A giant fix#2
Open
indiamonda wants to merge 128 commits into
Open
Conversation
When in-page JS concatenates a chunk name onto a proxied+shuffled URL (e.g. Google Boq's kernel_loader doing `BASE + "/" + chunkName`), the position-dependent cipher would mangle the appended bytes on the way back through unshuffle, sending a garbled URL upstream and producing 404s. This was the root cause of the chosic.com / gimkit.com chunk load failures and the "Cannot read properties of undefined (reading 'run')" kernel_loader crashes. The shuffler now emits a length-prefixed v2 format `_rh1<5hex>:<body>` so the unshuffler knows exactly where the shuffled portion ends and preserves any verbatim suffix. Legacy `_rhs<body>` URLs still decode for backward compatibility with already-shipped pages. Made-with: Cursor
- Remove `awswaf.com` and `challenge.js` from `CF_SKIP_RE` so Hammerhead's AST rewriter processes them and successfully spoofs `window.location`. - Update `_fSync` regex to match `cw|` (client+window-sync) cookies so `document.cookie` correctly returns the `aws-waf-token` to the challenge script. - Add `!s` flag to `src` attributes of `<script>` tags in `_liteProcess` and `rwScript` so dynamically loaded scripts are properly identified and rewritten by the proxy. - Ensure `Origin` header correctly uses `reqOrigin` for cross-origin requests (e.g., from `chat.deepseek.com` to `awswaf.com`) instead of spoofing the destination domain. Made-with: Cursor
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The [mounts] section requires a pre-created volume. Removing it allows deployment to proceed without manual volume setup. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Parameter name was shadowing the outer showToast() function, causing the toast notification to not appear when saving a script.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.