificationCode.ts | 15 | export async function requestEmailVerificationCode( |
| LOW | server/routers/olm/fingerprintingUtils.ts | 40 | export async function handleFingerprintInsertion( |
| LOW | server/routers/olm/fingerprintingUtils.ts | 218 | export async function cleanUpOldFingerprintSnapshots(retentionDays: number) { |
| LOW | server/routers/olm/buildConfiguration.ts | 23 | export async function buildSiteConfigurationForOlmClient( |
| LOW | server/routers/olm/recoverOlmWithFingerprint.ts | 25 | export async function recoverOlmWithFingerprint( |
| LOW | server/routers/user/adminGeneratePasswordResetCode.ts | 32 | export async function adminGeneratePasswordResetCode( |
| LOW | …ver/routers/siteResource/removeRoleFromSiteResource.ts | 47 | export async function removeRoleFromSiteResource( |
| LOW | …rver/routers/siteResource/listAllSiteResourcesByOrg.ts | 203 | export async function listAllSiteResourcesByOrg( |
| LOW | …ver/routers/siteResource/removeUserFromSiteResource.ts | 47 | export async function removeUserFromSiteResource( |
| LOW | …/routers/siteResource/batchAddClientToSiteResources.ts | 52 | export async function batchAddClientToSiteResources( |
| LOW | server/routers/siteResource/updateSiteResource.ts | 734 | export async function handleMessagingForUpdatedSiteResource( |
| LOW | …r/routers/siteResource/removeClientFromSiteResource.ts | 47 | export async function removeClientFromSiteResource( |
| LOW | server/routers/auditLogs/queryRequestAuditLog.ts | 157 | async function enrichWithResourceDetails(logs: Awaited<ReturnType<typeof queryRequest>>) { |
| LOW | server/routers/auditLogs/queryRequestAuditLog.ts | 247 | async function queryUniqueFilterAttributes( |
| LOW | server/routers/newt/buildConfiguration.ts | 25 | export async function buildClientConfigurationForNewtClient( |
| LOW | server/routers/newt/buildConfiguration.ts | 193 | export async function buildTargetConfigurationForNewtClient( |
| LOW | server/routers/newt/targets.ts | 183 | export async function removeStandaloneHealthCheck( |
| LOW | …r/routers/resource/removeEmailFromResourceWhitelist.ts | 46 | export async function removeEmailFromResourceWhitelist( |
| LOW | server/routers/resource/addEmailToResourceWhitelist.ts | 46 | export async function addEmailToResourceWhitelist( |
| LOW | server/routers/resource/listUserResourceAliases.ts | 23 | function userResourceAliasesCacheKey( |
| LOW | …/routers/client/rebuildClientAssociationsCacheRoute.ts | 30 | export async function rebuildClientAssociationsCacheRoute( |
| LOW | server/routers/client/targets.ts | 16 | export async function convertTargetsIfNessicary( |
| LOW | server/routers/client/getClient.ts | 73 | function maskPostureDataWithPlaceholder(posture: PostureData): PostureData { |
| LOW | server/routers/client/verifyClientAssociationsCache.ts | 30 | export async function verifyClientAssociationsCache( |
| LOW | server/routers/gerbil/updateHolePunch.ts | 125 | export async function updateAndGenerateEndpointDestinations( |
| LOW | server/routers/gerbil/updateHolePunch.ts | 442 | async function handleClientEndpointChange( |
| LOW | server/routers/badger/verifySession.ts | 750 | function extractResourceSessionToken( |
| LOW | server/routers/badger/verifySession.ts | 899 | async function isUserAllowedToAccessResource( |
| LOW | server/routers/badger/verifySession.ts | 1210 | function isLocalOrCarrierGradeNatIp(ip: string): boolean { |
| LOW | server/auth/canUserAccessSiteResource.ts | 5 | export async function canUserAccessSiteResource({ |
| LOW | server/auth/verifyResourceAccessToken.ts | 14 | export async function verifyResourceAccessToken({ |
| LOW | server/auth/sendEmailVerificationCode.ts | 10 | export async function sendEmailVerificationCode( |
| LOW | server/auth/sendEmailVerificationCode.ts | 30 | async function generateEmailVerificationCode( |
| LOW | server/auth/actions.ts | 158 | export async function checkUserActionPermission( |
| LOW | server/auth/sessions/app.ts | 151 | export function createBlankSessionTokenCookie(isSecure: boolean): string { |
| LOW | server/auth/sessions/app.ts | 170 | export function generateIdFromEntropySize(size: number): string { |
| LOW | server/auth/sessions/resource.ts | 62 | export async function validateResourceSessionToken( |
| LOW | server/auth/sessions/resource.ts | 114 | export async function invalidateResourceSession( |
| LOW | server/auth/sessions/resource.ts | 169 | export function serializeResourceSessionCookie( |
| LOW | server/auth/sessions/resource.ts | 190 | export function createBlankResourceSessionTokenCookie( |
| LOW | server/auth/sessions/newt.ts | 62 | export async function invalidateAllNewtSessions(newtId: string): Promise<void> { |
| LOW | server/setup/scriptsSqlite/1.3.0.ts | 200 | function generateIdFromEntropySize(size: number): string { |
| LOW | server/middlewares/verifyUserCanSetUserOrgRoles.ts | 10 | export function verifyUserCanSetUserOrgRoles() { |
| LOW | server/middlewares/verifySiteProvisioningKeyAccess.ts | 15 | export async function verifySiteProvisioningKeyAccess( |
| LOW | …dlewares/integration/verifyApiKeySetResourceClients.ts | 8 | export async function verifyApiKeySetResourceClients( |
| LOW | …/middlewares/integration/verifyApiKeyResourceAccess.ts | 8 | export async function verifyApiKeyResourceAccess( |
| LOW | …ver/middlewares/integration/verifyAccessTokenAccess.ts | 9 | export async function verifyApiKeyAccessTokenAccess( |
| LOW | …dlewares/integration/verifyApiKeySiteResourceAccess.ts | 9 | export async function verifyApiKeySiteResourceAccess( |
| LOW | …iddlewares/integration/verifyApiKeySetResourceUsers.ts | 8 | export async function verifyApiKeySetResourceUsers( |
| LOW | …dlewares/integration/verifyApiKeyCanSetUserOrgRoles.ts | 26 | export function verifyApiKeyCanSetUserOrgRoles() { |
| LOW | …/private/routers/remoteExitNode/listRemoteExitNodes.ts | 30 | async function getLatestPangolinNodeVersion(): Promise<string | null> { |
| LOW | …e/routers/remoteExitNode/pickRemoteExitNodeDefaults.ts | 28 | export async function pickRemoteExitNodeDefaults( |
| LOW | server/private/routers/healthChecks/getStatusHistory.ts | 31 | export async function getHealthCheckStatusHistory( |
| LOW | …/routers/siteProvisioning/updateSiteProvisioningKey.ts | 72 | export async function updateSiteProvisioningKey( |
| LOW | …/routers/siteProvisioning/createSiteProvisioningKey.ts | 60 | export async function createSiteProvisioningKey( |
| LOW | …/routers/siteProvisioning/deleteSiteProvisioningKey.ts | 33 | export async function deleteSiteProvisioningKey( |
| 128 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | server/routers/newt/pingAccumulator.ts | 28 | // ── Site (newt) pings ────────────────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 32 | // ── Client (OLM) pings ──────────────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 48 | // ── Public API ───────────────────────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 80 | // ── Flush Logic ──────────────────────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 198 | // ── Flush client pings ───────────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 235 | // ── Flush OLM archive resets ─────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 271 | // ── Retry / Error Helpers ────────────────────────────────────────────── |
| MEDIUM | server/routers/newt/pingAccumulator.ts | 352 | // ── Lifecycle ────────────────────────────────────────────────────────── |
| MEDIUM | server/lib/traefik/pathEncoding.test.ts | 23 | // ── Helpers ────────────────────────────────────────────────────────── |
| MEDIUM | server/lib/traefik/pathEncoding.test.ts | 65 | // ── Tests ──────────────────────────────────────────────────────────── |
| MEDIUM | server/lib/traefik/pathEncoding.test.ts | 72 | // ── encodePath unit tests ──────────────────────────────────────── |
| MEDIUM | server/lib/traefik/pathEncoding.test.ts | 187 | // ── Collision fix: the actual bug we're fixing ─────────────────── |
| MEDIUM | server/lib/traefik/pathEncoding.test.ts | 253 | // ── Edge cases ─────────────────────────────────────────────────── |
| MEDIUM | src/app/[orgId]/settings/logs/streaming/page.tsx | 59 | // ── Re-export Destination so the rest of the file can use it ────────────────── |
| MEDIUM | src/app/[orgId]/settings/logs/streaming/page.tsx | 70 | // ── Destination card ─────────────────────────────────────────────────────────── |
| MEDIUM | src/app/[orgId]/settings/logs/streaming/page.tsx | 227 | // ── Add destination card ─────────────────────────────────────────────────────── |
| MEDIUM | src/app/[orgId]/settings/logs/streaming/page.tsx | 250 | // ── Destination type picker ──────────────────────────────────────────────────── |
| MEDIUM | src/app/[orgId]/settings/logs/streaming/page.tsx | 354 | // ── Main page ────────────────────────────────────────────────────────────────── |
| MEDIUM | src/components/HttpDestinationCredenza.tsx | 30 | // ── Types ────────────────────────────────────────────────────────────────────── |
| MEDIUM | src/components/HttpDestinationCredenza.tsx | 66 | // ── Helpers ──────────────────────────────────────────────────────────────────── |
| MEDIUM | src/components/HttpDestinationCredenza.tsx | 90 | // ── Headers editor ───────────────────────────────────────────────────────────── |
| MEDIUM | src/components/HttpDestinationCredenza.tsx | 157 | // ── Component ────────────────────────────────────────────────────────────────── |
| MEDIUM | src/components/S3DestinationCredenza.tsx | 29 | // ── Types ────────────────────────────────────────────────────────────────────── |
| MEDIUM | src/components/S3DestinationCredenza.tsx | 45 | // ── Helpers ──────────────────────────────────────────────────────────────────── |
| MEDIUM | src/components/S3DestinationCredenza.tsx | 67 | // ── Component ────────────────────────────────────────────────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | server/routers/external.ts | 641 | authenticated.post( |
| LOW | server/routers/external.ts | 781 | ); |
| LOW | server/routers/external.ts | 801 | // role.addRoleAction |
| LOW | server/routers/external.ts | 881 | |
| LOW | server/routers/external.ts | 901 | // role.addRoleAction |
| LOW | server/routers/role/removeRoleSite.ts | 61 | if (deletedRoleSite.length === 0) { |
| LOW | server/routers/auth/login.ts | 161 | // // Check if user has security keys registered |
| LOW | server/routers/user/removeUserSite.ts | 61 | if (deletedUserSite.length === 0) { |
| LOW | server/routers/user/addUserSite.ts | 41 | }) |
| LOW | server/routers/auditLogs/queryRequestAuditLog.ts | 301 | }) |
| LOW | server/routers/newt/buildConfiguration.ts | 61 | ); |
| LOW | server/routers/newt/buildConfiguration.ts | 81 | // eq(siteResources.siteId, site.siteId), |
| LOW | server/routers/newt/buildConfiguration.ts | 101 | // allSiteResources.map( |
| LOW | server/routers/site/updateSite.ts | 21 | niceId: z.string().min(1).max(255).optional(), |
| LOW | server/routers/resource/listUserResourceAliases.ts | 61 | }); |
| LOW | server/routers/client/listClients.ts | 361 | // const latestOlmVersionPromise = getLatestOlmVersion(); |
| LOW | server/routers/client/listClients.ts | 381 | // latestOlVersion |
| LOW | server/routers/client/listUserDevices.ts | 401 | }; |
| LOW | server/routers/client/listUserDevices.ts | 421 | // client.olmUpdateAvailable = false; |
| LOW | server/routers/ws/checkRoundTripMessage.ts | 21 | // registry.registerPath({ |
| LOW | server/private/routers/org/sendUsageNotifications.ts | 61 | // "application/json": { |
| LOW | server/private/routers/ssh/signSshKey.ts | 81 | // registry.registerPath({ |
| LOW | …ate/routers/domain/checkDomainNamespaceAvailability.ts | 61 | ); |
| LOW | server/private/routers/domain/listDomainNamespaces.ts | 101 | fromError(parsedParams.error).toString() |
| LOW | server/private/middlewares/verifyRemoteExitNode.ts | 41 | // .from(users) |
| LOW | server/private/lib/exitNodes/exitNodes.ts | 201 | return []; |
| LOW | server/private/lib/exitNodes/exitNodes.ts | 221 | // } |
| LOW | server/lib/ip.test.ts | 41 | { |
| LOW | server/lib/ip.test.ts | 101 | // start: BigInt("3232235520"), |
| LOW | server/lib/ip.test.ts | 121 | // ); |
| LOW | server/lib/blueprints/parseDotNotation.ts | 81 | // "resources.resource-nice-id.name": "this is my resource", |
| LOW | server/lib/blueprints/parseDotNotation.ts | 101 | // "resources.resource-nice-id2.protocol": "tcp", |
| LOW | server/lib/blueprints/parseDockerContainers.ts | 221 | } |
| LOW | server/lib/blueprints/parseDockerContainers.ts | 241 | // ip: "0.0.0.0" |
| LOW | server/lib/blueprints/parseDockerContainers.ts | 261 | // name: "nginx2", |
| LOW | server/lib/blueprints/parseDockerContainers.ts | 281 | // owen_default: { |
| LOW | server/lib/blueprints/parseDockerContainers.ts | 301 | // ], |
| LOW | server/lib/blueprints/parseDockerContainers.ts | 321 | // image: "bolkedebruin/rdpgw:latest", |
| LOW | src/app/[orgId]/settings/logs/request/page.tsx | 361 | // 102 - Valid Access Token |
| LOW | src/components/ShareLinksTable.tsx | 161 | // cell: ({ row }) => { |
| LOW | src/components/ShareLinksTable.tsx | 181 | // variant="ghost" |
| LOW | src/components/ShareLinksTable.tsx | 201 | // ); |
| LOW | src/components/RolesTable.tsx | 101 | // enableHiding: false, |
| LOW | src/components/HealthCheckCredenza.tsx | 581 | description: t( |
| LOW | src/components/PendingSitesTable.tsx | 241 | </span> |
| LOW | src/components/PendingSitesTable.tsx | 261 | // ? ArrowUp10Icon |
| LOW | src/components/PendingSitesTable.tsx | 281 | // ); |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | license_header_checker.py | 117 | except Exception as e: |
| MEDIUM | license_header_checker.py | 118 | print(f"Error processing file {file_path}: {e}") |
| MEDIUM | license_header_checker.py | 134 | print(f"Error: Directory '{target_directory}' not found.") |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | package-lock.json | 16260 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz", |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | src/components/newt-install-commands.tsx | 79 | command: `# Create the directory and environment file |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | server/lib/blueprints/parseDotNotation.ts | 79 | // // Example usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | license_header_checker.py | 62 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | messages/en-US.json | 1338 | "otpSetupSuccessStoreBackupCodes": "Your account is now more secure. Don't forget to save your backup codes.", |