Add an extra layer of security to your account
" }, { "kind": "deprecated", "source_path": "components/theme-provider.tsx", "line": 3, "text": "// Deprecated wrapper previously using next-themes. We now use" }, { "kind": "unsafe", "source_path": "lib/db/agents.ts", "line": 62, "text": "${sql.unsafe(whereClause)}" }, { "kind": "security", "source_path": "lib/db/client.ts", "line": 18, "text": "* Sets the current user ID for Row Level Security policies" }, { "kind": "unsafe", "source_path": "lib/db/zillow.ts", "line": 180, "text": "? sql` WHERE ${sql.unsafe(conditions.map((_, i) => `$${i + 1}`).join(' AND '))}`" }, { "kind": "security", "source_path": "lib/fingerprint.ts", "line": 1, "text": "// Browser fingerprinting for analytics and security" }, { "kind": "security", "source_path": "middleware.ts", "line": 12, "text": "// Add security headers" }, { "kind": "security", "source_path": "pnpm-lock.yaml", "line": 133, "text": "version: 0.0.1-security" }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 341, "text": "deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info." }, { "kind": "security", "source_path": "pnpm-lock.yaml", "line": 2340, "text": "fs@0.0.1-security:" }, { "kind": "security", "source_path": "pnpm-lock.yaml", "line": 5286, "text": "fs@0.0.1-security: {}" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 178, "text": "### Phase 7: Security & Compliance" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 179, "text": "- [ ] **Security Hardening**" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 180, "text": "- [ ] Row Level Security (RLS) policies for all tables" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 182, "text": "- [ ] Content Security Policy (CSP) headers" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 249, "text": "1. **Add Row Level Security (RLS)** to all database tables - critical for security" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 277, "text": "1. **Add RLS to database** (security critical)" }, { "kind": "security", "source_path": "ROADMAP.md", "line": 294, "text": "- Zero critical security vulnerabilities" }, { "kind": "security", "source_path": "scripts/_combined_schema.sql", "line": 286, "text": "ALTER TABLE error_logs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/_combined_schema.sql", "line": 334, "text": "ALTER TABLE sessions ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_add_error_logs_table.sql", "line": 20, "text": "ALTER TABLE error_logs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_add_session_tracking_table.sql", "line": 28, "text": "ALTER TABLE sessions ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 1, "text": "-- Enable Row Level Security (RLS) on all tables" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 2, "text": "-- This is critical for data security and multi-tenant support" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 8, "text": "ALTER TABLE users ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 9, "text": "ALTER TABLE properties ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 10, "text": "ALTER TABLE agents ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 11, "text": "ALTER TABLE market_analytics ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 12, "text": "ALTER TABLE market_forecasts ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 13, "text": "ALTER TABLE potential_sellers ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 14, "text": "ALTER TABLE property_analytics ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 15, "text": "ALTER TABLE property_inquiries ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 16, "text": "ALTER TABLE user_favorites ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 17, "text": "ALTER TABLE user_activities ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 18, "text": "ALTER TABLE saved_searches ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 19, "text": "ALTER TABLE webhooks ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 20, "text": "ALTER TABLE integrations ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 21, "text": "ALTER TABLE api_logs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 281, "text": "$$ LANGUAGE plpgsql SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 292, "text": "$$ LANGUAGE plpgsql SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/02-enable-rls-policies.sql", "line": 303, "text": "$$ LANGUAGE plpgsql SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/09_seed_properties_now.sql", "line": 29, "text": "'{\"parking\": \"2 spaces + storage\", \"view\": \"City and Bay\", \"amenities\": [\"Infinity Pool\", \"Spa\", \"Theater\", \"Business Center\"], \"appliances\": [\"Bosch\", \"Sub-Zero\"], \"flooring\": \"Porcelain\", \"building_features\": [\"Valet\", \"24hr Security\"]}'," }, { "kind": "unsafe", "source_path": "scripts/reset-and-seed.mjs", "line": 44, "text": "// Execute as a single unsafe batch; fallback to splitting if needed" }, { "kind": "unsafe", "source_path": "scripts/reset-and-seed.mjs", "line": 46, "text": "await sql.unsafe(sqlText)" }, { "kind": "unsafe", "source_path": "scripts/reset-and-seed.mjs", "line": 54, "text": "await sql.unsafe(stmt)" }, { "kind": "unsafe", "source_path": "scripts/reset-and-seed.mjs", "line": 61, "text": "await sql.unsafe('DROP SCHEMA IF EXISTS public CASCADE')" }, { "kind": "unsafe", "source_path": "scripts/reset-and-seed.mjs", "line": 62, "text": "await sql.unsafe('CREATE SCHEMA public')" }, { "kind": "unsafe", "source_path": "scripts/test-health.mjs", "line": 98, "text": "// Safe because table names are from a whitelisted constant; use unsafe for identifier" }, { "kind": "unsafe", "source_path": "scripts/test-health.mjs", "line": 99, "text": "const rows = await sql`SELECT COUNT(*) AS count FROM ${sql.unsafe(table)}`" }, { "kind": "deprecated", "source_path": "setupTests.ts", "line": 9, "text": "addListener: () => {}, // deprecated" }, { "kind": "deprecated", "source_path": "setupTests.ts", "line": 10, "text": "removeListener: () => {}, // deprecated" } ], "security": { "secret_risks": [], "unsafe_patterns": [ { "name": "dangerously-set-html", "confidence": "medium", "evidence_paths": [ "components/ui/chart.tsx" ] }, { "name": "sql-injection-review-needed", "confidence": "medium", "evidence_paths": [ "app/api/bridge/sync-properties/route.ts", "app/api/properties/[id]/route.ts", "components/favorites/favorites-list.tsx", "scripts/import-bridge-data.ts" ] }, { "name": "ssrf-review-needed", "confidence": "medium", "evidence_paths": [ "app/zillow/page.tsx", "components/admin/error-log-analytics.tsx", "scripts/import-bridge-data.ts", "scripts/reset-and-seed.mjs", "scripts/test-health.mjs" ] } ], "sensitive_data_indicators": [ { "name": "api_key", "confidence": "medium", "evidence_paths": [ "app/api-docs/page.tsx", "lib/api-auth.ts", "scripts/_combined_schema.sql", "scripts/_combined_seed.sql", "scripts/02_create_users_and_agents.sql", "scripts/02-enable-rls-policies.sql", "scripts/08_seed_comprehensive_data.sql", "scripts/seed-complete-database.ts", "scripts/seed-production-data.ts" ] }, { "name": "card", "confidence": "medium", "evidence_paths": [ ".Jules/palette.md", "app/admin/analytics/page.tsx", "app/agents/reviews/page.tsx", "app/alerts/page.tsx", "app/analytics/forecasts/page.tsx", "app/analytics/market/page.tsx", "app/analytics/page.tsx", "app/api-docs/page.tsx", "app/api/stripe/create-checkout-session/route.ts", "app/billing/page.tsx", "app/dashboard/page.tsx", "app/error.tsx", "app/globals.css", "app/integrations/page.tsx", "app/layout.tsx", "app/not-found.tsx", "app/page.tsx", "app/pricing/page.tsx", "app/properties/loading.tsx", "app/sellers/loading.tsx" ] }, { "name": "email", "confidence": "medium", "evidence_paths": [ "app/alerts/page.tsx", "app/api/saved-searches/route.ts", "app/integrations/page.tsx", "app/settings/page.tsx", "components/layout/footer.tsx", "components/pricing/pricing-cards.tsx", "components/properties/property-details.tsx", "lib/stripe.ts", "ROADMAP.md", "scripts/_combined_schema.sql", "scripts/_combined_seed.sql", "scripts/02_create_users_and_agents.sql", "scripts/04_create_favorites_and_searches.sql", "scripts/05_create_api_and_integrations.sql", "scripts/06_seed_sample_data.sql", "scripts/08_seed_comprehensive_data.sql", "scripts/reset-and-seed.mjs", "scripts/SEED_ALL_DATA.sql", "scripts/SEED_DATABASE_NOW.ts", "scripts/seed-complete-database.ts" ] }, { "name": "financial", "confidence": "medium", "evidence_paths": [ "scripts/09_seed_properties_now.sql", "scripts/SEED_ALL_DATA.sql" ] }, { "name": "fingerprint", "confidence": "medium", "evidence_paths": [ "app/api/analytics/pageview/route.ts", "app/api/errors/route.ts", "app/api/sessions/event/route.ts", "app/api/sessions/route.ts", "app/api/sessions/update/route.ts", "components/admin/error-log-analytics.tsx", "components/admin/session-analytics.tsx", "components/providers/monitoring-provider.tsx", "lib/error-logger.ts", "lib/fingerprint.ts", "lib/session-tracker.ts", "ROADMAP.md", "scripts/_combined_schema.sql", "scripts/001_add_error_logs_table.sql", "scripts/002_add_session_tracking_table.sql", "scripts/reset-and-seed.mjs" ] }, { "name": "health", "confidence": "medium", "evidence_paths": [ "app/admin/analytics/page.tsx", "package.json", "ROADMAP.md", "scripts/test-health.mjs" ] }, { "name": "location", "confidence": "medium", "evidence_paths": [ "app/api-docs/page.tsx", "app/error.tsx", "app/global-error.tsx", "components/error-boundary.tsx", "components/pricing/pricing-cards.tsx", "components/providers/error-boundary.tsx", "components/saved-searches/create-search-dialog.tsx", "lib/error-handler.ts", "lib/error-logger.ts", "lib/monitoring.ts", "lib/session-tracker.ts", "ROADMAP.md", "scripts/_combined_schema.sql", "scripts/01_create_properties_table.sql", "scripts/03_create_analytics_tables.sql", "scripts/09_seed_properties_now.sql", "scripts/SEED_ALL_DATA.sql", "scripts/seed_market_data.py", "scripts/seed-complete-database.ts", "scripts/seed-database.ts" ] }, { "name": "oauth", "confidence": "medium", "evidence_paths": [ "ROADMAP.md" ] }, { "name": "password", "confidence": "medium", "evidence_paths": [ "app/settings/page.tsx", "ROADMAP.md", "scripts/seed-users.ts" ] }, { "name": "password_hash", "confidence": "medium", "evidence_paths": [ "scripts/seed-users.ts" ] }, { "name": "payment", "confidence": "medium", "evidence_paths": [ "app/api/stripe/create-checkout-session/route.ts", "app/api/stripe/webhook/route.ts", "app/billing/page.tsx", "app/integrations/page.tsx", "lib/stripe.ts", "ROADMAP.md" ] }, { "name": "pii", "confidence": "medium", "evidence_paths": [ "pnpm-lock.yaml" ] }, { "name": "secret-like environment variables", "confidence": "medium", "evidence_paths": [ "package.json" ] }, { "name": "token", "confidence": "medium", "evidence_paths": [ "app/api/health/route.ts", "lib/bridge-api/client.ts", "pnpm-lock.yaml", "README.md", "scripts/import-bridge-data.ts", "scripts/test-health.mjs" ] } ] }, "generated_at": "2026-05-16T16:44:20.188Z" }