${preset.title}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_266":267,"_268":269},"routes/_app.x.$handle.$name",{"_107":106,"_38":52,"_116":93,"_33":117,"_13":14,"_118":-5,"_11":119,"_120":121,"_122":123,"_124":125,"_126":127,"_26":-5,"_128":129,"_130":131,"_132":31,"_133":134,"_135":66,"_136":-5,"_137":-5,"_138":139},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_50":51,"_38":52,"_45":53,"_54":-5,"_55":31,"_56":57,"_58":57,"_59":60,"_61":-5,"_19":62,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":70,"_71":72,"_73":-5,"_74":-5,"_75":-5,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":31},"version",3,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","967ee7a9-40c7-4791-bbd0-d641838c807b","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":44,"_45":46,"_47":14,"_48":49,"_30":31},"previous",{"_36":37,"_38":39,"_40":41,"_42":43},"deleted",false,"deletedHere","path","frontend/main.js","latestPath","fileId","01a04897-a6a1-74d7-9011-0d4d35bcc362","name","main.js","fileType","script","content","// Homepage logic: settings persistence, about:blank cloaking with disguise,\n// engine selection, and the panic key.\n\nimport { DISGUISES } from \"/frontend/disguises.js\";\n\nconst form = document.getElementById(\"searchForm\");\nconst input = document.getElementById(\"q\");\nconst cloak = document.getElementById(\"cloak\");\nconst disguise = document.getElementById(\"disguise\");\nconst engine = document.getElementById(\"engine\");\nconst panicKey = document.getElementById(\"panicKey\");\nconst panicUrl = document.getElementById(\"panicUrl\");\n\n// ---- Settings persistence ----\nconst SETTINGS_KEY = \"portal.settings\";\nfunction loadSettings() {\n try {\n const s = JSON.parse(localStorage.getItem(SETTINGS_KEY) || \"{}\");\n if (typeof s.cloak === \"boolean\") cloak.checked = s.cloak;\n if (s.disguise) disguise.value = s.disguise;\n if (s.engine) engine.value = s.engine;\n if (s.panicKey) panicKey.value = s.panicKey;\n if (s.panicUrl) panicUrl.value = s.panicUrl;\n } catch {}\n}\nfunction saveSettings() {\n const s = {\n cloak: cloak.checked,\n disguise: disguise.value,\n engine: engine.value,\n panicKey: panicKey.value,\n panicUrl: panicUrl.value,\n };\n localStorage.setItem(SETTINGS_KEY, JSON.stringify(s));\n}\n[cloak, disguise, engine, panicKey, panicUrl].forEach((el) =>\n el.addEventListener(\"change\", saveSettings)\n);\nloadSettings();\n\n// ---- Build the entry path (/go with engine hint) ----\nfunction entryPath(q) {\n const p = new URLSearchParams({ q });\n if (engine.value && engine.value !== \"duckduckgo\") p.set(\"e\", engine.value);\n return \"/go?\" + p.toString();\n}\n\n/** Open the viewer in a fresh about:blank tab, disguised. */\nfunction openCloaked(q) {\n const win = window.open(\"about:blank\", \"_blank\");\n if (!win) {\n // Popup blocked — fall back to direct navigation in this tab\n location.href = entryPath(q);\n return;\n }\n\n const preset = DISGUISES[disguise.value] || DISGUISES.none;\n const doc = win.document;\n doc.open();\n // Write a minimal shell that frames the viewer at full size.\n doc.write(\n `${preset.title}` +\n `` +\n `` +\n ``\n );\n doc.close();\n}\n\nform.addEventListener(\"submit\", (e) => {\n e.preventDefault();\n const q = input.value.trim();\n if (!q) return;\n if (cloak.checked) {\n openCloaked(q);\n input.value = \"\";\n } else {\n location.href = entryPath(q);\n }\n});\n\n// ---- Panic key: jump to a safe URL instantly ----\nwindow.addEventListener(\"keydown\", (e) => {\n const key = (panicKey.value || \"`\").toLowerCase();\n // Ignore when typing into a text field (so you can type the key normally)\n const typing = document.activeElement &&\n [\"INPUT\", \"TEXTAREA\", \"SELECT\"].includes(document.activeElement.tagName);\n if (!typing && e.key.toLowerCase() === key) {\n e.preventDefault();\n location.replace(panicUrl.value || \"https://classroom.google.com\");\n }\n});\n","// Homepage logic: settings persistence, about:blank cloaking with disguise,\n// engine selection, and the panic key.\n\nimport { DISGUISES } from \"/frontend/disguises.js\";\n\nconst form = document.getElementById(\"searchForm\");\nconst input = document.getElementById(\"q\");\nconst cloak = document.getElementById(\"cloak\");\nconst disguise = document.getElementById(\"disguise\");\nconst engine = document.getElementById(\"engine\");\nconst panicKey = document.getElementById(\"panicKey\");\nconst panicUrl = document.getElementById(\"panicUrl\");\n\n// ---- Settings persistence ----\nconst SETTINGS_KEY = \"portal.settings\";\nfunction loadSettings() {\n try {\n const s = JSON.parse(localStorage.getItem(SETTINGS_KEY) || \"{}\");\n if (typeof s.cloak === \"boolean\") cloak.checked = s.cloak;\n if (s.disguise) disguise.value = s.disguise;\n if (s.engine) engine.value = s.engine;\n if (s.panicKey) panicKey.value = s.panicKey;\n if (s.panicUrl) panicUrl.value = s.panicUrl;\n } catch {}\n}\nfunction saveSettings() {\n const s = {\n cloak: cloak.checked,\n disguise: disguise.value,\n engine: engine.value,\n panicKey: panicKey.value,\n panicUrl: panicUrl.value,\n };\n localStorage.setItem(SETTINGS_KEY, JSON.stringify(s));\n}\n[cloak, disguise, engine, panicKey, panicUrl].forEach((el) =>\n el.addEventListener(\"change\", saveSettings)\n);\nloadSettings();\n\n// ---- Build the entry path (/go with engine hint) ----\nfunction entryPath(q) {\n const p = new URLSearchParams({ q });\n if (engine.value && engine.value !== \"duckduckgo\") p.set(\"e\", engine.value);\n return \"/go?\" + p.toString();\n}\n\n/** Open the viewer in a fresh about:blank tab, disguised. */\nfunction openCloaked(q) {\n const win = window.open(\"about:blank\", \"_blank\");\n if (!win) {\n // Popup blocked — fall back to direct navigation in this tab\n location.href = entryPath(q);\n return;\n }\n\n const preset = DISGUISES[disguise.value] || DISGUISES.none;\n const doc = win.document;\n doc.open();\n // Write a minimal shell that frames the viewer at full size.\n doc.write(\n `${preset.title}` +\n `` +\n `` +\n ``\n );\n doc.close();\n}\n\nform.addEventListener(\"submit\", (e) => {\n e.preventDefault();\n const q = input.value.trim();\n if (!q) return;\n if (cloak.checked) {\n openCloaked(q);\n input.value = \"\";\n } else {\n location.href = entryPath(q);\n }\n});\n\n// ---- Quick-access app buttons (Roblox, YouTube, etc.) ----\nconst APPS = {\n roblox: \"https://www.roblox.com\",\n youtube: \"https://www.youtube.com\",\n};\ndocument.querySelectorAll(\".app-btn\").forEach((btn) => {\n btn.addEventListener(\"click\", () => {\n const url = APPS[btn.dataset.app];\n if (!url) return;\n if (cloak.checked) {\n openCloaked(url);\n } else {\n location.href = entryPath(url);\n }\n });\n});\n\n// ---- Panic key: jump to a safe URL instantly ----\nwindow.addEventListener(\"keydown\", (e) => {\n const key = (panicKey.value || \"`\").toLowerCase();\n // Ignore when typing into a text field (so you can type the key normally)\n const typing = document.activeElement &&\n [\"INPUT\", \"TEXTAREA\", \"SELECT\"].includes(document.activeElement.tagName);\n if (!typing && e.key.toLowerCase() === key) {\n e.preventDefault();\n location.replace(panicUrl.value || \"https://classroom.google.com\");\n }\n});\n","createdAt",["D",1787924308397],"branchVersion","branchId","994eb021-1ee7-4a30-b53d-da4f02d7a364","id","9388eb84-d939-4ecc-b210-df94cfb23343","portal-proxy",["D",1787924293192],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Cloaking web proxy with Roblox & YouTube quick apps","imageUrl","f43daf26-9b2b-456c-a1a8-ba66a24c5bab","pinnedFileId","01a04897-a6a1-74d7-9011-2fa8714ab3ab","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04896-396c-74d4-9a8b-bf08217a68b5","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_107":106,"_115":111},"org",{"_107":106,"_108":109,"_110":111,"_19":62,"_112":113,"_114":31},"branch",{"_13":14,"_38":93,"_50":49,"_94":51,"_95":96,"_97":98,"_99":57,"_100":101,"_102":103,"_104":52,"_105":106},"isOwned","main","projectId","forkedBranchId","7a817886-5b89-11f1-b23f-ee650bb23af1","forkedBranchVersion",17,"forkedProjectPrivacy","forkedProjectId","7a80ac3a-5b89-11f1-b23f-ee650bb23af1","forkedProjectOrgId","019e74ea-60f9-739d-bd03-bdb2d4f0fa23","projectName","userHandle","gggfdb","handle","displayName","926518","avatar","https://avatars.githubusercontent.com/u/238695292?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_50":51,"_38":52,"_45":262,"_54":-5,"_55":31,"_56":57,"_58":57,"_59":60,"_61":-5,"_19":62,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":70,"_71":72,"_73":-5,"_74":-5,"_75":-5,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":263,"_88":264,"_90":265,"_92":31},"tree",[191,197,200,201],"files",[191,192,193,194,195,196,197,198,199,200,201],"counts",{"_181":70,"_182":157,"_183":70,"_184":185,"_186":187},"contents",[150,151,152,153],"upstreamProject",{"_50":101,"_38":146,"_59":147,"_61":-5,"_56":57,"_86":148},"upstreamBranch",{"_50":96,"_45":140,"_141":142,"_38":93,"_94":101,"_13":98,"_95":-5,"_97":-5,"_143":144,"_54":-5,"_92":31,"_56":57,"_105":145,"_71":103,"_104":146},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1780078144914],"updatedAt",["D",1780078375790],"lockfileKey","1780078387171-esm.town_v_alexmxteix_blank-proxy@17-main","alexmxteix","blank-proxy","Web proxy with about:blank cloaking and search",{"_107":145,"_115":149},"https://avatars.githubusercontent.com/u/271071564?v=4",{"_50":176,"_38":177,"_36":178,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":179,"_13":70,"_40":174,"_42":-5,"_30":31,"_162":-5,"_33":180},{"_50":170,"_38":171,"_36":172,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":173,"_13":70,"_40":174,"_42":-5,"_30":31,"_162":-5,"_33":175},{"_50":164,"_38":165,"_36":166,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":167,"_13":70,"_40":26,"_42":168,"_30":31,"_162":-5,"_33":169},{"_50":154,"_38":155,"_36":64,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":159,"_13":70,"_40":160,"_42":161,"_30":31,"_162":52,"_33":163},"cb169241-6902-4879-8d6a-9f7b07b78ab5","main.ts","parentId",1,"latest",["D",1787924293192],"http","import app from \"./server/app.ts\";\nexport default app.fetch;","label",[155],"969f718e-2c46-4e07-b47b-7be43f1e929f","README.md","01a04897-a6a1-74d7-9011-2a9c6f50b283",["D",1787924293192],"# 🔍 Portal — Blank Proxy\n\nA lightweight web proxy with **about:blank cloaking**, an in-tab navigation bar,\ntab disguises, and a panic key. Type a search term or URL, and it opens the\nproxied site inside a fresh `about:blank` tab.\n\n## Features\n\n- **about:blank cloaking** — proxied sites open in a blank tab so the real\n destination is hidden from the address bar.\n- **In-tab navigation bar** — back / forward / reload / home, a URL bar to keep\n browsing without returning to the homepage, and `Esc` to toggle full-screen.\n- **Tab disguises** — make the tab look like Google Docs, Classroom, Drive,\n Gmail, or Canvas (custom title + favicon).\n- **Panic key** — press a chosen key anytime to instantly jump to a safe URL.\n- **Search engines** — DuckDuckGo, Bing, or Google.\n- **Settings persistence** — preferences saved in `localStorage`.\n\n## How it works\n\n```mermaid\nflowchart LR\n A[Homepage] -->|submit| B{Cloak on?}\n B -->|yes| C[Open about:blank tab]\n C --> D[Disguised shell + iframe → /view]\n B -->|no| E[Navigate to /go]\n D --> F[\"/view (toolbar + iframe)\"]\n F --> G[\"/go?q=…&e=engine\"]\n E --> G\n G -->|normalize input| H[\"/p/<encoded url>\"]\n H --> I[Server fetches target]\n I --> J[Rewrite HTML/CSS links back through proxy]\n J --> K[Serve to browser]\n```\n\n## Files\n\n| File | Purpose |\n| --- | --- |\n| `main.ts` | HTTP entrypoint |\n| `server/app.ts` | Hono routes: `/`, `/view`, `/go`, `/p/*`, static, `/source` |\n| `server/proxy.ts` | Fetch + HTML/CSS rewriting, search-engine normalization |\n| `frontend/index.html` | Homepage with search + settings |\n| `frontend/main.js` | Cloaking, disguise, engine, panic key, settings |\n| `frontend/disguises.js` | Tab disguise presets (title + inline-SVG favicon) |\n| `frontend/viewer.html` | In-tab browser shell (toolbar + iframe) |\n| `frontend/viewer.js` | Toolbar logic: URL bar, nav buttons, bar toggle |\n\n## ⚠️ Limitations\n\nThis is a **server-side HTML-rewriting proxy**, not a full engine like\nUltraviolet/Rammerhead. It works well for simple/static sites and reading. It will\nstruggle with heavy JS apps, logins, video streaming, and strict anti-bot sites,\nwhich is expected given Val Town's serverless execution limits.\n",[165],"63699410-726e-4c45-b5bc-a0fa8b58b94c","server","01a04897-a6a1-74d7-9011-269d379ccc5b",["D",1787924293192],"directory",[171],"6ebd8342-a2b3-4ecd-a230-7c6011407e33","frontend","01a04897-a6a1-74d7-9011-1b4c37c7d97f",["D",1787924293192],[177],"pulls","branches","forks","envVars",{"_188":70,"_190":70},"connections",{"_188":70,"_189":70},"count","unfilledCount","emptyCount",{"_50":176,"_38":177,"_36":178,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":259,"_13":70,"_40":174,"_42":-5,"_30":31,"_162":-5,"_203":260,"_33":261},{"_50":252,"_38":253,"_36":254,"_156":178,"_48":49,"_47":157,"_158":66,"_45":255,"_13":70,"_40":41,"_42":256,"_30":31,"_162":-5,"_203":257,"_33":258},{"_50":244,"_38":245,"_36":246,"_156":178,"_48":49,"_47":247,"_158":66,"_45":248,"_13":157,"_40":26,"_42":249,"_30":31,"_162":-5,"_203":250,"_33":251},{"_50":240,"_38":39,"_36":37,"_156":178,"_48":49,"_47":14,"_158":66,"_45":241,"_13":157,"_40":41,"_42":44,"_30":31,"_162":-5,"_203":242,"_33":243},{"_50":233,"_38":234,"_36":235,"_156":178,"_48":49,"_47":157,"_158":66,"_45":236,"_13":70,"_40":26,"_42":237,"_30":31,"_162":-5,"_203":238,"_33":239},{"_50":226,"_38":227,"_36":228,"_156":178,"_48":49,"_47":157,"_158":66,"_45":229,"_13":70,"_40":41,"_42":230,"_30":31,"_162":-5,"_203":231,"_33":232},{"_50":170,"_38":171,"_36":172,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":223,"_13":70,"_40":174,"_42":-5,"_30":31,"_162":-5,"_203":224,"_33":225},{"_50":216,"_38":217,"_36":218,"_156":172,"_48":49,"_47":157,"_158":66,"_45":219,"_13":70,"_40":41,"_42":220,"_30":31,"_162":-5,"_203":221,"_33":222},{"_50":209,"_38":210,"_36":211,"_156":172,"_48":49,"_47":157,"_158":66,"_45":212,"_13":70,"_40":41,"_42":213,"_30":31,"_162":-5,"_203":214,"_33":215},{"_50":164,"_38":165,"_36":166,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":206,"_13":70,"_40":26,"_42":168,"_30":31,"_162":-5,"_203":207,"_33":208},{"_50":154,"_38":155,"_36":64,"_156":-5,"_48":49,"_47":157,"_158":66,"_45":202,"_13":70,"_40":160,"_42":161,"_30":31,"_162":52,"_203":204,"_33":205},["D",1787924293192],"children",[],[155],["D",1787924293192],[],[165],"e588aa2f-ca5d-4d2b-8c4c-fb947d473ee6","proxy.ts","01a04897-a6a1-74d7-9011-228c801709c5",["D",1787924293192],"// Core proxy logic: fetch a target URL and rewrite its HTML/CSS so that\n// links, assets, and forms route back through this proxy.\n\nconst PROXY_PREFIX = \"/p/\";\n\nconst SEARCH_ENGINES: Record string> = {\n duckduckgo: (q) => `https://duckduckgo.com/html/?q=${encodeURIComponent(q)}`,\n bing: (q) => `https://www.bing.com/search?q=${encodeURIComponent(q)}`,\n google: (q) => `https://www.google.com/search?q=${encodeURIComponent(q)}`,\n};\n\n/** Turn user input into a real URL. If it's not a URL, treat it as a search. */\nexport function normalizeTarget(input: string, engine = \"duckduckgo\"): string {\n const raw = input.trim();\n if (!raw) return \"\";\n // Looks like a domain or URL?\n const looksLikeUrl = /^https?:\\/\\//i.test(raw) ||\n /^[^\\s]+\\.[a-z]{2,}(\\/|$|\\?)/i.test(raw);\n if (looksLikeUrl) {\n return /^https?:\\/\\//i.test(raw) ? raw : `https://${raw}`;\n }\n // Otherwise, run a search through the chosen engine\n const search = SEARCH_ENGINES[engine] ?? SEARCH_ENGINES.duckduckgo;\n return search(raw);\n}\n\n/** Encode a target URL into a proxied path. */\nexport function toProxyPath(targetUrl: string): string {\n return PROXY_PREFIX + encodeURIComponent(targetUrl);\n}\n\n/** Resolve a (possibly relative) URL against a base into an absolute URL. */\nfunction absolutize(base: string, ref: string): string | null {\n try {\n if (!ref || ref.startsWith(\"data:\") || ref.startsWith(\"javascript:\") ||\n ref.startsWith(\"mailto:\") || ref.startsWith(\"#\") || ref.startsWith(\"about:\")) {\n return null;\n }\n return new URL(ref, base).toString();\n } catch {\n return null;\n }\n}\n\n/** Rewrite an absolute URL into a proxied path. */\nfunction rewriteUrl(base: string, ref: string): string {\n const abs = absolutize(base, ref);\n if (!abs) return ref;\n return toProxyPath(abs);\n}\n\n/** Rewrite all URL-bearing attributes and embedded CSS in an HTML document. */\nexport function rewriteHtml(html: string, base: string): string {\n let out = html;\n\n // Strip CSP / frame-busting meta tags that block proxying\n out = out.replace(/]+http-equiv=[\"']?content-security-policy[\"']?[^>]*>/gi, \"\");\n out = out.replace(/]+http-equiv=[\"']?x-frame-options[\"']?[^>]*>/gi, \"\");\n\n // Rewrite href/src/action attributes\n out = out.replace(\n /\\b(href|src|action|poster|data-src)\\s*=\\s*[\"']([^\"']*)[\"']/gi,\n (m, attr, val) => `${attr}=\"${rewriteUrl(base, val)}\"`,\n );\n\n // Rewrite srcset (comma-separated list of URLs + descriptors)\n out = out.replace(/\\bsrcset\\s*=\\s*[\"']([^\"']*)[\"']/gi, (m, val) => {\n const rewritten = val\n .split(\",\")\n .map((part: string) => {\n const seg = part.trim();\n const [url, ...rest] = seg.split(/\\s+/);\n return [rewriteUrl(base, url), ...rest].join(\" \");\n })\n .join(\", \");\n return `srcset=\"${rewritten}\"`;\n });\n\n // Rewrite url(...) inside inline

Diff · v3