BAB Proxy (Cloudflare Workers)

Self-hosted CORS proxy for Blogs Are Back — deploy your own proxy to fetch RSS feeds and extract article content without CORS restrictions.

One-Click Deploy

1. Click the button above
2. Sign in to Cloudflare (free account works)
3. Authorize the deployment
4. Copy your worker URL (e.g., https://bab-proxy.username.workers.dev)
5. In BAB: Settings → Custom Proxy → Paste URL → Validate

Features

• 100,000 requests/day on free tier
• Feed fetching — RSS/Atom with conditional GET support
• Content extraction — Mozilla Readability via linkedom
• Zero cold starts — instant response times
• SSRF protection — blocks private IPs and metadata endpoints
• Optional API key — restrict access to your proxy

Manual Deployment

# Clone the repo
git clone https://github.com/blogsareback/bab-proxy-worker.git
cd bab-proxy-worker

# Install dependencies
npm install

# Deploy
npm run deploy

Configuration

Add API Key (Optional)

Protect your proxy with an API key:

# Via Wrangler CLI
npx wrangler secret put BAB_API_KEY
# Enter your secret when prompted

Or via the Cloudflare dashboard:

1. Go to Workers & Pages → Your Worker → Settings → Variables
2. Add BAB_API_KEY as an encrypted variable

Then in BAB, enter the same key in Settings → Custom Proxy → API Key.

Configure Allowed Origins (Optional)

Restrict which domains can use your proxy:

npx wrangler secret put ALLOWED_ORIGINS
# Enter comma-separated origins, e.g.: https://blogsareback.com,https://localhost:3000

API Endpoints

GET /health

Check proxy status and capabilities.

{
  "ok": true,
  "version": "2.0.0",
  "provider": "cloudflare-worker",
  "capabilities": ["fetch", "parse"]
}

POST /fetch

Fetch an RSS/Atom feed.

Request:

{
  "url": "https://example.com/feed.xml",
  "headers": {
    "If-None-Match": "\"abc123\""
  },
  "timeout": 10000
}

Response:

{
  "success": true,
  "status": 200,
  "headers": {
    "content-type": "application/rss+xml",
    "etag": "\"abc123\""
  },
  "body": "<?xml version=\"1.0\"?>..."
}

POST /parse

Extract article content from a webpage.

Request:

{
  "url": "https://blog.example.com/post",
  "format": "both",
  "timeout": 15000
}

Response:

{
  "success": true,
  "title": "Article Title",
  "byline": "Author Name",
  "siteName": "Example Blog",
  "excerpt": "A summary...",
  "length": 5000,
  "htmlContent": "<div>HTML content...</div>",
  "textContent": "Plain text content...",
  "image": "https://example.com/og-image.jpg"
}

Limits

Resource	Limit
Requests/day (free)	100,000
Response size	10 MB
HTML size (parse)	5 MB
Timeout	30 seconds max
CPU time (free tier)	10ms

Note: The /parse endpoint may hit CPU limits on very complex pages. For heavy parsing workloads, consider using BAB's server-side parsing or a Vercel/Docker deployment.

Local Development

npm install
npm run dev

This starts a local server at http://localhost:8787.

Security

This proxy includes SSRF protection that blocks:

• Private IP ranges (10.x, 172.16-31.x, 192.168.x, 127.x)
• Cloud metadata endpoints (169.254.169.254)
• Local hostnames (localhost, *.local)