Function analyze_source_map

src/js_crawler.rs:713–776

Analyze source map for secrets and information

(
    map_url: &str,
    source_map: &SourceMap,
    client: &Client,
    validate_tokens: bool,
)

/// Analyze source map for secrets and information
pub async fn analyze_source_map(
    map_url: &str,
    source_map: &SourceMap,
    client: &Client,
    validate_tokens: bool,
) -> SourceMapInfo {
    let mut info = SourceMapInfo {
        map_url: map_url.to_string(),
        original_files: source_map.sources.clone(),
        secrets: Vec::new(),
        endpoints: Vec::new(),
        comments: Vec::new(),
        file_paths: Vec::new(),
    };

    // Extract file paths - these reveal directory structure
    for source in &source_map.sources {
        if !source.is_empty() {
            info.file_paths.push(source.clone());
        }
    }

    // Analyze sourcesContent if available
    if let Some(ref sources_content) = source_map.sources_content {
        for (idx, content) in sources_content.iter().enumerate() {
            if content.is_empty() {
                continue;
            }

            let source_name = source_map.sources.get(idx)
                .map(|s| s.as_str())
                .unwrap_or("unknown");

            // Scan for secrets in original source (using comprehensive scan)
            // Pass the source map URL as the main URL for reference
            let mut secrets = scan_for_all_hardcoded_secrets(
                content,
                map_url,  // Keep the actual source map URL for direct access
                client,
                validate_tokens
            ).await;

            // Add source file context to each secret found in this source
            for secret in &mut secrets {
                secret.context = format!("[Source: {}] {}", source_name, secret.context);
            }

            info.secrets.append(&mut secrets);

            // Extract endpoints from original source
            let mut endpoints = extract_api_endpoints(
                content,
                &format!("{} ({})", map_url, source_name)
            );
            info.endpoints.append(&mut endpoints);

            // Extract comments (they often contain TODO, DEBUG, credentials info)
            let comments = extract_code_comments(content);