s/process-location-search.func.ts#L16"}],"factors":null,"networkEndpoints":[{"host":"","url":"https://api.mapbox.com/search/searchbox/v1/suggest?q=${query}&language=en&limit=1&session_token=00000000-0000-0000-0000-000000000000&access_token=${accessToken}","filePath":"src/functions/process-location-search.func.ts","lineNumber":16,"codeSnippet":" 13 | // returns the mapbox_id\n 14 | const hitSuggestAPI = async (query: string, accessToken: string) => {\n 15 | \tconst suggestUrl = `https://api.mapbox.com/search/searchbox/v1/suggest?q=${query}&language=en&limit=1&session_token=00000000-0000-0000-0000-000000000000&access_token=${accessToken}`;\n> 16 | \tconst suggestObject = await requestUrl(suggestUrl);\n 17 | \tconst result = await suggestObject.json;\n 18 | \tconst mapbox_id = result.suggestions[0].mapbox_id;\n 19 | \tconsole.log(''***mapbox_id found***'' + mapbox_id);","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"obsidian-location.czichon.cloud","url":"https://obsidian-location.czichon.cloud","filePath":"documentation/docusaurus.config.ts","lineNumber":11,"codeSnippet":" 8 | \tfavicon: ''img/olp_logo.png'',\n 9 | \n 10 | \t// Set the production url of your site here\n> 11 | \turl: ''https://obsidian-location.czichon.cloud'',\n 12 | \t// Set the // pathname under which your site is served\n 13 | \t// For GitHub pages deployment, it is often ''//''\n 14 | \tbaseUrl: ''/'',","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets obsidian-location.czichon.cloud (https://obsidian-location.czichon.cloud)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"2.1.2","initialDiffTo":"2.1.3","summary":"This plugin renders map images by sending location coordinates to an external Mapbox service via active outbound connections to a configured domain. The plugin sends location search queries to the mapping service without filtering through Vault APIs. Network communication is unobfuscated, exposing the location data being queried in plaintext to the external service.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"lodash","packageVersion":">=4.0.0 <=4.17.23","severity":"high","title":"lodash vulnerable to Code Injection via `_.template` imports key names","advisoryUrl":"https://github.com/advisories/GHSA-r5fr-rjxr-66jc","ghsaId":"GHSA-r5fr-rjxr-66jc","cveId":null,"vulnerableRange":">=4.0.0 <=4.17.23","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"lodash","packageVersion":"<=4.17.23","severity":"moderate","title":"lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`","advisoryUrl":"https://github.com/advisories/GHSA-f23m-r3pf-42rh","ghsaId":"GHSA-f23m-r3pf-42rh","cveId":null,"vulnerableRange":"<=4.17.23","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":"<2.3.

Mapbox Location Image