[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":53,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","7727ff0e-8c0b-11f1-9870-1607ee4eb77e","name","fileType","http","content","// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n return Response.json({ ok: true })\n}","// Bounce Tracking Protection demo — bounce server (host this on a SEPARATE domain\n// from bounce-demo.ts, otherwise there is no cross-site bounce to protect against).\n//\n// Routes:\n// /cookie_bounce?return_url=... sets a cookie, then bounces back\n// /storage_bounce?return_url=... sets localStorage, then bounces back\n// /helper?return_url=... reads both, bounces back with btp_cookie / btp_storage\n\n// Used when a request arrives without a return_url.\nconst DEFAULT_RETURN_URL = \"https://bounce-demo.val.run\";\n\n// Origins this server is allowed to redirect back to. Leave empty to allow any\n// https origin (convenient while testing, but it makes this an open redirect).\nconst ALLOWED_RETURN_ORIGINS: string[] = [];\n\nconst TRACKING_KEY = \"btp_tracking_id\";\n\nconst cookieBounceHtml = `\n\n\n \n \n \n Cookie Bounce\n \n \n \n

Setting cookie and bouncing back…

\n \n \n\n`;\n\nconst storageBounceHtml = `\n\n\n \n \n \n Storage Bounce\n \n \n \n

Setting localStorage and bouncing back…

\n \n \n\n`;\n\nconst helperHtml = `\n\n\n \n \n \n Read Tracking IDs\n \n \n \n

Reading tracking IDs and bouncing back…

\n \n \n\n`;\n\nconst indexHtml = `\n\n\n \n \n \n Bounce Server\n \n \n

Bounce Tracking Protection — Bounce Server

This domain is the bounce target. Open the demo page instead; these routes\n are meant to be navigated to, not viewed directly.

/cookie_bounce?return_url=... — sets a cookie, bounces back
/storage_bounce?return_url=... — sets localStorage, bounces back
/helper?return_url=... — reports both back as query params

\n \n\n`;\n\n// Escape for embedding inside a double-quoted JS string literal in the page.\nfunction jsString(value: string): string {\n return value\n .replace(/\\\\/g, \"\\\\\\\\\")\n .replace(/\"/g, '\\\\\"')\n .replace(/ 0 &&\n !ALLOWED_RETURN_ORIGINS.includes(parsed.origin)\n ) {\n return DEFAULT_RETURN_URL;\n }\n return parsed.toString();\n}\n\nfunction bouncePage(template: string, returnUrl: string): Response {\n const body = template\n .replace(\"__RETURN_URL__\", jsString(returnUrl))\n .replace(\"__TRACKING_KEY__\", jsString(TRACKING_KEY));\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n // Always re-run the bounce logic rather than serving a cached page.\n \"cache-control\": \"no-store\",\n },\n });\n}\n\n// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const returnUrl = resolveReturnUrl(url);\n\n if (url.pathname === \"/cookie_bounce\") {\n return bouncePage(cookieBounceHtml, returnUrl);\n }\n\n if (url.pathname === \"/storage_bounce\") {\n return bouncePage(storageBounceHtml, returnUrl);\n }\n\n if (url.pathname === \"/helper\") {\n return bouncePage(helperHtml, returnUrl);\n }\n\n if (url.pathname === \"/\") {\n return new Response(indexHtml, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n }\n\n return new Response(\"Not found\", { status: 404 });\n}","createdAt",["D",1785411683325],"branchVersion","branchId","6d2e43ab-aa23-4d3f-b9be-5370f24b5ff6","id","95767693-f82d-41a7-b0e5-510756e757a0","bounce-server",["D",1785411629612],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","99e6832d-c31c-4461-8b4f-4d1fadfb6895","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019fb284-817a-754d-b95e-3ff8e28b627c","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",5,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","testsprivacy","handle","displayName","Test","avatar","https://lh3.googleusercontent.com/a/ACg8ocIHl3Yn6Vurlt9n6hZMwUdwDHC_K2jf2v6RGL15sVQnrE-wsA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":151,"_80":152,"_82":153,"_84":25},"tree",[145],"files",[145],"counts",{"_134":62,"_135":136,"_137":62,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":45,"_27":133},"8a128b14-b575-4aef-8246-ec7fe8d24ab5","parentId","latest",["D",1785411683325],3,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":62,"_144":62},"connections",{"_142":62,"_143":62},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":146,"_13":131,"_33":34,"_35":37,"_24":25,"_132":45,"_147":148,"_27":149},["D",1785411683325],"children",[],[28],["D",1785411629612],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_123":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":58,"_196":-5,"_197":-7,"_198":-7,"_199":62,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":86,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4