[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_214":215,"_216":217},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_41":-7,"_146":-5,"_19":147,"_148":149,"_150":151,"_152":153,"_154":155,"_21":156,"_157":-5,"_158":-5,"_159":24,"_160":161,"_162":110,"_163":-5,"_164":-5,"_165":166},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","maxstaley","name","RotOverUnder","branchName","main","path","cors-proxy.ts.ts","project",{"_35":97,"_13":14,"_39":98,"_99":-5,"_100":24,"_101":102,"_103":102,"_104":105,"_106":-5,"_30":70,"_107":108,"_109":110,"_111":-5,"_112":-5,"_113":26,"_43":44,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_54":127,"_128":129,"_130":131,"_132":24},"file",{"_64":65,"_13":18,"_67":87,"_69":24,"_96":-5},"isDirectory",false,"page",0,"history",[31,32,33,34],"hasNext","userId",{"_35":88,"_37":38,"_39":89,"_41":90,"_43":44,"_45":91,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":92,"_21":93,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":94},{"_35":80,"_37":38,"_39":81,"_41":82,"_43":44,"_45":73,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":83,"_21":84,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":85},{"_35":73,"_37":38,"_39":74,"_41":75,"_43":44,"_45":36,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":76,"_21":77,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":78},{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62},"id","4285073f-e83f-4301-ae2a-0074e6140e44","branchId","87d2290e-f3dd-47cc-9fdb-608732da11e3","createdAt",["D",1789052066695],"version",7,"orgId","01a03a74-7836-76ca-82ae-dd92e796edb8","parentId","9529b812-873a-4266-98db-38a409f2d99e","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":66,"_67":68,"_69":24},"pull","merge","revert","multiple","commits",[63],{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5},"fileId","84b6db3a-ad27-11f1-89aa-1607ee4eb77e","new-file-7360.ts","fileType","script","deleted","49293558-fdbe-4734-8abf-5328e611b0aa","avatar","","e3042425-5fd6-4734-aeb3-3065daa93df5",["D",1789052098332],8,{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":66,"_67":68,"_69":24},[79],{"_35":73,"_37":38,"_39":74,"_41":75,"_43":44,"_45":36,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":76,"_21":77,"_57":-5,"_58":-5,"_59":-5},"37c39a8a-0c69-4b0b-823c-bb0bb615834b",["D",1789052100579],9,{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":66,"_67":87,"_69":24},[86],{"_35":80,"_37":38,"_39":81,"_41":82,"_43":44,"_45":73,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":83,"_21":84,"_57":-5,"_58":-5,"_59":-5},"http","cc401825-4ef0-4de2-9dcb-2e2008b836f1",["D",1789054509087],13,"9ce574f2-9472-40e0-b187-dec6b81659e0",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":18,"_67":87,"_69":24},[95],{"_35":88,"_37":38,"_39":89,"_41":90,"_43":44,"_45":91,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":92,"_21":93,"_57":-5,"_58":-5,"_59":-5},"deletedAtVersion","ddd45cd0-7b79-4f86-b153-dabaf6dab223",["D",1789049196474],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RotOverUnder hosting","imageUrl","pinnedFileId","e3b4146e-ad21-11f1-a8fd-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_145":72},"org",{"_11":12,"_141":72,"_71":72,"_30":70,"_142":143,"_144":24},"branch",{"_41":90,"_13":16,"_35":38,"_133":97,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":97,"_13":14,"_39":210,"_99":-5,"_100":24,"_101":102,"_103":102,"_104":105,"_106":-5,"_30":70,"_107":108,"_109":110,"_111":-5,"_112":-5,"_113":26,"_43":44,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_54":211,"_128":212,"_130":213,"_132":24},"tree",[187,188,189],"files",[187,188,189],"counts",{"_176":26,"_177":178,"_179":26,"_180":181,"_182":183},"contents",[],{"_35":167,"_13":18,"_64":65,"_45":-5,"_37":38,"_168":90,"_169":110,"_39":170,"_41":171,"_67":87,"_172":173,"_69":24,"_174":-5,"_17":175},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"1638696e-1f87-4fd1-a62f-b795c7883e5d","branchVersion","latest",["D",1789054509087],3,"content","// RotoWire CORS proxy -- lets the Yardage Props widget's live data fetches\n// (fetchJSON/fetchText, see RW_PROXY in the widget source) work when the\n// widget is hosted off rotowire.com (e.g. this Val Town project), since\n// rotowire.com's own endpoints send no Access-Control-Allow-Origin header\n// (confirmed live) and browsers silently block the cross-origin fetch\n// without this. Fetching server-side here isn't subject to CORS at all\n// (CORS is a browser-enforced rule between browser and server, not a\n// server-to-server restriction), so this just re-serves RotoWire's response\n// with permissive CORS headers added -- same data, same shape, nothing\n// transformed.\n//\n// Usage from the widget: fetch(`${RW_PROXY}?path=${encodeURIComponent(pathAndQuery)}`)\n// where pathAndQuery is exactly what would normally follow rotowire.com,\n// e.g. \"/football/tables/projections-ceil-floor-weekly.php?pos=WR&week=1&ceilFloor=C\".\n//\n// Locked to RotoWire's own data-table/betting paths only (see ALLOWED_PREFIXES)\n// so this can't be abused as a general-purpose open proxy.\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Max-Age\": \"86400\",\n};\n\nconst ALLOWED_PREFIXES = [\n \"/betting/nfl/\",\n \"/football/tables/\",\n];\n\nfunction jsonError(status: number, message: string): Response {\n return new Response(JSON.stringify({ error: message }), {\n status,\n headers: {\n ...CORS_HEADERS,\n \"content-type\": \"application/json; charset=utf-8\",\n },\n });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n if (req.method !== \"GET\") {\n return jsonError(405, \"only GET is supported\");\n }\n\n const reqUrl = new URL(req.url);\n const path = reqUrl.searchParams.get(\"path\");\n\n if (!path || !path.startsWith(\"/\")) {\n return jsonError(\n 400,\n \"missing or invalid 'path' query param -- must be a path like /football/tables/....php?...\",\n );\n }\n\n if (!ALLOWED_PREFIXES.some((p) => path.startsWith(p))) {\n return jsonError(\n 403,\n \"path not allowed -- this proxy only forwards RotoWire's football data-table and betting endpoints\",\n );\n }\n\n const target = \"https://www.rotowire.com\" + path;\n\n let upstream: Response;\n try {\n upstream = await fetch(target, {\n headers: {\n \"User-Agent\":\n \"Mozilla/5.0 (compatible; RotoWireYardagePropsProxy/1.0; +https://www.rotowire.com)\",\n },\n });\n } catch (e) {\n return jsonError(502, \"upstream fetch failed: \" + String(e));\n }\n\n const body = await upstream.text();\n const contentType = upstream.headers.get(\"content-type\") ||\n \"text/plain; charset=utf-8\";\n\n return new Response(body, {\n status: upstream.status,\n headers: {\n ...CORS_HEADERS,\n \"content-type\": contentType,\n },\n });\n}","label",[18],"pulls","branches",1,"forks","envVars",{"_184":26,"_186":26},"connections",{"_184":26,"_185":26},"count","unfilledCount","emptyCount",{"_35":167,"_13":18,"_64":65,"_45":-5,"_37":38,"_168":90,"_169":110,"_39":207,"_41":171,"_67":87,"_172":173,"_69":24,"_174":-5,"_196":208,"_17":209},{"_35":199,"_13":200,"_64":108,"_45":-5,"_37":38,"_168":201,"_169":110,"_39":202,"_41":203,"_67":87,"_172":204,"_69":24,"_174":-5,"_196":205,"_17":206},{"_35":190,"_13":191,"_64":192,"_45":-5,"_37":38,"_168":193,"_169":110,"_39":194,"_41":178,"_67":68,"_172":195,"_69":24,"_174":-5,"_196":197,"_17":198},"63b6f448-405d-4dec-aa07-39ce9a6cb650","main.ts","d5f2580a-ad20-11f1-a28b-1607ee4eb77e",2,["D",1789049532924],"// RotoWire Patriots vs. Seahawks Prop Bets -- standalone hosted page\n// Served as-is so the CMS can embed it via a plain

History · cors-proxy.ts.ts