@mridang/webhint-hint-plumbline 0.15.0 → 0.15.2

package/dist/hints/email/mail-dane.js

@@ -4,6 +4,39 @@ import { dns } from '../../core/dns.js';
 import { mailNet } from '../../lib/email/net.js';
 import { DOMAIN_OPTION_SCHEMA, onMailDomain, } from '../../lib/email/on-mail-domain.js';
 import { TLSA, isDaneUsage, parseTlsa, tlsaMatches, } from '../../lib/email/tlsa.js';
+/** Looks up the host's TLSA records and matches them against its certificate. */
+async function daneOutcome(host) {
+    let records = [];
+    try {
+        const response = await dns.client.query(`_25._tcp.${host}`, 'TLSA');
+        if (response.status === 2) {
+            return { bucket: 'bogus' };
+        }
+        // DANE is only usable with DNSSEC; an unsigned answer is no answer.
+        if (response.authenticated) {
+            records = response.answers
+                .filter((record) => record.type === TLSA)
+                .flatMap((record) => parseTlsa(record.data) ?? [])
+                .filter(isDaneUsage);
+        }
+    }
+    catch {
+        return { bucket: null };
+    }
+    if (records.length === 0) {
+        return { bucket: 'missing' };
+    }
+    const probe = await mailNet.client.probeStarttls(host);
+    if (!probe.starttls || probe.certificates.length === 0) {
+        return {
+            bucket: 'unchecked',
+            entry: `${host}: ${probe.error ?? 'no certificate presented'}`,
+        };
+    }
+    return records.some((record) => tlsaMatches(record, probe.certificates))
+        ? { bucket: null }
+        : { bucket: 'invalid' };
+}
 /**
  * Internet.nl, email test, DANE: every receiving mail server (MX) must
  * publish a DNSSEC-signed TLSA record at `_25._tcp.<mx>` (test "DANE
@@ -30,42 +63,19 @@ export default defineHint({
     ],
     setup(context) {
         onMailDomain(context, async (mail) => {
-            const missing = [];
-            const bogus = [];
-            const invalid = [];
-            const unchecked = [];
+            const buckets = {
+                missing: [],
+                bogus: [],
+                invalid: [],
+                unchecked: [],
+            };
             for (const host of mail.hosts) {
-                let records = [];
-                try {
-                    const response = await dns.client.query(`_25._tcp.${host}`, 'TLSA');
-                    if (response.status === 2) {
-                        bogus.push(host);
-                        continue;
-                    }
-                    // DANE is only usable with DNSSEC; an unsigned answer is no answer.
-                    if (response.authenticated) {
-                        records = response.answers
-                            .filter((record) => record.type === TLSA)
-                            .flatMap((record) => parseTlsa(record.data) ?? [])
-                            .filter(isDaneUsage);
-                    }
-                }
-                catch {
-                    continue;
-                }
-                if (records.length === 0) {
-                    missing.push(host);
-                    continue;
-                }
-                const probe = await mailNet.client.probeStarttls(host);
-                if (!probe.starttls || probe.certificates.length === 0) {
-                    unchecked.push(`${host}: ${probe.error ?? 'no certificate presented'}`);
-                    continue;
-                }
-                if (!records.some((record) => tlsaMatches(record, probe.certificates))) {
-                    invalid.push(host);
+                const outcome = await daneOutcome(host);
+                if (outcome.bucket) {
+                    buckets[outcome.bucket].push(outcome.entry ?? host);
                 }
             }
+            const { missing, bogus, invalid, unchecked } = buckets;
             if (missing.length > 0) {
                 mail.report('At least one of your mail server domains does *not* provide a TLSA record for DANE.', {
                     severity: Severity.error,

package/dist/hints/email/mail-dane.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-dane.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dane.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,IAAI,EACJ,WAAW,EACX,SAAS,EACT,WAAW,GAEZ,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;GASG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,yCAAyC;IAC/C,WAAW,EACT,wHAAwH;IAC1H,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;IAC7C,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,OAAO,GAAiB,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;oBACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACjB,SAAS;oBACX,CAAC;oBACD,oEAAoE;oBACpE,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;wBAC3B,OAAO,GAAG,QAAQ,CAAC,OAAO;6BACvB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;6BACxC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;6BACjD,MAAM,CAAC,WAAW,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,SAAS;gBACX,CAAC;gBAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvD,SAAS,CAAC,IAAI,CACZ,GAAG,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,0BAA0B,EAAE,CACxD,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,EAClE,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CACT,qFAAqF,EACrF;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,OAAO;yBACjB,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,YAAY,IAAI,yDAAyD,CAC5E;yBACA,IAAI,CAAC,IAAI,CAAC;iBACd,CACF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CACT,sQAAsQ,EACtQ;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,KAAK;yBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,sBAAsB,CAAC;yBACrD,IAAI,CAAC,IAAI,CAAC;iBACd,CACF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CACT,wWAAwW,EACxW,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CACT,8IAA8I,EAC9I,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-dane.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dane.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,IAAI,EACJ,WAAW,EACX,SAAS,EACT,WAAW,GAEZ,MAAM,yBAAyB,CAAC;AAiBjC,iFAAiF;AACjF,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,OAAO,GAAiB,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,CAAC;QACD,oEAAoE;QACpE,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,OAAO,GAAG,QAAQ,CAAC,OAAO;iBACvB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;iBACxC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBACjD,MAAM,CAAC,WAAW,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,0BAA0B,EAAE;SAC/D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACtE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE;QAClB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,yCAAyC;IAC/C,WAAW,EACT,wHAAwH;IAC1H,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;IAC7C,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,OAAO,GAAgB;gBAC3B,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,EAAE;aACd,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CACT,qFAAqF,EACrF;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,OAAO;yBACjB,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,YAAY,IAAI,yDAAyD,CAC5E;yBACA,IAAI,CAAC,IAAI,CAAC;iBACd,CACF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CACT,sQAAsQ,EACtQ;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,KAAK;yBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,sBAAsB,CAAC;yBACrD,IAAI,CAAC,IAAI,CAAC;iBACd,CACF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CACT,wWAAwW,EACxW,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CACT,8IAA8I,EAC9I,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-dkim.js

@@ -50,28 +50,30 @@ export default defineHint({
             for (const selector of selectors) {
                 const name = `${selector.trim()}._domainkey.${mail.domain}`;
                 const lookup = await lookupTxt(dns.client, name);
+                const records = lookup.status === 'ok' ? lookup.records : [];
                 if (lookup.status === 'error') {
                     mail.report(`The DKIM record for selector '${selector}' could not be looked up.`, {
                         severity: Severity.warning,
                         codeSnippet: name,
                     });
-                    continue;
                 }
-                const records = lookup.status === 'ok' ? lookup.records : [];
-                if (records.length === 0) {
+                else if (records.length === 0) {
                     mail.report(`Your domain does *not* support DKIM records: there is no DKIM record for selector '${selector}'.`, { severity: Severity.error, codeSnippet: name });
-                    continue;
                 }
-                if (records.length > 1) {
+                else if (records.length > 1) {
                     mail.report(`The DKIM record for selector '${selector}' is ambiguous: ${records.length} TXT records were found.`, { severity: Severity.error, codeSnippet: records.join('\n') });
-                    continue;
-                }
-                const parsed = parseDkim(records[0]);
-                if (!parsed.valid) {
-                    mail.report(`The DKIM record for selector '${selector}' is not valid: ${parsed.errors.join(' ')}`, { severity: Severity.error, codeSnippet: records[0] });
                 }
-                else if (parsed.testing) {
-                    mail.report(`The DKIM record for selector '${selector}' is in testing mode (t=y); verifiers may ignore failures.`, { severity: Severity.warning, codeSnippet: records[0] });
+                else {
+                    const parsed = parseDkim(records[0]);
+                    if (!parsed.valid) {
+                        mail.report(`The DKIM record for selector '${selector}' is not valid: ${parsed.errors.join(' ')}`, { severity: Severity.error, codeSnippet: records[0] });
+                    }
+                    else if (parsed.testing) {
+                        mail.report(`The DKIM record for selector '${selector}' is in testing mode (t=y); verifiers may ignore failures.`, { severity: Severity.warning, codeSnippet: records[0] });
+                    }
+                    else {
+                        // A valid record outside testing mode needs no report.
+                    }
                 }
             }
         });

package/dist/hints/email/mail-dkim.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-dkim.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dkim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD;;;;;;;;;GASG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,iCAAiC;IACvC,WAAW,EACT,mGAAmG;IACrG,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE;gBACV,GAAG,oBAAoB;gBACvB,SAAS,EAAE;oBACT,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EACT,qFAAqF;iBACxF;aACF;SACF;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAC3B,CAAC,QAAQ,EAAsB,EAAE,CAC/B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CACzD;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,2MAA2M,EAC3M;oBACE,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,WAAW,EAAE,yBAAyB,IAAI,CAAC,MAAM,2CAA2C;iBAC7F,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,2BAA2B,EACpE;wBACE,QAAQ,EAAE,QAAQ,CAAC,OAAO;wBAC1B,WAAW,EAAE,IAAI;qBAClB,CACF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC,MAAM,CACT,sFAAsF,QAAQ,IAAI,EAClG,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAChD,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,mBAAmB,OAAO,CAAC,MAAM,0BAA0B,EACpG,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAClB,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,mBAAmB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACrF,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC;gBACJ,CAAC;qBAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,4DAA4D,EACrG,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACxD,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-dkim.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dkim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD;;;;;;;;;GASG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,iCAAiC;IACvC,WAAW,EACT,mGAAmG;IACrG,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE;gBACV,GAAG,oBAAoB;gBACvB,SAAS,EAAE;oBACT,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EACT,qFAAqF;iBACxF;aACF;SACF;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAC3B,CAAC,QAAQ,EAAsB,EAAE,CAC/B,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CACzD;gBACH,CAAC,CAAC,EAAE,CAAC;YAEP,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,2MAA2M,EAC3M;oBACE,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,WAAW,EAAE,yBAAyB,IAAI,CAAC,MAAM,2CAA2C;iBAC7F,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,2BAA2B,EACpE;wBACE,QAAQ,EAAE,QAAQ,CAAC,OAAO;wBAC1B,WAAW,EAAE,IAAI;qBAClB,CACF,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,MAAM,CACT,sFAAsF,QAAQ,IAAI,EAClG,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAChD,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,mBAAmB,OAAO,CAAC,MAAM,0BAA0B,EACpG,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAClB,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,mBAAmB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACrF,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC;oBACJ,CAAC;yBAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC1B,IAAI,CAAC,MAAM,CACT,iCAAiC,QAAQ,4DAA4D,EACrG,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACxD,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,uDAAuD;oBACzD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-dmarc.js

@@ -46,20 +46,26 @@ export default defineHint({
                 return;
             }
             const status = await checkDmarcPolicy(records[0], mail.domain, false, (name) => lookupTxt(dns.client, name));
-            if (status === 'invalid_syntax') {
-                mail.report('Your DMARC policy is *not* syntactically correct.', {
-                    severity: Severity.error,
-                    codeSnippet: records[0],
-                });
-            }
-            else if (status === 'invalid_p_sp') {
-                mail.report('Your DMARC policy is *not* sufficiently strict.', {
-                    severity: Severity.error,
-                    codeSnippet: records[0],
-                });
-            }
-            else if (status === 'invalid_external') {
-                mail.report('The domain of the external mail address following `rua=` and/or `ruf=` has *no* (valid) authorisation record for receiving DMARC reports for the tested domain.', { severity: Severity.warning, codeSnippet: records[0] });
+            switch (status) {
+                case 'invalid_syntax': {
+                    mail.report('Your DMARC policy is *not* syntactically correct.', {
+                        severity: Severity.error,
+                        codeSnippet: records[0],
+                    });
+                    break;
+                }
+                case 'invalid_p_sp': {
+                    mail.report('Your DMARC policy is *not* sufficiently strict.', {
+                        severity: Severity.error,
+                        codeSnippet: records[0],
+                    });
+                    break;
+                }
+                case 'invalid_external': {
+                    mail.report('The domain of the external mail address following `rua=` and/or `ruf=` has *no* (valid) authorisation record for receiving DMARC reports for the tested domain.', { severity: Severity.warning, codeSnippet: records[0] });
+                    break;
+                }
+                // No default
             }
         });
     },

package/dist/hints/email/mail-dmarc.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-dmarc.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dmarc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,uCAAuC;IAC7C,WAAW,EACT,oHAAoH;IACtH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,+DAA+D;YAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5B,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CACzC;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,6CAA6C,EAAE;oBACzD,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;wBAClB,UAAU,IAAI,CAAC,MAAM,sDAAsD,IAAI,CAAC,MAAM,GAAG;iBAC5F,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,OAAO,CAAC,CAAC,CAAC,EACV,IAAI,CAAC,MAAM,EACX,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CACtC,CAAC;YACF,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,mDAAmD,EAAE;oBAC/D,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;iBACxB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,iDAAiD,EAAE;oBAC7D,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;iBACxB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CACT,iKAAiK,EACjK,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACxD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-dmarc.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dmarc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,uCAAuC;IAC7C,WAAW,EACT,oHAAoH;IACtH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,+DAA+D;YAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5B,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CACzC;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,6CAA6C,EAAE;oBACzD,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;wBAClB,UAAU,IAAI,CAAC,MAAM,sDAAsD,IAAI,CAAC,MAAM,GAAG;iBAC5F,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,OAAO,CAAC,CAAC,CAAC,EACV,IAAI,CAAC,MAAM,EACX,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CACtC,CAAC;YACF,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,mDAAmD,EAAE;wBAC/D,QAAQ,EAAE,QAAQ,CAAC,KAAK;wBACxB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;qBACxB,CAAC,CAAC;oBAEH,MAAM;gBACR,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,IAAI,CAAC,MAAM,CAAC,iDAAiD,EAAE;wBAC7D,QAAQ,EAAE,QAAQ,CAAC,KAAK;wBACxB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;qBACxB,CAAC,CAAC;oBAEH,MAAM;gBACR,CAAC;gBACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,MAAM,CACT,iKAAiK,EACjK,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACxD,CAAC;oBAEF,MAAM;gBACR,CAAC;gBACD,aAAa;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-dnssec.js

@@ -51,6 +51,9 @@ export default defineHint({
             else if (domainState === 'bogus') {
                 mail.report("Your email address domain is 'bogus', because the DNSSEC signature is *not* valid (the validating resolver answered SERVFAIL). Either someone manipulated the response from your name server, or your domain has a *serious DNSSEC configuration error*. The latter makes your domain unreachable for any user who validates DNSSEC signatures. You should contact your name server operator (often your registrar or hosting provider) as soon as possible.", { severity: Severity.error, codeSnippet: mail.domain });
             }
+            else {
+                // Any other state needs no report.
+            }
             const insecure = [];
             const bogus = [];
             for (const host of mail.hosts) {
@@ -61,6 +64,9 @@ export default defineHint({
                 else if (state === 'bogus') {
                     bogus.push(host);
                 }
+                else {
+                    // Any other state needs no report.
+                }
             }
             if (insecure.length > 0) {
                 mail.report('At least one of your mail server domains is insecure, because it is *not* DNSSEC signed.', { severity: Severity.error, codeSnippet: insecure.join('\n') });

package/dist/hints/email/mail-dnssec.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-dnssec.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dnssec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAI3C;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,gCAAgC;IACtC,WAAW,EACT,+GAA+G;IACjH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CACT,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CACT,8bAA8b,EAC9b,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;oBACzB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;qBAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CACT,0FAA0F,EAC1F,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CACT,0eAA0e,EAC1e,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-dnssec.js","sourceRoot":"","sources":["../../../src/hints/email/mail-dnssec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAI3C;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,gCAAgC;IACtC,WAAW,EACT,+GAA+G;IACjH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CACT,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CACT,8bAA8b,EAC9b,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,mCAAmC;YACrC,CAAC;YAED,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;oBACzB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;qBAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,mCAAmC;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CACT,0FAA0F,EAC1F,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CACT,0eAA0e,EAC1e,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-ipv6.js

@@ -38,23 +38,21 @@ export default defineHint({
                 try {
                     const response = await dns.client.query(host, 'AAAA');
                     // A failed lookup says nothing about the server; skip it.
-                    if (response.status !== 0 && response.status !== 3) {
-                        continue;
+                    if (response.status === 0 || response.status === 3) {
+                        addresses = response.answers
+                            .filter((record) => record.type === AAAA)
+                            .map((record) => record.data)
+                            // IPv4-mapped IPv6 addresses give no IPv6 connectivity.
+                            .filter((ip) => isIPv6(ip) && !/^::ffff:/iu.test(ip));
                     }
-                    addresses = response.answers
-                        .filter((record) => record.type === AAAA)
-                        .map((record) => record.data)
-                        // IPv4-mapped IPv6 addresses give no IPv6 connectivity.
-                        .filter((ip) => isIPv6(ip) && !/^::ffff:/iu.test(ip));
                 }
                 catch {
-                    continue;
+                    // A failed lookup says nothing about the server; skip it.
                 }
-                if (addresses.length === 0) {
+                if (addresses?.length === 0) {
                     withoutIpv6.push(host);
-                    continue;
                 }
-                for (const ip of addresses) {
+                for (const ip of addresses ?? []) {
                     if (!(await mailNet.client.tcpReachable(ip, SMTP_PORT))) {
                         unreachable.push(`${host} ${ip}`);
                     }

package/dist/hints/email/mail-ipv6.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-ipv6.js","sourceRoot":"","sources":["../../../src/hints/email/mail-ipv6.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,gDAAgD;AAChD,MAAM,IAAI,GAAG,EAAE,CAAC;AAEhB,oCAAoC;AACpC,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;;;;;GAMG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,yGAAyG;IAC3G,QAAQ,EAAE,QAAQ,CAAC,aAAa;IAChC,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,WAAW,GAAa,EAAE,CAAC;YAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,SAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACtD,0DAA0D;oBAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACnD,SAAS;oBACX,CAAC;oBACD,SAAS,GAAG,QAAQ,CAAC,OAAO;yBACzB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;yBACxC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;wBAC7B,wDAAwD;yBACvD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;wBACxD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,oFAAoF,EACpF;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;iBACpC,CACF,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,gGAAgG,EAChG;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;iBACpC,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-ipv6.js","sourceRoot":"","sources":["../../../src/hints/email/mail-ipv6.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,gDAAgD;AAChD,MAAM,IAAI,GAAG,EAAE,CAAC;AAEhB,oCAAoC;AACpC,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;;;;;GAMG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,yGAAyG;IAC3G,QAAQ,EAAE,QAAQ,CAAC,aAAa;IAChC,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,WAAW,GAAa,EAAE,CAAC;YAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,SAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACtD,0DAA0D;oBAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACnD,SAAS,GAAG,QAAQ,CAAC,OAAO;6BACzB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;6BACxC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;4BAC7B,wDAAwD;6BACvD,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,0DAA0D;gBAC5D,CAAC;gBACD,IAAI,SAAS,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBACD,KAAK,MAAM,EAAE,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;oBACjC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;wBACxD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,oFAAoF,EACpF;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;iBACpC,CACF,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,gGAAgG,EAChG;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;iBACpC,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-ns-rpki-valid.js

@@ -35,6 +35,9 @@ export default defineHint({
                 else if (verdict === 'bad') {
                     mail.report(`${host}: At least one IP address of the name servers of your mail server has a \`NotFound\` validation state. There is *no* RPKI Route Origin Authorisation (ROA) published for its route announcement.`, { severity: Severity.error, codeSnippet: rpkiLines(offenders) });
                 }
+                else {
+                    // Any other verdict needs no report.
+                }
             }
         });
     },

package/dist/hints/email/mail-ns-rpki-valid.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-ns-rpki-valid.js","sourceRoot":"","sources":["../../../src/hints/email/mail-ns-rpki-valid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE7E;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,+CAA+C;IACrD,WAAW,EACT,qHAAqH;IACvH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CACT,GAAG,IAAI,0TAA0T,EACjU,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAChE,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,MAAM,CACT,GAAG,IAAI,kMAAkM,EACzM,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAChE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-ns-rpki-valid.js","sourceRoot":"","sources":["../../../src/hints/email/mail-ns-rpki-valid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE7E;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,+CAA+C;IACrD,WAAW,EACT,qHAAqH;IACvH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CACT,GAAG,IAAI,0TAA0T,EACjU,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAChE,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,MAAM,CACT,GAAG,IAAI,kMAAkM,EACzM,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAChE,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,qCAAqC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-rpki.js

@@ -40,10 +40,9 @@ export default defineHint({
                 for (const type of ['A', 'AAAA']) {
                     try {
                         const response = await dns.client.query(host, type);
-                        for (const record of response.answers) {
-                            if (ADDRESS_TYPES.has(record.type)) {
-                                addresses.add(record.data);
-                            }
+                        const records = response.answers.filter((r) => ADDRESS_TYPES.has(r.type));
+                        for (const record of records) {
+                            addresses.add(record.data);
                         }
                     }
                     catch {
@@ -57,7 +56,7 @@ export default defineHint({
                             // Not routed: there is nothing to validate.
                             return null;
                         }
-                        const line = `${host} ${ip} ${result.prefix ?? ''} AS${result.asn}`.replace(/ +/gu, ' ');
+                        const line = `${host} ${ip} ${result.prefix ?? ''} AS${result.asn}`.replaceAll(/ +/gu, ' ');
                         return { line, status: result.status };
                     }
                     catch {
@@ -73,6 +72,9 @@ export default defineHint({
                 else if (found?.status === 'unknown') {
                     notFound.push(found.line);
                 }
+                else {
+                    // Any other status needs no report.
+                }
             }
             if (notFound.length > 0) {
                 mail.report('At least one IP address of your receiving mail servers has a `NotFound` validation state. There is *no* RPKI Route Origin Authorization (ROA) published for the route announcement of each of the affected IP addresses.', { severity: Severity.error, codeSnippet: notFound.join('\n') });

package/dist/hints/email/mail-rpki.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-rpki.js","sourceRoot":"","sources":["../../../src/hints/email/mail-rpki.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAE3C,qDAAqD;AACrD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,oCAAoC;IAC1C,WAAW,EACT,2HAA2H;IAC7H,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;YAE7B,qEAAqE;YACrE,wEAAwE;YACxE,+CAA+C;YAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;gBACpC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAU,EAAE,CAAC;oBAC1C,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACpD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;4BACtC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gCACnC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;4BAC7B,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,gDAAgD;oBAClD,CAAC;gBACH,CAAC;gBACD,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBAC9B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBAC3C,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;4BACxB,4CAA4C;4BAC5C,OAAO,IAAI,CAAC;wBACd,CAAC;wBACD,MAAM,IAAI,GACR,GAAG,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAC5D,MAAM,EACN,GAAG,CACJ,CAAC;wBACJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;oBACzC,CAAC;oBAAC,MAAM,CAAC;wBACP,0DAA0D;wBAC1D,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjC,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;qBAAM,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;oBACvC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CACT,0NAA0N,EAC1N,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CACT,0sBAA0sB,EAC1sB,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-rpki.js","sourceRoot":"","sources":["../../../src/hints/email/mail-rpki.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAE3C,qDAAqD;AACrD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEvC;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,oCAAoC;IAC1C,WAAW,EACT,2HAA2H;IAC7H,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;YAE7B,qEAAqE;YACrE,wEAAwE;YACxE,+CAA+C;YAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;gBACpC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAU,EAAE,CAAC;oBAC1C,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAC1B,CAAC;wBACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;4BAC7B,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC7B,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,gDAAgD;oBAClD,CAAC;gBACH,CAAC;gBACD,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBAC9B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBAC3C,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;4BACxB,4CAA4C;4BAC5C,OAAO,IAAI,CAAC;wBACd,CAAC;wBACD,MAAM,IAAI,GACR,GAAG,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAC/D,MAAM,EACN,GAAG,CACJ,CAAC;wBACJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;oBACzC,CAAC;oBAAC,MAAM,CAAC;wBACP,0DAA0D;wBAC1D,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjC,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;qBAAM,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;oBACvC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,oCAAoC;gBACtC,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CACT,0NAA0N,EAC1N,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CACT,0sBAA0sB,EAC1sB,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-spf.js

@@ -68,7 +68,7 @@ export default defineHint({
                     severity: Severity.error,
                     // Innermost record first, as Internet.nl shows them reversed.
                     codeSnippet: [...result.records]
-                        .reverse()
+                        .toReversed()
                         .map(({ domain, record }) => `${domain}: ${record}`)
                         .join('\n'),
                 });

package/dist/hints/email/mail-spf.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-spf.js","sourceRoot":"","sources":["../../../src/hints/email/mail-spf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,cAAc,GAEf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,eAAe,GAAsD;IACzE,cAAc,EAAE,iDAAiD;IACjE,WAAW,EAAE,+CAA+C;IAC5D,eAAe,EACb,sKAAsK;IACxK,gBAAgB,EACd,sKAAsK;IACxK,eAAe,EACb,+QAA+Q;CAClR,CAAC;AAEF;;;;;;GAMG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,qCAAqC;IAC3C,WAAW,EACT,2GAA2G;IAC7G,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxD,+DAA+D;YAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5B,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CACvC;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,iDAAiD,EAAE;oBAC7D,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EACT,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,2BAA2B;iBAC9D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAA0B,EAAE;gBAC/D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,SAAS,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,OAAO,GACX,KAAK,CAAC,MAAM,KAAK,IAAI;oBACnB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3B,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CACvC;oBACH,CAAC,CAAC,EAAE,CAAC;gBACT,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,CAAC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;oBAC1C,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,8DAA8D;oBAC9D,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;yBAC7B,OAAO,EAAE;yBACT,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;yBACnD,IAAI,CAAC,IAAI,CAAC;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-spf.js","sourceRoot":"","sources":["../../../src/hints/email/mail-spf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,cAAc,GAEf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,eAAe,GAAsD;IACzE,cAAc,EAAE,iDAAiD;IACjE,WAAW,EAAE,+CAA+C;IAC5D,eAAe,EACb,sKAAsK;IACxK,gBAAgB,EACd,sKAAsK;IACxK,eAAe,EACb,+QAA+Q;CAClR,CAAC;AAEF;;;;;;GAMG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,qCAAqC;IAC3C,WAAW,EACT,2GAA2G;IAC7G,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxD,+DAA+D;YAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5B,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CACvC;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,iDAAiD,EAAE;oBAC7D,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EACT,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,2BAA2B;iBAC9D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAA0B,EAAE;gBAC/D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,SAAS,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,OAAO,GACX,KAAK,CAAC,MAAM,KAAK,IAAI;oBACnB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3B,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CACvC;oBACH,CAAC,CAAC,EAAE,CAAC;gBACT,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,CAAC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;oBAC1C,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,8DAA8D;oBAC9D,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;yBAC7B,UAAU,EAAE;yBACZ,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;yBACnD,IAAI,CAAC,IAAI,CAAC;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/email/mail-starttls.js

@@ -44,20 +44,20 @@ export default defineHint({
                 const probe = await mailNet.client.probeStarttls(host);
                 if (!probe.reachable) {
                     unreachable.push(`${host}: ${probe.error ?? 'no connection'}`);
-                    continue;
                 }
-                if (!probe.starttls) {
-                    noStarttls.push(host);
-                    continue;
-                }
-                if (tlsVersionLevel(probe.tlsVersion) === 'insufficient') {
-                    badVersion.push(`${host}: ${probe.tlsVersion ?? 'unknown'}`);
+                else if (probe.starttls) {
+                    if (tlsVersionLevel(probe.tlsVersion) === 'insufficient') {
+                        badVersion.push(`${host}: ${probe.tlsVersion ?? 'unknown'}`);
+                    }
+                    if (!probe.trusted) {
+                        untrusted.push(`${host}: ${probe.trustError ?? 'untrusted'}`);
+                    }
+                    if (!probe.hostnameMatches) {
+                        mismatched.push(host);
+                    }
                 }
-                if (!probe.trusted) {
-                    untrusted.push(`${host}: ${probe.trustError ?? 'untrusted'}`);
-                }
-                if (!probe.hostnameMatches) {
-                    mismatched.push(host);
+                else {
+                    noStarttls.push(host);
                 }
             }
             if (noStarttls.length > 0) {

package/dist/hints/email/mail-starttls.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-starttls.js","sourceRoot":"","sources":["../../../src/hints/email/mail-starttls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,6BAA6B;IACnC,WAAW,EACT,gIAAgI;IAClI,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,WAAW,GAAa,EAAE,CAAC;YAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;oBACrB,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;oBAC/D,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACpB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACtB,SAAS;gBACX,CAAC;gBACD,IAAI,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,cAAc,EAAE,CAAC;oBACzD,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;oBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CACT,8DAA8D,EAC9D;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;iBACnC,CACF,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CACT,kFAAkF,EAClF,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CACT,iJAAiJ,EACjJ,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CACT,uHAAuH,EACvH,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,kJAAkJ,EAClJ,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mail-starttls.js","sourceRoot":"","sources":["../../../src/hints/email/mail-starttls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,6BAA6B;IACnC,WAAW,EACT,gIAAgI;IAClI,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE;QACN;YACE,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,oBAAoB;SACjC;KACF;IACD,KAAK,CAAC,OAAO;QACX,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,WAAW,GAAa,EAAE,CAAC;YAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;oBACrB,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC1B,IAAI,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,cAAc,EAAE,CAAC;wBACzD,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;oBAC/D,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnB,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;oBAChE,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;wBAC3B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CACT,8DAA8D,EAC9D;oBACE,QAAQ,EAAE,QAAQ,CAAC,KAAK;oBACxB,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;iBACnC,CACF,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CACT,kFAAkF,EAClF,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CACT,iJAAiJ,EACjJ,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CACT,uHAAuH,EACvH,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CACT,kJAAkJ,EAClJ,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/exposure/exposed-crossdomain.js

@@ -23,7 +23,7 @@ export default defineHint({
         onSite(context, async (site) => {
             const body = await fetchIfReachable(site, '/crossdomain.xml');
             if (body !== null && isPermissiveCrossdomain(body)) {
-                reportExposure(site, '/crossdomain.xml', 'The /crossdomain.xml policy allows access from any origin (domain="*").', body.replace(/\s+/g, ' ').trim());
+                reportExposure(site, '/crossdomain.xml', 'The /crossdomain.xml policy allows access from any origin (domain="*").', body.replaceAll(/\s+/g, ' ').trim());
             }
         });
     },

package/dist/hints/exposure/exposed-crossdomain.js.map

@@ -1 +1 @@
-{"version":3,"file":"exposed-crossdomain.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-crossdomain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,uLAAuL,CAAC;AAE1L;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,mCAAmC;IACzC,WAAW,EACT,oEAAoE;IACtE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,IAAI,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,cAAc,CACZ,IAAI,EACJ,kBAAkB,EAClB,yEAAyE,EACzE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CACjC,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"exposed-crossdomain.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-crossdomain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,uLAAuL,CAAC;AAE1L;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,mCAAmC;IACzC,WAAW,EACT,oEAAoE;IACtE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,IAAI,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,cAAc,CACZ,IAAI,EACJ,kBAAkB,EAClB,yEAAyE,EACzE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CACpC,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/exposure/exposed-directory-listing.js

@@ -28,7 +28,7 @@ export default defineHint({
             for (const path of directories) {
                 const body = await fetchIfReachable(site, path);
                 if (body !== null && looksLikeDirectoryListing(body)) {
-                    reportExposure(site, path, `Directory listing is enabled for ${path}, disclosing its contents.`, body.replace(/\s+/g, ' ').trim());
+                    reportExposure(site, path, `Directory listing is enabled for ${path}, disclosing its contents.`, body.replaceAll(/\s+/g, ' ').trim());
                     // One finding is enough to make the point; a misconfigured server
                     // usually lists every directory.
                     return;

package/dist/hints/exposure/exposed-directory-listing.js.map

@@ -1 +1 @@
-{"version":3,"file":"exposed-directory-listing.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-directory-listing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,6NAA6N,CAAC;AAEhO;;;;;;;;;GASG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,0EAA0E;IAC5E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,qEAAqE;YACrE,2BAA2B;YAC3B,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,KAAK,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrD,cAAc,CACZ,IAAI,EACJ,IAAI,EACJ,oCAAoC,IAAI,4BAA4B,EACpE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CACjC,CAAC;oBACF,kEAAkE;oBAClE,iCAAiC;oBACjC,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"exposed-directory-listing.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-directory-listing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,6NAA6N,CAAC;AAEhO;;;;;;;;;GASG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,2BAA2B;IACjC,WAAW,EACT,0EAA0E;IAC5E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,qEAAqE;YACrE,2BAA2B;YAC3B,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,KAAK,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrD,cAAc,CACZ,IAAI,EACJ,IAAI,EACJ,oCAAoC,IAAI,4BAA4B,EACpE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CACpC,CAAC;oBACF,kEAAkE;oBAClE,iCAAiC;oBACjC,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/exposure/exposed-server-status.js

@@ -24,7 +24,7 @@ export default defineHint({
             for (const path of ['/server-status', '/server-info']) {
                 const body = await fetchIfReachable(site, path);
                 if (body !== null && looksLikeServerStatus(body)) {
-                    reportExposure(site, path, `The Apache status page ${path} is publicly readable and leaks server internals.`, body.replace(/\s+/g, ' ').trim());
+                    reportExposure(site, path, `The Apache status page ${path} is publicly readable and leaks server internals.`, body.replaceAll(/\s+/g, ' ').trim());
                 }
             }
         });

package/dist/hints/exposure/exposed-server-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"exposed-server-status.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-server-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,oNAAoN,CAAC;AAEvN;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,4BAA4B;IAClC,WAAW,EACT,0EAA0E;IAC5E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,KAAK,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,cAAc,CACZ,IAAI,EACJ,IAAI,EACJ,0BAA0B,IAAI,mDAAmD,EACjF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CACjC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"exposed-server-status.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-server-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,oNAAoN,CAAC;AAEvN;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,4BAA4B;IAClC,WAAW,EACT,0EAA0E;IAC5E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,KAAK,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,cAAc,CACZ,IAAI,EACJ,IAAI,EACJ,0BAA0B,IAAI,mDAAmD,EACjF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CACpC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/hints/exposure/exposed-source-map.js

@@ -3,6 +3,23 @@ import { onPage, onSite } from '../../core/page.js';
 import { isExposedSourceMap } from '../../lib/exposure/detect.js';
 import { fetchIfReachable, reportExposure } from './shared.js';
 const WSTG = 'https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/04-Review_Old_Backup_and_Unreferenced_Files_for_Sensitive_Information';
+/**
+ * Resolves a script URL against the page and guesses its `.map` sibling.
+ * Returns undefined when the URL is not parseable or not a same-origin `.js`.
+ */
+function sourceMapPath(src, site) {
+    let scriptUrl;
+    try {
+        scriptUrl = new URL(src, site.url);
+    }
+    catch {
+        return undefined;
+    }
+    if (scriptUrl.origin !== site.origin || !/\.js$/i.test(scriptUrl.pathname)) {
+        return undefined;
+    }
+    return `${scriptUrl.pathname}.map`;
+}
 /**
  * Probes for a reachable JavaScript source map that exposes original source.
  * The hint collects the `<script src>` URLs on the page, then for each guesses
@@ -32,26 +49,14 @@ export default defineHint({
             }
         });
         onSite(context, async (site) => {
-            const seen = new Set();
+            const mapPaths = new Set();
             for (const src of scripts) {
-                // Resolve relative script URLs against the page, keep only same-origin
-                // scripts, and guess the `.map` sibling.
-                let scriptUrl;
-                try {
-                    scriptUrl = new URL(src, site.url);
-                }
-                catch {
-                    continue;
+                const mapPath = sourceMapPath(src, site);
+                if (mapPath !== undefined) {
+                    mapPaths.add(mapPath);
                 }
-                if (scriptUrl.origin !== site.origin ||
-                    !/\.js$/i.test(scriptUrl.pathname)) {
-                    continue;
-                }
-                const mapPath = `${scriptUrl.pathname}.map`;
-                if (seen.has(mapPath)) {
-                    continue;
-                }
-                seen.add(mapPath);
+            }
+            for (const mapPath of mapPaths) {
                 const body = await fetchIfReachable(site, mapPath);
                 if (body !== null && isExposedSourceMap(body)) {
                     reportExposure(site, mapPath, `A JavaScript source map is reachable at ${mapPath}, exposing the original source.`, body);

package/dist/hints/exposure/exposed-source-map.js.map

@@ -1 +1 @@
-{"version":3,"file":"exposed-source-map.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-source-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAa,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,6NAA6N,CAAC;AAEhO;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,6EAA6E;IAC/E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,EAAE,CAAC,IAAU,EAAE,EAAE;YAC7B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,uEAAuE;gBACvE,yCAAyC;gBACzC,IAAI,SAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IACE,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAChC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAClC,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,QAAQ,MAAM,CAAC;gBAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,cAAc,CACZ,IAAI,EACJ,OAAO,EACP,2CAA2C,OAAO,iCAAiC,EACnF,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"exposed-source-map.js","sourceRoot":"","sources":["../../../src/hints/exposure/exposed-source-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAwB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,IAAI,GACR,6NAA6N,CAAC;AAEhO;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW,EAAE,IAAU;IAC5C,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,SAAS,CAAC,QAAQ,MAAM,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,+BAA+B;IACrC,WAAW,EACT,6EAA6E;IAC/E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,MAAM,EAAE,CAAC,OAAO,CAAC;IACjB,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,OAAO;QACX,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,EAAE,CAAC,IAAU,EAAE,EAAE;YAC7B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,cAAc,CACZ,IAAI,EACJ,OAAO,EACP,2CAA2C,OAAO,iCAAiC,EACnF,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}