[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_102":103,"_104":105},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","testsprivacy","name","tracker-domain","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/testsprivacy/tracker-domain/code/main.ts","extension","id","608e794a-c73f-4698-891e-746035d61124","fileId","7396bd76-8cce-11f1-9cd1-1607ee4eb77e","parentId","branchId","7a56f297-e5e3-4bf8-9830-a3fcf4613428","branchVersion",5,"latest",true,"createdAt",["D",1787309849991],"version",4,"fileType","http","content","// Tracker Detection demo — the demo tracker domain (host on its own domain).\n// Embedded by tracker-site-1/2/3.ts two ways at once:\n//\n// \n \n\n`;\n\n// Top-level page: reports this domain's UNPARTITIONED localStorage back to the\n// landing page as a query param.\nconst helperHtml = `\n\n\n \n \n \n Read Tracker Data\n \n \n \n

Reading tracker data and returning to the landing page…

\n \n \n\n`;\n\n// Collector page that visits all sites and collects iframe data via postMessage\nconst collectHtml = `\n\n\n \n \n \n Collecting Tracker Data\n \n \n

Collecting tracker data from all sites...

Initializing...

\n\n \n \n\n`;\n\nconst indexHtml = `\n\n\n \n \n \n Demo Tracker Domain\n \n \n

Tracker Detection Demo — Demo Tracker Domain

This domain plays the tracker. Open the landing page instead.

/tracker.js?site=N — script embedded by the test sites (writes first-party storage)
/frame?site=N — iframe embedded by the test sites (writes this domain's storage)
/helper?return_url=... — reports this domain's storage back as ?tracker_data=
/collect?sites=...&return=... — collects iframe data from all sites via postMessage

\n \n\n`;\n\n// Escape for embedding inside a double-quoted JS string literal in the page.\nfunction jsString(value: string): string {\n return value\n .replace(/\\\\/g, \"\\\\\\\\\")\n .replace(/\"/g, '\\\\\"')\n .replace(/ 0 &&\n !ALLOWED_RETURN_ORIGINS.includes(parsed.origin)\n ) {\n return DEFAULT_RETURN_URL;\n }\n return parsed.toString();\n}\n\n// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/tracker.js\") {\n const body = trackerJs\n .replace(\"__STORAGE_KEY__\", jsString(STORAGE_KEY))\n .replace(\"__SITE__\", jsString(siteLabel(url)));\n\n return new Response(body, {\n headers: {\n \"content-type\": \"application/javascript; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (url.pathname === \"/frame\") {\n const body = frameHtml\n .replace(\"__STORAGE_KEY__\", jsString(STORAGE_KEY))\n .replace(\"__SITE__\", jsString(siteLabel(url)));\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (url.pathname === \"/helper\") {\n const body = helperHtml\n .replace(\"__NEXT_URL__\", jsString(resolveReturnUrl(url)))\n .replace(\"__STORAGE_KEY__\", jsString(STORAGE_KEY));\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (url.pathname === \"/collect\") {\n // Parse sites from query params\n const sitesParam = url.searchParams.get(\"sites\");\n const returnUrl = url.searchParams.get(\"return_url\") || DEFAULT_RETURN_URL;\n\n // Default to all 3 sites if not specified\n const sites = sitesParam\n ? sitesParam.split(\",\").map((s) => s.trim())\n : [\"site-1\", \"site-2\", \"site-3\"];\n\n const body = collectHtml\n .replace(\"__SITES__\", JSON.stringify(sites))\n .replace(\"__RETURN_URL__\", jsString(returnUrl))\n .replace(\"__TRACKER_DOMAIN__\", jsString(url.origin));\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n }\n\n if (url.pathname === \"/\") {\n return new Response(indexHtml, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","deleted",false,"label",[14],"0b6d043b-8479-4163-96fa-60dc45fa598e",["D",1785495375539],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","99e6832d-c31c-4461-8b4f-4d1fadfb6895","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019fb284-817a-754d-b95e-3ff8e28b627c","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_101":97},"org",{"_9":10,"_94":95,"_96":97,"_55":56,"_98":99,"_100":42},"branch",{"_35":30,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Test","avatar","https://lh3.googleusercontent.com/a/ACg8ocIHl3Yn6Vurlt9n6hZMwUdwDHC_K2jf2v6RGL15sVQnrE-wsA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_135":136,"_137":138,"_139":140,"_141":42,"_142":42,"_143":42,"_144":32,"_145":-5,"_146":-7,"_147":-7,"_148":62,"_149":42,"_150":42,"_151":-5,"_152":42,"_153":42,"_154":42,"_155":-5},"ENV",{"_106":107,"_108":109,"_110":85,"_111":112,"_113":114,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]