@oneuptime/common 12.0.25 → 12.0.27

package/build/dist/Server/Utils/SSRFProtection.js

@@ -1,5 +1,6 @@
 import URL from "../../Types/API/URL";
 import BadDataException from "../../Types/Exception/BadDataException";
+import PrivateNetworkWebhookConfig from "./PrivateNetworkWebhookConfig";
 import dns from "dns";
 import net from "net";
 /*
@@ -15,7 +16,41 @@ import net from "net";
  * different address between validation and the actual request (DNS rebinding).
  * Callers should therefore ALSO disable redirect-following on the request so a
  * validated public host cannot 3xx-redirect the server to an internal target.
+ *
+ * Blocked targets fall into two tiers, because a self-hosted install has a
+ * legitimate reason to reach one of them and none at all to reach the other:
+ *
+ *   FORBIDDEN — loopback, unspecified, link-local (the 169.254.169.254 cloud
+ *     metadata endpoint lives here), multicast, reserved, broadcast, and the
+ *     hostnames that name them. Refused in every deployment. The only way past
+ *     is an exact entry in the instance's PRIVATE_NETWORK_WEBHOOK_ALLOWLIST.
+ *
+ *   PRIVATE — RFC-1918, CGNAT, IPv6 unique-local and site-local. Refused by
+ *     default, which is the only correct answer for multi-tenant SaaS, but a
+ *     self-hosted operator can permit it with ALLOW_PRIVATE_NETWORK_WEBHOOKS
+ *     (see PrivateNetworkWebhookConfig).
+ *
+ * The same guard runs on the sandboxed axios bridge (VMRunner), which is
+ * shared with the Probe's custom code monitor. That caller reads its policy
+ * from the PROBE's environment, not the API server's, and overrides
+ * `targetLabel` and `privateNetworkHint` so its refusals name the right noun
+ * and the right machine.
+ *
+ * The tier only widens for callers that pass
+ * `allowPrivateNetworkTargets: true`, which means "this URL was authored by an
+ * authenticated member of a project". Sinks whose target can be chosen by an
+ * unauthenticated visitor — status page subscriber webhooks — pass nothing and
+ * get the strict policy, so the exception can never be reached from outside
+ * the tenant however the instance is configured.
  */
+export var WebhookAddressTier;
+(function (WebhookAddressTier) {
+    WebhookAddressTier["Public"] = "Public";
+    WebhookAddressTier["Private"] = "Private";
+    WebhookAddressTier["Forbidden"] = "Forbidden";
+})(WebhookAddressTier || (WebhookAddressTier = {}));
+const DEFAULT_TARGET_LABEL = "Webhook URL";
+const DEFAULT_PRIVATE_NETWORK_HINT = " Self-hosted instances can allow this by setting ALLOW_PRIVATE_NETWORK_WEBHOOKS or PRIVATE_NETWORK_WEBHOOK_ALLOWLIST.";
 export default class SSRFProtection {
     /*
      * Returns the bare, lowercased host of a URL — no port, no brackets — or an
@@ -69,7 +104,10 @@ export default class SSRFProtection {
             return hostname === allowed || hostname.endsWith(`.${allowed}`);
         });
     }
-    static async validateWebhookTargetIsSafe(rawUrl) {
+    static async validateWebhookTargetIsSafe(rawUrl, options) {
+        var _a;
+        const label = (options === null || options === void 0 ? void 0 : options.targetLabel) || DEFAULT_TARGET_LABEL;
+        const privateNetworkHint = (_a = options === null || options === void 0 ? void 0 : options.privateNetworkHint) !== null && _a !== void 0 ? _a : DEFAULT_PRIVATE_NETWORK_HINT;
         /*
          * URL.fromString only knows http/https/ws/wss/mongodb/mailto/tel/sms and
          * silently DEFAULTS anything else to https - "file:///etc/passwd" comes
@@ -87,22 +125,22 @@ export default class SSRFProtection {
         if (schemeMatch &&
             schemeMatch[1] &&
             !["http", "https"].includes(schemeMatch[1].toLowerCase())) {
-            throw new BadDataException("Webhook URL must use http or https protocol.");
+            throw new BadDataException(`${label} must use http or https protocol.`);
         }
         let parsed;
         try {
             parsed = URL.fromString(rawUrl.toString());
         }
-        catch (_a) {
-            throw new BadDataException("Webhook URL is not a valid URL");
+        catch (_b) {
+            throw new BadDataException(`${label} is not a valid URL`);
         }
         const protocolValue = parsed.protocol.toString().toLowerCase();
         if (protocolValue !== "http://" && protocolValue !== "https://") {
-            throw new BadDataException("Webhook URL must use http or https protocol.");
+            throw new BadDataException(`${label} must use http or https protocol.`);
         }
         const rawHost = parsed.hostname.hostname.toLowerCase();
         if (!rawHost) {
-            throw new BadDataException("Webhook URL must include a host.");
+            throw new BadDataException(`${label} must include a host.`);
         }
         /*
          * OneUptime's URL parser hands back the whole authority — userinfo, host
@@ -114,7 +152,7 @@ export default class SSRFProtection {
          */
         const hostname = SSRFProtection.extractHost(rawHost);
         if (!hostname) {
-            throw new BadDataException("Webhook URL must include a host.");
+            throw new BadDataException(`${label} must include a host.`);
         }
         /*
          * Check the host BOTH parsers see, not just ours.
@@ -132,25 +170,64 @@ export default class SSRFProtection {
         const hostnames = whatwgHostname && whatwgHostname !== hostname
             ? [hostname, whatwgHostname]
             : [hostname];
+        /*
+         * The caller's declaration only ever reaches the instance configuration
+         * through here. With it false — the default, and every sink whose URL an
+         * unauthenticated visitor can choose — `isPrivateTierAllowed` and every
+         * allowlist lookup below are false too, and the policy is bit-for-bit what
+         * it was before the exception existed.
+         */
+        const isOptedIn = (options === null || options === void 0 ? void 0 : options.allowPrivateNetworkTargets) === true;
+        const isPrivateTierAllowed = isOptedIn && PrivateNetworkWebhookConfig.isPrivateNetworkAllowed();
+        /*
+         * A host the operator named outright needs no further inspection — not the
+         * tier check, and not DNS. That is the whole point of naming
+         * "mattermost.internal": it resolves into a range the blocklist refuses,
+         * and the operator has said to trust it anyway.
+         */
+        const isHostAllowlisted = (host) => {
+            if (!isOptedIn) {
+                return false;
+            }
+            return SSRFProtection.isIpLiteral(host)
+                ? PrivateNetworkWebhookConfig.isAddressAllowed(host)
+                : PrivateNetworkWebhookConfig.isHostnameAllowed(host);
+        };
         for (const host of hostnames) {
-            if (SSRFProtection.isBlockedHostnameLiteral(host)) {
-                throw new BadDataException("Webhook URL points to a private, loopback, or link-local address and is not allowed.");
+            if (isHostAllowlisted(host)) {
+                continue;
+            }
+            const tier = SSRFProtection.classifyHostnameLiteral(host);
+            if (tier === WebhookAddressTier.Forbidden) {
+                throw new BadDataException(`${label} points to a private, loopback, or link-local address and is not allowed.`);
+            }
+            if (tier === WebhookAddressTier.Private && !isPrivateTierAllowed) {
+                throw new BadDataException(`${label} points to a private network address and is not allowed.${privateNetworkHint}`);
             }
         }
         for (const host of hostnames) {
-            if (SSRFProtection.isIpLiteral(host)) {
+            if (SSRFProtection.isIpLiteral(host) || isHostAllowlisted(host)) {
                 continue;
             }
             let resolved = [];
             try {
                 resolved = await dns.promises.lookup(host, { all: true });
             }
-            catch (_b) {
-                throw new BadDataException("Webhook URL hostname could not be resolved via DNS.");
+            catch (_c) {
+                throw new BadDataException(`${label} hostname could not be resolved via DNS.`);
             }
             for (const entry of resolved) {
-                if (SSRFProtection.isBlockedHostnameLiteral(entry.address.toLowerCase())) {
-                    throw new BadDataException("Webhook URL resolves to a private, loopback, or link-local address and is not allowed.");
+                const address = entry.address.toLowerCase();
+                if (isOptedIn &&
+                    PrivateNetworkWebhookConfig.isAddressAllowed(address)) {
+                    continue;
+                }
+                const tier = SSRFProtection.classifyHostnameLiteral(address);
+                if (tier === WebhookAddressTier.Forbidden) {
+                    throw new BadDataException(`${label} resolves to a private, loopback, or link-local address and is not allowed.`);
+                }
+                if (tier === WebhookAddressTier.Private && !isPrivateTierAllowed) {
+                    throw new BadDataException(`${label} resolves to a private network address and is not allowed.${privateNetworkHint}`);
                 }
             }
         }
@@ -279,18 +356,20 @@ export default class SSRFProtection {
         return parsed;
     }
     /*
-     * True when an IPv6 literal points somewhere the server must never be made
-     * to reach. Ranges, not spellings: loopback, unspecified, link-local
-     * (fe80::/10), unique-local (fc00::/7) and multicast (ff00::/8), plus the
-     * ways IPv6 can embed IPv4 routing endpoints - IPv4-mapped (::ffff:0:0/96),
+     * Tier of an IPv6 literal. Ranges, not spellings: loopback, unspecified,
+     * link-local (fe80::/10) and multicast (ff00::/8) are FORBIDDEN;
+     * unique-local (fc00::/7) and site-local (fec0::/10) are PRIVATE. The ways
+     * IPv6 can embed IPv4 routing endpoints - IPv4-mapped (::ffff:0:0/96),
      * IPv4-compatible (::/96), NAT64 (64:ff9b::/96), 6to4 (2002::/16), and
-     * Teredo (2001:0000::/32) - which are handed to the IPv4 blocklist.
+     * Teredo (2001:0000::/32) - are handed to the IPv4 classifier, so an
+     * embedded 10.0.0.1 is PRIVATE and an embedded 169.254.169.254 is FORBIDDEN
+     * exactly as the bare forms are.
      */
-    static isBlockedIpv6(address) {
+    static classifyIpv6(address) {
         const groups = SSRFProtection.expandIpv6(address);
         if (!groups) {
             // Not parseable as IPv6; the caller's other checks decide.
-            return false;
+            return WebhookAddressTier.Public;
         }
         const isZeroThrough = (endExclusive) => {
             return groups.slice(0, endExclusive).every((group) => {
@@ -309,15 +388,15 @@ export default class SSRFProtection {
         };
         // ::  — unspecified. Connecting here lands on the local host.
         if (isZeroThrough(8)) {
-            return true;
+            return WebhookAddressTier.Forbidden;
         }
         // ::1 — loopback.
         if (isZeroThrough(7) && groups[7] === 1) {
-            return true;
+            return WebhookAddressTier.Forbidden;
         }
         // ::ffff:0:0/96 — IPv4-mapped.
         if (isZeroThrough(5) && groups[5] === 0xffff) {
-            return SSRFProtection.isBlockedIpv4(embeddedIpv4(6));
+            return SSRFProtection.classifyIpv4(embeddedIpv4(6));
         }
         // 64:ff9b::/96 — NAT64 well-known prefix.
         if (groups[0] === 0x0064 &&
@@ -326,44 +405,55 @@ export default class SSRFProtection {
             groups[3] === 0 &&
             groups[4] === 0 &&
             groups[5] === 0) {
-            return SSRFProtection.isBlockedIpv4(embeddedIpv4(6));
+            return SSRFProtection.classifyIpv4(embeddedIpv4(6));
         }
         // ::/96 — IPv4-compatible (deprecated, still routable by some stacks).
         if (isZeroThrough(6)) {
-            return SSRFProtection.isBlockedIpv4(embeddedIpv4(6));
+            return SSRFProtection.classifyIpv4(embeddedIpv4(6));
         }
         // 2002::/16 — 6to4 stores the IPv4 gateway in bits 16-48.
         if (groups[0] === 0x2002) {
-            return SSRFProtection.isBlockedIpv4(embeddedIpv4(1));
+            return SSRFProtection.classifyIpv4(embeddedIpv4(1));
         }
         /*
          * 2001:0000::/32 — Teredo stores its server IPv4 in bits 32-64 and
-         * an inverted client IPv4 in the last 32 bits.
+         * an inverted client IPv4 in the last 32 bits. Either one landing
+         * somewhere blocked condemns the address, so take the stricter verdict.
          */
         if (groups[0] === 0x2001 && groups[1] === 0) {
-            return (SSRFProtection.isBlockedIpv4(embeddedIpv4(2)) ||
-                SSRFProtection.isBlockedIpv4(embeddedIpv4(6, true)));
+            return SSRFProtection.strictestTier(SSRFProtection.classifyIpv4(embeddedIpv4(2)), SSRFProtection.classifyIpv4(embeddedIpv4(6, true)));
         }
         const first = groups[0];
         // fe80::/10 — link-local.
         if ((first & 0xffc0) === 0xfe80) {
-            return true;
+            return WebhookAddressTier.Forbidden;
         }
-        // fc00::/7 — unique-local.
+        // ff00::/8 — multicast.
+        if ((first & 0xff00) === 0xff00) {
+            return WebhookAddressTier.Forbidden;
+        }
+        // fc00::/7 — unique-local. A self-hosted install's own internal network.
         if ((first & 0xfe00) === 0xfc00) {
-            return true;
+            return WebhookAddressTier.Private;
         }
         // fec0::/10 — site-local. Deprecated by RFC 3879, still routed on some networks.
         if ((first & 0xffc0) === 0xfec0) {
-            return true;
+            return WebhookAddressTier.Private;
         }
-        // ff00::/8 — multicast.
-        if ((first & 0xff00) === 0xff00) {
-            return true;
+        return WebhookAddressTier.Public;
+    }
+    static strictestTier(left, right) {
+        if (left === WebhookAddressTier.Forbidden ||
+            right === WebhookAddressTier.Forbidden) {
+            return WebhookAddressTier.Forbidden;
+        }
+        if (left === WebhookAddressTier.Private ||
+            right === WebhookAddressTier.Private) {
+            return WebhookAddressTier.Private;
         }
-        return false;
+        return WebhookAddressTier.Public;
     }
-    static isBlockedIpv4(address) {
+    static classifyIpv4(address) {
         const octets = address.split(".").map((part) => {
             return Number(part);
         });
@@ -371,50 +461,62 @@ export default class SSRFProtection {
             octets.some((octet) => {
                 return Number.isNaN(octet) || octet < 0 || octet > 255;
             })) {
-            return true;
+            /*
+             * Unparseable. Refuse outright rather than fall through to "public":
+             * whatever produced this is not something to hand to an HTTP client, and
+             * it must not become reachable by opting in to the private tier either.
+             */
+            return WebhookAddressTier.Forbidden;
         }
         const [first, second] = octets;
         if (first === 0) {
-            return true; // 0.0.0.0/8 — "this host".
+            return WebhookAddressTier.Forbidden; // 0.0.0.0/8 — "this host".
         }
         if (first === 127) {
-            return true; // loopback
+            return WebhookAddressTier.Forbidden; // loopback
+        }
+        if (first === 169 && second === 254) {
+            // link-local, incl. the 169.254.169.254 metadata endpoint
+            return WebhookAddressTier.Forbidden;
+        }
+        if (first >= 224) {
+            // multicast, reserved, and 255.255.255.255
+            return WebhookAddressTier.Forbidden;
         }
         if (first === 10) {
-            return true; // RFC-1918
+            return WebhookAddressTier.Private; // RFC-1918
         }
         if (first === 172 && (second & 0xf0) === 16) {
-            return true; // RFC-1918 172.16/12
+            return WebhookAddressTier.Private; // RFC-1918 172.16/12
         }
         if (first === 192 && second === 168) {
-            return true; // RFC-1918
-        }
-        if (first === 169 && second === 254) {
-            return true; // link-local, incl. the 169.254.169.254 metadata endpoint
+            return WebhookAddressTier.Private; // RFC-1918
         }
         if (first === 100 && (second & 0xc0) === 64) {
-            return true; // CGNAT 100.64/10
+            return WebhookAddressTier.Private; // CGNAT 100.64/10
         }
-        if (first >= 224) {
-            return true; // multicast, reserved, and 255.255.255.255
-        }
-        return false;
+        return WebhookAddressTier.Public;
     }
-    static isBlockedHostnameLiteral(hostname) {
+    /*
+     * Tier of a bare host — an IP literal in either family, or a hostname that
+     * names the local machine on its own. Anything else is Public here and is
+     * decided later on what DNS answers for it.
+     */
+    static classifyHostnameLiteral(hostname) {
         if (hostname === "localhost" ||
             hostname === "localhost." ||
             hostname.endsWith(".localhost") ||
             hostname === "metadata.google.internal") {
-            return true;
+            return WebhookAddressTier.Forbidden;
         }
         const address = SSRFProtection.stripZoneId(hostname.replace(/^\[|\]$/g, ""));
         if (net.isIPv4(address)) {
-            return SSRFProtection.isBlockedIpv4(address);
+            return SSRFProtection.classifyIpv4(address);
         }
         if (net.isIPv6(address)) {
-            return SSRFProtection.isBlockedIpv6(address);
+            return SSRFProtection.classifyIpv6(address);
         }
-        return false;
+        return WebhookAddressTier.Public;
     }
 }
 //# sourceMappingURL=SSRFProtection.js.map

package/build/dist/Server/Utils/SSRFProtection.js.map

@@ -1 +1 @@
-{"version":3,"file":"SSRFProtection.js","sourceRoot":"","sources":["../../../../Server/Utils/SSRFProtection.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,qBAAqB,CAAC;AACtC,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC;;;;;;OAMG;IACI,MAAM,CAAC,eAAe,CAAC,MAAoB;QAChD;;;;;;;;WAQG;QACH,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,oBAAoB,CAChC,MAAoB,EACpB,cAA6B;QAE7B,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wEAAwE;QACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAW,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,MAAc,EAAE,EAAE;YAC5C,MAAM,OAAO,GAAW,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,MAAoB;QAEpB;;;;;;;;;WASG;QACH,MAAM,WAAW,GAA4B,MAAM;aAChD,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAErC,IACE,WAAW;YACX,WAAW,CAAC,CAAC,CAAC;YACd,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,aAAa,GAAW,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QACvE,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YAChE,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAW,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;QACjE,CAAC;QAED;;;;;;;WAOG;QACH,MAAM,QAAQ,GAAW,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;QACjE,CAAC;QAED;;;;;;;;;;;WAWG;QACH,MAAM,cAAc,GAAW,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEtE,MAAM,SAAS,GACb,cAAc,IAAI,cAAc,KAAK,QAAQ;YAC3C,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC;YAC5B,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEjB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,cAAc,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,gBAAgB,CACxB,sFAAsF,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,QAAQ,GAA+B,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,WAAM,CAAC;gBACP,MAAM,IAAI,gBAAgB,CACxB,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IACE,cAAc,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EACpE,CAAC;oBACD,MAAM,IAAI,gBAAgB,CACxB,wFAAwF,CACzF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,MAAM,CAAC,aAAa,CAAC,SAAiB;QAC5C,MAAM,OAAO,GAAW,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,WAAW,CAAC,YAAoB;QAC7C,MAAM,IAAI,GAAW,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QAEvE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,mBAAmB,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,UAAU,GAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAE3D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,yEAAyE;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,uCAAuC;YACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,WAAW,CAAC,QAAgB;QACzC,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,OAAe;QACxC,MAAM,SAAS,GAAW,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,UAAU,CAAC,OAAe;QACvC,IAAI,EAAE,GAAW,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnE,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,MAAM,cAAc,GAAW,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,GAAW,EAAE,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;gBACjE,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GAAW,CACnB,CAAE,MAAM,CAAC,CAAC,CAAY,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,CAAC,CAAY,CACtB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,GAAG,GAAW,CAClB,CAAE,MAAM,CAAC,CAAC,CAAY,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,CAAC,CAAY,CACtB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACf,EAAE,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAkB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GACR,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE;YAChE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YACtB,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,MAAqB,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAW,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACvD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;YACzD,OAAO,QAAQ,CAAC,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE;YAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC;QAC5D,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,aAAa,CAAC,OAAe;QAC1C,MAAM,MAAM,GAAyB,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,2DAA2D;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,aAAa,GAAsC,CACvD,YAAoB,EACX,EAAE;YACX,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;gBAC3D,OAAO,KAAK,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,YAAY,GAAyD,CACzE,cAAsB,EACtB,SAAkB,KAAK,EACf,EAAE;YACV,IAAI,IAAI,GAAW,MAAM,CAAC,cAAc,CAAW,CAAC;YACpD,IAAI,GAAG,GAAW,MAAM,CAAC,cAAc,GAAG,CAAC,CAAW,CAAC;YAEvD,mEAAmE;YACnE,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,IAAI,MAAM,CAAC;gBACf,GAAG,IAAI,MAAM,CAAC;YAChB,CAAC;YAED,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QACjE,CAAC,CAAC;QAEF,8DAA8D;QAC9D,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,0CAA0C;QAC1C,IACE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM;YACpB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM;YACpB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EACf,CAAC;YACD,OAAO,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,uEAAuE;QACvE,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,0DAA0D;QAC1D,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED;;;WAGG;QACH,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,CACL,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC7C,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAW,MAAM,CAAC,CAAC,CAAW,CAAC;QAE1C,0BAA0B;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iFAAiF;QACjF,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,aAAa,CAAC,OAAe;QAC1C,MAAM,MAAM,GAAkB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;YACpE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE;gBAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC;YACzD,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAA0C,CAAC;QAEnE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,CAAC,2BAA2B;QAC1C,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,CAAC,WAAW;QAC1B,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,CAAC,WAAW;QAC1B,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,CAAC,qBAAqB;QACpC,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,CAAC,WAAW;QAC1B,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,CAAC,0DAA0D;QACzE,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,CAAC,kBAAkB;QACjC,CAAC;QACD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,CAAC,2CAA2C;QAC1D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM,CAAC,wBAAwB,CAAC,QAAgB;QACtD,IACE,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,YAAY;YACzB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/B,QAAQ,KAAK,0BAA0B,EACvC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAW,cAAc,CAAC,WAAW,CAChD,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CACjC,CAAC;QAEF,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"SSRFProtection.js","sourceRoot":"","sources":["../../../../Server/Utils/SSRFProtection.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,qBAAqB,CAAC;AACtC,OAAO,gBAAgB,MAAM,wCAAwC,CAAC;AACtE,OAAO,2BAA2B,MAAM,+BAA+B,CAAC;AACxE,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,MAAM,CAAN,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,yCAAmB,CAAA;IACnB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,KAAlB,kBAAkB,QAI7B;AAsCD,MAAM,oBAAoB,GAAW,aAAa,CAAC;AAEnD,MAAM,4BAA4B,GAChC,uHAAuH,CAAC;AAE1H,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC;;;;;;OAMG;IACI,MAAM,CAAC,eAAe,CAAC,MAAoB;QAChD;;;;;;;;WAQG;QACH,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,oBAAoB,CAChC,MAAoB,EACpB,cAA6B;QAE7B,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wEAAwE;QACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAW,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,MAAc,EAAE,EAAE;YAC5C,MAAM,OAAO,GAAW,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAC7C,MAAoB,EACpB,OAAwC;;QAExC,MAAM,KAAK,GAAW,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,KAAI,oBAAoB,CAAC;QACnE,MAAM,kBAAkB,GACtB,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,kBAAkB,mCAAI,4BAA4B,CAAC;QAE9D;;;;;;;;;WASG;QACH,MAAM,WAAW,GAA4B,MAAM;aAChD,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAErC,IACE,WAAW;YACX,WAAW,CAAC,CAAC,CAAC;YACd,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,aAAa,GAAW,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QACvE,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YAChE,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,OAAO,GAAW,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;QAC9D,CAAC;QAED;;;;;;;WAOG;QACH,MAAM,QAAQ,GAAW,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;QAC9D,CAAC;QAED;;;;;;;;;;;WAWG;QACH,MAAM,cAAc,GAAW,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEtE,MAAM,SAAS,GACb,cAAc,IAAI,cAAc,KAAK,QAAQ;YAC3C,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC;YAC5B,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEjB;;;;;;WAMG;QACH,MAAM,SAAS,GAAY,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,0BAA0B,MAAK,IAAI,CAAC;QACxE,MAAM,oBAAoB,GACxB,SAAS,IAAI,2BAA2B,CAAC,uBAAuB,EAAE,CAAC;QAErE;;;;;WAKG;QACH,MAAM,iBAAiB,GAA8B,CACnD,IAAY,EACH,EAAE;YACX,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC;gBACrC,CAAC,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACpD,CAAC,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GACR,cAAc,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAE/C,IAAI,IAAI,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,2EAA2E,CACpF,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,kBAAkB,CAAC,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACjE,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,2DAA2D,kBAAkB,EAAE,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YAED,IAAI,QAAQ,GAA+B,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,WAAM,CAAC;gBACP,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,0CAA0C,CACnD,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAEpD,IACE,SAAS;oBACT,2BAA2B,CAAC,gBAAgB,CAAC,OAAO,CAAC,EACrD,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,GACR,cAAc,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBAElD,IAAI,IAAI,KAAK,kBAAkB,CAAC,SAAS,EAAE,CAAC;oBAC1C,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,6EAA6E,CACtF,CAAC;gBACJ,CAAC;gBAED,IAAI,IAAI,KAAK,kBAAkB,CAAC,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACjE,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,6DAA6D,kBAAkB,EAAE,CAC1F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,MAAM,CAAC,aAAa,CAAC,SAAiB;QAC5C,MAAM,OAAO,GAAW,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,WAAW,CAAC,YAAoB;QAC7C,MAAM,IAAI,GAAW,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QAEvE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,mBAAmB,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,UAAU,GAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAE3D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,yEAAyE;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,uCAAuC;YACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,WAAW,CAAC,QAAgB;QACzC,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,OAAe;QACxC,MAAM,SAAS,GAAW,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,UAAU,CAAC,OAAe;QACvC,IAAI,EAAE,GAAW,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnE,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,MAAM,cAAc,GAAW,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,IAAI,GAAW,EAAE,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;gBACjE,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GAAW,CACnB,CAAE,MAAM,CAAC,CAAC,CAAY,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,CAAC,CAAY,CACtB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACf,MAAM,GAAG,GAAW,CAClB,CAAE,MAAM,CAAC,CAAC,CAAY,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,CAAC,CAAY,CACtB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACf,EAAE,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAkB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GACR,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE;YAChE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YACtB,CAAC,CAAC,EAAE,CAAC;QAET,IAAI,MAAqB,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAW,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACvD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;YACzD,OAAO,QAAQ,CAAC,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE;YAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC;QAC5D,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,YAAY,CAAC,OAAe;QACzC,MAAM,MAAM,GAAyB,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,2DAA2D;YAC3D,OAAO,kBAAkB,CAAC,MAAM,CAAC;QACnC,CAAC;QAED,MAAM,aAAa,GAAsC,CACvD,YAAoB,EACX,EAAE;YACX,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;gBAC3D,OAAO,KAAK,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,YAAY,GAAyD,CACzE,cAAsB,EACtB,SAAkB,KAAK,EACf,EAAE;YACV,IAAI,IAAI,GAAW,MAAM,CAAC,cAAc,CAAW,CAAC;YACpD,IAAI,GAAG,GAAW,MAAM,CAAC,cAAc,GAAG,CAAC,CAAW,CAAC;YAEvD,mEAAmE;YACnE,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,IAAI,MAAM,CAAC;gBACf,GAAG,IAAI,MAAM,CAAC;YAChB,CAAC;YAED,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QACjE,CAAC,CAAC;QAEF,8DAA8D;QAC9D,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,kBAAkB;QAClB,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,+BAA+B;QAC/B,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,0CAA0C;QAC1C,IACE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM;YACpB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM;YACpB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACf,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EACf,CAAC;YACD,OAAO,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,uEAAuE;QACvE,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,0DAA0D;QAC1D,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QAED;;;;WAIG;QACH,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,cAAc,CAAC,aAAa,CACjC,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAC5C,cAAc,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAW,MAAM,CAAC,CAAC,CAAW,CAAC;QAE1C,0BAA0B;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,yEAAyE;QACzE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,kBAAkB,CAAC,OAAO,CAAC;QACpC,CAAC;QAED,iFAAiF;QACjF,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,kBAAkB,CAAC,OAAO,CAAC;QACpC,CAAC;QAED,OAAO,kBAAkB,CAAC,MAAM,CAAC;IACnC,CAAC;IAEO,MAAM,CAAC,aAAa,CAC1B,IAAwB,EACxB,KAAyB;QAEzB,IACE,IAAI,KAAK,kBAAkB,CAAC,SAAS;YACrC,KAAK,KAAK,kBAAkB,CAAC,SAAS,EACtC,CAAC;YACD,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,IACE,IAAI,KAAK,kBAAkB,CAAC,OAAO;YACnC,KAAK,KAAK,kBAAkB,CAAC,OAAO,EACpC,CAAC;YACD,OAAO,kBAAkB,CAAC,OAAO,CAAC;QACpC,CAAC;QAED,OAAO,kBAAkB,CAAC,MAAM,CAAC;IACnC,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,OAAe;QACzC,MAAM,MAAM,GAAkB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE;YACpE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE;gBAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC;YACzD,CAAC,CAAC,EACF,CAAC;YACD;;;;eAIG;YACH,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAA0C,CAAC;QAEnE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,2BAA2B;QAClE,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,WAAW;QAClD,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,0DAA0D;YAC1D,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QACD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,2CAA2C;YAC3C,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,WAAW;QAChD,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,qBAAqB;QAC1D,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,WAAW;QAChD,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,kBAAkB;QACvD,CAAC;QAED,OAAO,kBAAkB,CAAC,MAAM,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,uBAAuB,CAAC,QAAgB;QACrD,IACE,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,YAAY;YACzB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/B,QAAQ,KAAK,0BAA0B,EACvC,CAAC;YACD,OAAO,kBAAkB,CAAC,SAAS,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAW,cAAc,CAAC,WAAW,CAChD,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CACjC,CAAC;QAEF,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,kBAAkB,CAAC,MAAM,CAAC;IACnC,CAAC;CACF"}

package/build/dist/Server/Utils/SecurityEvent/ConnectorErrorMessage.js

@@ -0,0 +1,89 @@
+import logger from "../Logger";
+/*
+ * Recording a failure must never itself become a failure.
+ *
+ * Both security-event background loops — the Google SecOps poller and the
+ * detection rule evaluator — catch a per-item error and then write it back
+ * onto the row: lastError, plus the lastPolledAt / lastEvaluatedAt stamp
+ * that says the item was attempted at all. That bookkeeping write used to
+ * run bare inside the catch block, where it had two ways to throw:
+ *
+ *   - lastError was declared TableColumnType.LongText, i.e. varchar(500),
+ *     while a Google SecOps client error is a ~46 character prefix plus up
+ *     to 500 characters of echoed response body. DatabaseService's
+ *     checkMaxLengthOfFields rejects any string longer than the column's
+ *     declared max with a BadDataException, so a long API error made the
+ *     recovery write throw. ClickHouse errors echo the whole query back,
+ *     so the evaluator side was even likelier to trip over it.
+ *   - any ordinary database trouble — a dropped connection, a deadlock, a
+ *     constraint — does exactly the same thing.
+ *
+ * A throw from there escapes the catch block, and the entire loop with it.
+ * Nothing gets stamped, every remaining connection or rule in that tick is
+ * skipped, and the next tick a minute later repeats the run identically.
+ * What the customer sees is a connector that never polls whose row still
+ * reads lastPolledAt = null AND lastError = null: the two columns meant to
+ * explain the outage are precisely the ones the outage prevented from
+ * being written, so the failure is completely silent.
+ *
+ * Hence the two halves of this file: clamp the message to something a
+ * column will always accept, and run the write inside its own try/catch
+ * that logs and swallows. Whatever happens, the loop advances to the next
+ * item.
+ */
+export const MAX_CONNECTOR_ERROR_MESSAGE_LENGTH = 1000;
+/*
+ * Appended when a message is clamped, and counted inside the limit rather
+ * than added on top of it. A cut message that ends mid-sentence with no
+ * marker reads like the whole error, which sends whoever is debugging the
+ * stored value looking for a cause that was never there.
+ */
+const TRUNCATION_MARKER = "... (truncated)";
+/*
+ * What an error carrying nothing usable becomes. An empty string and the
+ * literal "undefined" both read like a bug in the recorder rather than a
+ * failure worth chasing, so neither is ever stored.
+ */
+const UNKNOWN_ERROR_MESSAGE = "Unknown error.";
+export default class ConnectorErrorMessage {
+    /*
+     * Anything thrown -> a message short enough that storing it cannot be
+     * what fails next. Errors contribute their .message; everything else is
+     * stringified.
+     */
+    static toMessage(error) {
+        let message = "";
+        if (error instanceof Error) {
+            message = error.message || "";
+        }
+        else if (error !== null && error !== undefined) {
+            message = String(error);
+        }
+        message = message.trim();
+        if (!message) {
+            return UNKNOWN_ERROR_MESSAGE;
+        }
+        if (message.length <= MAX_CONNECTOR_ERROR_MESSAGE_LENGTH) {
+            return message;
+        }
+        const keptPrefix = message.slice(0, MAX_CONNECTOR_ERROR_MESSAGE_LENGTH - TRUNCATION_MARKER.length);
+        return `${keptPrefix}${TRUNCATION_MARKER}`;
+    }
+    /*
+     * Runs a failure-bookkeeping write inside its own try/catch. The caller
+     * is already handling one error and has already logged it; losing the
+     * record of that error is bad, but abandoning every remaining item in
+     * the run is far worse. So a write failure is logged against `label`
+     * and swallowed. This never rethrows.
+     */
+    static async recordFailure(data) {
+        try {
+            await data.write();
+        }
+        catch (recordError) {
+            logger.error(`${data.label}: could not record the failure on the row. The original error is logged above; continuing with the next item.`);
+            logger.error(recordError);
+        }
+    }
+}
+//# sourceMappingURL=ConnectorErrorMessage.js.map

package/build/dist/Server/Utils/SecurityEvent/ConnectorErrorMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectorErrorMessage.js","sourceRoot":"","sources":["../../../../../Server/Utils/SecurityEvent/ConnectorErrorMessage.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAW,IAAI,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,iBAAiB,GAAW,iBAAiB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,qBAAqB,GAAW,gBAAgB,CAAC;AAEvD,MAAM,CAAC,OAAO,OAAO,qBAAqB;IACxC;;;;OAIG;IACI,MAAM,CAAC,SAAS,CAAC,KAAc;QACpC,IAAI,OAAO,GAAW,EAAE,CAAC;QAEzB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAEzB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,IAAI,kCAAkC,EAAE,CAAC;YACzD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAW,OAAO,CAAC,KAAK,CACtC,CAAC,EACD,kCAAkC,GAAG,iBAAiB,CAAC,MAAM,CAC9D,CAAC;QAEF,OAAO,GAAG,UAAU,GAAG,iBAAiB,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAGjC;QACC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,CACV,GAAG,IAAI,CAAC,KAAK,+GAA+G,CAC7H,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}