viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[ci skip] Fix narrow iframe content and strip anti-debug scripts in proxy

Browse source 
- Remove flex centering from browser-viewer-content; use absolute positioning
  for iframe to fill the entire container
- Strip disable-devtool and devtools-detect script tags from proxied HTML
- Add JS shim hooks to neutralize setInterval-based debugger traps and block
  loading of anti-debug scripts via setAttribute
- Bump image to v1.2.5
This commit is contained in:
Viktor Barzin 2026-02-21 21:32:39 +00:00
parent 0c2c48802f
commit fc0e1c3c6e
3 changed files with 24 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

21
modules/kubernetes/f1-stream/files/internal/proxy/proxy.go
View file

@ -91,6 +91,19 @@ if(_ss&&_ss.set){Object.defineProperty(el,'src',{get:function(){return _ss.get?_
}
return el;
};
/* Neutralize anti-debug: override setInterval to skip debugger-based detection */
var _si=window.setInterval;
window.setInterval=function(fn,ms){
if(typeof fn==='function'){var s=fn.toString();if(s.indexOf('debugger')!==-1||s.indexOf('devtool')!==-1)return 0;}
if(typeof fn==='string'&&(fn.indexOf('debugger')!==-1||fn.indexOf('devtool')!==-1))return 0;
return _si.apply(this,arguments);
};
/* Block loading of known anti-debug scripts */
var _ael=HTMLScriptElement.prototype.setAttribute;
HTMLScriptElement.prototype.setAttribute=function(n,v){
if(n==='src'&&typeof v==='string'&&(v.indexOf('disable-devtool')!==-1||v.indexOf('devtools-detect')!==-1)){return;}
return _ael.apply(this,arguments);
};
})();</script>`
// NewHandler returns an http.Handler that serves the reverse proxy at /proxy/.
@ -282,6 +295,9 @@ var rootRelativeCSSRe = regexp.MustCompile(`(url\(\s*["']?)/([^/"')[^"')]*)(["']
// crossOriginIframeSrcRe matches <iframe src="https://..."> to proxy cross-origin embeds.
var crossOriginIframeSrcRe = regexp.MustCompile(`(<iframe[^>]*\ssrc\s*=\s*["'])(https?://[^"']+)(["'])`)
// disableDevtoolRe matches <script> tags that load disable-devtool or similar anti-debug libraries.
var disableDevtoolRe = regexp.MustCompile(`(?i)<script[^>]*(?:disable-devtool|devtools-detect)[^>]*>(?:</script>)?`)
// rewriteHTML replaces URLs and injects the JS shim to intercept runtime requests.
func rewriteHTML(body, origin, b64Origin string) string {
proxyPrefix := "/proxy/" + b64Origin
@ -340,7 +356,10 @@ func rewriteHTML(body, origin, b64Origin string) string {
return prefix + "/proxy/" + iframeB64 + parsed.RequestURI() + quote
})
// 5. Inject JS shim right after <head> to intercept fetch/XHR/WebSocket
// 5. Strip anti-debugging scripts (disable-devtool, devtools-detect)
body = disableDevtoolRe.ReplaceAllString(body, "")
// 6. Inject JS shim right after <head> to intercept fetch/XHR/WebSocket
shim := fmt.Sprintf(jsShimTemplate, b64Origin, origin)
headIdx := strings.Index(strings.ToLower(body), "<head>")
if headIdx != -1 {

7
modules/kubernetes/f1-stream/files/static/css/custom.css
View file

@ -1321,9 +1321,6 @@ dialog .dialog-cancel:hover {
overflow: hidden;
position: relative;
background: #000;
display: flex;
align-items: center;
justify-content: center;
min-height: calc(100vh - 180px);
}
@ -1335,10 +1332,12 @@ dialog .dialog-cancel:hover {
}
.browser-iframe {
position: absolute;
top: 0;
left: 0;
width: 100%;
height: 100%;
border: none;
flex: 1;
}
.browser-viewer-content .loading-overlay {

2
modules/kubernetes/f1-stream/main.tf
View file

@ -37,7 +37,7 @@ resource "kubernetes_deployment" "f1-stream" {
}
spec {
container {
image = "viktorbarzin/f1-stream:v1.2.4"
image = "viktorbarzin/f1-stream:v1.2.5"
name = "f1-stream"
resources {
limits = {