government

English

pctrk

LSKey-c$siteUrl

_ga_XFP8BTVJ69

_ga_2RSEMWZ6E5

LSKey-c$CookieConsentPolicy

CookieConsentPolicy

LSKey-c$googtrans

renderCtx

The domain name 'nyhousingsearch.gov' uses the United States government-restricted top-level domain (.gov) with no subdomain. The registrable portion 'nyhousingsearch' spans 15 characters containing 5 vowels alongside ten consonants. Splitting it apart reveals 3 words: ny, housing, search. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

upgrade-insecure-requests
frame-ancestors *; report-uri /_/commcsp?disposition=enforce

img-src *.force.com slack-imgs-mil-dev.com 'self' https://stats.g.doubleclick.net https://img.youtube.com https://payments.salesforce.com/icons/ https://login.salesforce.com/icons/ https://*.googleapis.com https://translate-pa.googleapis.com https://nyshcr.my.salesforce.com https://www.gstatic.com *.slack-edge-gov.com *.my-salesforce.com *.cloudinary.com https://nyshcr.vf.force.com *.amazonaws.com blob: slack-imgs.com slack-gov-dev.com *.sfdcstatic.com https://img.alicdn.com *.twimg.com https://nyshcr.my.site.com *.slack.com https://www.paypal.com https://usa9014.sfdc-pu91w7.salesforce.com/icons/ https://translation.googleapis.com *.slack-imgs.com slack-imgs-gov.com https://i.ytimg.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ *.salesforce-experience.com https://*.gstatic.com https://translate.google.com https://*.google.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://translate.googleapis.com https://nyshcr.file.force.com slack-imgs-gov-dev.com *.slack-edge.com https://housingsearch.hcr.ny.gov https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ slack-mil-dev.com https://kit.fontawesome.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.slack-edge.mil https://www.sandbox.paypal.com https://drive.google.com https://i.vimeocdn.com https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com https://*.adyen.com slack-imgs.mil data:; report-to sfdc-csp-ep; report-uri https://nyshcr.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D8y0000008f2F&networkId=0DMcs0000000ERC&type=communities

attachment; filename="headerrepeat.png"; filename*=utf-8''headerrepeat.png

attachment; filename="logohcr_v2_002.png"; filename*=utf-8''logohcr_v2_002.png

application/x-www-form-urlencoded; charset=UTF-8

attachment; filename="Logo 1.png"; filename*=UTF-8''Logo%201.png

attachment; filename="The_Risepng.png"; filename*=utf-8''The_Risepng.png

attachment; filename="Renaissance_at_Lincoln_Parkpng.png"; filename*=utf-8''Renaissance_at_Lincoln_Parkpng.png

attachment; filename="sutphin.jpeg"; filename*=utf-8''sutphin.jpeg

attachment; filename="Colonial_IIpng.png"; filename*=utf-8''Colonial_IIpng.png

attachment; filename="The_ParklinePOI016jpg.jpg"; filename*=utf-8''The_ParklinePOI016jpg.jpg

attachment; filename="Glove_City_Rendering_w_ppl10421png.png"; filename*=utf-8''Glove_City_Rendering_w_ppl10421png.png

attachment; filename="2015A61_406_HR.jpg"

attachment; filename="Chelsea_Place_Project_Imagejpg.jpg"; filename*=utf-8''Chelsea_Place_Project_Imagejpg.jpg

attachment; filename="unicornpng.png"; filename*=utf-8''unicornpng.png

attachment; filename="asset_35EMorrisAveBuffaloNYBuildingPhot.jpg"; filename*=utf-8''asset_35EMorrisAveBuffaloNYBuildingPhot.jpg

attachment; filename="Inwoodpng.png"; filename*=utf-8''Inwoodpng.png

attachment; filename="Cornerstone_Residencejpg.jpg"; filename*=utf-8''Cornerstone_Residencejpg.jpg

attachment; filename="concern_bergenpng.png"; filename*=utf-8''concern_bergenpng.png

attachment; filename="asset_4519_White_Plainspng.png"; filename*=utf-8''asset_4519_White_Plainspng.png

attachment; filename="amsterdamjpg.jpg"; filename*=utf-8''amsterdamjpg.jpg

attachment; filename="School_House_Manorjpg.jpg"; filename*=utf-8''School_House_Manorjpg.jpg

attachment; filename="Barrel_Loftjpg.jpg"; filename*=utf-8''Barrel_Loftjpg.jpg

attachment; filename="DE_Smithjpg.jpg"; filename*=utf-8''DE_Smithjpg.jpg

attachment; filename="frederickdouglasstowersphase2buffalo_1j.jpg"; filename*=utf-8''frederickdouglasstowersphase2buffalo_1j.jpg

attachment; filename="Herkimer_Stone_RIdgejpg.jpg"; filename*=utf-8''Herkimer_Stone_RIdgejpg.jpg

attachment; filename="Ithaca_Overlookpng.png"; filename*=utf-8''Ithaca_Overlookpng.png

attachment; filename="itahca_southviewpng.png"; filename*=utf-8''itahca_southviewpng.png

attachment; filename="Joseph_Housepng.png"; filename*=utf-8''Joseph_Housepng.png

attachment; filename="Austin_Manorjpg.jpg"; filename*=utf-8''Austin_Manorjpg.jpg

attachment; filename="Nevin_Stjpeg.jpeg"; filename*=utf-8''Nevin_Stjpeg.jpeg

attachment; filename="Port_Byron_Exterior_with_Sign_SMALLjpg.jpg"; filename*=utf-8''Port_Byron_Exterior_with_Sign_SMALLjpg.jpg

attachment; filename="Saint_Jamesjpg.jpg"; filename*=utf-8''Saint_Jamesjpg.jpg

attachment; filename="Selfhelpiamage_1png.png"; filename*=utf-8''Selfhelpiamage_1png.png

attachment; filename="Silver_Lake_Meadowspng.png"; filename*=utf-8''Silver_Lake_Meadowspng.png

attachment; filename="Vital_Brookdale_2_1png.png"; filename*=utf-8''Vital_Brookdale_2_1png.png

attachment; filename="westchesterpng.png"; filename*=utf-8''westchesterpng.png

attachment; filename="whitneyjpg.jpg"; filename*=utf-8''whitneyjpg.jpg

attachment; filename="Screenshot 2025-10-21 110302.png"

attachment; filename="El_Hogar_Renderingjpg.jpg"; filename*=utf-8''El_Hogar_Renderingjpg.jpg

attachment; filename="asset_2435_Pacific_Exterior_elevationjp.jpg"; filename*=utf-8''asset_2435_Pacific_Exterior_elevationjp.jpg

attachment; filename="asset_21C15_Concern_Logan_V02_Pedestria.jpg"; filename*=utf-8''asset_21C15_Concern_Logan_V02_Pedestria.jpg

attachment; filename="image_1_1png.png"; filename*=utf-8''image_1_1png.png

default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://service.force.com/embeddedservice/ https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://payments.salesforce.com/ https://js.stripe.com/ https://www.paypal.com/sdk/js https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://pay.google.com import: blob: https://uip.canary.lwc.dev https://d.la1-c1cs-hio.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceMenu.jsonp https://nyshcr.my.site.com/housing/s/ https://nyshcr.my.salesforce-scrt.com https://nyshcr.my.site.com/resource/ https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com https://fonts.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com/gtag/js; object-src 'self' www.google.com; style-src 'self' 'unsafe-inline' https://service.force.com/embeddedservice/ https://fonts.googleapis.com/css2 https://fonts.googleapis.com/css https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ blob: https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://kit.fontawesome.com https://translate.google.com https://nyshcr.my.site.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://img.alicdn.com https://translation.googleapis.com https://www.gstatic.com https://nyshcr.file.force.com https://nyshcr.my.salesforce.com https://*.google.com https://*.googleapis.com https://translate-pa.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com; img-src 'self' data: blob: https://nyshcr.my.salesforce.com https://nyshcr.file.force.com https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://login.salesforce.com/icons/ https://payments.salesforce.com/icons/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ https://*.adyen.com https://www.sandbox.paypal.com https://www.paypal.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com https://usa9014.sfdc-pu91w7.salesforce.com/icons/ https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://kit.fontawesome.com https://nyshcr.vf.force.com https://translate.googleapis.com https://translate.google.com https://drive.google.com https://nyshcr.my.site.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://img.alicdn.com https://translation.googleapis.com https://housingsearch.hcr.ny.gov https://*.google.com https://*.googleapis.com https://translate-pa.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com; media-src 'self' blob: https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://kit.fontawesome.com https://nyshcr.my.site.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://img.alicdn.com https://translation.googleapis.com https://www.gstatic.com https://nyshcr.file.force.com https://nyshcr.my.salesforce.com https://*.google.com https://*.googleapis.com https://translate-pa.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com; frame-src 'self' https://service.force.com/embeddedservice/ https://usa9014.sfdc-pu91w7.salesforce.com https://sfdc-link-preview-staging.sfdc.sh https://sfdc-link-preview.hk.salesforce.com https://cdn.embedly.com https://www.youtube.com https://player.vimeo.com https://play.vidyard.com https://player.cloudinary.com https://fast.wistia.net https://players.brightcove.net https://s1.adis.ws https://scormanywhere.secure.force.com https://appiniummastertrial.secure.force.com https://js.stripe.com/ https://www.paypal.com https://www.sandbox.paypal.com https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://pay.google.com https://*.c.forceusercontent.com/lightningmaps/ https://*.c.forceusercontent.com https://location.force.com https://nyshcr.file.force.com https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://kit.fontawesome.com https://translate.googleapis.com https://translate.google.com https://nyshcr.my.site.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://img.alicdn.com https://translation.googleapis.com https://www.gstatic.com https://nyshcr.my.salesforce.com https://*.google.com https://*.googleapis.com https://translate-pa.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com/ https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://kit.fontawesome.com https://translate.googleapis.com https://translate.google.com https://nyshcr.my.site.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://img.alicdn.com https://translation.googleapis.com https://www.gstatic.com https://nyshcr.file.force.com https://nyshcr.my.salesforce.com https://*.google.com https://*.googleapis.com https://translate-pa.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com; connect-src 'self' https://www.paypal.com https://www.sandbox.paypal.com https://nyshcr.my.salesforce-scrt.com https://fonts.googleapis.com/css2 https://payments.salesforce.com/ https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://checkoutshopper-live.adyen.com/ https://checkoutshopper-test.adyen.com/ https://js.stripe.com/ https://www.google.com/recaptcha/ https://*.api.salesforce.com https://o11y.sfproxy-core2.sfdc-pu91w7.svc.sfdcfc.net/ui-telemetry https://nyshcr.live-preview.salesforce-experience.comwww.test.com https://kit.fontawesome.com https://translate.googleapis.com https://translate.google.com https://nyshcr.my.site.com https://nyshcr.lightning.force.com https://fonts.gstatic.com https://img.alicdn.com https://translation.googleapis.com https://www.gstatic.com https://nyshcr.file.force.com https://nyshcr.my.salesforce.com https://housingsearch.hcr.ny.gov https://*.google.com https://*.googleapis.com https://translate-pa.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com

initial-scale=1.0, maximum-scale=5.0, minimum-scale=1.0, minimal-ui

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks


    window.dataLayer = window.dataLayer || [];
    function gtag(){dataLayer.push(arguments);}
    gtag('js', new Date());
    gtag('config', 'G-2RSEMWZ6E5');



    try{
        
        document.addEventListener('setGoogleTranslateCookie', (event) => {
        if(event.detail.selectedLanguage){
            var lang = event.detail.selectedLanguage;
            var oldLang = lang;
            var cookieName = 'user_session';
            var cookieDta = document.cookie;
            document.cookie = `googtrans=/auto/${lang}`;
            document.cookie = `googtrans=/auto/${lang}; domain=.${location.hostname}`;
            
            // Force reload with translation parameter for some browsers
            const currentUrl = window.location.href;
            const hasParams = currentUrl.includes('?');
            const separator = hasParams ? '&' : '?';
            
            // Only reload if needed and not already having a gtrans parameter
            if (!currentUrl.includes('gtrans=') && lang !== 'en') {
                window.location.href = `${currentUrl}${separator}gtrans=${lang}`;
            }
            if( oldLang != undefined ){
            	window.location.reload();
        	}
                        
        }
        
     });
      
        
                     ///new code
        
        document.addEventListener('renderGT', (event) => {
    if(event.detail.renderGT){

        const originalXHROpen = XMLHttpRequest.prototype.open;
        const originalXHRSend = XMLHttpRequest.prototype.send;
        const originalXHRSetRequestHeader = XMLHttpRequest.prototype.setRequestHeader;
        
        let requestCounter = 0;
        let translationPairs = [];
        let pendingRequests = new Map();
        
        
        

        function isTranslateAPI(url) {
            return url && (url.includes('translateHtml') || url.includes('translate-pa.googleapis.com'));
        }
        
        function extractFromResponse(responseText, extractOriginalText) {

            if (!responseText) return { original: [], translated: [] };
            
            let parsedResponseText = [];
            let translatedArray = [];
            
            try {
                if (typeof responseText === 'string') {
                    parsedResponseText = JSON.parse(responseText);
                } else {
                    parsedResponseText = responseText;
                }
                
                if (Array.isArray(parsedResponseText) && parsedResponseText.length >= 1) {
                    translatedArray = parsedResponseText[0]; // First array contains translated text
                }
                
                const combinedArray = [];
                const maxLength = Math.max(
                    extractOriginalText ? extractOriginalText.length : 0,
                    translatedArray.length
                );
                
                for (let i = 0; i < maxLength; i++) {
                    const obj = {
                        originalText: extractOriginalText && extractOriginalText[i] ? extractOriginalText[i] : '',
                        translatedText: translatedArray[i] ? translatedArray[i] : ''
                    };
                    combinedArray.push(obj);
                }
                

                const eventData = {
                    original: extractOriginalText || [],
                    translated: translatedArray,
                    combined: combinedArray
                };
                
                // Dispatch custom event to LWC
                const translationEvent = new CustomEvent('translationprocessed', {
                    detail: eventData,
                    bubbles: true,
                    composed: true
                });
                
                // Dispatch from document or a specific element
                document.dispatchEvent(translationEvent);
                
                
                return eventData;
                
            } catch (e) {
                console.error('Could not parse response:', e);
                
                // Fallback: create objects with just original text
                const fallbackArray = [];
                if (extractOriginalText && Array.isArray(extractOriginalText)) {
                    for (let i = 0; i < extractOriginalText.length; i++) {
                        fallbackArray.push({
                            originalText: extractOriginalText[i],
                            translatedText: ''
                        });
                    }
                }
                
                return {
                    original: extractOriginalText || [],
                    translated: [],
                    combined: fallbackArray
                };
            }
        }
        
        function createTranslationPairs(originalTexts, translatedTexts) {
            const pairs = [];
            const maxLength = Math.max(originalTexts.length, translatedTexts.length);
            
            for (let i = 0; i < maxLength; i++) {
                pairs.push({
                    originalWord: originalTexts[i] || '',
                    translatorWord: translatedTexts[i] || ''
                });
            }
            return pairs;
        }
        
        XMLHttpRequest.prototype.open = function(method, url, async, user, password) {
            this._method = method;
            this._url = url;
            this._isTranslateAPI = isTranslateAPI(url);
            this._requestHeaders = {};
            
            if (this._isTranslateAPI) {
                this._requestId = ++requestCounter;
                
                
               
            } 
            
            return originalXHROpen.apply(this, arguments);
        };
        
        XMLHttpRequest.prototype.setRequestHeader = function(header, value) {
            if (this._isTranslateAPI) {
                this._requestHeaders[header] = value;
            }
            return originalXHRSetRequestHeader.apply(this, arguments);
        };
        
        XMLHttpRequest.prototype.send = function(body) {
            if (this._isTranslateAPI) {
                const requestId = this._requestId;
                

                // Extract original text from request body
                let extractOriginalText = [];

                if (body) {
                    try {
                        const parsed = JSON.parse(body);
                        
                        // Structure: [[["text1", "text2", "text3", ...]]]
                        if (Array.isArray(parsed)) {
                            for (let i = 0; i < parsed.length; i++) {
                                const outerArray = parsed[i];
                                
                                if (Array.isArray(outerArray)) {
                                    for (let j = 0; j < outerArray.length; j++) {
                                        const innerArray = outerArray[j];
                                        
                                        if (Array.isArray(innerArray)) {
                                            // This is where the actual text strings are
                                            for (let k = 0; k < innerArray.length; k++) {
                                                const text = innerArray[k];
                                                if (typeof text === 'string' && text.trim() !== '') {
                                                    extractOriginalText.push(text);
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                        
                        
                    } catch (e) {
                       // console.error('Error parsing request body:', e);
                    }
                }
                
                this.addEventListener('readystatechange', function() {
                    if (this.readyState === 4) {
                        
                        if (this.responseText) {
                            const extracted = extractFromResponse(this.responseText,extractOriginalText);

                            
                            if (extracted.original.length > 0 || extracted.translated.length > 0) {

                            }
                        }
                        
                    }
                });
                
                this.addEventListener('error', function() {
                   // console.error(`REQUEST ERROR #${requestId}`);
                });
            }
            
            return originalXHRSend.apply(this, arguments);
        };
        
        // Utility functions
        window.getTranslationPairs = function() {
          //  console.log('Current translation pairs:', translationPairs);
            return translationPairs;
        };
        
        window.clearTranslationPairs = function() {
            translationPairs = [];
           // console.log('Translation pairs cleared');
        };
        
        
        
    }
});

        //oldcode
      document.addEventListener('googleTranslateElement', (event) => {
            console.log('selectedLanguage => ' + JSON.stringify(event.detail.selectedLanguage));            
            var storedLang = event.detail.selectedLanguage;
            console.log('storedLang in scrip ==>' + storedLang);
            
            if( storedLang != 'en' && storedLang != undefined){
                if(event.detail.selectedLanguage){
                    try {
                        let promise = new Promise((resolve, reject) => {
                            window.googleTranslateElementInit = () => {
                                new window.google.translate.TranslateElement({
                                    pageLanguage: 'auto',
                                    autoDisplay: false,
                                    includedLanguages: event.detail.selectedLanguage
                                }, 'google_translate_element');
                                resolve('initialized');
                            }
                            
                            let script = document.createElement('script');
                            script.src = 'https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit';
                            script.type = 'text/javascript';
                            script.async = true;
                            //script.defer = true; 
                            
                            script.onerror = function(error) {
                                console.error('Failed to load Google Translate script:', error);
                                reject(new Error('Failed to load Google Translate script'));
                            };
                            
                            // Set up load handling
                            script.onload = function() {
                                console.log('Google Translate script loaded successfully');
                                // We don't resolve here because we need to wait for the callback
                            };
                            
                            document.head.appendChild(script);
                            
                            setTimeout(() => {
                                if (!window.google || !window.google.translate) {
                                    reject(new Error('Google Translate initialization timed out'));
                                }
                            }, 10000);
                        });
                        
                        promise.then(() => {
                            document.dispatchEvent(new CustomEvent('gTranslator', {detail:{resp:'success'} }));
                        }).catch(error => {
                            console.error('Translation error:', error);
                            document.dispatchEvent(new CustomEvent('failedToLoad', {detail:{resp:'failed'} }));
                        });
                    } catch (error) {
                        console.error('Error during Google Translate initialization:', error);
                        document.dispatchEvent(new CustomEvent('failedToLoad', {detail:{resp:'failed'} }));
                    }
                }
            } else {
               // document.dispatchEvent(new CustomEvent('failedToLoad', {detail:{resp:'failed'} }));
                
                console.log('else part');
            }
        });
        
    } catch (e) {
        console.log('error ==> ' + e);
        window.location.reload();
    }  
    



  document.addEventListener('DOMContentLoaded', () => {
    if (sessionStorage.getItem('sessionExpired') === 'true') {
      sessionStorage.removeItem('sessionExpired');

      const warningDiv = document.createElement('div');
      warningDiv.id = 'session-expired-message';
      warningDiv.innerHTML = `
        <div style="position: fixed; top: 0; left: 0; width: 100%; height: 100%; 
                    background-color: rgba(0,0,0,0.5); display: flex; 
                    justify-content: center; align-items: center; z-index: 9999;">
          <div style="width: 400px; background-color: white; border-radius: 8px; 
                      box-shadow: 0 4px 8px rgba(0,0,0,0.2); padding: 20px; 
                      text-align: center; border-top: 6px solid #f8d7da;">
            <h3 style="margin-top: 0; color: #721c24;">Session Expired</h3>
            <p style="margin-bottom: 20px; font-size: 16px;">
              You have been logged out due to inactivity.
            </p>
            <div style="display: flex; justify-content: center;">
              <button onclick="document.getElementById('session-expired-message').remove();" 
                      style="padding: 8px 16px; background: #4f3775; color: white; 
                      border: none; border-radius: 4px; cursor: pointer;">
                Close
              </button>
            </div>
          </div>
        </div>
      `;
      document.body.appendChild(warningDiv);
    }
  });



    // Configurable values
    const inactivityTimeout = 120 * 60 * 1000; // 12 minutes
    const warningTimeout = 118 * 60 * 1000;    // Warn 2 minute before
    const loginUrl = '/housing/s/';

    let inactivityTimer;
    let warningTimer;

    function resetTimers() {
        clearTimeout(inactivityTimer);
        clearTimeout(warningTimer);


        // Set warning timer
        warningTimer = setTimeout(() => {
            const loginButtonExists = Array.from(document.querySelectorAll('.comm-navigation__top-level-item-link'))
            .some(el => el.textContent.trim().toLowerCase() === 'login');
            
            // Only show warning if login button is NOT visible (i.e., user is logged in)
            if (!loginButtonExists) {
              showWarning();
            }
        }, warningTimeout);

        // Set auto-logout timer
        inactivityTimer = setTimeout(() => {
            const loginButtonExists = Array.from(document.querySelectorAll('.comm-navigation__top-level-item-link'))
            .some(el => el.textContent.trim().toLowerCase() === 'login');
            //window.location.href = loginUrl;
            if (!loginButtonExists) {
                sessionStorage.setItem('sessionExpired', 'true');
                window.location.href = '/secur/logout.jsp?startURL=/housing/s?sessionExpired=true';
              }
            
        }, inactivityTimeout);
    }

    function showWarning() {
        const warningDiv = document.createElement('div');
        warningDiv.id = 'session-timeout-warning';
        const loginButtonExists = Array.from(document.querySelectorAll('.comm-navigation__top-level-item-link'))
    .some(el => el.textContent.trim().toLowerCase() === 'login');
        warningDiv.innerHTML = `
            <div style="position: fixed; top: 0; left: 0; width: 100%; height: 100%; background-color: rgba(0,0,0,0.5); 
                        display: flex; justify-content: center; align-items: center; z-index: 9999;">
                <div style="width: 400px; background-color: white; border-radius: 8px; box-shadow: 0 4px 8px rgba(0,0,0,0.2); 
                            padding: 20px; text-align: center; border-top: 6px solid #f8d7da;">
                    <h3 style="margin-top: 0; color: #721c24;">Session Expiring Soon</h3>
                    <p style="margin-bottom: 20px; font-size: 16px;">
                        Your session is about to expire due to inactivity. 
                        You will be logged out in less than one minute.
       
                    <div style="display: flex; justify-content: space-between;">
                        <button onclick="document.getElementById('session-timeout-warning').remove(); resetTimers();" 
                                style="padding: 8px 16px; background: #4f3775; color: white; 
                                border: none; border-radius: 4px; cursor: pointer; flex: 1; margin-right: 10px;">
                            Stay Logged In
                        </button>
                    </div>
                </div>
            </div>
        `;
        document.body.appendChild(warningDiv);
    }

    const activityEvents = [
        'mousedown', 'mousemove', 'keypress',
        'scroll', 'touchstart', 'click', 'keydown'
    ];

    function addActivityListeners() {
        activityEvents.forEach(event => {
            document.addEventListener(event, resetTimers, false);
        });
    }

    document.addEventListener('DOMContentLoaded', () => {
        resetTimers();
        addActivityListeners();
        /*
        document.addEventListener('click', (event) => {
            const sessionCookie = document.cookie.split(';').some(item => item.trim().startsWith('sid='));
            if (!sessionCookie) {
                event.preventDefault();
                alert('Your session has expired. Please log in again to continue.');
                window.location.href = loginUrl;
            }
        }, true);
        */
    });


(function _ls() {
		function errLoadAuraFwScript(){
        var u=new URL(location.href);
        u.searchParams.get("aura.lcdn")==="0"||(u.searchParams.set("aura.lcdn",0),location.assign(u.search));
    }
			function script(url,co,onerror){
				var s=document.createElement("script"),a;
				s.fetchPriority="high";
				co&&(s.crossOrigin="anonymous");
				s.async=!0;
				s.src=url;
				s.addEventListener("error",onerror);
				(a=document.getElementsByTagName("script")[0])?a.parentNode.insertBefore(s,a):(document.head||document.body||document.documentElement).appendChild(s)
			}
		
	})();


                function googleTranslateElementInit() {
                    new google.translate.TranslateElement({
                        pageLanguage: 'auto',
                        autoDisplay: false,
                        includedLanguages: 'ar,bn,zh-CN,zh-TW,fr,de,ht,it,ja,ko,pl,ru,es,ur,yi',
                        layout: google.translate.TranslateElement.InlineLayout.SIMPLE
                    }, 'google_translate_element');
                }
            


        (function() {
            
            document.documentElement.classList.add('slds-no-wcag');
        }());
    


        // keep this variable here, because users do window.picassoSPA in order to check if in PSSC.
        var picassoSPA = {};
        var comm__attrVariationKey = "h5lDtMKzm9W7kRKvxfYT5w";
    


(function () {
// lwcRuntimeFlags initialization
if (!window.lwcRuntimeFlags) {
	Object.defineProperty(window, 'lwcRuntimeFlags', { value: Object.create(null) });
}
Object.assign(lwcRuntimeFlags, {"E

;(function(){window.Aura=window.Aura||{};window.Aura.beforeFrameworkInit=Aura.beforeFrameworkInit||[];var init=function init(){/*
 * This code is for Internal Salesforce use only, and subject to change without notice.
 * Customers shouldn't reference this file in any web pages.
 */
var ContentAssetGlobalValueProvider=function(a,b){this.orgId=a;this.contentDomainUrl=b};ContentAssetGlobalValueProvider.prototype.merge=function(){};ContentAssetGlobalValueProvider.prototype.isStorable=function(){return!1};ContentAssetGlobalValueProvider.prototype.get=function(a){var b="";if(!a||0===a.length)return null;b=a+"?oid\x3d"+this.orgId+"\x26";a="/file-asset/"+b;var b=$A.get("$SfdcSite.pathPrefix"),c=$A.get("$Absolute.url");return b?[c||b||"",a].join(""):[this.contentDomainUrl||"",a].join("")};

//# sourceMappingURL=/javascript/1543290307000/ui-sfdc-javascript-impl/source/ContentAssetGVP.js.map

$A.addValueProvider('$ContentAsset', new ContentAssetGlobalValueProvider('00D8y0000008f2F',''))
};window.Aura.frameworkJsReady?init():window.Aura.beforeFrameworkInit.push(init);init=function init(){/*
 * This code is for Internal Salesforce use only, and subject to change without notice.
 * Customers shouldn't reference this file in any web pages.
 */
var RecordGlobalValueProvider=function(a,b,c,d,e){this._cmp=null;this.configs={refresh:1E3*a,expiration:1E3*b,maxSize:c,version:d,previousVersion:e,minSaveToStorageInterval:3E3,expirationMobile:2628E6};Object.freeze(this.configs)};RecordGlobalValueProvider.prototype.getValues=function(){return{}};RecordGlobalValueProvider.prototype.merge=function(a){$A.util.isEmpty(a)||(this._createCmp(),this._cmp.helper.recordLib.records._receiveFrom$RecordGvp(a))};
RecordGlobalValueProvider.prototype.get=function(a,b){if("configs"===a)return this.configs;this._requestFromServer(a)};RecordGlobalValueProvider.prototype._requestFromServer=function(a){if(this._createCmp()){var b=this._cmp.get("c.getRecord");b.setParams({recordDescriptor:a});b.setCallback(this,$A.getCallback(function(b){"INCOMPLETE"===b.getState()&&this._cmp.helper.handleIncomplete.call(this._cmp.helper,a)}));$A.enqueueAction(b);$A.run(function(){},"RecordGlobalValueProvider._requestFromServer")}};
RecordGlobalValueProvider.prototype._createCmp=function(){this._cmp||(this._cmp=$A.createComponentFromConfig({descriptor:"markup://force:recordGlobalValueProvider",attributes:null}));return!$A.util.isUndefinedOrNull(this._cmp)};

//# sourceMappingURL=/javascript/1672207910000/ui-sfdc-javascript-impl/source/RecordGVP.js.map

$A.addValueProvider('$Record', new RecordGlobalValueProvider(30, 1800, 5120, '65.0', '64.0'))};window.Aura.frameworkJsReady?init():window.Aura.beforeFrameworkInit.push(init);}());


    window.addEventListener("load",function onload(){
        if(!window.Aura["frameworkJsReady"]){}
    })
    

Requests	IP Address	Location	AS Autonomous System
75	182.30.19.253	Unknown	Unknown
5	18.253.97.243	Unknown	Unknown
5	23.36.162.199	Unknown	Unknown
5	142.251.140.168	Unknown	Unknown
5	182.30.12.44	Unknown	Unknown
5	182.30.27.130	Unknown	Unknown
5	2a02:26f0:3500:18::1724:a299	Unknown	Unknown
5	18.254.252.205	Unknown	Unknown
5	23.36.162.209	Unknown	Unknown
5	2a00:1450:4001:80f::2008	Unknown	Unknown
89	15	-	-

Security Scan Report: nyhousingsearch.gov

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History