crawlforge-mcpBLOCK

EVAL_COUNT=$(grep -rn "eval(" --include="*.js" src/ 2>/dev/null | wc -l | tr -d ' ')

echo "  Found $EVAL_COUNT use(s) of eval() - potential security risk"

EXEC_COUNT=$(grep -rn "exec(" --include="*.js" src/ 2>/dev/null | grep -v "ActionExecutor" | wc -l | tr -d ' ')

echo "  Found $EXEC_COUNT use(s) of exec() - verify input validation"

page.evaluate(new Function('...args', script), ...args),

"metadata.google.internal",  # Cloud metadata

"169.254.169.254",  # AWS/GCP metadata

("http://169.254.169.254/", True, "AWS metadata"),

("http://metadata.google.internal/", True, "GCP metadata"),

console.log(`           "CRAWLFORGE_API_KEY": "${apiKey.trim()}"`);

*   logger.error('fetch failed', maskSecrets({ apiKey, url, error }));

("http://127.0.0.1/", True, "IPv4 loopback"),

("http://127.0.0.1:8080/admin", True, "IPv4 loopback with port"),

("http://192.168.1.1/", True, "Private network"),

("http://10.0.0.1/", True, "Private network"),

("http://172.16.0.1/", True, "Private network"),

const API_KEY = 'cf-test-api-key-1234';

const API_KEY = 'cf-test-api-key-1234';

const secret = 'delivery-test-secret';

const TEST_TLS_KEY = `-----BEGIN PRIVATE KEY-----

one `style="display:none"` element became a rule hiding every element small enough to pass

.mcpbignore

const hash = crypto.createHash('md5').update(seed).digest('hex');

* (Revision 2, 40-bit RC4 — ISO 32000-1 Algorithms 3.1-3.4) by hand, since

* Node's OpenSSL 3 build has no RC4 cipher (`crypto.getCiphers()` excludes