platberlitz/sillytavern-image-gen

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The flagged network-access signal matches private-network host detection logic in a security utility module. The line classifies IPv6 loopback, unique-local, link-local, reserved, and IPv4-mapped IPv6 addresses so that requests to private hosts can be blocked during image-source normalization. This is defensive input validation with no network destination or data egress present in the supplied evidence.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

lib/security.js:37

Scanner reason: Gitleaks matched secret-detection rule vault-service-token. The match applies to this repository.

Contextual assessment: Gitleaks flagged a vault-service-token pattern at line 17507, but the source context shows the line contains a static HTML option value string 'Crop and Resize' within a UI select element for IP-Adapter resize mode. No credential, token, or sensitive data is present. This is a textbook false positive from a generic pattern matching on common English words.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

gitleaks 8.30.1

Rule

vault-service-token

File role

production

Source

index.js:17507

Scanner reason: Gitleaks matched secret-detection rule vault-service-token. The match applies to this repository.

Contextual assessment: Gitleaks matched a 'vault-service-token' pattern at file line 17429, but the supplied source code at that line is a standard HTML input element for a confidence slider. No credential token, vault reference, or secret value is present in the evidence; the scanner's explanation confirms the matched value was removed. The detection is a false positive with no actual credential exposure.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

gitleaks 8.30.1

Rule

vault-service-token

File role

production

Source

index.js:17429

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.unsafe-regex. The match applies to this repository.

Contextual assessment: The static regex patterns at line 4736 are used by extractLikelyCharacterNames to match character name patterns in chat text. The patterns are not constructed from untrusted input; they are fixed literals defined in the source. JS-X-Ray flagged these as unsafe-regex, but no ReDoS or injection risk is demonstrated because the regexes are not dynamically built from attacker-controlled data and the input is already limited to chat text processed client-side.

Impact: low · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.unsafe-regex

File role

production

Source

index.js:4736

Scanner reason: Gitleaks matched secret-detection rule vault-service-token. The match applies to this repository.

Contextual assessment: Gitleaks flagged a vault-service-token pattern at line 8457, but the actual source code shows an object property assignment for ControlNet unit configuration: `resize_mode: s.a1111IpAdapterResizeMode || "Crop and Resize"`. No credential, token, or secret appears in the surrounding context. The expansion text does not alter this conclusion. The scanner match is a false positive; the value removed by the scanner is not present in the raw source.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

gitleaks 8.30.1

Rule

vault-service-token

File role

production

Source

index.js:8457

Scanner reason: Gitleaks matched secret-detection rule vault-service-token. The match applies to this repository.

Contextual assessment: Gitleaks flagged a vault-service-token pattern at line 17506, but the source context shows the line contains a static HTML option value string 'Just Resize' within a UI select element for IP-Adapter resize mode. No credential, token, or sensitive data is present. This is a false positive from generic pattern matching.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

gitleaks 8.30.1

Rule

vault-service-token

File role

production

Source

index.js:17506

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution. The match applies to this repository.

Contextual assessment: The code contains network retrieval (fetch) for image generation API calls, which is expected for an image generation extension. No dynamic code or command execution sink (eval, Function, child_process, etc.) was identified in the supplied evidence. The scanner's correlation is speculative and not substantiated by the actual code context. The project makes standard HTTP POST requests to configured image provider endpoints and does not execute fetched content as code.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.download-to-execution

File role

production

Source

index.js:1734-19574

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The static 'shady-link' signal did not retain its matched literals and cannot be mapped to a malicious flow. The code at the flagged region builds URL objects with a localhost fallback base so that provider-returned image URLs can be resolved and validated before any fetch. isTrustedProviderOutputUrl rejects URLs with embedded credentials and non-HTTP(S) protocols, requires HTTPS with private hosts blocked via normalizeImageSource, matches output hosts against per-provider allowlisted suffixes, and optionally allows a single additional subdomain of a trusted HTTPS request host. The CivitAI output fetcher applies the same validation to both the initial and any redirect Location, refuses to forward the API key to non-orchestration hosts, and blocks redirects elsewhere. This is defensive allowlist handling of provider-controlled image URLs, consistent with the project's multi-provider image generation purpose, and does not demonstrate exposure of credentials or host data to untrusted destinations.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

lib/hosted-provider.js:37

Scanner reason: Gitleaks matched secret-detection rule vault-service-token. The match applies to this repository.

Contextual assessment: Gitleaks flagged a vault-service-token pattern at line 17508, but the source context shows the line contains a static HTML option value string 'Resize and Fill' within a UI select element for IP-Adapter resize mode. No credential, token, or sensitive data is present. This is a false positive from generic pattern matching.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

gitleaks 8.30.1

Rule

vault-service-token

File role

production

Source

index.js:17508

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.sql-injection. The match applies to this repository.

Contextual assessment: Line 18210 contains a template literal used to build HTML for the extension's settings panel, which is then inserted into the DOM via insertAdjacentHTML. There is no SQL database, no SQL query construction, and no injection of user-controlled SQL syntax. JS-X-Ray's sql-injection signal is a false positive from the template literal syntax; the actual operation is client-side UI rendering with no database interaction.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.sql-injection

File role

production

Source

index.js:18210

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.obfuscated-code. The match applies to this repository.

Contextual assessment: JS-X-Ray flagged file as potentially obfuscated with low confidence. The supplied evidence shows clean, well-structured JavaScript with standard module imports, constants, and helper functions. No obfuscation techniques (string encoding, control flow flattening, dead code, etc.) are visible. The detection is a false positive common in minified or large bundled code, but this project's source is not obfuscated.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.obfuscated-code

File role

production

Source

index.js:1

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The JS-X-Ray 'shady-link' signal is a static heuristic and the matching literals were not retained, so it cannot be tied to a specific exfiltration pattern. The surrounding code is a defensive URL-safety layer for the Custom API image backend: isLoopbackUrl normalizes hostnames and validates IPv4 octets to recognize loopback destinations, assertSafeAuthDestination permits HTTP only for loopback URLs and otherwise enforces HTTPS when an API key is configured, and buildCustomBackendRequest sends the configured key only to the user-configured endpoint via bearer, header, query, or Basic auth. Response image URLs are fetched only after being normalized, having embedded credentials rejected, and being validated as HTTPS with private hosts blocked unless they share the request origin. Fetch calls use credentials omitted, redirect error, and no-referrer. This is consistent with the extension's stated purpose of supporting configurable custom image APIs (including local A1111/ComfyUI) and contains no evidence of data exfiltration or concealed network behavior.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

lib/custom-backend.js:371

Scanner reason: Gitleaks matched secret-detection rule vault-service-token. The match applies to this repository.

Contextual assessment: The gitleaks scanner flagged line 17417 under the vault-service-token rule, but the actual code is an HTML template input element for a numeric configuration setting (ADetailer confidence threshold). No credential, token, or secret is present on that line. The pattern match is a false positive arising from the template syntax, and no credential exposure or security-relevant data flow exists.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

gitleaks 8.30.1

Rule

vault-service-token

File role

production

Source

index.js:17417

Scanner reason: zizmor matched workflow-security rule artipacked. The match applies to this repository.

Contextual assessment: Zizmor's artipacked rule flagged potential credential persistence through artifacts at lines 27-28 of .github/workflows/ci.yml. The workflow performs only checkout, dependency installation, code verification, and a dependency audit. It does not upload or store any GitHub Actions artifacts, and no GITHUB_TOKEN or other credential is exposed to artifact upload. The scanner confidence was low, and the full workflow content confirms no artifact-related risk exists.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

zizmor 1.28.0

Rule

artipacked

File role

tooling

Source

.github/workflows/ci.yml:27-28

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The extension contains 37 occurrences of JS-X-Ray's 'shady-link' signal, which flags dynamic URL construction. The code legitimately builds URLs from user-configured provider endpoints, proxy URLs, and image sources to make image generation API requests and to resolve, validate, and normalize image URLs. Every URL construction path is accompanied by origin checks, private-host blocking, and protocol validation (e.g., normalizeImageSource, corsFetch, shouldInlineAutoProxyRefUrl). The signals are proportional to the extension's stated purpose of supporting 18 image-generation backends plus custom APIs, and no evidence of exfiltration, hidden destinations, or bypass of validation was found.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

index.js:282

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The static network-access signal corresponds to provider-image URL handling in an image-generation extension. The module parses image sources returned by provider APIs, normalizes them, and conditionally fetches HTTPS image URLs as part of the extension's stated purpose. Credential headers are only attached when the resolved image host matches the originating provider origin or an explicitly allowlisted credential origin/host; redirects are rejected, response sizes are bounded, and private hosts are blocked for untrusted sources. No data flow to an unexpected destination is shown in the supplied evidence.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

lib/provider-adapters.js:409

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.encoded-literal. The match applies to this repository.

Contextual assessment: The encoded-literal signal matches a long hexadecimal constant used as a pinned Replicate SDXL model version identifier. It is a public model version string used to validate user configuration against the supported model, not concealed data or obfuscated runtime behavior. The surrounding functions compare configured version strings to this constant and return descriptive validation errors, which is normal configuration handling for a provider integration.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.encoded-literal

File role

production

Source

lib/provider-capabilities.js:250

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The scanner signal matches a fixed localhost fallback used only as the base URL when resolving a user-supplied reference image for a local image backend. The flagged literal appears solely as the default when the page address is unavailable, so in normal browser operation the current page URL is used instead. The function then restricts the resolved source to data URLs or HTTP(S) URLs, enforces a byte size limit, verifies the image signature before use, and delegates retrieval to an injected reader not present in this file. No credentials or private content leave this code, and the only network behavior is fetching the image the user chose so it can be embedded into a local generation request. This matches the stated purpose of an image-generation extension that supports a local backend. The scanner pattern is known to flag localhost literals, so the finding is consistent with a false positive rather than any demonstrated exposure.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

lib/a1111-runtime.js:50

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.shady-link. The match applies to this repository.

Contextual assessment: The flagged region contains getCorsProxyStateKey, which parses a target URL with a localhost fallback base and derives a deterministic string describing origin, method, mode, credentials policy, and content-type class. It is a cache/proxy state key builder and does not itself issue any network request or transmit data. The same file's assertSafeConfigurableEndpoint enforces HTTP(S)-only endpoints, rejects embedded credentials, and requires HTTPS for non-loopback destinations, which supports local tools such as A1111/ComfyUI while preventing plaintext credential transit to remote hosts. The URL constructs with a localhost fallback are correct for the SillyTavern local-server context and are the likely source of the static heuristic match. No attacker-controlled input path, secret destination, or exfiltration flow is demonstrated.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner

javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

Rule

javascript.xray.shady-link

File role

production

Source

lib/network-runtime.js:80