[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_245":246,"_247":248},"routes/_app.x.$handle.$name",{"_100":99,"_37":50,"_108":90,"_32":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_26":-5,"_120":-5,"_121":-5,"_122":30,"_123":124,"_125":126,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_37":50,"_43":51,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":30},"version",10,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","d35325cd-e54a-4467-b7b3-862454c83b6a","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":30},"previous","deleted",false,"deletedHere","path","frontend/viewer.js","latestPath","fileId","d3938414-5b89-11f1-a69c-ee650bb23af1","name","viewer.js","fileType","script","content","// Viewer toolbar logic: URL bar, back/forward/reload, home, bar toggle.\n\nconst frame = document.getElementById(\"frame\");\nconst addr = document.getElementById(\"addr\");\nconst navForm = document.getElementById(\"navForm\");\nconst bar = document.getElementById(\"bar\");\n\nconst params = new URLSearchParams(location.search);\nconst initialTarget = params.get(\"u\") || \"\";\n\n/** Load a proxied path into the iframe. */\nfunction load(proxiedPath) {\n frame.src = proxiedPath;\n}\n\n// Initial load — `u` is the already-proxied path (/p/)\nif (initialTarget) {\n load(initialTarget);\n addr.value = decodeProxied(initialTarget);\n}\n\n/** Pull the human-readable URL out of a /p/ path. */\nfunction decodeProxied(path) {\n const m = path.match(/^\\/p\\/(.+)$/);\n if (!m) return path;\n try {\n return decodeURIComponent(m[1]);\n } catch {\n return m[1];\n }\n}\n\n// Navigate from the address bar\nnavForm.addEventListener(\"submit\", (e) => {\n e.preventDefault();\n const q = addr.value.trim();\n if (!q) return;\n // Route through /go which normalizes URL-vs-search, then lands on /p/...\n load(\"/go?q=\" + encodeURIComponent(q));\n});\n\n// Reflect iframe navigation back into the address bar\nframe.addEventListener(\"load\", () => {\n try {\n const src = frame.contentWindow.location.pathname +\n frame.contentWindow.location.search;\n if (src.startsWith(\"/p/\")) addr.value = decodeProxied(src);\n } catch {\n // Cross-origin guard — ignore\n }\n});\n\n// Toolbar buttons\ndocument.getElementById(\"back\").onclick = () => history.back();\ndocument.getElementById(\"fwd\").onclick = () => history.forward();\ndocument.getElementById(\"reload\").onclick = () => frame.contentWindow.location.reload();\ndocument.getElementById(\"home\").onclick = () => { location.href = \"/\"; };\n\n// Toggle the toolbar (full-screen reading)\nconst full = document.getElementById(\"full\");\nfunction toggleBar() {\n const hidden = bar.style.display === \"none\";\n bar.style.display = hidden ? \"flex\" : \"none\";\n frame.style.top = hidden ? \"3rem\" : \"0\";\n frame.style.height = hidden ? \"calc(100% - 3rem)\" : \"100%\";\n}\nfull.onclick = toggleBar;\nwindow.addEventListener(\"keydown\", (e) => {\n if (e.key === \"Escape\") toggleBar();\n});\n","createdAt",["D",1780078294338],"branchVersion","branchId","7a817886-5b89-11f1-b23f-ee650bb23af1","id","7a80ac3a-5b89-11f1-b23f-ee650bb23af1","blank-proxy",["D",1780078144908],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Web proxy with about:blank cloaking and search","imageUrl","c0ee36c7-061a-4170-b606-a15ab716efbc","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e74ea-60f9-739d-bd03-bdb2d4f0fa23","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":103},"org",{"_100":99,"_101":99,"_102":103,"_19":60,"_104":105,"_106":30},"branch",{"_13":89,"_37":90,"_48":47,"_91":49,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":50,"_98":99},"isOwned",17,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","alexmxteix","handle","displayName","avatar","https://avatars.githubusercontent.com/u/271071564?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_37":50,"_43":241,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":242,"_84":243,"_86":244,"_88":30},"tree",[176,181,184,185],"files",[176,177,178,179,180,181,182,183,184,185],"counts",{"_166":66,"_167":139,"_168":156,"_169":170,"_171":172},"contents",[131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_48":160,"_37":161,"_35":162,"_138":-5,"_46":47,"_45":163,"_140":126,"_43":164,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_32":165},{"_48":153,"_37":154,"_35":155,"_138":-5,"_46":47,"_45":156,"_140":126,"_43":157,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_32":159},{"_48":146,"_37":147,"_35":148,"_138":-5,"_46":47,"_45":149,"_140":30,"_43":150,"_13":66,"_39":26,"_41":151,"_29":30,"_144":-5,"_32":152},{"_48":135,"_37":136,"_35":137,"_138":-5,"_46":47,"_45":139,"_140":126,"_43":141,"_13":66,"_39":142,"_41":143,"_29":30,"_144":-5,"_32":145},"7a84ff10-5b89-11f1-b23f-ee650bb23af1","main.ts","7a84ffe2-5b89-11f1-b23f-ee650bb23af1","parentId",1,"latest",["D",1780078144926],"http","import app from \"./server/app.ts\";\nexport default app.fetch;","label",[136],"b0523824-5b89-11f1-b646-ee650bb23af1","README.md","b05238d8-5b89-11f1-b646-ee650bb23af1",8,["D",1780078235189],"# 🔍 Portal — Blank Proxy\n\nA lightweight web proxy with **about:blank cloaking**. Type a search term or URL,\nand it opens the proxied site inside a fresh `about:blank` tab (so the address bar\nhides the real destination).\n\n## How it works\n\n```mermaid\nflowchart LR\n A[Homepage search box] -->|submit| B{Cloak on?}\n B -->|yes| C[Open about:blank tab]\n C --> D[Inject full-page iframe]\n B -->|no| E[Navigate directly]\n D --> F[\"/go?q=…\"]\n E --> F\n F -->|normalize input| G[\"/p/<encoded url>\"]\n G --> H[Server fetches target]\n H --> I[Rewrite HTML/CSS links back through proxy]\n I --> J[Serve to browser]\n```\n\n- **Search vs URL:** input that looks like a domain/URL is fetched directly;\n anything else is run as a **DuckDuckGo** search through the proxy.\n- **Rewriting:** `href`/`src`/`action`/`srcset`/`url(...)` are rewritten so clicks\n and assets keep routing through `/p/`. A `` tag catches the rest.\n- **Header stripping:** CSP / X-Frame-Options are removed so pages render in the\n cloaked iframe.\n\n## Files\n\n| File | Purpose |\n| --- | --- |\n| `main.ts` | HTTP entrypoint |\n| `server/app.ts` | Hono routes: homepage, `/go`, `/p/*`, static, `/source` |\n| `server/proxy.ts` | Fetch + HTML/CSS rewriting logic |\n| `frontend/index.html` | Search homepage |\n| `frontend/main.js` | Form handling + about:blank cloaking |\n\n## ⚠️ Limitations\n\nThis is a **server-side HTML-rewriting proxy**, not a full engine like\nUltraviolet/Rammerhead. It works well for simple/static sites and reading. It will\nstruggle with heavy JS apps, logins, video streaming, and strict anti-bot sites,\nwhich is expected given Val Town's serverless execution limits.\n",[147],"8a99a068-5b89-11f1-9ba0-ee650bb23af1","server","f66e6981-5efb-424e-bf00-6c73153f516e",2,["D",1780078171896],"directory",[154],"9721eebc-5b89-11f1-b95b-ee650bb23af1","frontend","c503de95-a41f-461a-8e88-b5e9a26f2125",4,["D",1780078192931],[161],"pulls","branches","forks","envVars",{"_173":66,"_175":66},"connections",{"_173":66,"_174":66},"count","unfilledCount","emptyCount",{"_48":160,"_37":161,"_35":162,"_138":-5,"_46":47,"_45":163,"_140":126,"_43":238,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_187":239,"_32":240},{"_48":231,"_37":232,"_35":233,"_138":162,"_46":47,"_45":163,"_140":30,"_43":234,"_13":66,"_39":26,"_41":235,"_29":30,"_144":-5,"_187":236,"_32":237},{"_48":223,"_37":224,"_35":225,"_138":162,"_46":47,"_45":226,"_140":30,"_43":227,"_13":66,"_39":40,"_41":228,"_29":30,"_144":-5,"_187":229,"_32":230},{"_48":215,"_37":216,"_35":217,"_138":162,"_46":47,"_45":218,"_140":126,"_43":219,"_13":66,"_39":26,"_41":220,"_29":30,"_144":-5,"_187":221,"_32":222},{"_48":211,"_37":38,"_35":36,"_138":162,"_46":47,"_45":14,"_140":126,"_43":212,"_13":66,"_39":40,"_41":42,"_29":30,"_144":-5,"_187":213,"_32":214},{"_48":153,"_37":154,"_35":155,"_138":-5,"_46":47,"_45":156,"_140":126,"_43":208,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_187":209,"_32":210},{"_48":200,"_37":201,"_35":202,"_138":155,"_46":47,"_45":203,"_140":30,"_43":204,"_13":156,"_39":40,"_41":205,"_29":30,"_144":-5,"_187":206,"_32":207},{"_48":193,"_37":194,"_35":195,"_138":155,"_46":47,"_45":156,"_140":30,"_43":196,"_13":66,"_39":40,"_41":197,"_29":30,"_144":-5,"_187":198,"_32":199},{"_48":146,"_37":147,"_35":148,"_138":-5,"_46":47,"_45":149,"_140":30,"_43":190,"_13":66,"_39":26,"_41":151,"_29":30,"_144":-5,"_187":191,"_32":192},{"_48":135,"_37":136,"_35":137,"_138":-5,"_46":47,"_45":139,"_140":126,"_43":186,"_13":66,"_39":142,"_41":143,"_29":30,"_144":-5,"_187":188,"_32":189},["D",1780078144926],"children",[],[136],["D",1780078235189],[],[147],"8a9972f0-5b89-11f1-9ba0-ee650bb23af1","proxy.ts","8a9973d6-5b89-11f1-9ba0-ee650bb23af1",["D",1780078171896],"// Core proxy logic: fetch a target URL and rewrite its HTML/CSS so that\n// links, assets, and forms route back through this proxy.\n\nconst PROXY_PREFIX = \"/p/\";\n\n/** Turn user input into a real URL. If it's not a URL, treat it as a search. */\nexport function normalizeTarget(input: string): string {\n const raw = input.trim();\n if (!raw) return \"\";\n // Looks like a domain or URL?\n const looksLikeUrl = /^https?:\\/\\//i.test(raw) ||\n /^[^\\s]+\\.[a-z]{2,}(\\/|$|\\?)/i.test(raw);\n if (looksLikeUrl) {\n return /^https?:\\/\\//i.test(raw) ? raw : `https://${raw}`;\n }\n // Otherwise, search via DuckDuckGo HTML (lightweight, proxy-friendly)\n return `https://duckduckgo.com/html/?q=${encodeURIComponent(raw)}`;\n}\n\n/** Encode a target URL into a proxied path. */\nexport function toProxyPath(targetUrl: string): string {\n return PROXY_PREFIX + encodeURIComponent(targetUrl);\n}\n\n/** Resolve a (possibly relative) URL against a base into an absolute URL. */\nfunction absolutize(base: string, ref: string): string | null {\n try {\n if (!ref || ref.startsWith(\"data:\") || ref.startsWith(\"javascript:\") ||\n ref.startsWith(\"mailto:\") || ref.startsWith(\"#\") || ref.startsWith(\"about:\")) {\n return null;\n }\n return new URL(ref, base).toString();\n } catch {\n return null;\n }\n}\n\n/** Rewrite an absolute URL into a proxied path. */\nfunction rewriteUrl(base: string, ref: string): string {\n const abs = absolutize(base, ref);\n if (!abs) return ref;\n return toProxyPath(abs);\n}\n\n/** Rewrite all URL-bearing attributes and embedded CSS in an HTML document. */\nexport function rewriteHtml(html: string, base: string): string {\n let out = html;\n\n // Strip CSP / frame-busting meta tags that block proxying\n out = out.replace(/]+http-equiv=[\"']?content-security-policy[\"']?[^>]*>/gi, \"\");\n out = out.replace(/]+http-equiv=[\"']?x-frame-options[\"']?[^>]*>/gi, \"\");\n\n // Rewrite href/src/action attributes\n out = out.replace(\n /\\b(href|src|action|poster|data-src)\\s*=\\s*[\"']([^\"']*)[\"']/gi,\n (m, attr, val) => `${attr}=\"${rewriteUrl(base, val)}\"`,\n );\n\n // Rewrite srcset (comma-separated list of URLs + descriptors)\n out = out.replace(/\\bsrcset\\s*=\\s*[\"']([^\"']*)[\"']/gi, (m, val) => {\n const rewritten = val\n .split(\",\")\n .map((part: string) => {\n const seg = part.trim();\n const [url, ...rest] = seg.split(/\\s+/);\n return [rewriteUrl(base, url), ...rest].join(\" \");\n })\n .join(\", \");\n return `srcset=\"${rewritten}\"`;\n });\n\n // Rewrite url(...) inside inline

Diff · v10