"lineNumber":674,"codeSnippet":" 671 | \t\t\toutput,\n 672 | \t\t\t([title, state]) => `- ${state} ${title}`,\n 673 | \t\t).join(\"\\n\");\n> 674 | \t\tconst target = this.app.vault.getAbstractFileByPath(\"Tasks List.md\");\n 675 | \t\tif (!target)\n 676 | \t\t\tawait this.app.vault.create(\n 677 | \t\t\t\t\"Tasks List.md\",","explanation":"Reads a single vault file by path","taintConfidence":"possible","disclosed":false,"sourceUrl":"https://github.com/ysonc/obsidian-tasks-syncer/blob/refs/tags/2.1.6/src/main.ts#L674"},{"id":1187831,"pluginId":"task-syncer","version":"2.1.6","category":"network_calls","severity":"high","filePath":"src/services/microsoft.ts","lineNumber":36,"codeSnippet":" 33 | \tprivate async request(pathOrUrl: string, method = \"GET\", body?: unknown): Promise> {\n 34 | \t\tconst accessToken = await this.token();\n 35 | \t\tconst request: HttpRequest = {\n> 36 | \t\t\turl: pathOrUrl.startsWith(\"https://\") ? pathOrUrl : `${BASE}${pathOrUrl}`,\n 37 | \t\t\tmethod,\n 38 | \t\t\theaders: { Authorization: `Bearer ${accessToken}`, Prefer: `outlook.timezone=\"UTC\"` },\n 39 | \t\t};","explanation":"URL property targets graph.microsoft.com (https://graph.microsoft.com/v1.0)","taintConfidence":"possible","disclosed":false,"sourceUrl":"https://github.com/ysonc/obsidian-tasks-syncer/blob/refs/tags/2.1.6/src/services/microsoft.ts#L36"},{"id":1187832,"pluginId":"task-syncer","version":"2.1.6","category":"network_calls","severity":"high","filePath":"src/services/ticktick.ts","lineNumber":67,"codeSnippet":" 64 | \n 65 | \tprivate async request(path: string, method = \"GET\", body?: unknown): Promise> {\n 66 | \t\tconst accessToken = await this.token();\n> 67 | \t\tconst request: HttpRequest = { url: `${BASE}${path}`, method, headers: { Authorization: \"Bearer \" + accessToken } };\n 68 | \t\tif (body !== undefined) {\n 69 | \t\t\trequest.headers = { ...request.headers, \"Content-Type\": \"application/json\" };\n 70 | \t\t\trequest.body = JSON.stringify(body);","explanation":"URL property targets api.ticktick.com (https://api.ticktick.com/open/v1)","taintConfidence":"possible","disclosed":false,"sourceUrl":"https://github.com/ysonc/obsidian-tasks-syncer/blob/refs/tags/2.1.6/src/services/ticktick.ts#L67"}],"factors":null,"networkEndpoints":[{"host":"","url":null,"filePath":"src/auth/microsoft.ts","lineNumber":91,"codeSnippet":" 88 | \t\tdelete headers.Origin;\n 89 | \t\tdelete headers.origin;\n 90 | \t\tconst contentType = headers[\"Content-Type\"] ?? headers[\"content-type\"];\n> 91 | \t\tconst response = await requestUrl({ url, method, headers, contentType, body: options?.body, throw: false });\n 92 | \t\tconst text = response.text;\n 93 | \t\tlet body: unknown = text;\n 94 | \t\tif (text.trim()) {","networkType":"active-outbound","sendsData":true,"dataDescription":"Makes network requests","endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/provider.ts","lineNumber":14,"codeSnippet":" 11 | \n 12 | export interface ProviderRuntime { id: ProviderId; auth: AuthProvider; tasks: TaskService; }\n 13 | export const obsidianHttpClient: HttpClient = async (request: Parameters[0]) => {\n> 14 | \tconst response = await requestUrl(request);\n 15 | \tconst text = response.text ?? \"\";\n 16 | \treturn {\n 17 | \t\tstatus: response.status,","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"api.ticktick.com","url":null,"filePath":"src/services/ticktick.ts","lineNumber":67,"codeSnippet":" 64 | \n 65 | \tprivate async request(path: string, method = \"GET\", body?: unknown): Promise> {\n 66 | \t\tconst accessToken = await this.token();\n> 67 | \t\tconst request: HttpRequest = { url: `${BASE}${path}`, method, headers: { Authorization: \"Bearer \" + accessToken } };\n 68 | \t\tif (body !== undefined) {\n 69 | \t\t\trequest.headers = { ...request.h

Task Syncer