-
-
Notifications
You must be signed in to change notification settings - Fork 687
/
confirm.html
162 lines (142 loc) · 4.87 KB
/
confirm.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
<!DOCTYPE html>
<html>
<head>
<title>Confirm Navigation</title>
<style>
html {
background-color: #0000;
}
body {
font-family: Arial, sans-serif;
background-color: #333;
color: #fff;
text-align: center;
padding: 20px 0;
border: 10px dashed rgb(64 65 62);
}
h2 {
color: #f0f0f0;
}
p {
margin: 20px 0;
color: #d9d9d9;
}
#url {
word-wrap: break-word;
margin: 10px auto;
padding: 10px;
background-color: #444;
border: 1px solid #555;
border-radius: 4px;
width: 80%;
max-width: 600px;
}
button {
background-color: #555;
color: #fff;
border: none;
padding: 10px 20px;
margin: 10px;
border-radius: 4px;
cursor: pointer;
transition: background-color 0.3s;
}
button:hover {
background-color: #666;
}
button:active {
background-color: #777;
}
</style>
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
<meta content="text/html;charset=utf-8" http-equiv="Content-Type" />
<meta content="utf-8" http-equiv="encoding" />
<meta name="copyright" content="© 2023 Steve Seguin" />
<meta name="license" content="https://github.com/steveseguin/vdo.ninja/LICENSE.md" />
<meta name="sourcecode" content="https://github.com/steveseguin/vdo.ninja" />
<meta name="stance-on-war" content="Steve Seguin condemns Russia's brutal invasion of Ukraine 💙💛." />
<link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon" />
<link id="favicon1" rel="icon" type="image/png" sizes="32x32" href="./media/favicon-32x32.png" />
<link id="favicon2" rel="icon" type="image/png" sizes="16x16" href="./media/favicon-16x16.png" />
<link id="favicon3" rel="icon" href="./media/favicon.ico" />
<link id="thumbnailUrl" itemprop="thumbnailUrl" href="./media/vdoNinja_logo_full.png" />
<!-- Primary Meta Tags -->
<title>VDO.Ninja</title>
<meta id="metaTitle" name="title" content="VDO.Ninja" />
<meta name="description" content="Bring live video from your smartphone, computer, or friends directly into your Studio. 100% free." />
<meta name="author" content="Steve Seguin" />
</head>
<body>
<h2>Confirm External Page</h2>
<p>You are about to load to the following URL:</p>
<p id="url"></p>
<p>Loading untrusted links may reveal your IP address, location, or attempt to trick you</p>
<p>Do you wish to continue loading it?</p>
<button id="confirmBtn">Confirm</button>
<button id="cancelBtn">Cancel</button>
<script>
function hideURLPath(url) {
try {
var urlObject = new URL(url);
// Count the number of characters in pathname and search
var hiddenPartLength = urlObject.pathname.length + urlObject.search.length;
hiddenPartLength = Math.min(hiddenPartLength,25) - 1;
hiddenPartLength = Math.max(hiddenPartLength,0);
// Generate a string of asterisks of the same length
var hiddenPart = '*'.repeat(hiddenPartLength) || '****'; // Ensure there's at least four asterisks
return urlObject.origin + "/"+ hiddenPart;
} catch (e) {
return 'Invalid URL';
}
}
// Function to get URL parameters
function getParameterByName(name, url = window.location.href) {
name = name.replace(/[\[\]]/g, '\\$&');
var regex = new RegExp('[?&]' + name + '(=([^&#]*)|&|#|$)'),
results = regex.exec(url);
if (!results) return null;
if (!results[2]) return '';
return decodeURIComponent(results[2].replace(/\+/g, ' '));
}
// Function to validate and sanitize the URL
function validateAndSanitizeURL(url) {
// Check if the URL starts with http:// or https://
if (/^(https?:\/\/)/.test(url)) {
return url;
} else {
return null; // Invalid URL
}
}
// Get the URL parameter
var url = getParameterByName('url');
var clean = getParameterByName('clean');
// Validate and sanitize the URL
var sanitizedUrl = validateAndSanitizeURL(url);
// Set the URL in the paragraph
if (sanitizedUrl) {
if (clean!==null){
try {
document.getElementById('url').textContent = hideURLPath(sanitizedUrl);
} catch(e){
document.getElementById('url').textContent = sanitizedUrl;
}
} else {
document.getElementById('url').textContent = sanitizedUrl;
}
} else {
document.getElementById('url').textContent = 'Invalid URL';
}
// Confirm button event
document.getElementById('confirmBtn').addEventListener('click', function() {
if (sanitizedUrl) {
window.location.href = sanitizedUrl;
}
});
// Cancel button event
document.getElementById('cancelBtn').addEventListener('click', function() {
// Redirect to a safe page or simply do nothing
window.location.href = 'about:blank';
});
</script>
</body>
</html>