forked from 1234567Yang/cf-proxy-ex
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy path_worker.js
411 lines (346 loc) · 15.9 KB
/
_worker.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
addEventListener('fetch', event => {
const url = new URL(event.request.url);
thisProxyServerUrlHttps = `${url.protocol}//${url.hostname}/`;
thisProxyServerUrl_hostOnly = url.host;
//console.log(thisProxyServerUrlHttps);
//console.log(thisProxyServerUrl_hostOnly);
event.respondWith(handleRequest(event.request))
})
const str = "/";
const proxyCookie = "__PROXY_VISITEDSITE__";
var thisProxyServerUrlHttps;
var thisProxyServerUrl_hostOnly;
// const CSSReplace = ["https://", "http://"];
const httpRequestInjection = `
//information
var now = new URL(window.location.href);
var path = now.pathname.substring(1);
if(!path.startsWith("http")) path = "https://" + path;
var base = now.host;
var protocol = now.protocol;
var nowlink = protocol + "//" + base + "/";
inject();
//add change listener - new link
window.addEventListener('load', () => {
loopAndConvertToAbs();
obsPage();
});
console.log("WINDOW ONLOAD EVENT ADDED");
function loopAndConvertToAbs(){
for(var ele of document.querySelectorAll('*')){
covToAbs(ele);
}
console.log("LOOPED EVERY ELEMENT");
}
function inject(){
//inject network request
var originalOpen = XMLHttpRequest.prototype.open;
var originalFetch = window.fetch;
XMLHttpRequest.prototype.open = function(method, url, async, user, password) {
if(url.indexOf(base) == -1) url = nowlink + new URL(url, path).href;
console.log("R:" + url);
return originalOpen.apply(this, arguments);
};
window.fetch = function(input, init) {
if(input.indexOf(base) == -1) input = nowlink + new URL(input, path).href;
console.log("R:" + input);
return originalFetch(input, init);
};
console.log("NETWROK REQUEST METHOD INJECTED");
}
function obsPage(){
var yProxyObserverTimeoutId;
var yProxyObserverEles = []; // 初始化 yProxyObserverEles 数组
var yProxyObserver = new MutationObserver(elements => {
yProxyObserverEles = yProxyObserverEles.concat(elements);
clearTimeout(yProxyObserverTimeoutId);
yProxyObserverTimeoutId = setTimeout(() => {
for(var ele of yProxyObserverEles){
covToAbs(ele);
}
yProxyObserverEles = [];
}, 500);
});
var config = { attributes: true, childList: true, subtree: true };
yProxyObserver.observe(document.body, config);
console.log("OBSERVING THE WEBPAGE...");
}
function covToAbs(element){
var relativePath = "";
var setAttr = "";
if (element instanceof HTMLElement && element.hasAttribute("href")) {
relativePath = element.getAttribute("href");
setAttr = "href";
}
if (element instanceof HTMLElement && element.hasAttribute("src")) {
relativePath = element.getAttribute("src");
setAttr = "src";
}
//new URL("a", "htpps://www.google.com/b").href;
if(setAttr != "" && !relativePath.includes(base)){ //!relativePath.includes(nowlink)防止已经改变，因为有observer
if(!relativePath.startsWith("data:") && !relativePath.startsWith("javascript:")){
try{
var absolutePath = nowlink + new URL(relativePath, path).href;
element.setAttribute(setAttr, absolutePath);
}catch{
console.log(path + " " + relativePath);
}
}
}
}
`;
const mainPage = `
<html>
<head>
<style>
body{
background:rgb(150,10,10);
color:rgb(240,240,0);
}
a{
color:rgb(250,250,180);
}
del{
color:rgb(190,190,190);
}
.center{
text-align:center;
}
.important{
font-weight:bold;
font-size:27;
}
</style>
</head>
<body>
<h3 class="center">
I made this project because some extreme annoying network filter software in my school, which is notorious "Goguardian", and now it is open source at <a>https://github.com/1234567Yang/cf-proxy-ex/</a>.
</h3>
<br><br><br>
<ul style="font-size:25;">
<li class="important">How to use this proxy:<br>
Type the website you want to go to after the website's url, for example: <br>
https://the current url/github.com<br>OR<br>https://the current url/https://github.com</li>
<br>
<li>If your browser show 400 bad request, please clear your browser cookie<br></li>
<li>Why I make this:<br> Because school blcok every website that I can find math / CS and other subjects' study material and question solutions. In the eyes of the school, China (and some other countries) seems to be outside the scope of this "world". They block access to server IP addresses in China and block access to Chinese search engines and video websites. Of course, some commonly used social software has also been blocked, which once made it impossible for me to send messages to my parents on campus. I don't think that's how it should be, so I'm going to fight it as hard as I can. I believe this will not only benefit myself, but a lot more people can get benefits.</li>
<li>If this website is blocked by your school: <br>Contact me at <a href="mailto:[email protected]">[email protected]</a>, and I will setup a new webpage.</li>
<li>Limitation:<br>Although I tried my best to make every website proxiable, there still might be pages or resources that can not be load, and the most important part is that <span class="important">YOU SHOULD NEVER LOGIN ANY ACCOUNT VIA ONLINE PROXY</span>.</li>
</ul>
<h1 style="font-size:30">
</h1>
<br><br><br>
<h3>
<br>
<span>Proxies that can bypass the school network blockade:</span>
<br><br>
<span>Traditional VPNs such as <a href="https://hide.me/">hide me</a>.</span>
<br><br>
<a href="https://www.torproject.org/">Tor Browser</a><span>, short for The Onion Router, is free and open-source software for enabling anonymous communication. It directs Internet traffic via a free, worldwide volunteer overlay network that consists of more than seven thousand relays. Using Tor makes it more difficult to trace a user's Internet activity.</span>
<br><br>
<a href="https://v2rayn.org/">v2RayN</a><span> is a GUI client for Windows, support Xray core and v2fly core and others. You must subscribe to an <a href = "https://aijichang.org/6190/">airport</a> to use it. For example, you can subscribe <a href="https://feiniaoyun.xyz/">fly bird cloud</a>.</span>
<br><br>
<span>Bypass <del>Goguardian</del> by proxy: You can buy a domain($1) and setup by yourself: </span><a href="https://github.com/gaboolic/cloudflare-reverse-proxy">how to setup a proxy</a><span>. Unless <del>Goguardian</del> use white list mode, this can always work.</span>
<br>
<span>Too expensive? Never mind! There are a lot of free domains registration companies (for the first year of the domain) that do not need any credit card, search online!</span>
<br><br>
<span>Youtube video unblock: "Thanks" for Russia that they started to invade Ukraine and Google blocked the traffic from Russia, there are a LOT of mirror sites working. You can even <a href="https://github.com/iv-org/invidious">setup</a> one by yourself.</span>
</h3>
<a href="https://goguardian.com" style="visibility:hidden"></a>
<a href="https://blocked.goguardian.com/" style="visibility:hidden"></a>
<a href="https://www.google.com/gen_204" style="visibility:hidden"></a>
<p style="font-size:280px !important;width:100%;location:relative;" class="center">
☭
</p>
</body>
</html>
`;
const redirectError = `
<html><head></head><body><h2>Error while redirecting: the website you want to access to may contain wrong redirect information, and we can not parse the info</h2></body></html>
`;
//new URL(请求路径, base路径).href;
async function handleRequest(request) {
const url = new URL(request.url);
//var siteOnly = url.pathname.substring(url.pathname.indexOf(str) + str.length);
var actualUrlStr = url.pathname.substring(url.pathname.indexOf(str) + str.length) + url.search + url.hash;
if (actualUrlStr == "") { //先返回引导界面
return getHTMLResponse(mainPage);
}
try{
var test = actualUrlStr;
if(!test.startsWith("http")){
test = "https://" + test;
}
var u = new URL(test);
if(!u.host.includes(".")){
throw new Error();
}
}
catch{ //可能是搜素引擎，比如proxy.com/https://www.duckduckgo.com/ 转到 proxy.com/?q=key
var siteCookie = request.headers.get('Cookie');
var lastVisit;
if(siteCookie != null && siteCookie != ""){
lastVisit = getCook(proxyCookie, siteCookie);
console.log(lastVisit);
if(lastVisit != null && lastVisit != ""){
//(!lastVisit.startsWith("http"))?"https://":"" +
//现在的actualUrlStr如果本来不带https:// 的话那么现在也不带，因为判断是否带protocol在后面
return Response.redirect(thisProxyServerUrlHttps + lastVisit + "/" + actualUrlStr, 301);
}
}
return getHTMLResponse("Something is wrong while trying to get your cookie: <br> siteCookie: " + siteCookie + "<br>" + "lastSite: " + lastVisit);
}
if (!actualUrlStr.startsWith("http") && !actualUrlStr.includes("://")) { //从www.xxx.com转到https://www.xxx.com
//actualUrlStr = "https://" + actualUrlStr;
return Response.redirect(thisProxyServerUrlHttps + "https://" + actualUrlStr, 301);
}
//if(!actualUrlStr.endsWith("/")) actualUrlStr += "/";
const actualUrl = new URL(actualUrlStr);
let clientHeaderWithChange = new Headers();
//***代理发送数据的Header：修改部分header防止403 forbidden，要先修改， 因为添加Request之后header是只读的（***ChatGPT，未测试）
for (var pair of request.headers.entries()) {
//console.log(pair[0]+ ': '+ pair[1]);
clientHeaderWithChange.set(pair[0], pair[1].replaceAll(thisProxyServerUrlHttps, actualUrlStr).replaceAll(thisProxyServerUrl_hostOnly, actualUrl.host));
}
const modifiedRequest = new Request(actualUrl, {
headers: clientHeaderWithChange,
method: request.method,
body: request.body,
//redirect: 'follow'
redirect: "manual"
//因为有时候会
//https://www.jyshare.com/front-end/61 重定向到
//https://www.jyshare.com/front-end/61/
//但是相对目录就变了
});
//console.log(actualUrl);
const response = await fetch(modifiedRequest);
if (response.status.toString().startsWith("3") && response.headers.get("Location") != null) {
//console.log(base_url + response.headers.get("Location"))
try {
return Response.redirect(thisProxyServerUrlHttps + new URL(response.headers.get("Location"), actualUrlStr).href, 301);
} catch {
getHTMLResponse(redirectError + "<br>the redirect url:" + response.headers.get("Location") + ";the url you are now at:" + actualUrlStr);
}
}
var modifiedResponse;
var bd;
const contentType = response.headers.get("Content-Type");
if (contentType && contentType.startsWith("text/")){
bd = await response.text();
//bd.includes("<html") //不加>因为html标签上可能加属性 这个方法不好用因为一些JS中竟然也会出现这个字符串
if (contentType && contentType.includes("text/html")) {
//console.log("STR" + actualUrlStr)
bd = covToAbs(bd, actualUrlStr);
bd = "<script>" + httpRequestInjection + "</script>" + bd;
}
//else{
// //const type = response.headers.get('Content-Type');type == null || (type.indexOf("image/") == -1 && type.indexOf("application/") == -1)
// if(actualUrlStr.includes(".css")){ //js不用，因为我已经把网络消息给注入了
// for(var r of CSSReplace){
// bd = bd.replace(r, thisProxyServerUrlHttps + r);
// }
// }
// //问题:在设置css background image 的时候可以使用相对目录
// }
//console.log(bd);
modifiedResponse = new Response(bd, response);
}else{
var blob = await response.blob();
modifiedResponse = new Response(blob, response);
}
let headers = modifiedResponse.headers;
let cookieHeaders = [];
// Collect all 'Set-Cookie' headers regardless of case
for (let [key, value] of headers.entries()) {
if (key.toLowerCase() == 'set-cookie') {
cookieHeaders.push({ headerName: key, headerValue: value });
}
}
if (cookieHeaders.length > 0) {
cookieHeaders.forEach(cookieHeader => {
let cookies = cookieHeader.headerValue.split(',').map(cookie => cookie.trim());
for (let i = 0; i < cookies.length; i++) {
let parts = cookies[i].split(';').map(part => part.trim());
//console.log(parts);
// Modify Path
let pathIndex = parts.findIndex(part => part.toLowerCase().startsWith('path='));
let originalPath;
if (pathIndex !== -1) {
originalPath = parts[pathIndex].substring("path=".length);
}
let absolutePath = "/" + new URL(originalPath, actualUrlStr).href;;
if (pathIndex !== -1) {
parts[pathIndex] = `Path=${absolutePath}`;
} else {
parts.push(`Path=${absolutePath}`);
}
// Modify Domain
let domainIndex = parts.findIndex(part => part.toLowerCase().startsWith('domain='));
if (domainIndex !== -1) {
parts[domainIndex] = `domain=${thisProxyServerUrl_hostOnly}`;
} else {
parts.push(`domain=${thisProxyServerUrl_hostOnly}`);
}
cookies[i] = parts.join('; ');
}
// Re-join cookies and set the header
headers.set(cookieHeader.headerName, cookies.join(', '));
});
}
//bd != null && bd.includes("<html")
if (contentType && contentType.includes("text/html")) { //如果是HTML再加cookie，因为有些网址会通过不同的链接添加CSS等文件
let cookieValue = proxyCookie + "=" + actualUrl.origin + "; Path=/; Domain=" + thisProxyServerUrl_hostOnly;
//origin末尾不带/
//例如：console.log(new URL("https://www.baidu.com/w/s?q=2#e"));
//origin: "https://www.baidu.com"
headers.append("Set-Cookie", cookieValue);
}
// 添加允许跨域访问的响应头
modifiedResponse.headers.set('Access-Control-Allow-Origin', '*');
modifiedResponse.headers.set("Content-Security-Policy", "");
modifiedResponse.headers.set("X-Frame-Options", "");
return modifiedResponse;
}
//https://stackoverflow.com/questions/5142337/read-a-javascript-cookie-by-name
function getCook(cookiename, cookies) {
// Get name followed by anything except a semicolon
var cookiestring=RegExp(cookiename + "=[^;]+").exec(cookies);
// Return everything after the equal sign, or an empty string if the cookie name not found
return decodeURIComponent(!!cookiestring ? cookiestring.toString().replace(/^[^=]+./,"") : "");
}
const matchList = [[/href=("|')([^"']*)("|')/g, `href="`], [/src=("|')([^"']*)("|')/g, `src="`]];
function covToAbs(body, requestPathNow) {
for (var match of matchList) {
var setAttr = body.matchAll(match[0]);
if (setAttr != null) {
for (var replace of setAttr) {
if (replace.length == 0) continue;
var strReplace = replace[0];
if (!strReplace.includes(thisProxyServerUrl_hostOnly)) {
if(!strReplace.includes("*")){ //可能是正则匹配，如chat.bing.com中的<script>中有一段代码：u.replace(/href="[^"]*"/,'href…………
//TODO: 用更多方式判断是否是正则，欢迎PR
var relativePath = strReplace.substring(match[1].toString().length, strReplace.length - 1); //-1因为右边的引号
if (!relativePath.startsWith("data:") && !relativePath.startsWith("javascript:")) {
try {
var absolutePath = thisProxyServerUrlHttps + new URL(relativePath, requestPathNow).href;
body = body.replace(strReplace, match[1].toString() + absolutePath + `"`);
} catch {
//可能是网站的href或者src设置错误
//无视
}
}
}
}
}
}
}
return body;
}
function getHTMLResponse(html) {
return new Response(html, {
headers: {
"Content-Type": "text/html; charset=utf-8"
}
});
}