Skip to content

feat(tenant): parked pages report to the Moshpit network crawlproof project - #124

Merged
ralyodio merged 1 commit into
masterfrom
moshpit-tracker-parked
Oct 6, 2026
Merged

ralyodio merged 1 commit into
masterfrom
moshpit-tracker-parked

Conversation

@ralyodio

@ralyodio ralyodio commented Oct 6, 2026

Copy link
Copy Markdown
Collaborator

Follow-up to moshcoder/moshcode#559. Every parked domain page (?dn=, the branded Host, and /parking, which lands there) now also loads crawlproof stats.js for the Moshpit network project 2cbffe9d-1b6e-43f0-85f3-3cadee132048, next to moshcoding.com's own layout tag. Parked domains and pit /n/<name> pages then add up in one place: crawlproof stats pit.moshcode.sh.

The new <Script> gets its own id because next/script dedupes on id || src. stats.js reads document.currentScript, so each tag reports its own project.

Verified: tsc --noEmit clean, bun test tests/ 253/253, next build ok. next start renders /?dn=example.com with both project ids.

🤖 Generated with Claude Code

…roject

Every parked domain page (?dn=, the branded Host, and /parking which lands
there) now loads stats.js for the Moshpit network project 2cbffe9d-...
alongside moshcoding.com's own tag, so parked domains and the pit's
/n/<name> pages count in one place: crawlproof stats pit.moshcode.sh.
The Script gets its own id because next/script dedupes on id || src.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

20 finding(s)

HIGH/CRITICAL: 3 | MEDIUM: 13 | LOW: 4

Severity Rule Location
HIGH sh-remote-script-execution public/install.sh:302
HIGH sh-remote-script-execution public/install.sh:305
HIGH sh-remote-script-execution public/install.sh:432
MEDIUM js-open-redirect app/dashboard/[[...tab]]/page.tsx:67
MEDIUM js-open-redirect app/signup/page.tsx:38
MEDIUM js-open-redirect components/PitSearch.tsx:118
MEDIUM js-unescaped-html-sink components/Tenant.tsx:29
MEDIUM js-unescaped-html-sink components/Tenant.tsx:30
MEDIUM js-unescaped-html-sink components/Tenant.tsx:73
MEDIUM js-unescaped-html-sink components/Tenant.tsx:147
MEDIUM sql-template-interpolation lib/db.ts:1117
MEDIUM sql-template-interpolation lib/db.ts:1147
MEDIUM redos-nested-quantifier lib/markdown.ts:109
MEDIUM sh-remote-script-execution public/install.sh:123
MEDIUM sh-remote-script-execution public/install.sh:127
MEDIUM sh-remote-script-execution public/install.sh:146
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:18
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:25
LOW secret-generic-credential tests/domain-webhook-active.test.mjs:30
LOW secret-generic-credential tests/project-webhook-management.test.mjs:53

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 3fa0704 into master Oct 6, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant