registry / @kafe.studio/cloudflare / 0.29.4

@kafe.studio/cloudflare@0.29.4

Cloudflare adapters for KafeCMS - D1, R2, Access, and Worker Loader sandbox

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 69 file(s), 517 KB of source, external domains: api.cloudflare.com, imagedelivery.net, www.w3.org

Source & flagged code

2 flagged

dist/runner-5lTuEoEo.mjsView file

Lines 2-42javascript

2import { Kysely } from "kysely";

3import { D1Dialect } from "kysely-d1";

4import { PluginStorageRepository, normalizeCapabilities, ulid } from "kafecms";

6//#region src/sandbox/bridge-http.ts

7/**

8* HTTP fetch helper for sandboxed plugins, called from the bridge.

10* The bridge's httpFetch RPC method delegates here so the logic is pure and

11* testable without standing up a real WorkerEntrypoint.

12*

13* Responsibilities:

14* - Enforce the `network:request` / `network:request:unrestricted` capability.

15* - Enforce the allowedHosts list, including on every redirect hop. The

16* native `fetch` follows 3xx responses automatically; without manual

17* redirect handling an allowed host that 302s to a disallowed host

18* would bypass the allowlist.

19* - Strip credential headers (Authorization, Cookie, Proxy-Authorization)

20* on cross-origin redirects so tokens don't leak to attacker hosts.

21* - For `network:request:unrestricted`, apply a minimal SSRF check on every hop so

22* plugins can't be tricked into reaching cloud-metadata endpoints or

23* literal private IPs even without an explicit allowlist.

24*/

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/runner-5lTuEoEo.mjsView on unpkg · L22

25/** Maximum redirect chain length before we give up. */

26const MAX_REDIRECTS = 5;

27/** Headers that must be stripped when a redirect crosses origins. */

28const CREDENTIAL_HEADERS = [

29 "authorization",

30 "cookie",

31 "proxy-authorization"

32];

33/**

34* Known internal hostnames. Matched case-insensitively after stripping any

35* trailing dots (FQDN form) and IPv6 brackets.

36*/

37const BLOCKED_HOSTNAMES = new Set([

38 "localhost",

39 "metadata.google.internal",

40 "metadata.google"

41]);

42/**

dist/db/playground-middleware.mjsView file

Lines 693-733javascript

693 if (rows.length > 0) return;

694 } catch {}

695 console.log(`[playground] Initializing session ${token}`);

696 const { runMigrations } = await import("kafecms/db"

Source & flagged code

2 flagged · loading source

dist/runner-5lTuEoEo.mjsView file

22* plugins can't be tricked into reaching cloud-metadata endpoints or L23: * literal private IPs even without an explicit allowlist. L24: */ ... L163: */ L164: async function sandboxHttpFetch(url, init, options) { L165: const { capabilities, allowedHosts } = options; ... L189: headers, L190: text: await response.text() L191: }; ... L330: parentId: columnNullableString(row.parent_id), L331: data: columnJsonObject(row.data), L332: locale: columnString(row.locale),

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/runner-5lTuEoEo.mjsView on unpkg · L22

dist/db/playground-middleware.mjsView file

713package = @kafe.studio/cloudflare; repositoryIdentity = kafecms; dependency = kafecms L713: const { loadSeed } = await import("kafecms/seed"); L714: const { applySeed } = await import("kafecms"); L715: const seedResult = await applySeed(db, await loadSeed(), {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/db/playground-middleware.mjsView on unpkg · L713

Findings

2 High3 Medium4 Low

HighCloud Metadata Accessdist/runner-5lTuEoEo.mjs

HighCopied Package Dependency Bridgedist/db/playground-middleware.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/runner-5lTuEoEo.mjsView file

Lines 2-42javascript

2import { Kysely } from "kysely";

3import { D1Dialect } from "kysely-d1";

4import { PluginStorageRepository, normalizeCapabilities, ulid } from "kafecms";

6//#region src/sandbox/bridge-http.ts

7/**

8* HTTP fetch helper for sandboxed plugins, called from the bridge.

10* The bridge's httpFetch RPC method delegates here so the logic is pure and

11* testable without standing up a real WorkerEntrypoint.

12*

13* Responsibilities:

14* - Enforce the `network:request` / `network:request:unrestricted` capability.

15* - Enforce the allowedHosts list, including on every redirect hop. The

16* native `fetch` follows 3xx responses automatically; without manual

17* redirect handling an allowed host that 302s to a disallowed host

18* would bypass the allowlist.

19* - Strip credential headers (Authorization, Cookie, Proxy-Authorization)

20* on cross-origin redirects so tokens don't leak to attacker hosts.

21* - For `network:request:unrestricted`, apply a minimal SSRF check on every hop so

22* plugins can't be tricked into reaching cloud-metadata endpoints or

23* literal private IPs even without an explicit allowlist.

24*/

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/runner-5lTuEoEo.mjsView on unpkg · L22

25/** Maximum redirect chain length before we give up. */

26const MAX_REDIRECTS = 5;

27/** Headers that must be stripped when a redirect crosses origins. */

28const CREDENTIAL_HEADERS = [

29 "authorization",

30 "cookie",

31 "proxy-authorization"

32];

33/**

34* Known internal hostnames. Matched case-insensitively after stripping any

35* trailing dots (FQDN form) and IPv6 brackets.

36*/

37const BLOCKED_HOSTNAMES = new Set([

38 "localhost",

39 "metadata.google.internal",

40 "metadata.google"

41]);

42/**

dist/db/playground-middleware.mjsView file

Lines 693-733javascript

693 if (rows.length > 0) return;

694 } catch {}

695 console.log(`[playground] Initializing session ${token}`);

696 const { runMigrations } = await import("kafecms/db"