[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_256":257,"_258":259},"routes/_app.x.$handle.$name",{"_100":99,"_37":50,"_108":90,"_32":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_26":-5,"_120":-5,"_121":-5,"_122":30,"_123":124,"_125":126,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_37":50,"_43":51,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":30},"version",13,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","d35325cd-e54a-4467-b7b3-862454c83b6a","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":30},"previous","deleted",false,"deletedHere","path","frontend/disguises.js","latestPath","fileId","e671e90e-5b89-11f1-80bc-ee650bb23af1","name","disguises.js","fileType","script","content","// Tab disguise presets: title + favicon (as a data URL) per option.\n// Favicons are tiny inline SVGs so nothing external can break.\n\nfunction svgFavicon(emoji, bg) {\n const svg =\n ``;\n return \"data:image/svg+xml,\" + encodeURIComponent(svg);\n}\n\nexport const DISGUISES = {\n none: { title: \"about:blank\", icon: \"data:,\" },\n docs: { title: \"Untitled document - Google Docs\", icon: svgFavicon(\"📄\", \"#fff\") },\n classroom: { title: \"Classes\", icon: svgFavicon(\"🏫\", \"#0f9d58\") },\n drive: { title: \"My Drive - Google Drive\", icon: svgFavicon(\"📁\", \"#fff\") },\n gmail: { title: \"Inbox - Gmail\", icon: svgFavicon(\"✉️\", \"#ea4335\") },\n canvas: { title: \"Dashboard\", icon: svgFavicon(\"🎨\", \"#e13223\") },\n};\n","createdAt",["D",1780078325993],"branchVersion","branchId","7a817886-5b89-11f1-b23f-ee650bb23af1","id","7a80ac3a-5b89-11f1-b23f-ee650bb23af1","blank-proxy",["D",1780078144908],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Web proxy with about:blank cloaking and search","imageUrl","c0ee36c7-061a-4170-b606-a15ab716efbc","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e74ea-60f9-739d-bd03-bdb2d4f0fa23","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":103},"org",{"_100":99,"_101":99,"_102":103,"_19":60,"_104":105,"_106":30},"branch",{"_13":89,"_37":90,"_48":47,"_91":49,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":50,"_98":99},"isOwned",17,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","alexmxteix","handle","displayName","avatar","https://avatars.githubusercontent.com/u/271071564?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_37":50,"_43":252,"_52":-5,"_53":30,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":-5,"_62":30,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":253,"_84":254,"_86":255,"_88":30},"tree",[176,182,185,186],"files",[176,177,178,179,180,181,182,183,184,185,186],"counts",{"_166":66,"_167":139,"_168":156,"_169":170,"_171":172},"contents",[131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_48":160,"_37":161,"_35":162,"_138":-5,"_46":47,"_45":163,"_140":126,"_43":164,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_32":165},{"_48":153,"_37":154,"_35":155,"_138":-5,"_46":47,"_45":156,"_140":126,"_43":157,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_32":159},{"_48":146,"_37":147,"_35":148,"_138":-5,"_46":47,"_45":149,"_140":30,"_43":150,"_13":66,"_39":26,"_41":151,"_29":30,"_144":-5,"_32":152},{"_48":135,"_37":136,"_35":137,"_138":-5,"_46":47,"_45":139,"_140":126,"_43":141,"_13":66,"_39":142,"_41":143,"_29":30,"_144":-5,"_32":145},"7a84ff10-5b89-11f1-b23f-ee650bb23af1","main.ts","7a84ffe2-5b89-11f1-b23f-ee650bb23af1","parentId",1,"latest",["D",1780078144926],"http","import app from \"./server/app.ts\";\nexport default app.fetch;","label",[136],"b0523824-5b89-11f1-b646-ee650bb23af1","README.md","b05238d8-5b89-11f1-b646-ee650bb23af1",8,["D",1780078235189],"# 🔍 Portal — Blank Proxy\n\nA lightweight web proxy with **about:blank cloaking**. Type a search term or URL,\nand it opens the proxied site inside a fresh `about:blank` tab (so the address bar\nhides the real destination).\n\n## How it works\n\n```mermaid\nflowchart LR\n A[Homepage search box] -->|submit| B{Cloak on?}\n B -->|yes| C[Open about:blank tab]\n C --> D[Inject full-page iframe]\n B -->|no| E[Navigate directly]\n D --> F[\"/go?q=…\"]\n E --> F\n F -->|normalize input| G[\"/p/<encoded url>\"]\n G --> H[Server fetches target]\n H --> I[Rewrite HTML/CSS links back through proxy]\n I --> J[Serve to browser]\n```\n\n- **Search vs URL:** input that looks like a domain/URL is fetched directly;\n anything else is run as a **DuckDuckGo** search through the proxy.\n- **Rewriting:** `href`/`src`/`action`/`srcset`/`url(...)` are rewritten so clicks\n and assets keep routing through `/p/`. A `` tag catches the rest.\n- **Header stripping:** CSP / X-Frame-Options are removed so pages render in the\n cloaked iframe.\n\n## Files\n\n| File | Purpose |\n| --- | --- |\n| `main.ts` | HTTP entrypoint |\n| `server/app.ts` | Hono routes: homepage, `/go`, `/p/*`, static, `/source` |\n| `server/proxy.ts` | Fetch + HTML/CSS rewriting logic |\n| `frontend/index.html` | Search homepage |\n| `frontend/main.js` | Form handling + about:blank cloaking |\n\n## ⚠️ Limitations\n\nThis is a **server-side HTML-rewriting proxy**, not a full engine like\nUltraviolet/Rammerhead. It works well for simple/static sites and reading. It will\nstruggle with heavy JS apps, logins, video streaming, and strict anti-bot sites,\nwhich is expected given Val Town's serverless execution limits.\n",[147],"8a99a068-5b89-11f1-9ba0-ee650bb23af1","server","f66e6981-5efb-424e-bf00-6c73153f516e",2,["D",1780078171896],"directory",[154],"9721eebc-5b89-11f1-b95b-ee650bb23af1","frontend","c503de95-a41f-461a-8e88-b5e9a26f2125",4,["D",1780078192931],[161],"pulls","branches","forks","envVars",{"_173":66,"_175":66},"connections",{"_173":66,"_174":66},"count","unfilledCount","emptyCount",{"_48":160,"_37":161,"_35":162,"_138":-5,"_46":47,"_45":163,"_140":126,"_43":249,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_188":250,"_32":251},{"_48":245,"_37":38,"_35":36,"_138":162,"_46":47,"_45":14,"_140":126,"_43":246,"_13":66,"_39":40,"_41":42,"_29":30,"_144":-5,"_188":247,"_32":248},{"_48":237,"_37":238,"_35":239,"_138":162,"_46":47,"_45":240,"_140":126,"_43":241,"_13":139,"_39":26,"_41":242,"_29":30,"_144":-5,"_188":243,"_32":244},{"_48":229,"_37":230,"_35":231,"_138":162,"_46":47,"_45":232,"_140":30,"_43":233,"_13":66,"_39":40,"_41":234,"_29":30,"_144":-5,"_188":235,"_32":236},{"_48":221,"_37":222,"_35":223,"_138":162,"_46":47,"_45":224,"_140":126,"_43":225,"_13":66,"_39":26,"_41":226,"_29":30,"_144":-5,"_188":227,"_32":228},{"_48":213,"_37":214,"_35":215,"_138":162,"_46":47,"_45":216,"_140":126,"_43":217,"_13":66,"_39":40,"_41":218,"_29":30,"_144":-5,"_188":219,"_32":220},{"_48":153,"_37":154,"_35":155,"_138":-5,"_46":47,"_45":156,"_140":126,"_43":210,"_13":66,"_39":158,"_41":-5,"_29":30,"_144":-5,"_188":211,"_32":212},{"_48":201,"_37":202,"_35":203,"_138":155,"_46":47,"_45":204,"_140":30,"_43":205,"_13":206,"_39":40,"_41":207,"_29":30,"_144":-5,"_188":208,"_32":209},{"_48":194,"_37":195,"_35":196,"_138":155,"_46":47,"_45":156,"_140":30,"_43":197,"_13":66,"_39":40,"_41":198,"_29":30,"_144":-5,"_188":199,"_32":200},{"_48":146,"_37":147,"_35":148,"_138":-5,"_46":47,"_45":149,"_140":30,"_43":191,"_13":66,"_39":26,"_41":151,"_29":30,"_144":-5,"_188":192,"_32":193},{"_48":135,"_37":136,"_35":137,"_138":-5,"_46":47,"_45":139,"_140":126,"_43":187,"_13":66,"_39":142,"_41":143,"_29":30,"_144":-5,"_188":189,"_32":190},["D",1780078144926],"children",[],[136],["D",1780078235189],[],[147],"8a9972f0-5b89-11f1-9ba0-ee650bb23af1","proxy.ts","8a9973d6-5b89-11f1-9ba0-ee650bb23af1",["D",1780078171896],"// Core proxy logic: fetch a target URL and rewrite its HTML/CSS so that\n// links, assets, and forms route back through this proxy.\n\nconst PROXY_PREFIX = \"/p/\";\n\n/** Turn user input into a real URL. If it's not a URL, treat it as a search. */\nexport function normalizeTarget(input: string): string {\n const raw = input.trim();\n if (!raw) return \"\";\n // Looks like a domain or URL?\n const looksLikeUrl = /^https?:\\/\\//i.test(raw) ||\n /^[^\\s]+\\.[a-z]{2,}(\\/|$|\\?)/i.test(raw);\n if (looksLikeUrl) {\n return /^https?:\\/\\//i.test(raw) ? raw : `https://${raw}`;\n }\n // Otherwise, search via DuckDuckGo HTML (lightweight, proxy-friendly)\n return `https://duckduckgo.com/html/?q=${encodeURIComponent(raw)}`;\n}\n\n/** Encode a target URL into a proxied path. */\nexport function toProxyPath(targetUrl: string): string {\n return PROXY_PREFIX + encodeURIComponent(targetUrl);\n}\n\n/** Resolve a (possibly relative) URL against a base into an absolute URL. */\nfunction absolutize(base: string, ref: string): string | null {\n try {\n if (!ref || ref.startsWith(\"data:\") || ref.startsWith(\"javascript:\") ||\n ref.startsWith(\"mailto:\") || ref.startsWith(\"#\") || ref.startsWith(\"about:\")) {\n return null;\n }\n return new URL(ref, base).toString();\n } catch {\n return null;\n }\n}\n\n/** Rewrite an absolute URL into a proxied path. */\nfunction rewriteUrl(base: string, ref: string): string {\n const abs = absolutize(base, ref);\n if (!abs) return ref;\n return toProxyPath(abs);\n}\n\n/** Rewrite all URL-bearing attributes and embedded CSS in an HTML document. */\nexport function rewriteHtml(html: string, base: string): string {\n let out = html;\n\n // Strip CSP / frame-busting meta tags that block proxying\n out = out.replace(/]+http-equiv=[\"']?content-security-policy[\"']?[^>]*>/gi, \"\");\n out = out.replace(/]+http-equiv=[\"']?x-frame-options[\"']?[^>]*>/gi, \"\");\n\n // Rewrite href/src/action attributes\n out = out.replace(\n /\\b(href|src|action|poster|data-src)\\s*=\\s*[\"']([^\"']*)[\"']/gi,\n (m, attr, val) => `${attr}=\"${rewriteUrl(base, val)}\"`,\n );\n\n // Rewrite srcset (comma-separated list of URLs + descriptors)\n out = out.replace(/\\bsrcset\\s*=\\s*[\"']([^\"']*)[\"']/gi, (m, val) => {\n const rewritten = val\n .split(\",\")\n .map((part: string) => {\n const seg = part.trim();\n const [url, ...rest] = seg.split(/\\s+/);\n return [rewriteUrl(base, url), ...rest].join(\" \");\n })\n .join(\", \");\n return `srcset=\"${rewritten}\"`;\n });\n\n // Rewrite url(...) inside inline

Diff · v13