🔍

Portal

Search or enter a URL. Opens in a cloaked tab.

\n\n

\n\n \n\n\n",1,"c503de95-a41f-461a-8e88-b5e9a26f2125",["D",1780078317591],"branchVersion","label",[160,65],"frontend","pulls","branches","forks",2,"envVars",{"_169":26,"_171":26},"connections",{"_169":26,"_170":26},"count","unfilledCount","emptyCount",{"_33":259,"_13":160,"_63":155,"_43":-5,"_35":36,"_157":40,"_186":146,"_37":260,"_39":26,"_66":221,"_152":-5,"_67":24,"_158":-5,"_190":261,"_17":262},{"_33":251,"_13":252,"_63":253,"_43":155,"_35":36,"_157":254,"_186":146,"_37":255,"_39":26,"_66":206,"_152":256,"_67":24,"_158":-5,"_190":257,"_17":258},{"_33":151,"_13":65,"_63":64,"_43":155,"_35":36,"_157":73,"_186":146,"_37":248,"_39":154,"_66":21,"_152":153,"_67":24,"_158":-5,"_190":249,"_17":250},{"_33":240,"_13":241,"_63":242,"_43":155,"_35":36,"_157":243,"_186":146,"_37":244,"_39":154,"_66":206,"_152":245,"_67":24,"_158":-5,"_190":246,"_17":247},{"_33":232,"_13":233,"_63":234,"_43":155,"_35":36,"_157":235,"_186":146,"_37":236,"_39":26,"_66":21,"_152":237,"_67":24,"_158":-5,"_190":238,"_17":239},{"_33":224,"_13":225,"_63":226,"_43":155,"_35":36,"_157":227,"_186":146,"_37":228,"_39":26,"_66":206,"_152":229,"_67":24,"_158":-5,"_190":230,"_17":231},{"_33":219,"_13":210,"_63":203,"_43":-5,"_35":36,"_157":164,"_186":146,"_37":220,"_39":26,"_66":221,"_152":-5,"_67":24,"_158":-5,"_190":222,"_17":223},{"_33":211,"_13":212,"_63":213,"_43":203,"_35":36,"_157":214,"_186":146,"_37":215,"_39":40,"_66":206,"_152":216,"_67":24,"_158":-5,"_190":217,"_17":218},{"_33":200,"_13":201,"_63":202,"_43":203,"_35":36,"_157":204,"_186":146,"_37":205,"_39":154,"_66":206,"_152":207,"_67":24,"_158":-5,"_190":208,"_17":209},{"_33":193,"_13":194,"_63":195,"_43":-5,"_35":36,"_157":115,"_186":146,"_37":196,"_39":154,"_66":21,"_152":197,"_67":24,"_158":-5,"_190":198,"_17":199},{"_33":183,"_13":184,"_63":185,"_43":-5,"_35":36,"_157":154,"_186":146,"_37":187,"_39":26,"_66":188,"_152":189,"_67":24,"_158":-5,"_190":191,"_17":192},"7a84ff10-5b89-11f1-b23f-ee650bb23af1","main.ts","7a84ffe2-5b89-11f1-b23f-ee650bb23af1","latest",["D",1780078144926],"http","import app from \"./server/app.ts\";\nexport default app.fetch;","children",[],[184],"042117c2-5b8a-11f1-b779-ee650bb23af1","README.md","b05238d8-5b89-11f1-b646-ee650bb23af1",["D",1780078375790],"# 🔍 Portal — Blank Proxy\n\nA lightweight web proxy with **about:blank cloaking**, an in-tab navigation bar,\ntab disguises, and a panic key. Type a search term or URL, and it opens the\nproxied site inside a fresh `about:blank` tab.\n\n## Features\n\n- **about:blank cloaking** — proxied sites open in a blank tab so the real\n destination is hidden from the address bar.\n- **In-tab navigation bar** — back / forward / reload / home, a URL bar to keep\n browsing without returning to the homepage, and `Esc` to toggle full-screen.\n- **Tab disguises** — make the tab look like Google Docs, Classroom, Drive,\n Gmail, or Canvas (custom title + favicon).\n- **Panic key** — press a chosen key anytime to instantly jump to a safe URL.\n- **Search engines** — DuckDuckGo, Bing, or Google.\n- **Settings persistence** — preferences saved in `localStorage`.\n\n## How it works\n\n```mermaid\nflowchart LR\n A[Homepage] -->|submit| B{Cloak on?}\n B -->|yes| C[Open about:blank tab]\n C --> D[Disguised shell + iframe → /view]\n B -->|no| E[Navigate to /go]\n D --> F[\"/view (toolbar + iframe)\"]\n F --> G[\"/go?q=…&e=engine\"]\n E --> G\n G -->|normalize input| H[\"/p/<encoded url>\"]\n H --> I[Server fetches target]\n I --> J[Rewrite HTML/CSS links back through proxy]\n J --> K[Serve to browser]\n```\n\n## Files\n\n| File | Purpose |\n| --- | --- |\n| `main.ts` | HTTP entrypoint |\n| `server/app.ts` | Hono routes: `/`, `/view`, `/go`, `/p/*`, static, `/source` |\n| `server/proxy.ts` | Fetch + HTML/CSS rewriting, search-engine normalization |\n| `frontend/index.html` | Homepage with search + settings |\n| `frontend/main.js` | Cloaking, disguise, engine, panic key, settings |\n| `frontend/disguises.js` | Tab disguise presets (title + inline-SVG favicon) |\n| `frontend/viewer.html` | In-tab browser shell (toolbar + iframe) |\n| `frontend/viewer.js` | Toolbar logic: URL bar, nav buttons, bar toggle |\n\n## ⚠️ Limitations\n\nThis is a **server-side HTML-rewriting proxy**, not a full engine like\nUltraviolet/Rammerhead. It works well for simple/static sites and reading. It will\nstruggle with heavy JS apps, logins, video streaming, and strict anti-bot sites,\nwhich is expected given Val Town's serverless execution limits.\n",[],[194],"f37f8f5c-5b89-11f1-a69c-ee650bb23af1","proxy.ts","8a9973d6-5b89-11f1-9ba0-ee650bb23af1","f66e6981-5efb-424e-bf00-6c73153f516e",15,["D",1780078347891],"script","// Core proxy logic: fetch a target URL and rewrite its HTML/CSS so that\n// links, assets, and forms route back through this proxy.\n\nconst PROXY_PREFIX = \"/p/\";\n\nconst SEARCH_ENGINES: Record string> = {\n duckduckgo: (q) => `https://duckduckgo.com/html/?q=${encodeURIComponent(q)}`,\n bing: (q) => `https://www.bing.com/search?q=${encodeURIComponent(q)}`,\n google: (q) => `https://www.google.com/search?q=${encodeURIComponent(q)}`,\n};\n\n/** Turn user input into a real URL. If it's not a URL, treat it as a search. */\nexport function normalizeTarget(input: string, engine = \"duckduckgo\"): string {\n const raw = input.trim();\n if (!raw) return \"\";\n // Looks like a domain or URL?\n const looksLikeUrl = /^https?:\\/\\//i.test(raw) ||\n /^[^\\s]+\\.[a-z]{2,}(\\/|$|\\?)/i.test(raw);\n if (looksLikeUrl) {\n return /^https?:\\/\\//i.test(raw) ? raw : `https://${raw}`;\n }\n // Otherwise, run a search through the chosen engine\n const search = SEARCH_ENGINES[engine] ?? SEARCH_ENGINES.duckduckgo;\n return search(raw);\n}\n\n/** Encode a target URL into a proxied path. */\nexport function toProxyPath(targetUrl: string): string {\n return PROXY_PREFIX + encodeURIComponent(targetUrl);\n}\n\n/** Resolve a (possibly relative) URL against a base into an absolute URL. */\nfunction absolutize(base: string, ref: string): string | null {\n try {\n if (!ref || ref.startsWith(\"data:\") || ref.startsWith(\"javascript:\") ||\n ref.startsWith(\"mailto:\") || ref.startsWith(\"#\") || ref.startsWith(\"about:\")) {\n return null;\n }\n return new URL(ref, base).toString();\n } catch {\n return null;\n }\n}\n\n/** Rewrite an absolute URL into a proxied path. */\nfunction rewriteUrl(base: string, ref: string): string {\n const abs = absolutize(base, ref);\n if (!abs) return ref;\n return toProxyPath(abs);\n}\n\n/** Rewrite all URL-bearing attributes and embedded CSS in an HTML document. */\nexport function rewriteHtml(html: string, base: string): string {\n let out = html;\n\n // Strip CSP / frame-busting meta tags that block proxying\n out = out.replace(/]+http-equiv=[\"']?content-security-policy[\"']?[^>]*>/gi, \"\");\n out = out.replace(/]+http-equiv=[\"']?x-frame-options[\"']?[^>]*>/gi, \"\");\n\n // Rewrite href/src/action attributes\n out = out.replace(\n /\\b(href|src|action|poster|data-src)\\s*=\\s*[\"']([^\"']*)[\"']/gi,\n (m, attr, val) => `${attr}=\"${rewriteUrl(base, val)}\"`,\n );\n\n // Rewrite srcset (comma-separated list of URLs + descriptors)\n out = out.replace(/\\bsrcset\\s*=\\s*[\"']([^\"']*)[\"']/gi, (m, val) => {\n const rewritten = val\n .split(\",\")\n .map((part: string) => {\n const seg = part.trim();\n const [url, ...rest] = seg.split(/\\s+/);\n return [rewriteUrl(base, url), ...rest].join(\" \");\n })\n .join(\", \");\n return `srcset=\"${rewritten}\"`;\n });\n\n // Rewrite url(...) inside inline ` +\n ``\n );\n doc.close();\n}\n\nform.addEventListener(\"submit\", (e) => {\n e.preventDefault();\n const q = input.value.trim();\n if (!q) return;\n if (cloak.checked) {\n openCloaked(q);\n input.value = \"\";\n } else {\n location.href = entryPath(q);\n }\n});\n\n// ---- Panic key: jump to a safe URL instantly ----\nwindow.addEventListener(\"keydown\", (e) => {\n const key = (panicKey.value || \"`\").toLowerCase();\n // Ignore when typing into a text field (so you can type the key normally)\n const typing = document.activeElement &&\n [\"INPUT\", \"TEXTAREA\", \"SELECT\"].includes(document.activeElement.tagName);\n if (!typing && e.key.toLowerCase() === key) {\n e.preventDefault();\n location.replace(panicUrl.value || \"https://classroom.google.com\");\n }\n});\n",[],[160,241],["D",1780078317591],[],[160,65],"e671e86e-5b89-11f1-80bc-ee650bb23af1","disguises.js","e671e90e-5b89-11f1-80bc-ee650bb23af1",13,["D",1780078325993],"// Tab disguise presets: title + favicon (as a data URL) per option.\n// Favicons are tiny inline SVGs so nothing external can break.\n\nfunction svgFavicon(emoji, bg) {\n const svg =\n ``;\n return \"data:image/svg+xml,\" + encodeURIComponent(svg);\n}\n\nexport const DISGUISES = {\n none: { title: \"about:blank\", icon: \"data:,\" },\n docs: { title: \"Untitled document - Google Docs\", icon: svgFavicon(\"📄\", \"#fff\") },\n classroom: { title: \"Classes\", icon: svgFavicon(\"🏫\", \"#0f9d58\") },\n drive: { title: \"My Drive - Google Drive\", icon: svgFavicon(\"📁\", \"#fff\") },\n gmail: { title: \"Inbox - Gmail\", icon: svgFavicon(\"✉️\", \"#ea4335\") },\n canvas: { title: \"Dashboard\", icon: svgFavicon(\"🎨\", \"#e13223\") },\n};\n",[],[160,252],"9721eebc-5b89-11f1-b95b-ee650bb23af1",["D",1780078192931],[173,174,175,176,177],[160],["D",1780078144908],{"_11":12,"_128":70},{"_11":12,"_124":12,"_69":70,"_30":68,"_125":126,"_127":24},{"_39":115,"_13":16,"_33":36,"_116":81,"_117":-5,"_118":-5,"_119":-5,"_120":-5,"_121":-5,"_122":14,"_123":12},"ctx",{"_53":-5,"_148":300,"_301":302,"_303":304,"_305":24,"_306":24,"_307":24,"_308":146,"_309":-5,"_310":-7,"_311":-7,"_312":26,"_313":24,"_314":24,"_315":-5,"_316":24,"_317":24,"_318":24,"_319":-5},"ENV",{"_271":272,"_273":274,"_275":16,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · index.html