Potential fix for code scanning alert no. 9: Incomplete string escaping or encoding

apps/api/src/query/builders/errors.ts

@@ -1,10 +1,7 @@
 import { Analytics } from '../../types/tables';
 import type { SimpleQueryConfig } from '../types';
 
-export const ErrorsBuilders: Record<
-	string,
-	SimpleQueryConfig<typeof Analytics.errors>
-> = {
+export const ErrorsBuilders: Record<string, SimpleQueryConfig> = {
 	recent_errors: {
 		table: Analytics.errors,
 		fields: [

apps/api/src/query/builders/pages.ts

@@ -1,10 +1,7 @@
 import { Analytics } from '../../types/tables';
 import type { SimpleQueryConfig } from '../types';
 
-export const PagesBuilders: Record<
-	string,
-	SimpleQueryConfig<typeof Analytics.events>
-> = {
+export const PagesBuilders: Record<string, SimpleQueryConfig> = {
 	top_pages: {
 		table: Analytics.events,
 		fields: [
@@ -41,8 +38,8 @@ export const PagesBuilders: Record<
 			websiteId: string,
 			startDate: string,
 			endDate: string,
-			filters?: any[],
-			granularity?: any,
+			_filters?: unknown[],
+			_granularity?: unknown,
 			limit?: number,
 			offset?: number
 		) => ({
@@ -101,8 +98,8 @@ export const PagesBuilders: Record<
 			websiteId: string,
 			startDate: string,
 			endDate: string,
-			filters?: any[],
-			granularity?: any,
+			_filters?: unknown[],
+			_granularity?: unknown,
 			limit?: number,
 			offset?: number
 		) => ({

apps/api/src/query/builders/profiles.ts

@@ -1,17 +1,14 @@
 import { Analytics } from '../../types/tables';
 import type { SimpleQueryConfig } from '../types';
 
-export const ProfilesBuilders: Record<
-	string,
-	SimpleQueryConfig<typeof Analytics.events>
-> = {
+export const ProfilesBuilders: Record<string, SimpleQueryConfig> = {
 	profile_list: {
 		customSql: (
 			websiteId: string,
 			startDate: string,
 			endDate: string,
-			filters?: any[],
-			granularity?: any,
+			_filters?: unknown[],
+			_granularity?: unknown,
 			limit?: number,
 			offset?: number
 		) => ({
@@ -226,8 +223,8 @@ export const ProfilesBuilders: Record<
 			websiteId: string,
 			startDate: string,
 			endDate: string,
-			filters?: any[],
-			granularity?: any,
+			_filters?: unknown[],
+			_granularity?: unknown,
 			limit?: number,
 			offset?: number
 		) => ({

apps/api/src/query/builders/sessions.ts

@@ -1,10 +1,7 @@
 import { Analytics } from '../../types/tables';
 import type { SimpleQueryConfig } from '../types';
 
-export const SessionsBuilders: Record<
-	string,
-	SimpleQueryConfig<typeof Analytics.events>
-> = {
+export const SessionsBuilders: Record<string, SimpleQueryConfig> = {
 	session_metrics: {
 		table: Analytics.events,
 		fields: [
@@ -117,8 +114,8 @@ export const SessionsBuilders: Record<
 			websiteId: string,
 			startDate: string,
 			endDate: string,
-			filters?: any[],
-			granularity?: any,
+			_filters?: unknown[],
+			_granularity?: unknown,
 			limit?: number,
 			offset?: number
 		) => ({

apps/api/src/query/builders/summary.ts

@@ -1,10 +1,7 @@
 import { Analytics } from '../../types/tables';
 import type { Filter, SimpleQueryConfig, TimeUnit } from '../types';
 
-export const SummaryBuilders: Record<
-	string,
-	SimpleQueryConfig<typeof Analytics.events>
-> = {
+export const SummaryBuilders: Record<string, SimpleQueryConfig> = {
 	summary_metrics: {
 		customSql: (
 			websiteId: string,
@@ -117,14 +114,14 @@ export const SummaryBuilders: Record<
 			websiteId: string,
 			startDate: string,
 			endDate: string,
-			_filters?: Filter[],
-			granularity?: TimeUnit,
+			_filters?: unknown[],
+			_granularity?: unknown,
 			_limit?: number,
 			_offset?: number,
 			timezone?: string
 		) => {
 			const tz = timezone || 'UTC';
-			const isHourly = granularity === 'hour' || granularity === 'hourly';
+			const isHourly = _granularity === 'hour' || _granularity === 'hourly';
 
 			if (isHourly) {
 				return {

apps/api/src/query/builders/traffic.ts

@@ -1,10 +1,7 @@
 import { Analytics } from '../../types/tables';
 import type { SimpleQueryConfig } from '../types';
 
-export const TrafficBuilders: Record<
-	string,
-	SimpleQueryConfig<typeof Analytics.events>
-> = {
+export const TrafficBuilders: Record<string, SimpleQueryConfig> = {
 	top_referrers: {
 		table: Analytics.events,
 		fields: [

apps/api/src/query/screen-resolution-to-device-type.ts

@@ -1,5 +1,3 @@
-// Utility to map screen resolution to device type
-
 export type DeviceType =
 	| 'mobile'
 	| 'tablet'
@@ -9,6 +7,69 @@ export type DeviceType =
 	| 'watch'
 	| 'unknown';
 
+interface Resolution {
+	width: number;
+	height: number;
+	aspect: number;
+}
+
+function parseResolution(screenResolution: string): Resolution | null {
+	if (!screenResolution || typeof screenResolution !== 'string') {
+		return null;
+	}
+
+	const parts = screenResolution.split('x');
+	if (parts.length !== 2) {
+		return null;
+	}
+
+	const widthStr = parts[0];
+	const heightStr = parts[1];
+
+	if (typeof widthStr !== 'string' || typeof heightStr !== 'string') {
+		return null;
+	}
+
+	const width = Number.parseInt(widthStr, 10);
+	const height = Number.parseInt(heightStr, 10);
+
+	if (
+		Number.isNaN(width) ||
+		Number.isNaN(height) ||
+		width <= 0 ||
+		height <= 0
+	) {
+		return null;
+	}
+
+	return { width, height, aspect: width / height };
+}
+
+function determineDeviceType(resolution: Resolution): DeviceType {
+	const { width, aspect } = resolution;
+
+	if (width <= 400) {
+		return 'watch';
+	}
+	if (width <= 800 && aspect < 1.1) {
+		return 'mobile';
+	}
+	if (width > 800 && width <= 1280 && aspect >= 1.1 && aspect <= 1.7) {
+		return 'tablet';
+	}
+	if (width > 1280 && width <= 1920 && aspect >= 1.3 && aspect <= 1.8) {
+		return 'laptop';
+	}
+	if (aspect > 2.0 && width > 1920) {
+		return 'ultrawide';
+	}
+	if (width > 1920 && width <= 2560 && aspect >= 1.3 && aspect <= 2.0) {
+		return 'desktop';
+	}
+
+	return 'unknown';
+}
+
 /**
  * Maps a screen resolution string (e.g., '375x812') to a device type.
  * Uses width, height, and aspect ratio for more accurate mapping.
@@ -18,40 +79,6 @@ export type DeviceType =
 export function mapScreenResolutionToDeviceType(
 	screenResolution: string
 ): DeviceType {
-	if (!screenResolution || typeof screenResolution !== 'string')
-		return 'unknown';
-	const parts = screenResolution.split('x');
-	if (
-		parts.length !== 2 ||
-		typeof parts[0] !== 'string' ||
-		typeof parts[1] !== 'string'
-	)
-		return 'unknown';
-	const width = Number.parseInt(parts[0], 10);
-	const height = Number.parseInt(parts[1], 10);
-	if (Number.isNaN(width) || Number.isNaN(height)) return 'unknown';
-	const aspect = width > 0 && height > 0 ? width / height : 0;
-
-	// Watches: very small screens
-	if (width <= 400 && height <= 400) return 'watch';
-
-	// Mobiles: small width, portrait aspect
-	if (width <= 800 && aspect < 1.1) return 'mobile';
-
-	// Tablets: medium width, aspect ratio between 1.1 and 1.7
-	if (width > 800 && width <= 1280 && aspect >= 1.1 && aspect <= 1.7)
-		return 'tablet';
-
-	// Laptops: width up to 1920, aspect ratio typical for laptops
-	if (width > 1280 && width <= 1920 && aspect >= 1.3 && aspect <= 1.8)
-		return 'laptop';
-
-	// Ultrawide: very wide aspect ratio
-	if (aspect > 2.0 && width > 1920) return 'ultrawide';
-
-	// Desktops: width up to 2560, aspect ratio typical for desktops
-	if (width > 1920 && width <= 2560 && aspect >= 1.3 && aspect <= 2.0)
-		return 'desktop';
-
-	return 'unknown';
+	const resolution = parseResolution(screenResolution);
+	return resolution ? determineDeviceType(resolution) : 'unknown';
 }

apps/api/src/query/simple-builder.ts

@@ -9,11 +9,19 @@ import { FilterOperators } from './types';
 import { applyPlugins } from './utils';
 
 export class SimpleQueryBuilder {
+	private config: SimpleQueryConfig;
+	private request: QueryRequest;
+	private websiteDomain?: string | null;
+
 	constructor(
-		private config: SimpleQueryConfig,
-		private request: QueryRequest,
-		private websiteDomain?: string | null
-	) {}
+		config: SimpleQueryConfig,
+		request: QueryRequest,
+		websiteDomain?: string | null
+	) {
+		this.config = config;
+		this.request = request;
+		this.websiteDomain = websiteDomain;
+	}
 
 	private buildFilter(
 		filter: Filter,
@@ -138,7 +146,9 @@ export class SimpleQueryBuilder {
 		if (this.request.filters) {
 			for (let i = 0; i < this.request.filters.length; i++) {
 				const filter = this.request.filters[i];
-				if (!filter) continue;
+				if (!filter) {
+					continue;
+				}
 				const { clause, params: filterParams } = this.buildFilter(filter, i);
 				whereClause.push(clause);
 				Object.assign(params, filterParams);

apps/api/src/query/types.ts

@@ -1,5 +1,3 @@
-import { z } from 'zod';
-
 export const FilterOperators = {
 	eq: '=',
 	ne: '!=',
@@ -40,7 +38,7 @@ export interface SimpleQueryConfig {
 	plugins?: {
 		parseReferrers?: boolean;
 		normalizeUrls?: boolean;
-		[key: string]: any;
+		[key: string]: unknown;
 	};
 	customSql?: (
 		websiteId: string,

apps/dashboard/app/(main)/websites/[id]/funnels/_components/funnel-analytics-by-referrer.tsx

@@ -23,15 +23,15 @@ interface Props {
 	funnelId: string;
 	dateRange: { start_date: string; end_date: string };
 	onReferrerChange?: (referrer: string) => void;
-	data: UseTRPCQueryResult<any, any>['data'];
+	data: UseTRPCQueryResult<
+		{ referrer_analytics: FunnelAnalyticsByReferrerResult[] },
+		TRPCClientErrorLike<AppRouter>
+	>['data'];
 	isLoading: boolean;
 	error: TRPCClientErrorLike<AppRouter> | null;
 }
 
 export default function FunnelAnalyticsByReferrer({
-	websiteId,
-	funnelId,
-	dateRange,
 	onReferrerChange,
 	data,
 	isLoading,
@@ -46,10 +46,16 @@ export default function FunnelAnalyticsByReferrer({
 
 	// Group referrers strictly by domain (lowercased, fallback to 'direct')
 	const referrers = useMemo(() => {
-		if (!data?.referrer_analytics) return [];
+		if (!data?.referrer_analytics) {
+			return [];
+		}
 		const grouped = new Map<
 			string,
-			{ label: string; parsed: any; users: number }
+			{
+				label: string;
+				parsed: FunnelAnalyticsByReferrerResult['referrer_parsed'];
+				users: number;
+			}
 		>();
 		for (const r of data.referrer_analytics) {
 			const domain = r.referrer_parsed?.domain?.toLowerCase() || 'direct';
@@ -154,7 +160,7 @@ export default function FunnelAnalyticsByReferrer({
 							</Badge>
 						</div>
 					</SelectItem>
-					{referrers.map((option: any) => (
+					{referrers.map((option) => (
 						<SelectItem key={option.value} value={option.value}>
 							<div className="flex w-full items-center gap-2">
 								<ReferrerSourceCell