[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_25":123,"_24":-5,"_124":-5,"_125":-5,"_126":53,"_127":128,"_129":44,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","raymondcamden","name","form-bouncer","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":69,"_70":-5,"_71":72,"_73":-5,"_74":53,"_75":-5,"_76":-5,"_77":78,"_79":80,"_81":-5,"_82":-5,"_83":-5,"_84":-5,"_85":86,"_87":86,"_88":89,"_90":89,"_91":89,"_92":86,"_93":86,"_94":95,"_96":97,"_98":99,"_100":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","083dc19d-9a30-4a9c-a22d-74c2d5a46b75","main.ts","fileId","ccf4bc96-6b50-11f1-a429-1607ee4eb77e","parentId","branchId","7c197a3f-fdf6-40b2-8e05-599ac1d8e335","branchVersion",41,"latest",true,"createdAt",["D",1781880516169],40,"fileType","http","content","import { email } from \"https://esm.town/v/std/email\";\n\n/*\nWe are only allowed to send to one of these.\n*/\nconst SAFE_EMAILS_TO = [\n \"raymondcamden@gmail.com\",\n \"rcamden@gmail.com\",\n];\n\n/*\nA URL that is matched against redirects - the redirect must match the domain, well anything _after_ the input\n*/\nconst SAFE_REDIRECT_TO = [\n \"https://boring-morning-yak.codepen.app\",\n];\n\n/*\nThe 'special keys' don't need to be in the form email.\n*/\nconst SPECIAL_KEYS = [\"_send\", \"_redirect\", \"_formname\"];\n\n/*\nEvery form must have a _send and _redirect field. Later we may add more validations.\nLike validating _redirect. Duh.\n*/\nfunction verifyForm(f) {\n console.log(\"verifyForm\", f.get(\"_send\"), f.get(\"_redirect\"));\n\n if (!f.get(\"_send\") || f.get(\"_send\").length === 0) return false;\n if (!f.get(\"_redirect\") || f.get(\"_redirect\").length === 0) return false;\n\n // ensure the email is ok\n if (SAFE_EMAILS_TO.indexOf(f.get(\"_send\")) === -1) return false;\n\n //now ensure _redirect matches against at least one\n let validRedirect = false;\n const redirect = f.get(\"_redirect\").toLowerCase();\n\n SAFE_REDIRECT_TO.forEach((u) => {\n u = u.toLowerCase();\n if (redirect.startsWith(u)) validRedirect = true;\n });\n\n return validRedirect;\n}\n\n/*\nAs there are multiple things that can go wrong, here's the general\nerror handler. As this is meant for Form POSTs, its ok to give a simple response.\n*/\nfunction returnError() {\n return new Response(\n \"500

500 — Server Error

Sorry, something broke on our end.

\",\n { status: 500, headers: { \"Content-Type\": \"text/html; charset=utf-8\" } },\n );\n}\n\nexport default async function (req: Request): Promise {\n let formData;\n const obj: Record = {};\n\n try {\n formData = await req.formData();\n console.log(\"fd\", formData);\n } catch (_e) {\n return returnError();\n }\n\n if (!verifyForm(formData)) return returnError();\n\n const redirect = formData.get(\"_redirect\");\n\n let formName = \"\";\n /*\n One special field is _formname. If we have it, we include it\n in the subject + email\n */\n\n if (formData.get(\"_formname\")) {\n formName = formData.get(\"_formname\");\n } else {\n formName = `Form at ${req.headers.get(\"referer\") ?? \"unknown\"}`;\n }\n\n const subject = `Form submission: ${formName}`;\n\n for (const key of new Set(formData.keys())) {\n obj[key] = formData.getAll(key).map(String).join(\", \");\n }\n\n let html = `\n

Form Submission - ${formName}

\n\n `;\n\n for (const [key, value] of Object.entries(obj)) {\n console.log(key, value);\n if (SPECIAL_KEYS.indexOf(key) === -1) {\n html += `\n \n `;\n }\n }\n\n html += `\n

${key}

${value}

\n\n

\nForm submitted at ${\n new Intl.DateTimeFormat(\"en-US\", {\n dateStyle: \"short\",\n timeStyle: \"short\",\n timeZone: \"America/Chicago\",\n }).format(new Date())\n }.\n

\n `;\n\n console.log(html);\n\n const emailOptions = {\n // to: \"someone_else@example.com\", this would be formData.get('_email')\n html,\n subject,\n };\n\n if (obj[\"email\"]) emailOptions.replyTo = obj[\"email\"];\n\n await email(emailOptions);\n\n return new Response(null, {\n status: 303,\n headers: { Location: redirect },\n });\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1781880516169],"children",[],[35],"efdee0be-42c0-4a15-8501-7a2f58911410",["D",1781813020512],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An example generic form processing system. ","imageUrl","userId","05b8cc09-f543-41cd-a691-24f2c3f26f7b","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","35145940-b4d3-48e1-a01f-51517fc19afb","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_109":-5,"_110":111,"_71":72,"_112":113,"_114":53},"branch",{"_17":42,"_13":16,"_33":40,"_101":61,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":14,"_108":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yV01aMnpVM0RUR01YVTlNV3E4WEtJdVVVWXYifQ","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":149,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":69,"_70":-5,"_71":72,"_73":-5,"_74":53,"_75":-5,"_76":-5,"_77":78,"_79":80,"_81":-5,"_82":-5,"_83":-5,"_84":-5,"_85":86,"_87":86,"_88":89,"_90":89,"_91":89,"_92":86,"_93":86,"_94":150,"_96":151,"_98":152,"_100":53},[146],"files",[146],"counts",{"_136":78,"_137":138,"_139":78,"_31":140,"_141":142},[134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":135},[35],"pulls","branches",1,"forks",{"_143":78,"_145":78},"connections",{"_143":78,"_144":78},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":147,"_18":148},[],[35],["D",1781813020512],{"_11":12,"_115":111},{"_11":12,"_109":-5,"_110":111,"_71":72,"_112":113,"_114":53},{"_17":42,"_13":16,"_33":40,"_101":61,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":14,"_108":12},"ctx",{"_94":-5,"_131":186,"_187":188,"_189":190,"_191":53,"_192":53,"_193":53,"_194":44,"_195":-5,"_196":-7,"_197":-7,"_198":78,"_199":53,"_200":53,"_201":-5,"_202":53,"_203":53,"_204":53,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":16,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code