⚠️ Error

${\n escJs(msg)\n }

`,\n { status: 500, headers: { \"Content-Type\": \"text/html\" } },\n );\n}\n\nfunction escJs(s: string): string {\n return s.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"').replace(/'/g, \"\\\\'\")\n .replace(//g, \"\\\\x3e\").replace(/\\n/g, \"\\\\n\")\n .replace(/\\r/g, \"\");\n}\n\nfunction prxUrl(\n u: string,\n base: string,\n origin: string,\n isResource = false,\n): string {\n if (!u) return u;\n const t = u.trim();\n if (\n !t || t.startsWith(\"data:\") || t.startsWith(\"blob:\") ||\n t.startsWith(\"javascript:\") ||\n t.startsWith(\"mailto:\") || t.startsWith(\"tel:\") || t.startsWith(\"#\") ||\n t.startsWith(\"about:\")\n ) {\n return u;\n }\n try {\n const abs = new URL(t, base).href;\n return `${origin}?_=${encodeURIComponent(abs)}${isResource ? \"&_r=1\" : \"\"}`;\n } catch {\n return u;\n }\n}\n\nfunction rewriteHtml(html: string, base: string, origin: string): string {\n const px = (u: string, res = false) => prxUrl(u, base, origin, res);\n\n html = html.replace(\n /]*http-equiv\\s*=\\s*[\"']?(content-security-policy|x-frame-options|refresh|set-cookie)[\"']?[^>]*>/gi,\n \"\",\n );\n html = html.replace(/]*name\\s*=\\s*[\"']?referrer[\"']?[^>]*>/gi, \"\");\n html = html.replace(/]*>/gi, \"\");\n\n const inj = INJECTION_SCRIPT(base, origin);\n const tag = ``;\n\n if (/]*>/i.test(html)) {\n html = html.replace(/]*>/i, `$&${tag}`);\n } else if (/]*>/i.test(html)) {\n html = html.replace(/]*>/i, `$&${tag}`);\n } else if (/]*>/i, `$&${tag}`);\n } else {\n html = tag + html;\n }\n\n // Rewrite anchor hrefs - store original in data attribute\n html = html.replace(\n /(]*?)(href\\s*=\\s*)([\"'])([^\"']*?)\\3/gi,\n (m, pre, attr, q, url) => {\n return `${pre}data-_h=\"${escAttr(url)}\" ${attr}${q}${px(url)}${q}`;\n },\n );\n\n // Other URL attributes\n const urlAttrs = [\n [/(]*?)(href\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, false],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, false],\n [/(]*?)(src\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(data\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(action\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, false],\n [/(]*?)(formaction\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, false],\n [/(]*?)(formaction\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, false],\n [/(]*?)(href\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(href\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n [/(]*?)(xlink:href\\s*=\\s*)([\"'])([^\"']*?)\\3/gi, true],\n ];\n\n for (const [regex, isRes] of urlAttrs) {\n html = html.replace(regex as RegExp, (m, pre, attr, q, url) => {\n return `${pre}${attr}${q}${px(url, isRes as boolean)}${q}`;\n });\n }\n\n html = html.replace(\n /(srcset\\s*=\\s*)([\"'])([^\"']*?)\\2/gi,\n (m, attr, q, srcset) => {\n const rw = srcset.split(\",\").map((p: string) => {\n const parts = p.trim().split(/\\s+/);\n if (parts[0]) parts[0] = px(parts[0], true);\n return parts.join(\" \");\n }).join(\", \");\n return `${attr}${q}${rw}${q}`;\n },\n );\n\n html = html.replace(\n /(poster\\s*=\\s*)([\"'])([^\"']*?)\\2/gi,\n (m, a, q, u) => `${a}${q}${px(u, true)}${q}`,\n );\n html = html.replace(\n /(background\\s*=\\s*)([\"'])([^\"']*?)\\2/gi,\n (m, a, q, u) => `${a}${q}${px(u, true)}${q}`,\n );\n html = html.replace(\n /(style\\s*=\\s*)([\"'])([^\"']*?)\\2/gi,\n (m, a, q, s) => `${a}${q}${rewriteCss(s, base, origin)}${q}`,\n );\n html = html.replace(\n /(]*>)([\\s\\S]*?)(<\\/style>)/gi,\n (m, o, c, e) => `${o}${rewriteCss(c, base, origin)}${e}`,\n );\n html = html.replace(/\\s+(integrity|nonce)\\s*=\\s*([\"'])[^\"']*\\2/gi, \"\");\n html = html.replace(/\\s+crossorigin(\\s*=\\s*([\"'])[^\"']*\\2)?/gi, \"\");\n\n return html;\n}\n\nfunction escAttr(s: string): string {\n return s.replace(/&/g, \"&\").replace(/\"/g, \""\").replace(//g, \">\");\n}\n\nfunction rewriteCss(css: string, base: string, origin: string): string {\n const px = (u: string) => prxUrl(u, base, origin, true);\n css = css.replace(/url\\s*\$\\s*([\"']?)([^\"')]+?)\\1\\s*\$/gi, (m, q, u) => {\n if (u.trim().startsWith(\"data:\")) return m;\n return `url(${q}${px(u.trim())}${q})`;\n });\n css = css.replace(\n /@import\\s+url\\s*\$\\s*([\"']?)([^\"')]+?)\\1\\s*\$/gi,\n (m, q, u) => `@import url(${q}${px(u)}${q})`,\n );\n css = css.replace(\n /@import\\s+([\"'])([^\"']+?)\\1/gi,\n (m, q, u) => `@import ${q}${px(u)}${q}`,\n );\n return css;\n}\n\nfunction INJECTION_SCRIPT(base: string, origin: string): string {\n return `(function(){\nif(window.__PX)return;window.__PX=1;\nvar B=\"${escJs(base)}\",O=\"${escJs(origin)}\",BO=\"${\n escJs(new URL(base).origin)\n }\",BU;\ntry{BU=new URL(B)}catch(e){BU={protocol:\"https:\",host:\"\",hostname:\"\",port:\"\",pathname:\"/\",search:\"\",origin:BO}}\n\n// Utility to extract real URL from proxy URL\nfunction unproxy(u){\n if(!u||typeof u!==\"string\")return u;\n try{\n var p=new URL(u);\n if(p.origin===O){\n var t=p.searchParams.get(\"_\");\n if(t)return decodeURIComponent(t);\n }\n }catch(e){}\n return u;\n}\n\nfunction abs(u){\n if(!u)return u;\n u=unproxy(u);\n try{return new URL(u,B).href}catch(e){return u}\n}\n\nfunction prx(u,r){\n if(!u)return u;\n u=String(u).trim();\n u=unproxy(u);\n if(!u||u[0]===\"#\"||/^(data|blob|javascript|mailto|tel|about):/.test(u))return u;\n try{return O+\"?_=\"+encodeURIComponent(new URL(u,B).href)+(r?\"&_r=1\":\"\")}catch(e){return u}\n}\n\nfunction msg(d){\n // Always clean URLs before sending to parent\n if(d.u)d.u=unproxy(d.u);\n if(d.url)d.url=unproxy(d.url);\n try{parent.postMessage(Object.assign({_p:1},d),\"*\")}catch(e){}\n}\n\n// ===== LOCATION =====\nvar FL={\n get href(){return B},set href(v){msg({t:\"nav\",u:abs(v)})},\n get origin(){return BO},get protocol(){return BU.protocol},\n get host(){return BU.host},get hostname(){return BU.hostname},\n get port(){return BU.port},get pathname(){return BU.pathname},\n get search(){return BU.search},\n get hash(){return location.hash},set hash(v){location.hash=v},\n assign:function(u){msg({t:\"nav\",u:abs(u)})},\n replace:function(u){msg({t:\"nav\",u:abs(u),r:1})},\n reload:function(){msg({t:\"reload\"})},\n toString:function(){return B},valueOf:function(){return B}\n};\nObject.defineProperty(FL,\"ancestorOrigins\",{get:function(){return{length:0}},configurable:1});\n\ntry{Object.defineProperty(window,\"location\",{get:function(){return FL},set:function(v){FL.href=v},configurable:0})}catch(e){}\ntry{Object.defineProperty(document,\"location\",{get:function(){return FL},set:function(v){FL.href=v},configurable:0})}catch(e){}\n\n// ===== DOCUMENT SPOOFING =====\nvar dp={URL:B,documentURI:B,baseURI:B,domain:BU.hostname,referrer:BO+\"/\"};\nfor(var k in dp)try{Object.defineProperty(document,k,{get:(function(v){return function(){return v}})(dp[k]),set:function(){},configurable:0})}catch(e){}\ntry{Object.defineProperty(window,\"origin\",{get:function(){return BO},configurable:0})}catch(e){}\ntry{Object.defineProperty(Node.prototype,\"baseURI\",{get:function(){return B},configurable:0})}catch(e){}\n\n// ===== ANCHOR ELEMENT HREF PROPERTY =====\n(function(){\n var hd=Object.getOwnPropertyDescriptor(HTMLAnchorElement.prototype,\"href\");\n if(!hd)return;\n var og=hd.get,os=hd.set;\n Object.defineProperty(HTMLAnchorElement.prototype,\"href\",{\n get:function(){\n var dh=this.getAttribute(\"data-_h\");\n if(dh)try{return new URL(dh,B).href}catch(e){return dh}\n var v=og.call(this);\n return unproxy(v);\n },\n set:function(v){\n this.setAttribute(\"data-_h\",v);\n os.call(this,prx(v));\n },\n configurable:1,enumerable:1\n });\n \n // Also spoof other anchor properties\n [\"origin\",\"protocol\",\"host\",\"hostname\",\"port\",\"pathname\",\"search\",\"hash\"].forEach(function(p){\n var pd=Object.getOwnPropertyDescriptor(HTMLAnchorElement.prototype,p);\n if(!pd||!pd.get)return;\n var pog=pd.get;\n Object.defineProperty(HTMLAnchorElement.prototype,p,{\n get:function(){\n var dh=this.getAttribute(\"data-_h\");\n if(dh){try{return new URL(dh,B)[p]}catch(e){}}\n var h=og.call(this);\n try{return new URL(unproxy(h))[p]}catch(e){return pog.call(this)}\n },\n set:pd.set,configurable:1,enumerable:1\n });\n });\n})();\n\n// ===== AREA ELEMENT =====\n(function(){\n var hd=Object.getOwnPropertyDescriptor(HTMLAreaElement.prototype,\"href\");\n if(!hd||!hd.get)return;\n var og=hd.get,os=hd.set;\n Object.defineProperty(HTMLAreaElement.prototype,\"href\",{\n get:function(){return unproxy(og.call(this))},\n set:function(v){os.call(this,prx(v))},\n configurable:1\n });\n})();\n\n// ===== FORM ACTION =====\n(function(){\n var ad=Object.getOwnPropertyDescriptor(HTMLFormElement.prototype,\"action\");\n if(!ad)return;\n var og=ad.get,os=ad.set;\n Object.defineProperty(HTMLFormElement.prototype,\"action\",{\n get:function(){return unproxy(og.call(this))||B},\n set:function(v){os.call(this,prx(v))},\n configurable:1\n });\n})();\n\n// ===== HISTORY =====\nvar HP=history.pushState,HR=history.replaceState;\nhistory.pushState=function(s,t,u){\n if(u){\n var clean=abs(String(u));\n msg({t:\"push\",u:clean});\n return HP.call(this,s,t,prx(u));\n }\n return HP.call(this,s,t,u);\n};\nhistory.replaceState=function(s,t,u){\n if(u){\n var clean=abs(String(u));\n msg({t:\"repl\",u:clean});\n return HR.call(this,s,t,prx(u));\n }\n return HR.call(this,s,t,u);\n};\n\n// ===== WINDOW.OPEN =====\nvar WO=window.open;\nwindow.open=function(u){if(u)msg({t:\"open\",u:abs(u)});return null};\n\n// ===== FETCH =====\nvar FE=window.fetch;\nwindow.fetch=function(r,i){\n var u=typeof r===\"string\"?r:(r&&r.url?r.url:\"\");\n if(u&&!/^(data|blob):/.test(u)){\n var pu=prx(u,true);\n if(typeof r===\"string\")r=pu;\n else if(r&&r.url)try{r=new Request(pu,r)}catch(e){r=pu}\n }\n return FE.call(this,r,i);\n};\n\n// ===== XHR =====\nvar XO=XMLHttpRequest.prototype.open;\nXMLHttpRequest.prototype.open=function(m,u){\n if(u&&typeof u===\"string\"&&!/^(data|blob):/.test(u))arguments[1]=prx(u,true);\n return XO.apply(this,arguments);\n};\n\n// ===== XHR responseURL =====\n(function(){\n var rd=Object.getOwnPropertyDescriptor(XMLHttpRequest.prototype,\"responseURL\");\n if(!rd||!rd.get)return;\n var og=rd.get;\n Object.defineProperty(XMLHttpRequest.prototype,\"responseURL\",{\n get:function(){return unproxy(og.call(this))},\n configurable:1\n });\n})();\n\n// ===== WORKERS =====\nif(window.Worker){var _W=Worker;window.Worker=function(u,o){return new _W(prx(u,true),o)};window.Worker.prototype=_W.prototype}\nif(window.SharedWorker){var _SW=SharedWorker;window.SharedWorker=function(u,o){return new _SW(prx(u,true),o)}}\nif(window.EventSource){var _ES=EventSource;window.EventSource=function(u,o){return new _ES(prx(u,true),o)};window.EventSource.prototype=_ES.prototype}\n\n// ===== WEBSOCKET =====\nif(window.WebSocket){\n var _WS=WebSocket;\n window.WebSocket=function(u,p){\n var ws=new _WS(u,p);\n var ou=u;\n try{Object.defineProperty(ws,\"url\",{get:function(){return ou},configurable:1})}catch(e){}\n return ws;\n };\n window.WebSocket.prototype=_WS.prototype;\n window.WebSocket.CONNECTING=0;window.WebSocket.OPEN=1;window.WebSocket.CLOSING=2;window.WebSocket.CLOSED=3;\n}\n\n// ===== SERVICE WORKER =====\nif(navigator.serviceWorker){\n navigator.serviceWorker.register=function(){return Promise.reject(new DOMException(\"Blocked\",\"SecurityError\"))};\n}\n\n// ===== IMAGE =====\nvar _Img=window.Image;\nwindow.Image=function(w,h){\n var img=new _Img(w,h);\n var sd=Object.getOwnPropertyDescriptor(HTMLImageElement.prototype,\"src\");\n if(sd&&sd.set){\n var ss=sd.set;\n Object.defineProperty(img,\"src\",{set:function(v){ss.call(this,prx(v,true))},get:function(){return unproxy(this.getAttribute(\"src\"))},configurable:1});\n }\n return img;\n};\n\n// ===== createElement =====\nvar CE=document.createElement.bind(document);\ndocument.createElement=function(t){\n var e=CE.apply(this,arguments);\n var tl=t.toLowerCase();\n var srcTags=[\"script\",\"img\",\"video\",\"audio\",\"source\",\"track\",\"embed\",\"iframe\",\"frame\"];\n \n if(srcTags.indexOf(tl)>=0){\n var sd=Object.getOwnPropertyDescriptor(e.__proto__,\"src\");\n if(sd&&sd.set){\n var ss=sd.set,sg=sd.get;\n Object.defineProperty(e,\"src\",{\n set:function(v){ss.call(this,prx(v,tl!==\"iframe\"&&tl!==\"frame\"))},\n get:function(){return unproxy(sg?sg.call(this):this.getAttribute(\"src\"))},\n configurable:1\n });\n }\n }\n \n if(tl===\"link\"){\n var hd=Object.getOwnPropertyDescriptor(HTMLLinkElement.prototype,\"href\");\n if(hd&&hd.set){\n var hs=hd.set,hg=hd.get;\n Object.defineProperty(e,\"href\",{\n set:function(v){hs.call(this,prx(v,true))},\n get:function(){return unproxy(hg?hg.call(this):this.getAttribute(\"href\"))},\n configurable:1\n });\n }\n }\n \n if(tl===\"a\"){\n // Already handled by prototype override\n }\n \n if(tl===\"form\"){\n var fd=Object.getOwnPropertyDescriptor(HTMLFormElement.prototype,\"action\");\n if(fd&&fd.set){\n var fs=fd.set;\n Object.defineProperty(e,\"action\",{set:function(v){fs.call(this,prx(v))},get:function(){return unproxy(this.getAttribute(\"action\"))||B},configurable:1});\n }\n }\n \n if(tl===\"object\"){\n var od=Object.getOwnPropertyDescriptor(HTMLObjectElement.prototype,\"data\");\n if(od&&od.set){\n var os=od.set;\n Object.defineProperty(e,\"data\",{set:function(v){os.call(this,prx(v,true))},get:function(){return unproxy(this.getAttribute(\"data\"))},configurable:1});\n }\n }\n \n return e;\n};\n\n// ===== setAttribute =====\nvar SA=Element.prototype.setAttribute;\nElement.prototype.setAttribute=function(n,v){\n var nl=n.toLowerCase();\n if(nl===\"href\"&&this.tagName===\"A\"){\n SA.call(this,\"data-_h\",v);\n v=prx(v);\n }else if(nl===\"src\"||nl===\"href\"||nl===\"action\"||nl===\"formaction\"||nl===\"data\"||nl===\"poster\"||nl===\"background\"){\n v=prx(v,nl!==\"action\"&&nl!==\"formaction\"&&!(nl===\"href\"&&this.tagName===\"A\"));\n }else if(nl===\"srcset\"){\n v=v.split(\",\").map(function(p){var ps=p.trim().split(/\\\\s+/);if(ps[0])ps[0]=prx(ps[0],true);return ps.join(\" \")}).join(\", \");\n }\n return SA.call(this,n,v);\n};\n\n// ===== getAttribute =====\nvar GA=Element.prototype.getAttribute;\nElement.prototype.getAttribute=function(n){\n var nl=n.toLowerCase();\n var v=GA.apply(this,arguments);\n if(nl===\"href\"){\n if(this.tagName===\"A\"){\n var dh=GA.call(this,\"data-_h\");\n if(dh)return dh;\n }\n return unproxy(v);\n }\n if(nl===\"src\"||nl===\"action\"||nl===\"data\"||nl===\"poster\"){\n return unproxy(v);\n }\n return v;\n};\n\n// ===== Click handler =====\ndocument.addEventListener(\"click\",function(e){\n var a=e.target.closest&&e.target.closest(\"a[href]\");\n if(!a)return;\n var h=a.getAttribute(\"data-_h\")||unproxy(a.getAttribute(\"href\"));\n if(!h||h[0]===\"#\"||/^javascript:/.test(h))return;\n if(a.target===\"_blank\"||e.ctrlKey||e.metaKey||e.shiftKey||e.button===1){\n e.preventDefault();e.stopPropagation();e.stopImmediatePropagation();\n msg({t:\"open\",u:abs(h)});\n }\n},true);\n\n// ===== Form submit =====\ndocument.addEventListener(\"submit\",function(e){\n var f=e.target;\n if(f&&f.target===\"_blank\"){\n e.preventDefault();\n msg({t:\"open\",u:abs(f.action||B)});\n }\n},true);\n\n// ===== MutationObserver =====\nvar MO=window.MutationObserver||window.WebKitMutationObserver;\nif(MO){\n var pending=new Set();\n var process=function(n){\n if(n.nodeType!==1||pending.has(n))return;\n pending.add(n);\n var tag=n.tagName;\n if(!tag)return;\n \n var srcAttr=n.getAttribute(\"src\");\n if(srcAttr&&!srcAttr.includes(\"?_=\")&&!srcAttr.startsWith(\"data:\")&&!srcAttr.startsWith(\"blob:\")){\n n.setAttribute(\"src\",prx(srcAttr,tag!==\"IFRAME\"&&tag!==\"FRAME\"));\n }\n \n if(tag!==\"A\"){\n var hrefAttr=n.getAttribute(\"href\");\n if(hrefAttr&&!hrefAttr.includes(\"?_=\")&&!hrefAttr.startsWith(\"data:\")&&!hrefAttr.startsWith(\"#\")){\n n.setAttribute(\"href\",prx(hrefAttr,true));\n }\n }\n \n if(tag===\"A\"&&!n.hasAttribute(\"data-_h\")){\n var href=n.getAttribute(\"href\");\n if(href&&href.includes(\"?_=\")){\n var real=unproxy(href);\n if(real!==href)n.setAttribute(\"data-_h\",real);\n }\n }\n \n pending.delete(n);\n };\n \n new MO(function(muts){\n muts.forEach(function(m){\n m.addedNodes.forEach(function(n){\n process(n);\n if(n.querySelectorAll){\n n.querySelectorAll(\"*\").forEach(process);\n }\n });\n });\n }).observe(document.documentElement||document.body||document,{childList:true,subtree:true});\n}\n\n// ===== Canvas fingerprint =====\n(function(){\n var rng=function(){return(Math.random()-0.5)*2};\n var o2d=CanvasRenderingContext2D.prototype.getImageData;\n CanvasRenderingContext2D.prototype.getImageData=function(){\n var d=o2d.apply(this,arguments);\n for(var i=0;i\n\n\n\n\nShadow\n🔮\">\n\n\n\n

\n \n \n \n

\n ○\n \n

\n \n

🔮

Shadow

Unrestricted browsing

⚠️

Error

Failed

\n \n

Ready🛡️ Protected

\n\n\n`;\n}","deleted","label",[99],"permalink","https://www.val.town/x/omni/untitled-5388/code/main.ts","extension","actionData","errors"]