diff --git a/.gitleaks.toml b/.gitleaks.toml index e499afb..fa99dcc 100644 --- a/.gitleaks.toml +++ b/.gitleaks.toml @@ -15,6 +15,11 @@ paths = [ '''public/[a-f0-9]{32}\.txt''', '''^[a-f0-9]{32}\.txt$''', + # IndexNow ping-скрипты содержат `const KEY = '<32hex>'` — + # тот же публичный ключ, не секрет (для авторизации перед Яндекс/Bing API). + '''scripts/indexnow\.(js|mjs|sh|ts)$''', + '''scripts/indexnow-ping\.sh$''', + # Legacy WordPress plugin code (akismet, jetpack, wpforms-lite, wp-cache). # Все "ключи" внутри — placeholder/template/internal параметры, # не настоящие секреты. Импортировано из старого WP-сайта как static. diff --git a/package-lock.json b/package-lock.json index 3538eb9..31c7204 100644 --- a/package-lock.json +++ b/package-lock.json @@ -17,7 +17,6 @@ }, "devDependencies": { "@types/sanitize-html": "^2.16.0", - "fast-xml-parser": "^4.5.0", "sharp": "^0.34.5" }, "engines": { @@ -2409,25 +2408,6 @@ "xml-naming": "^0.1.0" } }, - "node_modules/fast-xml-parser": { - "version": "4.5.6", - "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.5.6.tgz", - "integrity": "sha512-Yd4vkROfJf8AuJrDIVMVmYfULKmIJszVsMv7Vo71aocsKgFxpdlpSHXSaInvyYfgw2PRuObQSW2GFpVMUjxu9A==", - "dev": true, - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/NaturalIntelligence" - } - ], - "license": "MIT", - "dependencies": { - "strnum": "^1.0.5" - }, - "bin": { - "fxparser": "src/cli/cli.js" - } - }, "node_modules/fdir": { "version": "6.5.0", "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", @@ -4517,19 +4497,6 @@ "url": "https://github.com/sponsors/wooorm" } }, - "node_modules/strnum": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/strnum/-/strnum-1.1.2.tgz", - "integrity": "sha512-vrN+B7DBIoTTZjnPNewwhx6cBA/H+IS7rfW68n7XxC1y7uoiGQBxaKzqucGUgavX15dJgiGztLJ8vxuEzwqBdA==", - "dev": true, - "funding": [ - { - "type": "github", - "url": "https://github.com/sponsors/NaturalIntelligence" - } - ], - "license": "MIT" - }, "node_modules/svgo": { "version": "4.0.1", "resolved": "https://registry.npmjs.org/svgo/-/svgo-4.0.1.tgz",