cors: remove XFO header

common: add package name to clients
cors: fix youtube embeds not working on mobile
2026-08-13 20:10:18 +02:00 · 2026-03-25 20:46:54 +05:00 · 2026-03-25 11:11:07 +05:00 · 2026-03-20 12:35:36 +05:00
3 changed files with 9 additions and 7 deletions
@@ -39,6 +39,7 @@ namespace Streetwriters.Common
            AppId = ApplicationType.NOTESNOOK,
            AccountRecoveryRedirectURL = $"{Constants.NOTESNOOK_APP_HOST}/account/recovery",
            EmailConfirmedRedirectURL = $"{Constants.NOTESNOOK_APP_HOST}/account/verified",
            PackageName = "com.streetwriters.notesnook",
            OnEmailConfirmed = async (userId) =>
            {
                await WampServers.MessengerServer.PublishMessageAsync(MessengerServerTopics.SendSSETopic, new SendSSEMessage
@@ -39,6 +39,7 @@ namespace Streetwriters.Common.Models
        public required string SenderName { get; set; }
        public required string EmailConfirmedRedirectURL { get; set; }
        public required string AccountRecoveryRedirectURL { get; set; }
        public required string PackageName { get; set; }
        public Func<string, Task>? OnEmailConfirmed { get; set; }
    }
@@ -39,7 +39,7 @@ function isValidUrl(urlString: string): boolean {
 // Handle proxied request with redirect support
 async function proxyRequest(
  targetUrl: string,
-  redirectCount = 0
+  redirectCount = 0,
 ): Promise<Response> {
  if (redirectCount >= MAX_REDIRECTS) {
    return new Response("Too many redirects", {
@@ -147,7 +147,7 @@ const server = Bun.serve({
          method2: "GET /?url=<encoded-url>",
          example1: `${url.origin}/https://example.com/image.jpg`,
          example2: `${url.origin}/?url=${encodeURIComponent(
-            "https://example.com/image.jpg"
+            "https://example.com/image.jpg",
          )}`,
        },
        endpoints: {
@@ -190,7 +190,7 @@ const server = Bun.serve({
        {
          status: 400,
          headers: corsHeaders,
-        }
+        },
      );
    }
@@ -218,8 +218,8 @@ const server = Bun.serve({
        status: 200,
        headers: {
          "Content-Type": "text/html; charset=utf-8",
-          "Content-Security-Policy": "frame-ancestors *",
+          // "Content-Security-Policy": "frame-ancestors *",
-          "X-Frame-Options": "ALLOWALL",
+          // "X-Frame-Options": "ALLOWALL",
        },
      });
    }
@@ -239,7 +239,7 @@ const server = Bun.serve({
 });
 console.log(
-  `🚀 CORS Proxy Server running on http://${server.hostname}:${server.port}`
+  `🚀 CORS Proxy Server running on http://${server.hostname}:${server.port}`,
 );
 console.log(`📋 Health check: http://${server.hostname}:${server.port}/health`);
 console.log(`🌍 Environment: ${Bun.env.NODE_ENV || "development"}`);
@@ -280,7 +280,7 @@ function serveYouTubeEmbed(url: string) {
 </head>
 <body>
    <iframe src="${transformYouTubeUrl(
-      url
+      url,
    )}" allow="accelerometer;autoplay;clipboard-write;encrypted-media;gyroscope;picture-in-picture;web-share" allowfullscreen referrerpolicy="strict-origin-when-cross-origin" title="Video player"></iframe>
 </body>
 </html>`;
Author	SHA1	Message	Date
Abdullah Atta	da58262afb	cors: remove XFO header	2026-03-25 20:46:54 +05:00
Abdullah Atta	864baa702b	common: add package name to clients	2026-03-25 11:11:07 +05:00
Abdullah Atta	55c5cd0a7c	cors: fix youtube embeds not working on mobile	2026-03-20 12:35:36 +05:00