[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_178":179,"_180":181},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_104":86,"_27":98,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":59,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",13,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","cors-proxy.ts.ts","latestPath","fileId","84b6db3a-ad27-11f1-89aa-1607ee4eb77e","name","new-file-7360.ts","fileType","http","content","// RotoWire CORS proxy -- lets the Yardage Props widget's live data fetches\n// (fetchJSON/fetchText, see RW_PROXY in the widget source) work when the\n// widget is hosted off rotowire.com (e.g. this Val Town project), since\n// rotowire.com's own endpoints send no Access-Control-Allow-Origin header\n// (confirmed live) and browsers silently block the cross-origin fetch\n// without this. Fetching server-side here isn't subject to CORS at all\n// (CORS is a browser-enforced rule between browser and server, not a\n// server-to-server restriction), so this just re-serves RotoWire's response\n// with permissive CORS headers added -- same data, same shape, nothing\n// transformed.\n//\n// Usage from the widget: fetch(`${RW_PROXY}?path=${encodeURIComponent(pathAndQuery)}`)\n// where pathAndQuery is exactly what would normally follow rotowire.com,\n// e.g. \"/football/tables/projections-ceil-floor-weekly.php?pos=WR&week=1&ceilFloor=C\".\n//\n// Locked to RotoWire's own data-table/betting paths only (see ALLOWED_PREFIXES)\n// so this can't be abused as a general-purpose open proxy.\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Max-Age\": \"86400\",\n};\n\nconst ALLOWED_PREFIXES = [\n \"/betting/nfl/\",\n \"/football/tables/\",\n];\n\nfunction jsonError(status: number, message: string): Response {\n return new Response(JSON.stringify({ error: message }), {\n status,\n headers: {\n ...CORS_HEADERS,\n \"content-type\": \"application/json; charset=utf-8\",\n },\n });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n if (req.method !== \"GET\") {\n return jsonError(405, \"only GET is supported\");\n }\n\n const reqUrl = new URL(req.url);\n const path = reqUrl.searchParams.get(\"path\");\n\n if (!path || !path.startsWith(\"/\")) {\n return jsonError(\n 400,\n \"missing or invalid 'path' query param -- must be a path like /football/tables/....php?...\",\n );\n }\n\n if (!ALLOWED_PREFIXES.some((p) => path.startsWith(p))) {\n return jsonError(\n 403,\n \"path not allowed -- this proxy only forwards RotoWire's football data-table and betting endpoints\",\n );\n }\n\n const target = \"https://www.rotowire.com\" + path;\n\n let upstream: Response;\n try {\n upstream = await fetch(target, {\n headers: {\n \"User-Agent\":\n \"Mozilla/5.0 (compatible; RotoWireYardagePropsProxy/1.0; +https://www.rotowire.com)\",\n },\n });\n } catch (e) {\n return jsonError(502, \"upstream fetch failed: \" + String(e));\n }\n\n const body = await upstream.text();\n const contentType = upstream.headers.get(\"content-type\") ||\n \"text/plain; charset=utf-8\";\n\n return new Response(body, {\n status: upstream.status,\n headers: {\n ...CORS_HEADERS,\n \"content-type\": contentType,\n },\n });\n}","createdAt",["D",1789054509087],"branchVersion","branchId","87d2290e-f3dd-47cc-9fdb-608732da11e3","id","ddd45cd0-7b79-4f86-b153-dabaf6dab223","RotOverUnder",["D",1789049196474],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RotOverUnder hosting","imageUrl","49293558-fdbe-4734-8abf-5328e611b0aa","pinnedFileId","e3b4146e-ad21-11f1-a8fd-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03a74-7836-76ca-82ae-dd92e796edb8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_103":98},"org",{"_96":95,"_97":98,"_99":98,"_18":55,"_100":101,"_102":25},"branch",{"_13":14,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","maxstaley","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":174,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":175,"_81":176,"_83":177,"_85":25},"tree",[161,162,163],"files",[161,162,163],"counts",{"_151":63,"_152":135,"_153":63,"_154":155,"_156":157},"contents",[125,126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":147,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_133":59,"_38":148,"_13":149,"_34":35,"_36":37,"_24":25,"_138":-5,"_27":150},{"_43":140,"_32":141,"_30":57,"_131":-5,"_41":42,"_40":142,"_133":59,"_38":143,"_13":144,"_34":35,"_36":145,"_24":25,"_138":-5,"_27":146},{"_43":128,"_32":129,"_30":130,"_131":-5,"_41":42,"_40":132,"_133":59,"_38":134,"_13":135,"_34":136,"_36":137,"_24":25,"_138":-5,"_27":139},"63b6f448-405d-4dec-aa07-39ce9a6cb650","main.ts","d5f2580a-ad20-11f1-a28b-1607ee4eb77e","parentId",2,"latest",["D",1789049532924],1,"script","// RotoWire Patriots vs. Seahawks Prop Bets -- standalone hosted page\n// Served as-is so the CMS can embed it via a plain

Diff · v13