[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_176":177,"_178":179},"routes/_app.x.$handle.$name",{"_98":97,"_33":46,"_106":88,"_27":100,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":60,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_33":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",9,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":30},"file",{"_31":32,"_33":28,"_34":38,"_36":37,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_31":32,"_33":28,"_34":35,"_36":37},"deleted",false,"deletedHere","path","new-file-7360.ts","latestPath","cors-proxy.ts.ts","fileId","84b6db3a-ad27-11f1-89aa-1607ee4eb77e","name","fileType","script","content","// RotoWire CORS proxy -- lets the Yardage Props widget's live data fetches\n// (fetchJSON/fetchText, see RW_PROXY in the widget source) work when the\n// widget is hosted off rotowire.com (e.g. this Val Town project), since\n// rotowire.com's own endpoints send no Access-Control-Allow-Origin header\n// (confirmed live) and browsers silently block the cross-origin fetch\n// without this. Fetching server-side here isn't subject to CORS at all\n// (CORS is a browser-enforced rule between browser and server, not a\n// server-to-server restriction), so this just re-serves RotoWire's response\n// with permissive CORS headers added -- same data, same shape, nothing\n// transformed.\n//\n// Usage from the widget: fetch(`${RW_PROXY}?path=${encodeURIComponent(pathAndQuery)}`)\n// where pathAndQuery is exactly what would normally follow rotowire.com,\n// e.g. \"/football/tables/projections-ceil-floor-weekly.php?pos=WR&week=1&ceilFloor=C\".\n//\n// Locked to RotoWire's own data-table/betting paths only (see ALLOWED_PREFIXES)\n// so this can't be abused as a general-purpose open proxy.\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Max-Age\": \"86400\",\n};\n\nconst ALLOWED_PREFIXES = [\n \"/betting/nfl/\",\n \"/football/tables/\",\n];\n\nfunction jsonError(status: number, message: string): Response {\n return new Response(JSON.stringify({ error: message }), {\n status,\n headers: {\n ...CORS_HEADERS,\n \"content-type\": \"application/json; charset=utf-8\",\n },\n });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n if (req.method !== \"GET\") {\n return jsonError(405, \"only GET is supported\");\n }\n\n const reqUrl = new URL(req.url);\n const path = reqUrl.searchParams.get(\"path\");\n\n if (!path || !path.startsWith(\"/\")) {\n return jsonError(\n 400,\n \"missing or invalid 'path' query param -- must be a path like /football/tables/....php?...\",\n );\n }\n\n if (!ALLOWED_PREFIXES.some((p) => path.startsWith(p))) {\n return jsonError(\n 403,\n \"path not allowed -- this proxy only forwards RotoWire's football data-table and betting endpoints\",\n );\n }\n\n const target = \"https://www.rotowire.com\" + path;\n\n let upstream: Response;\n try {\n upstream = await fetch(target, {\n headers: {\n \"User-Agent\":\n \"Mozilla/5.0 (compatible; RotoWireYardagePropsProxy/1.0; +https://www.rotowire.com)\",\n },\n });\n } catch (e) {\n return jsonError(502, \"upstream fetch failed: \" + String(e));\n }\n\n const body = await upstream.text();\n const contentType = upstream.headers.get(\"content-type\") ||\n \"text/plain; charset=utf-8\";\n\n return new Response(body, {\n status: upstream.status,\n headers: {\n ...CORS_HEADERS,\n \"content-type\": contentType,\n },\n });\n}","http","createdAt",["D",1789052100579],"branchVersion","branchId","87d2290e-f3dd-47cc-9fdb-608732da11e3","id","ddd45cd0-7b79-4f86-b153-dabaf6dab223","RotOverUnder",["D",1789049196474],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RotOverUnder hosting","imageUrl","49293558-fdbe-4734-8abf-5328e611b0aa","pinnedFileId","e3b4146e-ad21-11f1-a8fd-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03a74-7836-76ca-82ae-dd92e796edb8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":100},"org",{"_98":97,"_99":100,"_101":100,"_18":56,"_102":103,"_104":25},"branch",{"_13":87,"_33":88,"_44":43,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":46,"_96":97},"isOwned",13,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","maxstaley","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_33":46,"_39":172,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":173,"_82":174,"_84":175,"_86":25},"tree",[159,160,161],"files",[159,160,161],"counts",{"_149":64,"_150":141,"_151":64,"_152":153,"_154":155},"contents",[127,128,129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":144,"_33":145,"_31":146,"_131":-5,"_42":43,"_41":134,"_132":60,"_39":147,"_13":141,"_34":35,"_36":142,"_24":25,"_135":-5,"_27":148},{"_44":137,"_33":138,"_31":58,"_131":-5,"_42":43,"_41":139,"_132":25,"_39":140,"_13":141,"_34":38,"_36":142,"_24":25,"_135":-5,"_27":143},{"_44":130,"_33":28,"_31":32,"_131":-5,"_42":43,"_41":14,"_132":25,"_39":133,"_13":134,"_34":38,"_36":37,"_24":25,"_135":-5,"_27":136},"bae2635c-fa07-4309-94cc-e1d01202fa55","parentId","latest",["D",1789052100579],2,"label",[28],"a7796317-0756-4b6f-941d-8f553d7b8690","new-file-685.ts",4,["D",1789049707777],1,"// RotoWire Patriots vs. Seahawks Prop Bets -- standalone hosted page\n// Served as-is so the CMS can embed it via a plain

Diff · v9