[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","9fe4264c-47ba-11f1-a573-42b51c65c3df","name","fileType","http","content","// ESP32-WROOM-32 IoT device firmware can only make HTTPS requests to servers with valid certificates, which makes it impossible to use it with a custom domain and Cloudflare's SSL. This script is a simple proxy that forwards requests to the target server and returns the response, allowing the IoT device to communicate with the server without SSL issues.\n\nconst password = \"99495437-67be-47c8-8b9e-b5efe06e2145\";\n\nconst my_header = new Set([\n // Standard proxy headers\n \"host\",\n \"connection\",\n \"content-length\",\n \"transfer-encoding\",\n \"proxy-connection\",\n \"proxy-authorization\",\n \"x-forwarded-for\",\n \"x-forwarded-host\",\n \"x-forwarded-proto\",\n \"x-forwarded-port\",\n \"x-real-ip\",\n \"forwarded\",\n \"via\",\n // Cloudflare headers\n \"cf-connecting-ip\",\n \"cf-ipcountry\",\n \"cf-ray\",\n \"cf-visitor\",\n \"cf-request-id\",\n \"cf-bot-management-score\",\n \"cf-challenge\",\n // Server identification\n \"server\",\n \"x-powered-by\",\n // REMOVED: user-agent, accept, accept-encoding, accept-language, cache-control, pragma\n // REASON: These are essential for browser emulation and CAPTCHA handling.\n // Stripping them causes: CAPTCHA loops, bot detection, malformed responses.\n]);\n\nfunction tabdeal64BeBytes(input: string): Uint8Array {\n const bin = atob(input);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction tabdealByteBe64(bytes: Uint8Array): string {\n let bin = \"\";\n for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);\n return btoa(bin);\n}\n\nfunction sakhteHederHa(h: unknown): Record {\n const out: Record = {};\n if (!h || typeof h !== \"object\") return out;\n for (const [k, v] of Object.entries(h as Record)) {\n if (!k) continue;\n // Check if header should be stripped (exact match or prefix match)\n let shouldStrip = false;\n\n if (my_header.has(k.toLowerCase())) {\n shouldStrip = true;\n } else if (\n k.toLowerCase().startsWith(\"x-goog-\") ||\n k.toLowerCase().startsWith(\"x-client-\")\n ) {\n shouldStrip = true;\n }\n\n if (shouldStrip) continue;\n out[k] = String(v ?? \"\");\n }\n return out;\n}\n\nexport default async function (req: Request): Promise {\n try {\n if (req.method !== \"POST\") {\n return Response.json({ e: \"method_not_allowed\" }, { status: 405 });\n }\n\n const body = await req.json();\n if (!body || typeof body !== \"object\") {\n return Response.json({ e: \"bad_json\" }, { status: 400 });\n }\n\n const k = String((body as any).k ?? \"\");\n const u = String((body as any).u ?? \"\");\n const m = String((body as any).m ?? \"GET\").toUpperCase();\n const h = sakhteHederHa((body as any).h);\n const b64 = (body as any).b;\n\n if (k !== password) {\n return Response.json({ e: \"unauthorized\" }, { status: 401 });\n }\n if (!/^https?:\\/\\//i.test(u)) {\n return Response.json({ e: \"bad url\" }, { status: 400 });\n }\n\n let payload: Uint8Array | undefined;\n if (typeof b64 === \"string\" && b64.length > 0) {\n payload = tabdeal64BeBytes(b64);\n }\n\n const resp = await fetch(u, {\n method: m,\n headers: h,\n body: payload,\n redirect: \"manual\",\n });\n\n const data = new Uint8Array(await resp.arrayBuffer());\n const respHeaders: Record = {};\n resp.headers.forEach((value, key) => {\n respHeaders[key] = value;\n });\n\n return Response.json({\n s: resp.status,\n h: respHeaders,\n b: tabdealByteBe64(data),\n });\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n return Response.json({ e: message }, { status: 500 });\n }\n}","// ESP32-WROOM-32 IoT device firmware can only make HTTPS requests to servers with valid certificates, which makes it impossible to use it with a custom domain and Cloudflare's SSL. This script is a simple proxy that forwards requests to the target server and returns the response, allowing the IoT device to communicate with the server without SSL issues.\n\nconst password = \"99495437-67be-47c8-8b9e-b5efe06e2145\";\n\nconst STRIP_HEADERS = new Set([\n \"host\",\n \"connection\",\n \"content-length\",\n \"accept-encoding\",\n \"transfer-encoding\",\n \"proxy-connection\",\n \"proxy-authorization\",\n \"x-forwarded-for\",\n \"x-forwarded-host\",\n \"x-forwarded-proto\",\n \"x-forwarded-port\",\n \"x-real-ip\",\n \"forwarded\",\n \"via\",\n]);\n\nfunction tabdeal64BeBytes(input: string): Uint8Array {\n const bin = atob(input);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction tabdealByteBe64(bytes: Uint8Array): string {\n let bin = \"\";\n for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);\n return btoa(bin);\n}\n\nfunction sakhteHederHa(h: unknown): Record {\n const out: Record = {};\n if (!h || typeof h !== \"object\") return out;\n for (const [k, v] of Object.entries(h as Record)) {\n if (!k) continue;\n if (STRIP_HEADERS.has(k.toLowerCase())) continue;\n out[k] = String(v ?? \"\");\n }\n return out;\n}\n\nexport default async function (req: Request): Promise {\n try {\n if (req.method !== \"POST\") {\n return Response.json({ e: \"method_not_allowed\" }, { status: 405 });\n }\n\n const body = await req.json();\n if (!body || typeof body !== \"object\") {\n return Response.json({ e: \"bad_json\" }, { status: 400 });\n }\n\n const k = String((body as any).k ?? \"\");\n const u = String((body as any).u ?? \"\");\n const m = String((body as any).m ?? \"GET\").toUpperCase();\n const h = sakhteHederHa((body as any).h);\n const b64 = (body as any).b;\n\n if (k !== password) {\n return Response.json({ e: \"unauthorized\" }, { status: 401 });\n }\n if (!/^https?:\\/\\//i.test(u)) {\n return Response.json({ e: \"bad url\" }, { status: 400 });\n }\n\n let payload: Uint8Array | undefined;\n if (typeof b64 === \"string\" && b64.length > 0) {\n payload = tabdeal64BeBytes(b64);\n }\n const requestBody = payload ? Uint8Array.from(payload) : undefined;\n\n const resp = await fetch(u, {\n method: m,\n headers: h,\n body: requestBody as unknown as BodyInit,\n redirect: \"manual\",\n });\n\n const data = new Uint8Array(await resp.arrayBuffer());\n const respHeaders: Record = {};\n resp.headers.forEach((value, key) => {\n respHeaders[key] = value;\n });\n\n return Response.json({\n s: resp.status,\n h: respHeaders,\n b: tabdealByteBe64(data),\n });\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n return Response.json({ e: message }, { status: 500 });\n }\n}","createdAt",["D",1778320954101],"branchVersion","branchId","9fe0f24c-47ba-11f1-a573-42b51c65c3df","id","9fe036ea-47ba-11f1-a573-42b51c65c3df","Project-Beghaee",["D",1777900229694],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","bf582b95-068f-46ce-b619-4e7843aa198b","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019df31b-b10e-74ce-a8d8-37da27037ba8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_101":97},"org",{"_94":93,"_95":93,"_96":97,"_18":54,"_98":99,"_100":25},"branch",{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"isOwned",21,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","narigsmi4","handle","displayName","avatar","https://lh3.googleusercontent.com/a/ACg8ocJp5rkZXAA8kSDLKdYN7lOCRhLdttb8FC-oXSr0vLWOQ3VKCA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":150,"_78":151,"_80":152,"_82":25},"tree",[144],"files",[144],"counts",{"_133":60,"_134":135,"_136":60,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"332ba296-4b8e-11f1-9774-ee650bb23af1","parentId","latest",["D",1778320954101],5,"label",[28],"pulls","branches",1,"forks","envVars",{"_141":60,"_143":60},"connections",{"_141":60,"_142":60},"count","unfilledCount","emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":145,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_146":147,"_27":148},["D",1778320954101],"children",[],[28],["D",1777900229694],{"_94":93,"_101":97},{"_94":93,"_95":93,"_96":97,"_18":54,"_98":99,"_100":25},{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"ctx",{"_76":-5,"_122":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":120,"_195":-5,"_196":-7,"_197":-7,"_198":60,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":84,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6