WIP: write version on build to form HTML

.github/workflows/release-binaries.yaml

@@ -22,7 +22,11 @@ jobs:
       -
         name: Set version
         run: |
-          echo -n $(git describe --tags --abbrev=0) > handlers/VERSION
+          VERSION=$(git describe --tags --abbrev=0)
+          echo -n $VERSION > handlers/VERSION
+          sed -i 's\VERSION\${VERSION}\g' handlers/form.html
+          echo handlers/form.html >> .gitignore
+          echo .gitignore >> .gitignore
       -
         name: Set up Go
         uses: actions/setup-go@v3

.github/workflows/release-docker.yaml

@@ -42,7 +42,11 @@ jobs:
       - name: Set version
         id: version
         run: |
-          echo ${GITHUB_REF#refs/tags/v} > handlers/VERSION
+          VERSION=$(git describe --tags --abbrev=0)
+          echo -n $VERSION > handlers/VERSION
+          sed -i 's\VERSION\${VERSION}\g' handlers/form.html
+          echo handlers/form.html >> .gitignore
+          echo .gitignore >> .gitignore
 
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer

README.md

@@ -48,12 +48,12 @@ Certain sites may display missing images or encounter formatting issues. This ca
 
 ### Binary
 1) Download binary [here](https://github.com/everywall/ladder/releases/latest)
-2) Unpack and run the binary `./ladder -r https://t.ly/14PSf`
+2) Unpack and run the binary `./ladder`
 3) Open Browser (Default: http://localhost:8080)
 
 ### Docker
 ```bash
-docker run -p 8080:8080 -d --env RULESET=https://t.ly/14PSf --name ladder ghcr.io/everywall/ladder:latest
+docker run -p 8080:8080 -d --name ladder ghcr.io/everywall/ladder:latest
 ```
 
 ### Docker Compose
@@ -106,7 +106,7 @@ http://localhost:8080/ruleset
 | `LOG_URLS` | Log fetched URL's | `true` |
 | `DISABLE_FORM` | Disables URL Form Frontpage | `false` |
 | `FORM_PATH` | Path to custom Form HTML | `` |
-| `RULESET` | Path or URL to a ruleset file, accepts local directories | `https://raw.githubusercontent.com/everywall/ladder-rules/main/ruleset.yaml` or `/path/to/my/rules.yaml` or `/path/to/my/rules/` |
+| `RULESET` | URL to a ruleset file | `https://raw.githubusercontent.com/everywall/ladder/main/ruleset.yaml` or `/path/to/my/rules.yaml` |
 | `EXPOSE_RULESET` | Make your Ruleset available to other ladders | `true` |
 | `ALLOWED_DOMAINS` | Comma separated list of allowed domains. Empty = no limitations | `` |
 | `ALLOWED_DOMAINS_RULESET` | Allow Domains from Ruleset. false = no limitations | `false` |
@@ -115,10 +115,9 @@ http://localhost:8080/ruleset
 
 ### Ruleset
 
-It is possible to apply custom rules to modify the response or the requested URL. This can be used to remove unwanted or modify elements from the page. The ruleset is a YAML file, a directory with YAML Files, or an URL to a YAML file that contains a list of rules for each domain. These rules are loaded on startup.
+It is possible to apply custom rules to modify the response or the requested URL. This can be used to remove unwanted or modify elements from the page. The ruleset is a YAML file that contains a list of rules for each domain and is loaded on startup
-
-There is a basic ruleset available in a separate repository [ruleset.yaml](https://raw.githubusercontent.com/everywall/ladder-rules/main/ruleset.yaml). Feel free to add your own rules and create a pull request.
 
+See in [ruleset.yaml](ruleset.yaml) for an example.
 
 ```yaml
 - domain: example.com          # Includes all subdomains
@@ -177,7 +176,7 @@ There is a basic ruleset available in a separate repository [ruleset.yaml](https
 To run a development server at http://localhost:8080:
 
 ```bash
-echo "dev" > handlers/VERSION
+echo "DEV" > handler/VERSION
 RULESET="./ruleset.yaml" go run cmd/main.go
 ```
 

cmd/main.go

@@ -8,7 +8,6 @@ import (
 	"strings"
 
 	"ladder/handlers"
-	"ladder/internal/cli"
 
 	"github.com/akamensky/argparse"
 	"github.com/gofiber/fiber/v2"
@@ -18,7 +17,6 @@ import (
 
 //go:embed favicon.ico
 var faviconData string
-
 //go:embed styles.css
 var cssData embed.FS
 
@@ -40,46 +38,11 @@ func main() {
 		Help:     "This will spawn multiple processes listening",
 	})
 
-	verbose := parser.Flag("v", "verbose", &argparse.Options{
-		Required: false,
-		Help:     "Adds verbose logging",
-	})
-
-	// TODO: add version flag that reads from handers/VERSION
-
-	ruleset := parser.String("r", "ruleset", &argparse.Options{
-		Required: false,
-		Help:     "File, Directory or URL to a ruleset.yaml. Overrides RULESET environment variable.",
-	})
-
-	mergeRulesets := parser.Flag("", "merge-rulesets", &argparse.Options{
-		Required: false,
-		Help:     "Compiles a directory of yaml files into a single ruleset.yaml. Requires --ruleset arg.",
-	})
-	mergeRulesetsGzip := parser.Flag("", "merge-rulesets-gzip", &argparse.Options{
-		Required: false,
-		Help:     "Compiles a directory of yaml files into a single ruleset.gz Requires --ruleset arg.",
-	})
-	mergeRulesetsOutput := parser.String("", "merge-rulesets-output", &argparse.Options{
-		Required: false,
-		Help:     "Specify output file for --merge-rulesets and --merge-rulesets-gzip. Requires --ruleset and --merge-rulesets args.",
-	})
-
 	err := parser.Parse(os.Args)
 	if err != nil {
 		fmt.Print(parser.Usage(err))
 	}
 
-	// utility cli flag to compile ruleset directory into single ruleset.yaml
-	if *mergeRulesets || *mergeRulesetsGzip {
-		err = cli.HandleRulesetMerge(ruleset, mergeRulesets, mergeRulesetsGzip, mergeRulesetsOutput)
-		if err != nil {
-			fmt.Println(err)
-			os.Exit(1)
-		}
-		os.Exit(0)
-	}
-
 	if os.Getenv("PREFORK") == "true" {
 		*prefork = true
 	}
@@ -91,7 +54,6 @@ func main() {
 		},
 	)
 
-	// TODO: move to cmd/auth.go
 	userpass := os.Getenv("USERPASS")
 	if userpass != "" {
 		userpass := strings.Split(userpass, ":")
@@ -102,7 +64,6 @@ func main() {
 		}))
 	}
 
-	// TODO: move to handlers/favicon.go
 	app.Use(favicon.New(favicon.Config{
 		Data: []byte(faviconData),
 		URL:  "/favicon.ico",
@@ -116,8 +77,6 @@ func main() {
 	}
 
 	app.Get("/", handlers.Form)
-
-	// TODO: move this logic to handers/styles.go
 	app.Get("/styles.css", func(c *fiber.Ctx) error {
 		cssData, err := cssData.ReadFile("styles.css")
 		if err != nil {
@@ -126,17 +85,11 @@ func main() {
 		c.Set("Content-Type", "text/css")
 		return c.Send(cssData)
 	})
-
 	app.Get("ruleset", handlers.Ruleset)
 
 	app.Get("raw/*", handlers.Raw)
 	app.Get("api/*", handlers.Api)
+	app.Get("/*", handlers.ProxySite)
 
-	proxyOpts := &handlers.ProxyOptions{
-		Verbose:     *verbose,
-		RulesetPath: *ruleset,
-	}
-
-	app.Get("/*", handlers.NewProxySiteHandler(proxyOpts))
 	log.Fatal(app.Listen(":" + *port))
 }

docker-compose.yaml

@@ -9,11 +9,10 @@ services:
     environment:
       - PORT=8080
       - RULESET=/app/ruleset.yaml
-      #- ALLOWED_DOMAINS=example.com,example.org
       #- ALLOWED_DOMAINS_RULESET=false
       #- EXPOSE_RULESET=true
       #- PREFORK=false
-      #- DISABLE_FORM=false
+      #- DISABLE_FORM=fase
       #- FORM_PATH=/app/form.html
       #- X_FORWARDED_FOR=66.249.66.1
       #- USER_AGENT=Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

go.mod

@@ -24,7 +24,6 @@ require (
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
 	github.com/valyala/fasthttp v1.50.0 // indirect
 	github.com/valyala/tcplisten v1.0.0 // indirect
-	golang.org/x/net v0.18.0
+	golang.org/x/net v0.18.0 // indirect
 	golang.org/x/sys v0.14.0 // indirect
-	golang.org/x/term v0.14.0
 )

go.sum

@@ -68,8 +68,6 @@ golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9sn
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.7.0/go.mod h1:P32HKFT3hSsZrRxla30E9HqToFYAQPCMs/zFMBUFqPY=
-golang.org/x/term v0.14.0 h1:LGK9IlZ8T9jvdy6cTdfKUCltatMFOehAQo9SRC46UQ8=
-golang.org/x/term v0.14.0/go.mod h1:TySc+nGkYR6qt8km8wUhuFRTVSMIX3XPR58y2lC8vww=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=

handlers/form.html

@@ -28,8 +28,8 @@
         <footer class="mt-10 mx-4 text-center text-slate-600 dark:text-slate-400">
             <p>
                 Code Licensed Under GPL v3.0 |
-                <a href="https://github.com/everywall/ladder" class="hover:text-blue-500 hover:underline underline-offset-2 transition-colors duration-300">View Source</a> |
+                <a href="https://github.com/everywall/ladder" class="hover:text-blue-500 hover:underline underline-offset-2 transition-colors duration-300">Source</a> |
-                <a href="https://github.com/everywall" class="hover:text-blue-500 hover:underline underline-offset-2 transition-colors duration-300">Everywall</a>
+                <a href="https://github.com/everywall/ladder/releases" class="hover:text-blue-500 hover:underline underline-offset-2 transition-colors duration-300">VERSION</a>
             </p>
         </footer>
     </div>

handlers/proxy.go

@@ -10,64 +10,93 @@ import (
 	"regexp"
 	"strings"
 
-	"ladder/pkg/ruleset"
-	"ladder/proxychain"
-	rx "ladder/proxychain/requestmodifers"
-	tx "ladder/proxychain/responsemodifers"
-
 	"github.com/PuerkitoBio/goquery"
 	"github.com/gofiber/fiber/v2"
+	"gopkg.in/yaml.v3"
 )
 
 var (
 	UserAgent      = getenv("USER_AGENT", "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)")
 	ForwardedFor   = getenv("X_FORWARDED_FOR", "66.249.66.1")
-	rulesSet       = ruleset.NewRulesetFromEnv()
+	rulesSet       = loadRules()
-	allowedDomains = []string{}
+	allowedDomains = strings.Split(os.Getenv("ALLOWED_DOMAINS"), ",")
 )
 
-func init() {
+// extracts a URL from the request ctx. If the URL in the request
-	allowedDomains = strings.Split(os.Getenv("ALLOWED_DOMAINS"), ",")
+// is a relative path, it reconstructs the full URL using the referer header.
-	if os.Getenv("ALLOWED_DOMAINS_RULESET") == "true" {
+func extractUrl(c *fiber.Ctx) (string, error) {
-		allowedDomains = append(allowedDomains, rulesSet.Domains()...)
+	// try to extract url-encoded
+	reqUrl, err := url.QueryUnescape(c.Params("*"))
+	if err != nil {
+		// fallback
+		reqUrl = c.Params("*")
 	}
-}
 
-type ProxyOptions struct {
+	// Extract the actual path from req ctx
-	RulesetPath string
+	urlQuery, err := url.Parse(reqUrl)
-	Verbose     bool
+	if err != nil {
-}
+		return "", fmt.Errorf("error parsing request URL '%s': %v", reqUrl, err)
+	}
 
-func NewProxySiteHandler(opts *ProxyOptions) fiber.Handler {
+	isRelativePath := urlQuery.Scheme == ""
-	/*
+
-		var rs ruleset.RuleSet
+	// eg: https://localhost:8080/images/foobar.jpg -> https://realsite.com/images/foobar.jpg
-		if opts.RulesetPath != "" {
+	if isRelativePath {
-			r, err := ruleset.NewRuleset(opts.RulesetPath)
+		// Parse the referer URL from the request header.
-			if err != nil {
+		refererUrl, err := url.Parse(c.Get("referer"))
-				panic(err)
+		if err != nil {
-			}
+			return "", fmt.Errorf("error parsing referer URL from req: '%s': %v", reqUrl, err)
-			rs = r
 		}
-	*/
 
-	return func(c *fiber.Ctx) error {
+		// Extract the real url from referer path
-		proxychain := proxychain.
+		realUrl, err := url.Parse(strings.TrimPrefix(refererUrl.Path, "/"))
-			NewProxyChain().
+		if err != nil {
-			SetDebugLogging(opts.Verbose).
+			return "", fmt.Errorf("error parsing real URL from referer '%s': %v", refererUrl.Path, err)
-			SetRequestModifications(
+		}
-				rx.DeleteOutgoingCookies(),
+
-				//rx.RequestArchiveIs(),
+		// reconstruct the full URL using the referer's scheme, host, and the relative path / queries
-			).
+		fullUrl := &url.URL{
-			AddResponseModifications(
+			Scheme:   realUrl.Scheme,
-				tx.DeleteIncomingCookies(),
+			Host:     realUrl.Host,
-				tx.RewriteHTMLResourceURLs(),
+			Path:     urlQuery.Path,
-			)
+			RawQuery: urlQuery.RawQuery,
-		return proxychain.SetFiberCtx(c).Execute()
+		}
+
+		if os.Getenv("LOG_URLS") == "true" {
+			log.Printf("modified relative URL: '%s' -> '%s'", reqUrl, fullUrl.String())
+		}
+		return fullUrl.String(), nil
+
 	}
 
+	// default behavior:
+	// eg: https://localhost:8080/https://realsite.com/images/foobar.jpg -> https://realsite.com/images/foobar.jpg
+	return urlQuery.String(), nil
+
 }
 
-func modifyURL(uri string, rule ruleset.Rule) (string, error) {
+func ProxySite(c *fiber.Ctx) error {
+	// Get the url from the URL
+	url, err := extractUrl(c)
+	if err != nil {
+		log.Println("ERROR In URL extraction:", err)
+	}
+
+	queries := c.Queries()
+	body, _, resp, err := fetchSite(url, queries)
+	if err != nil {
+		log.Println("ERROR:", err)
+		c.SendStatus(fiber.StatusInternalServerError)
+		return c.SendString(err.Error())
+	}
+
+	c.Set("Content-Type", resp.Header.Get("Content-Type"))
+	c.Set("Content-Security-Policy", resp.Header.Get("Content-Security-Policy"))
+
+	return c.SendString(body)
+}
+
+func modifyURL(uri string, rule Rule) (string, error) {
 	newUrl, err := url.Parse(uri)
 	if err != nil {
 		return "", err
@@ -175,7 +204,7 @@ func fetchSite(urlpath string, queries map[string]string) (string, *http.Request
 	}
 
 	if rule.Headers.CSP != "" {
-		//log.Println(rule.Headers.CSP)
+		log.Println(rule.Headers.CSP)
 		resp.Header.Set("Content-Security-Policy", rule.Headers.CSP)
 	}
 
@@ -184,7 +213,7 @@ func fetchSite(urlpath string, queries map[string]string) (string, *http.Request
 	return body, req, resp, nil
 }
 
-func rewriteHtml(bodyB []byte, u *url.URL, rule ruleset.Rule) string {
+func rewriteHtml(bodyB []byte, u *url.URL, rule Rule) string {
 	// Rewrite the HTML
 	body := string(bodyB)
 
@@ -218,11 +247,63 @@ func getenv(key, fallback string) string {
 	return value
 }
 
-func fetchRule(domain string, path string) ruleset.Rule {
+func loadRules() RuleSet {
-	if len(rulesSet) == 0 {
+	rulesUrl := os.Getenv("RULESET")
-		return ruleset.Rule{}
+	if rulesUrl == "" {
+		RulesList := RuleSet{}
+		return RulesList
 	}
-	rule := ruleset.Rule{}
+	log.Println("Loading rules")
+
+	var ruleSet RuleSet
+	if strings.HasPrefix(rulesUrl, "http") {
+
+		resp, err := http.Get(rulesUrl)
+		if err != nil {
+			log.Println("ERROR:", err)
+		}
+		defer resp.Body.Close()
+
+		if resp.StatusCode >= 400 {
+			log.Println("ERROR:", resp.StatusCode, rulesUrl)
+		}
+
+		body, err := io.ReadAll(resp.Body)
+		if err != nil {
+			log.Println("ERROR:", err)
+		}
+		yaml.Unmarshal(body, &ruleSet)
+
+		if err != nil {
+			log.Println("ERROR:", err)
+		}
+	} else {
+		yamlFile, err := os.ReadFile(rulesUrl)
+		if err != nil {
+			log.Println("ERROR:", err)
+		}
+		yaml.Unmarshal(yamlFile, &ruleSet)
+	}
+
+	domains := []string{}
+	for _, rule := range ruleSet {
+
+		domains = append(domains, rule.Domain)
+		domains = append(domains, rule.Domains...)
+		if os.Getenv("ALLOWED_DOMAINS_RULESET") == "true" {
+			allowedDomains = append(allowedDomains, domains...)
+		}
+	}
+
+	log.Println("Loaded ", len(ruleSet), " rules for", len(domains), "Domains")
+	return ruleSet
+}
+
+func fetchRule(domain string, path string) Rule {
+	if len(rulesSet) == 0 {
+		return Rule{}
+	}
+	rule := Rule{}
 	for _, rule := range rulesSet {
 		domains := rule.Domains
 		if rule.Domain != "" {
@@ -241,7 +322,7 @@ func fetchRule(domain string, path string) ruleset.Rule {
 	return rule
 }
 
-func applyRules(body string, rule ruleset.Rule) string {
+func applyRules(body string, rule Rule) string {
 	if len(rulesSet) == 0 {
 		return body
 	}

handlers/proxy.test.go

@@ -2,7 +2,6 @@
 package handlers
 
 import (
-	"ladder/pkg/ruleset"
 	"net/http"
 	"net/http/httptest"
 	"net/url"
@@ -14,7 +13,7 @@ import (
 
 func TestProxySite(t *testing.T) {
 	app := fiber.New()
-	app.Get("/:url", NewProxySiteHandler(nil))
+	app.Get("/:url", ProxySite)
 
 	req := httptest.NewRequest("GET", "/https://example.com", nil)
 	resp, err := app.Test(req)
@@ -52,7 +51,7 @@ func TestRewriteHtml(t *testing.T) {
 		</html>
 	`
 
-	actual := rewriteHtml(bodyB, u, ruleset.Rule{})
+	actual := rewriteHtml(bodyB, u, Rule{})
 	assert.Equal(t, expected, actual)
 }
 

handlers/types.go

@@ -0,0 +1,40 @@
+package handlers
+
+type Regex struct {
+	Match   string `yaml:"match"`
+	Replace string `yaml:"replace"`
+}
+type KV struct {
+	Key   string `yaml:"key"`
+	Value string `yaml:"value"`
+}
+
+type RuleSet []Rule
+
+type Rule struct {
+	Domain  string   `yaml:"domain,omitempty"`
+	Domains []string `yaml:"domains,omitempty"`
+	Paths   []string `yaml:"paths,omitempty"`
+	Headers struct {
+		UserAgent     string `yaml:"user-agent,omitempty"`
+		XForwardedFor string `yaml:"x-forwarded-for,omitempty"`
+		Referer       string `yaml:"referer,omitempty"`
+		Cookie        string `yaml:"cookie,omitempty"`
+		CSP           string `yaml:"content-security-policy,omitempty"`
+	} `yaml:"headers,omitempty"`
+	GoogleCache bool    `yaml:"googleCache,omitempty"`
+	RegexRules  []Regex `yaml:"regexRules"`
+
+	UrlMods struct {
+		Domain []Regex `yaml:"domain"`
+		Path   []Regex `yaml:"path"`
+		Query  []KV    `yaml:"query"`
+	} `yaml:"urlMods"`
+
+	Injections []struct {
+		Position string `yaml:"position"`
+		Append   string `yaml:"append"`
+		Prepend  string `yaml:"prepend"`
+		Replace  string `yaml:"replace"`
+	} `yaml:"injections"`
+}

internal/cli/ruleset_merge.go

@@ -1,105 +0,0 @@
-package cli
-
-import (
-	"fmt"
-	"io"
-	"io/fs"
-	"ladder/pkg/ruleset"
-	"os"
-
-	"golang.org/x/term"
-)
-
-// HandleRulesetMerge merges a set of ruleset files, specified by the rulesetPath or RULESET env variable, into either YAML or Gzip format.
-// Exits the program with an error message if the ruleset path is not provided or if loading the ruleset fails.
-//
-// Parameters:
-// - rulesetPath: A pointer to a string specifying the path to the ruleset file.
-// - mergeRulesets: A pointer to a boolean indicating if a merge operation should be performed.
-// - mergeRulesetsGzip: A pointer to a boolean indicating if the merge should be in Gzip format.
-// - mergeRulesetsOutput: A pointer to a string specifying the output file path. If empty, the output is printed to stdout.
-//
-// Returns:
-// - An error if the ruleset loading or merging process fails, otherwise nil.
-func HandleRulesetMerge(rulesetPath *string, mergeRulesets *bool, mergeRulesetsGzip *bool, mergeRulesetsOutput *string) error {
-	if *rulesetPath == "" {
-		*rulesetPath = os.Getenv("RULESET")
-	}
-	if *rulesetPath == "" {
-		fmt.Println("ERROR: no ruleset provided. Try again with --ruleset <ruleset.yaml>")
-		os.Exit(1)
-	}
-
-	rs, err := ruleset.NewRuleset(*rulesetPath)
-	if err != nil {
-		fmt.Println(err)
-		os.Exit(1)
-	}
-
-	if *mergeRulesetsGzip {
-		return gzipMerge(rs, mergeRulesetsOutput)
-	}
-	return yamlMerge(rs, mergeRulesetsOutput)
-}
-
-// gzipMerge takes a RuleSet and an optional output file path pointer. It compresses the RuleSet into Gzip format.
-// If the output file path is provided, the compressed data is written to this file. Otherwise, it prints a warning
-// and outputs the binary data to stdout
-//
-// Parameters:
-// - rs: The ruleset.RuleSet to be compressed.
-// - mergeRulesetsOutput: A pointer to a string specifying the output file path. If empty, the output is directed to stdout.
-//
-// Returns:
-// - An error if compression or file writing fails, otherwise nil.
-func gzipMerge(rs ruleset.RuleSet, mergeRulesetsOutput *string) error {
-	gzip, err := rs.GzipYaml()
-	if err != nil {
-		return err
-	}
-
-	if *mergeRulesetsOutput != "" {
-		out, err := os.Create(*mergeRulesetsOutput)
-		defer out.Close()
-		_, err = io.Copy(out, gzip)
-		if err != nil {
-			return err
-		}
-	}
-
-	if term.IsTerminal(int(os.Stdout.Fd())) {
-		println("WARNING: binary output can mess up your terminal. Use '--merge-rulesets-output <ruleset.gz>' or pipe it to a file.")
-		os.Exit(1)
-	}
-	_, err = io.Copy(os.Stdout, gzip)
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-// yamlMerge takes a RuleSet and an optional output file path pointer. It converts the RuleSet into YAML format.
-// If the output file path is provided, the YAML data is written to this file. If not, the YAML data is printed to stdout.
-//
-// Parameters:
-// - rs: The ruleset.RuleSet to be converted to YAML.
-// - mergeRulesetsOutput: A pointer to a string specifying the output file path. If empty, the output is printed to stdout.
-//
-// Returns:
-// - An error if YAML conversion or file writing fails, otherwise nil.
-func yamlMerge(rs ruleset.RuleSet, mergeRulesetsOutput *string) error {
-	yaml, err := rs.Yaml()
-	if err != nil {
-		return err
-	}
-	if *mergeRulesetsOutput == "" {
-		fmt.Printf(yaml)
-		os.Exit(0)
-	}
-
-	err = os.WriteFile(*mergeRulesetsOutput, []byte(yaml), fs.FileMode(os.O_RDWR))
-	if err != nil {
-		return fmt.Errorf("ERROR: failed to write merged YAML ruleset to '%s'\n", *mergeRulesetsOutput)
-	}
-	return nil
-}

pkg/ruleset/ruleset.go

@@ -1,286 +0,0 @@
-package ruleset
-
-import (
-	"errors"
-	"fmt"
-	"io"
-	"log"
-	"net/http"
-	"os"
-	"path/filepath"
-	"regexp"
-	"strings"
-
-	"compress/gzip"
-
-	"gopkg.in/yaml.v3"
-)
-
-type Regex struct {
-	Match   string `yaml:"match"`
-	Replace string `yaml:"replace"`
-}
-type KV struct {
-	Key   string `yaml:"key"`
-	Value string `yaml:"value"`
-}
-
-type RuleSet []Rule
-
-type Rule struct {
-	Domain  string   `yaml:"domain,omitempty"`
-	Domains []string `yaml:"domains,omitempty"`
-	Paths   []string `yaml:"paths,omitempty"`
-	Headers struct {
-		UserAgent     string `yaml:"user-agent,omitempty"`
-		XForwardedFor string `yaml:"x-forwarded-for,omitempty"`
-		Referer       string `yaml:"referer,omitempty"`
-		Cookie        string `yaml:"cookie,omitempty"`
-		CSP           string `yaml:"content-security-policy,omitempty"`
-	} `yaml:"headers,omitempty"`
-	GoogleCache bool    `yaml:"googleCache,omitempty"`
-	RegexRules  []Regex `yaml:"regexRules,omitempty"`
-
-	UrlMods struct {
-		Domain []Regex `yaml:"domain,omitempty"`
-		Path   []Regex `yaml:"path,omitempty"`
-		Query  []KV    `yaml:"query,omitempty"`
-	} `yaml:"urlMods,omitempty"`
-
-	Injections []struct {
-		Position string `yaml:"position,omitempty"`
-		Append   string `yaml:"append,omitempty"`
-		Prepend  string `yaml:"prepend,omitempty"`
-		Replace  string `yaml:"replace,omitempty"`
-	} `yaml:"injections,omitempty"`
-}
-
-// NewRulesetFromEnv creates a new RuleSet based on the RULESET environment variable.
-// It logs a warning and returns an empty RuleSet if the RULESET environment variable is not set.
-// If the RULESET is set but the rules cannot be loaded, it panics.
-func NewRulesetFromEnv() RuleSet {
-	rulesPath, ok := os.LookupEnv("RULESET")
-	if !ok {
-		log.Printf("WARN: No ruleset specified. Set the `RULESET` environment variable to load one for a better success rate.")
-		return RuleSet{}
-	}
-	ruleSet, err := NewRuleset(rulesPath)
-	if err != nil {
-		log.Println(err)
-	}
-	return ruleSet
-}
-
-// NewRuleset loads a RuleSet from a given string of rule paths, separated by semicolons.
-// It supports loading rules from both local file paths and remote URLs.
-// Returns a RuleSet and an error if any issues occur during loading.
-func NewRuleset(rulePaths string) (RuleSet, error) {
-	ruleSet := RuleSet{}
-	errs := []error{}
-
-	rp := strings.Split(rulePaths, ";")
-	var remoteRegex = regexp.MustCompile(`^https?:\/\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()!@:%_\+.~#?&\/\/=]*)`)
-	for _, rule := range rp {
-		rulePath := strings.Trim(rule, " ")
-		var err error
-
-		isRemote := remoteRegex.MatchString(rulePath)
-		if isRemote {
-			err = ruleSet.loadRulesFromRemoteFile(rulePath)
-		} else {
-			err = ruleSet.loadRulesFromLocalDir(rulePath)
-		}
-
-		if err != nil {
-			e := fmt.Errorf("WARN: failed to load ruleset from '%s'", rulePath)
-			errs = append(errs, errors.Join(e, err))
-			continue
-		}
-	}
-
-	if len(errs) != 0 {
-		e := fmt.Errorf("WARN: failed to load %d rulesets", len(rp))
-		errs = append(errs, e)
-		// panic if the user specified a local ruleset, but it wasn't found on disk
-		// don't fail silently
-		for _, err := range errs {
-			if errors.Is(os.ErrNotExist, err) {
-				e := fmt.Errorf("PANIC: ruleset '%s' not found", err)
-				panic(errors.Join(e, err))
-			}
-		}
-		// else, bubble up any errors, such as syntax or remote host issues
-		return ruleSet, errors.Join(errs...)
-	}
-	ruleSet.PrintStats()
-	return ruleSet, nil
-}
-
-// ================== RULESET loading logic ===================================
-
-// loadRulesFromLocalDir loads rules from a local directory specified by the path.
-// It walks through the directory, loading rules from YAML files.
-// Returns an error if the directory cannot be accessed
-// If there is an issue loading any file, it will be skipped
-func (rs *RuleSet) loadRulesFromLocalDir(path string) error {
-	_, err := os.Stat(path)
-	if err != nil {
-		return err
-	}
-
-	yamlRegex := regexp.MustCompile(`.*\.ya?ml`)
-
-	err = filepath.Walk(path, func(path string, info os.FileInfo, err error) error {
-		if err != nil {
-			return err
-		}
-		if info.IsDir() {
-			return nil
-		}
-		if isYaml := yamlRegex.MatchString(path); !isYaml {
-			return nil
-		}
-
-		err = rs.loadRulesFromLocalFile(path)
-		if err != nil {
-			log.Printf("WARN: failed to load directory ruleset '%s': %s, skipping", path, err)
-			return nil
-		}
-		log.Printf("INFO: loaded ruleset %s\n", path)
-		return nil
-	})
-
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-// loadRulesFromLocalFile loads rules from a local YAML file specified by the path.
-// Returns an error if the file cannot be read or if there's a syntax error in the YAML.
-func (rs *RuleSet) loadRulesFromLocalFile(path string) error {
-	yamlFile, err := os.ReadFile(path)
-	if err != nil {
-		e := fmt.Errorf("failed to read rules from local file: '%s'", path)
-		return errors.Join(e, err)
-	}
-
-	var r RuleSet
-	err = yaml.Unmarshal(yamlFile, &r)
-	if err != nil {
-		e := fmt.Errorf("failed to load rules from local file, possible syntax error in '%s'", path)
-		ee := errors.Join(e, err)
-		if _, ok := os.LookupEnv("DEBUG"); ok {
-			debugPrintRule(string(yamlFile), ee)
-		}
-		return ee
-	}
-	*rs = append(*rs, r...)
-	return nil
-}
-
-// loadRulesFromRemoteFile loads rules from a remote URL.
-// It supports plain and gzip compressed content.
-// Returns an error if there's an issue accessing the URL or if there's a syntax error in the YAML.
-func (rs *RuleSet) loadRulesFromRemoteFile(rulesUrl string) error {
-	var r RuleSet
-	resp, err := http.Get(rulesUrl)
-	if err != nil {
-		e := fmt.Errorf("failed to load rules from remote url '%s'", rulesUrl)
-		return errors.Join(e, err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode >= 400 {
-		e := fmt.Errorf("failed to load rules from remote url (%s) on '%s'", resp.Status, rulesUrl)
-		return errors.Join(e, err)
-	}
-
-	var reader io.Reader
-	isGzip := strings.HasSuffix(rulesUrl, ".gz") || strings.HasSuffix(rulesUrl, ".gzip") || resp.Header.Get("content-encoding") == "gzip"
-
-	if isGzip {
-		reader, err = gzip.NewReader(resp.Body)
-		if err != nil {
-			return fmt.Errorf("failed to create gzip reader for URL '%s' with status code '%s': %w", rulesUrl, resp.Status, err)
-		}
-	} else {
-		reader = resp.Body
-	}
-
-	err = yaml.NewDecoder(reader).Decode(&r)
-
-	if err != nil {
-		e := fmt.Errorf("failed to load rules from remote url '%s' with status code '%s' and possible syntax error", rulesUrl, resp.Status)
-		ee := errors.Join(e, err)
-		return ee
-	}
-
-	*rs = append(*rs, r...)
-	return nil
-}
-
-// ================= utility methods ==========================
-
-// Yaml returns the ruleset as a Yaml string
-func (rs *RuleSet) Yaml() (string, error) {
-	y, err := yaml.Marshal(rs)
-	if err != nil {
-		return "", err
-	}
-	return string(y), nil
-}
-
-// GzipYaml returns an io.Reader that streams the Gzip-compressed YAML representation of the RuleSet.
-func (rs *RuleSet) GzipYaml() (io.Reader, error) {
-	pr, pw := io.Pipe()
-
-	go func() {
-		defer pw.Close()
-
-		gw := gzip.NewWriter(pw)
-		defer gw.Close()
-
-		if err := yaml.NewEncoder(gw).Encode(rs); err != nil {
-			gw.Close() // Ensure to close the gzip writer
-			pw.CloseWithError(err)
-			return
-		}
-	}()
-
-	return pr, nil
-}
-
-// Domains extracts and returns a slice of all domains present in the RuleSet.
-func (rs *RuleSet) Domains() []string {
-	var domains []string
-	for _, rule := range *rs {
-		domains = append(domains, rule.Domain)
-		domains = append(domains, rule.Domains...)
-	}
-	return domains
-}
-
-// DomainCount returns the count of unique domains present in the RuleSet.
-func (rs *RuleSet) DomainCount() int {
-	return len(rs.Domains())
-}
-
-// Count returns the total number of rules in the RuleSet.
-func (rs *RuleSet) Count() int {
-	return len(*rs)
-}
-
-// PrintStats logs the number of rules and domains loaded in the RuleSet.
-func (rs *RuleSet) PrintStats() {
-	log.Printf("INFO: Loaded %d rules for %d domains\n", rs.Count(), rs.DomainCount())
-}
-
-// debugPrintRule is a utility function for printing a rule and associated error for debugging purposes.
-func debugPrintRule(rule string, err error) {
-	fmt.Println("------------------------------ BEGIN DEBUG RULESET -----------------------------")
-	fmt.Printf("%s\n", err.Error())
-	fmt.Println("--------------------------------------------------------------------------------")
-	fmt.Println(rule)
-	fmt.Println("------------------------------ END DEBUG RULESET -------------------------------")
-}

pkg/ruleset/ruleset_test.go

@@ -1,153 +0,0 @@
-package ruleset
-
-import (
-	"os"
-	"path/filepath"
-	"testing"
-	"time"
-
-	"github.com/gofiber/fiber/v2"
-	"github.com/stretchr/testify/assert"
-)
-
-var (
-	validYAML = `
-- domain: example.com
-  regexRules:
-    - match: "^http:"
-      replace: "https:"`
-
-	invalidYAML = `
-- domain: [thisIsATestYamlThatIsMeantToFail.example]
-  regexRules:
-    - match: "^http:"
-      replace: "https:"
-    - match: "[incomplete"`
-)
-
-func TestLoadRulesFromRemoteFile(t *testing.T) {
-	app := fiber.New()
-	defer app.Shutdown()
-
-	app.Get("/valid-config.yml", func(c *fiber.Ctx) error {
-		c.SendString(validYAML)
-		return nil
-	})
-	app.Get("/invalid-config.yml", func(c *fiber.Ctx) error {
-		c.SendString(invalidYAML)
-		return nil
-	})
-
-	app.Get("/valid-config.gz", func(c *fiber.Ctx) error {
-		c.Set("Content-Type", "application/octet-stream")
-		rs, err := loadRuleFromString(validYAML)
-		if err != nil {
-			t.Errorf("failed to load valid yaml from string: %s", err.Error())
-		}
-		s, err := rs.GzipYaml()
-		if err != nil {
-			t.Errorf("failed to load gzip serialize yaml: %s", err.Error())
-		}
-
-		err = c.SendStream(s)
-		if err != nil {
-			t.Errorf("failed to stream gzip serialized yaml: %s", err.Error())
-		}
-		return nil
-	})
-
-	// Start the server in a goroutine
-	go func() {
-		if err := app.Listen("127.0.0.1:9999"); err != nil {
-			t.Errorf("Server failed to start: %s", err.Error())
-		}
-	}()
-
-	// Wait for the server to start
-	time.Sleep(time.Second * 1)
-
-	rs, err := NewRuleset("http://127.0.0.1:9999/valid-config.yml")
-	if err != nil {
-		t.Errorf("failed to load plaintext ruleset from http server: %s", err.Error())
-	}
-	assert.Equal(t, rs[0].Domain, "example.com")
-
-	rs, err = NewRuleset("http://127.0.0.1:9999/valid-config.gz")
-	if err != nil {
-		t.Errorf("failed to load gzipped ruleset from http server: %s", err.Error())
-	}
-	assert.Equal(t, rs[0].Domain, "example.com")
-
-	os.Setenv("RULESET", "http://127.0.0.1:9999/valid-config.gz")
-	rs = NewRulesetFromEnv()
-	if !assert.Equal(t, rs[0].Domain, "example.com") {
-		t.Error("expected no errors loading ruleset from gzip url using environment variable, but got one")
-	}
-}
-
-func loadRuleFromString(yaml string) (RuleSet, error) {
-	// Create a temporary file and load it
-	tmpFile, _ := os.CreateTemp("", "ruleset*.yaml")
-	defer os.Remove(tmpFile.Name())
-	tmpFile.WriteString(yaml)
-	rs := RuleSet{}
-	err := rs.loadRulesFromLocalFile(tmpFile.Name())
-	return rs, err
-}
-
-// TestLoadRulesFromLocalFile tests the loading of rules from a local YAML file.
-func TestLoadRulesFromLocalFile(t *testing.T) {
-	rs, err := loadRuleFromString(validYAML)
-	if err != nil {
-		t.Errorf("Failed to load rules from valid YAML: %s", err)
-	}
-	assert.Equal(t, rs[0].Domain, "example.com")
-	assert.Equal(t, rs[0].RegexRules[0].Match, "^http:")
-	assert.Equal(t, rs[0].RegexRules[0].Replace, "https:")
-
-	_, err = loadRuleFromString(invalidYAML)
-	if err == nil {
-		t.Errorf("Expected an error when loading invalid YAML, but got none")
-	}
-}
-
-// TestLoadRulesFromLocalDir tests the loading of rules from a local nested directory full of yaml rulesets
-func TestLoadRulesFromLocalDir(t *testing.T) {
-	// Create a temporary directory
-	baseDir, err := os.MkdirTemp("", "ruleset_test")
-	if err != nil {
-		t.Fatalf("Failed to create temporary directory: %s", err)
-	}
-	defer os.RemoveAll(baseDir)
-
-	// Create a nested subdirectory
-	nestedDir := filepath.Join(baseDir, "nested")
-	err = os.Mkdir(nestedDir, 0755)
-	if err != nil {
-		t.Fatalf("Failed to create nested directory: %s", err)
-	}
-
-	// Create a nested subdirectory
-	nestedTwiceDir := filepath.Join(nestedDir, "nestedTwice")
-	err = os.Mkdir(nestedTwiceDir, 0755)
-
-	testCases := []string{"test.yaml", "test2.yaml", "test-3.yaml", "test 4.yaml", "1987.test.yaml.yml", "foobar.example.com.yaml", "foobar.com.yml"}
-	for _, fileName := range testCases {
-		filePath := filepath.Join(nestedDir, "2x-"+fileName)
-		os.WriteFile(filePath, []byte(validYAML), 0644)
-		filePath = filepath.Join(nestedDir, fileName)
-		os.WriteFile(filePath, []byte(validYAML), 0644)
-		filePath = filepath.Join(baseDir, "base-"+fileName)
-		os.WriteFile(filePath, []byte(validYAML), 0644)
-	}
-	rs := RuleSet{}
-	err = rs.loadRulesFromLocalDir(baseDir)
-	assert.NoError(t, err)
-	assert.Equal(t, rs.Count(), len(testCases)*3)
-
-	for _, rule := range rs {
-		assert.Equal(t, rule.Domain, "example.com")
-		assert.Equal(t, rule.RegexRules[0].Match, "^http:")
-		assert.Equal(t, rule.RegexRules[0].Replace, "https:")
-	}
-}

proxychain/proxychain.go

@@ -1,370 +0,0 @@
-package proxychain
-
-import (
-	"errors"
-	"fmt"
-	"io"
-	"log"
-	"net/http"
-	"net/url"
-	"strings"
-
-	"ladder/pkg/ruleset"
-
-	"github.com/gofiber/fiber/v2"
-)
-
-/*
-ProxyChain manages the process of forwarding an HTTP request to an upstream server,
-applying request and response modifications along the way.
-
-  - It accepts incoming HTTP requests (as a Fiber *ctx), and applies
-    request modifiers (ReqMods) and response modifiers (ResMods) before passing the
-    upstream response back to the client.
-
-  - ProxyChains can be reused to avoid memory allocations. However, they are not concurrent-safe
-    so a ProxyChainPool should be used with mutexes to avoid memory errors.
-
----
-
-# EXAMPLE
-
-```
-
-import (
-
-	rx "ladder/pkg/proxychain/requestmodifers"
-	tx "ladder/pkg/proxychain/responsemodifers"
-	"ladder/internal/proxychain"
-
-)
-
-proxychain.NewProxyChain().
-
-	SetFiberCtx(c).
-	SetRequestModifications(
-		rx.BlockOutgoingCookies(),
-		rx.SpoofOrigin(),
-		rx.SpoofReferrer(),
-	).
-	SetResultModifications(
-		tx.BlockIncomingCookies(),
-		tx.RewriteHTMLResourceURLs()
-	).
-	Execute()
-
-```
-
-	client            ladder service            upstream
-
-┌─────────┐    ┌────────────────────────┐    ┌─────────┐
-│         │GET │                        │    │         │
-│       req────┼───► ProxyChain         │    │         │
-│         │    │       │                │    │         │
-│         │    │       ▼                │    │         │
-│         │    │     apply              │    │         │
-│         │    │ RequestModifications   │    │         │
-│         │    │       │                │    │         │
-│         │    │       ▼                │    │         │
-│         │    │     send        GET    │    │         │
-│         │    │     Request req────────┼─►  │         │
-│         │    │                        │    │         │
-│         │    │                 200 OK │    │         │
-│         │    │       ┌────────────────┼─response     │
-│         │    │       ▼                │    │         │
-│         │    │     apply              │    │         │
-│         │    │ ResultModifications    │    │         │
-│         │    │       │                │    │         │
-│         │◄───┼───────┘                │    │         │
-│         │    │ 200 OK                 │    │         │
-│         │    │                        │    │         │
-└─────────┘    └────────────────────────┘    └─────────┘
-*/
-type ProxyChain struct {
-	Context              *fiber.Ctx
-	Client               *http.Client
-	Request              *http.Request
-	Response             *http.Response
-	requestModifications []RequestModification
-	resultModifications  []ResponseModification
-	Ruleset              *ruleset.RuleSet
-	debugMode            bool
-	abortErr             error
-}
-
-// a ProxyStrategy is a pre-built proxychain with purpose-built defaults
-type ProxyStrategy ProxyChain
-
-// A RequestModification is a function that should operate on the
-// ProxyChain Req or Client field, using the fiber ctx as needed.
-type RequestModification func(*ProxyChain) error
-
-// A ResponseModification is a function that should operate on the
-// ProxyChain Res (http result) & Body (buffered http response body) field
-type ResponseModification func(*ProxyChain) error
-
-// SetRequestModifications sets the ProxyChain's request modifers
-// the modifier will not fire until ProxyChain.Execute() is run.
-func (chain *ProxyChain) SetRequestModifications(mods ...RequestModification) *ProxyChain {
-	chain.requestModifications = mods
-	return chain
-}
-
-// AddRequestModifications sets the ProxyChain's request modifers
-// the modifier will not fire until ProxyChain.Execute() is run.
-func (chain *ProxyChain) AddRequestModifications(mods ...RequestModification) *ProxyChain {
-	chain.requestModifications = append(chain.requestModifications, mods...)
-	return chain
-}
-
-// AddResponseModifications sets the ProxyChain's response modifers
-// the modifier will not fire until ProxyChain.Execute() is run.
-func (chain *ProxyChain) AddResponseModifications(mods ...ResponseModification) *ProxyChain {
-	chain.resultModifications = mods
-	return chain
-}
-
-// Adds a ruleset to ProxyChain
-func (chain *ProxyChain) AddRuleset(rs *ruleset.RuleSet) *ProxyChain {
-	chain.Ruleset = rs
-	// TODO: add _applyRuleset method
-	return chain
-}
-
-func (chain *ProxyChain) _initialize_request() (*http.Request, error) {
-	if chain.Context == nil {
-		chain.abortErr = chain.abort(errors.New("no context set"))
-		return nil, chain.abortErr
-	}
-	// initialize a request (without url)
-	req, err := http.NewRequest(chain.Context.Method(), "", nil)
-	if err != nil {
-		return nil, err
-	}
-	chain.Request = req
-	switch chain.Context.Method() {
-	case "GET":
-	case "DELETE":
-	case "HEAD":
-	case "OPTIONS":
-		break
-	case "POST":
-	case "PUT":
-	case "PATCH":
-		// stream content of body from client request to upstream request
-		chain.Request.Body = io.NopCloser(chain.Context.Request().BodyStream())
-	default:
-		return nil, fmt.Errorf("unsupported request method from client: '%s'", chain.Context.Method())
-	}
-
-	/*
-		// copy client request headers to upstream request headers
-		forwardHeaders := func(key []byte, val []byte) {
-			req.Header.Set(string(key), string(val))
-		}
-		clientHeaders := &chain.Context.Request().Header
-		clientHeaders.VisitAll(forwardHeaders)
-	*/
-
-	return req, nil
-}
-
-// _execute sends the request for the ProxyChain and returns the raw body only
-// the caller is responsible for returning a response back to the requestor
-// the caller is also responsible for calling chain._reset() when they are done with the body
-func (chain *ProxyChain) _execute() (io.Reader, error) {
-	if chain.validateCtxIsSet() != nil || chain.abortErr != nil {
-		return nil, chain.abortErr
-	}
-	if chain.Request == nil {
-		return nil, errors.New("proxychain request not yet initialized")
-	}
-	if chain.Request.URL.Scheme == "" {
-		return nil, errors.New("request url not set or invalid. Check ProxyChain ReqMods for issues")
-	}
-
-	// Apply requestModifications to proxychain
-	for _, applyRequestModificationsTo := range chain.requestModifications {
-		err := applyRequestModificationsTo(chain)
-		if err != nil {
-			return nil, chain.abort(err)
-		}
-	}
-
-	// Send Request Upstream
-	resp, err := chain.Client.Do(chain.Request)
-	if err != nil {
-		return nil, chain.abort(err)
-	}
-	chain.Response = resp
-
-	//defer resp.Body.Close()
-
-	/* todo: move to rsm
-	for k, v := range resp.Header {
-		chain.Context.Set(k, resp.Header.Get(k))
-	}
-	*/
-
-	// Apply ResponseModifiers to proxychain
-	for _, applyResultModificationsTo := range chain.resultModifications {
-		err := applyResultModificationsTo(chain)
-		if err != nil {
-			return nil, chain.abort(err)
-		}
-	}
-
-	return chain.Response.Body, nil
-}
-
-// Execute sends the request for the ProxyChain and returns the request to the sender
-// and resets the fields so that the ProxyChain can be reused.
-// if any step in the ProxyChain fails, the request will abort and a 500 error will
-// be returned to the client
-func (chain *ProxyChain) Execute() error {
-	defer chain._reset()
-	body, err := chain._execute()
-	if err != nil {
-		log.Println(err)
-		return err
-	}
-	if chain.Context == nil {
-		return errors.New("no context set")
-	}
-	// Return request back to client
-	chain.Context.Set("content-type", chain.Response.Header.Get("content-type"))
-	return chain.Context.SendStream(body)
-
-	//return chain.Context.SendStream(body)
-}
-
-// reconstructUrlFromReferer reconstructs the URL using the referer's scheme, host, and the relative path / queries
-func reconstructUrlFromReferer(referer *url.URL, relativeUrl *url.URL) (*url.URL, error) {
-
-	// Extract the real url from referer path
-	realUrl, err := url.Parse(strings.TrimPrefix(referer.Path, "/"))
-	if err != nil {
-		return nil, fmt.Errorf("error parsing real URL from referer '%s': %v", referer.Path, err)
-	}
-
-	if realUrl.Scheme == "" || realUrl.Host == "" {
-		return nil, fmt.Errorf("invalid referer URL: '%s' on request '%s", referer, relativeUrl)
-	}
-
-	log.Printf("'%s' -> '%s'\n", relativeUrl.String(), realUrl.String())
-
-	return &url.URL{
-		Scheme:   referer.Scheme,
-		Host:     referer.Host,
-		Path:     realUrl.Path,
-		RawQuery: realUrl.RawQuery,
-	}, nil
-}
-
-// extractUrl extracts a URL from the request ctx. If the URL in the request
-// is a relative path, it reconstructs the full URL using the referer header.
-func (chain *ProxyChain) extractUrl() (*url.URL, error) {
-	// try to extract url-encoded
-	reqUrl, err := url.QueryUnescape(chain.Context.Params("*"))
-	if err != nil {
-		reqUrl = chain.Context.Params("*") // fallback
-	}
-
-	urlQuery, err := url.Parse(reqUrl)
-	if err != nil {
-		return nil, fmt.Errorf("error parsing request URL '%s': %v", reqUrl, err)
-	}
-
-	// Handle standard paths
-	// eg: https://localhost:8080/https://realsite.com/images/foobar.jpg -> https://realsite.com/images/foobar.jpg
-	isRelativePath := urlQuery.Scheme == ""
-	if !isRelativePath {
-		return urlQuery, nil
-	}
-
-	// Handle relative URLs
-	// eg: https://localhost:8080/images/foobar.jpg -> https://realsite.com/images/foobar.jpg
-	referer, err := url.Parse(chain.Context.Get("referer"))
-	relativePath := urlQuery
-	if err != nil {
-		return nil, fmt.Errorf("error parsing referer URL from req: '%s': %v", relativePath, err)
-	}
-	return reconstructUrlFromReferer(referer, relativePath)
-}
-
-// SetFiberCtx takes the request ctx from the client
-// for the modifiers and execute function to use.
-// it must be set everytime a new request comes through
-// if the upstream request url cannot be extracted from the ctx,
-// a 500 error will be sent back to the client
-func (chain *ProxyChain) SetFiberCtx(ctx *fiber.Ctx) *ProxyChain {
-	chain.Context = ctx
-
-	// initialize the request and prepare it for modification
-	req, err := chain._initialize_request()
-	if err != nil {
-		chain.abortErr = chain.abort(err)
-	}
-	chain.Request = req
-
-	// extract the URL for the request and add it to the new request
-	url, err := chain.extractUrl()
-	if err != nil {
-		chain.abortErr = chain.abort(err)
-	}
-	chain.Request.URL = url
-	fmt.Printf("extracted URL: %s\n", chain.Request.URL)
-
-	return chain
-}
-
-func (chain *ProxyChain) validateCtxIsSet() error {
-	if chain.Context != nil {
-		return nil
-	}
-	err := errors.New("proxyChain was called without setting a fiber Ctx. Use ProxyChain.SetCtx()")
-	chain.abortErr = chain.abort(err)
-	return chain.abortErr
-}
-
-// SetHttpClient sets a new upstream http client transport
-// useful for modifying TLS
-func (chain *ProxyChain) SetHttpClient(httpClient *http.Client) *ProxyChain {
-	chain.Client = httpClient
-	return chain
-}
-
-// SetVerbose changes the logging behavior to print
-// the modification steps and applied rulesets for debugging
-func (chain *ProxyChain) SetDebugLogging(isDebugMode bool) *ProxyChain {
-	chain.debugMode = isDebugMode
-	return chain
-}
-
-// abort proxychain and return 500 error to client
-// this will prevent Execute from firing and reset the state
-// returns the initial error enriched with context
-func (chain *ProxyChain) abort(err error) error {
-	//defer chain._reset()
-	chain.abortErr = err
-	chain.Context.Response().SetStatusCode(500)
-	e := fmt.Errorf("ProxyChain error for '%s': %s", chain.Request.URL.String(), err.Error())
-	chain.Context.SendString(e.Error())
-	log.Println(e.Error())
-	return e
-}
-
-// internal function to reset state of ProxyChain for reuse
-func (chain *ProxyChain) _reset() {
-	chain.abortErr = nil
-	chain.Request = nil
-	//chain.Response = nil
-	chain.Context = nil
-}
-
-// NewProxyChain initializes a new ProxyChain
-func NewProxyChain() *ProxyChain {
-	chain := new(ProxyChain)
-	chain.Client = http.DefaultClient
-	return chain
-}

proxychain/proxychain_pool.go

@@ -1,11 +0,0 @@
-package proxychain
-
-import (
-	"net/url"
-)
-
-type ProxyChainPool map[url.URL]ProxyChain
-
-func NewProxyChainPool() ProxyChainPool {
-	return map[url.URL]ProxyChain{}
-}

proxychain/requestmodifers/masquerade_as_trusted_bot.go

@@ -1,33 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// MasqueradeAsGoogleBot modifies user agent and x-forwarded for
-// to appear to be a Google Bot
-func MasqueradeAsGoogleBot() proxychain.RequestModification {
-	const botUA string = "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Googlebot/2.1; http://www.google.com/bot.html) Chrome/79.0.3945.120 Safari/537.36"
-	const botIP string = "66.249.78.8" // TODO: create a random ip pool from https://developers.google.com/static/search/apis/ipranges/googlebot.json
-	return masqueradeAsTrustedBot(botUA, botIP)
-}
-
-// MasqueradeAsBingBot modifies user agent and x-forwarded for
-// to appear to be a Bing Bot
-func MasqueradeAsBingBot() proxychain.RequestModification {
-	const botUA string = "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/79.0.3945.120 Safari/537.36"
-	const botIP string = "13.66.144.9" // https://www.bing.com/toolbox/bingbot.json
-	return masqueradeAsTrustedBot(botUA, botIP)
-}
-
-func masqueradeAsTrustedBot(botUA string, botIP string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.AddRequestModifications(
-			SpoofUserAgent(botUA),
-			SpoofXForwardedFor(botIP),
-			SpoofReferrer(""),
-			SpoofOrigin(""),
-		)
-		return nil
-	}
-}

proxychain/requestmodifers/modify_domain_with_regex.go

@@ -1,13 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-	"regexp"
-)
-
-func ModifyDomainWithRegex(match regexp.Regexp, replacement string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.URL.Host = match.ReplaceAllString(px.Request.URL.Host, replacement)
-		return nil
-	}
-}

proxychain/requestmodifers/modify_outgoing_cookies.go

@@ -1,97 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-	"net/http"
-)
-
-// SetOutgoingCookie modifes a specific cookie name
-// by modifying the request cookie headers going to the upstream server.
-// If the cookie name does not already exist, it is created.
-func SetOutgoingCookie(name string, val string) proxychain.RequestModification {
-	return func(chain *proxychain.ProxyChain) error {
-		cookies := chain.Request.Cookies()
-		hasCookie := false
-		for _, cookie := range cookies {
-			if cookie.Name != name {
-				continue
-			}
-			hasCookie = true
-			cookie.Value = val
-		}
-
-		if hasCookie {
-			return nil
-		}
-
-		chain.Request.AddCookie(&http.Cookie{
-			Domain: chain.Request.URL.Host,
-			Name:   name,
-			Value:  val,
-		})
-
-		return nil
-	}
-}
-
-// SetOutgoingCookies modifies a client request's cookie header
-// to a raw Cookie string, overwriting existing cookies
-func SetOutgoingCookies(cookies string) proxychain.RequestModification {
-	return func(chain *proxychain.ProxyChain) error {
-		chain.Request.Header.Set("Cookies", cookies)
-		return nil
-	}
-}
-
-// DeleteOutgoingCookie modifies the http request's cookies header to
-// delete a specific request cookie going to the upstream server.
-// If the cookie does not exist, it does not do anything.
-func DeleteOutgoingCookie(name string) proxychain.RequestModification {
-	return func(chain *proxychain.ProxyChain) error {
-		cookies := chain.Request.Cookies()
-		chain.Request.Header.Del("Cookies")
-
-		for _, cookie := range cookies {
-			if cookie.Name == name {
-				chain.Request.AddCookie(cookie)
-			}
-		}
-		return nil
-	}
-}
-
-// DeleteOutgoingCookies removes the cookie header entirely,
-// preventing any cookies from reaching the upstream server.
-func DeleteOutgoingCookies() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Del("Cookie")
-		return nil
-	}
-}
-
-// DeleteOutGoingCookiesExcept prevents non-whitelisted cookies from being sent from the client
-// to the upstream proxy server. Cookies whose names are in the whitelist are not removed.
-func DeleteOutgoingCookiesExcept(whitelist ...string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		// Convert whitelist slice to a map for efficient lookups
-		whitelistMap := make(map[string]struct{})
-		for _, cookieName := range whitelist {
-			whitelistMap[cookieName] = struct{}{}
-		}
-
-		// Get all cookies from the request header
-		cookies := px.Request.Cookies()
-
-		// Clear the original Cookie header
-		px.Request.Header.Del("Cookie")
-
-		// Re-add cookies that are in the whitelist
-		for _, cookie := range cookies {
-			if _, found := whitelistMap[cookie.Name]; found {
-				px.Request.AddCookie(cookie)
-			}
-		}
-
-		return nil
-	}
-}

proxychain/requestmodifers/modify_path_with_regex.go

@@ -1,13 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-	"regexp"
-)
-
-func ModifyPathWithRegex(match regexp.Regexp, replacement string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.URL.Path = match.ReplaceAllString(px.Request.URL.Path, replacement)
-		return nil
-	}
-}

proxychain/requestmodifers/modify_query_params.go

@@ -1,20 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// ModifyQueryParams replaces query parameter values in URL's query params in a ProxyChain's URL.
-// If the query param key doesn't exist, it is created.
-func ModifyQueryParams(key string, value string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		q := px.Request.URL.Query()
-		if value == "" {
-			q.Del(key)
-			return nil
-		}
-		q.Set(key, value)
-		px.Request.URL.RawQuery = q.Encode()
-		return nil
-	}
-}

proxychain/requestmodifers/modify_request_headers.go

@@ -1,23 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// SetRequestHeader modifies a specific outgoing header
-// This is the header that the upstream server will see.
-func SetRequestHeader(name string, val string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Set(name, val)
-		return nil
-	}
-}
-
-// DeleteRequestHeader modifies a specific outgoing header
-// This is the header that the upstream server will see.
-func DeleteRequestHeader(name string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Del(name)
-		return nil
-	}
-}

proxychain/requestmodifers/request_archive_is.go

@@ -1,27 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-	"net/url"
-)
-
-const archivistUrl string = "https://archive.is/latest/"
-
-// RequestArchiveIs modifies a ProxyChain's URL to request an archived version from archive.is
-func RequestArchiveIs() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.URL.RawQuery = ""
-		newURLString := archivistUrl + px.Request.URL.String()
-		newURL, err := url.Parse(newURLString)
-		if err != nil {
-			return err
-		}
-
-		// archivist seems to sabotage requests from cloudflare's DNS
-		// bypass this just in case
-		px.AddRequestModifications(ResolveWithGoogleDoH())
-
-		px.Request.URL = newURL
-		return nil
-	}
-}

proxychain/requestmodifers/request_google_cache.go

@@ -1,21 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-	"net/url"
-)
-
-const googleCacheUrl string = "https://webcache.googleusercontent.com/search?q=cache:"
-
-// RequestGoogleCache modifies a ProxyChain's URL to request its Google Cache version.
-func RequestGoogleCache() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		encodedURL := url.QueryEscape(px.Request.URL.String())
-		newURL, err := url.Parse(googleCacheUrl + encodedURL)
-		if err != nil {
-			return err
-		}
-		px.Request.URL = newURL
-		return nil
-	}
-}

proxychain/requestmodifers/request_wayback_machine.go

@@ -1,22 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-	"net/url"
-)
-
-const waybackUrl string = "https://web.archive.org/web/"
-
-// RequestWaybackMachine modifies a ProxyChain's URL to request the wayback machine (archive.org) version.
-func RequestWaybackMachine() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.URL.RawQuery = ""
-		newURLString := waybackUrl + px.Request.URL.String()
-		newURL, err := url.Parse(newURLString)
-		if err != nil {
-			return err
-		}
-		px.Request.URL = newURL
-		return nil
-	}
-}

proxychain/requestmodifers/resolve_with_google_doh.go

@@ -1,80 +0,0 @@
-package requestmodifers
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"ladder/proxychain"
-	"net"
-	"net/http"
-	"time"
-)
-
-// resolveWithGoogleDoH resolves DNS using Google's DNS-over-HTTPS
-func resolveWithGoogleDoH(host string) (string, error) {
-	url := "https://dns.google/resolve?name=" + host + "&type=A"
-	resp, err := http.Get(url)
-	if err != nil {
-		return "", err
-	}
-	defer resp.Body.Close()
-
-	var result struct {
-		Answer []struct {
-			Data string `json:"data"`
-		} `json:"Answer"`
-	}
-	err = json.NewDecoder(resp.Body).Decode(&result)
-	if err != nil {
-		return "", err
-	}
-
-	// Get the first A record
-	if len(result.Answer) > 0 {
-		return result.Answer[0].Data, nil
-	}
-	return "", fmt.Errorf("no DoH DNS record found for %s", host)
-}
-
-// ResolveWithGoogleDoH modifies a ProxyChain's client to make the request but resolve the URL
-// using Google's DNS over HTTPs service
-func ResolveWithGoogleDoH() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		client := &http.Client{
-			Timeout: px.Client.Timeout,
-		}
-
-		dialer := &net.Dialer{
-			Timeout:   5 * time.Second,
-			KeepAlive: 5 * time.Second,
-		}
-
-		customDialContext := func(ctx context.Context, network, addr string) (net.Conn, error) {
-			host, port, err := net.SplitHostPort(addr)
-			if err != nil {
-				// If the addr doesn't include a port, determine it based on the URL scheme
-				if px.Request.URL.Scheme == "https" {
-					port = "443"
-				} else {
-					port = "80"
-				}
-				host = addr // assume the entire addr is the host
-			}
-
-			resolvedHost, err := resolveWithGoogleDoH(host)
-			if err != nil {
-				return nil, err
-			}
-
-			return dialer.DialContext(ctx, network, net.JoinHostPort(resolvedHost, port))
-		}
-
-		patchedTransportWithDoH := &http.Transport{
-			DialContext: customDialContext,
-		}
-
-		client.Transport = patchedTransportWithDoH
-		px.Client = client // Assign the modified client to the ProxyChain
-		return nil
-	}
-}

proxychain/requestmodifers/spoof_origin.go

@@ -1,24 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// SpoofOrigin modifies the origin header
-// if the upstream server returns a Vary header
-// it means you might get a different response if you change this
-func SpoofOrigin(url string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Set("origin", url)
-		return nil
-	}
-}
-
-// HideOrigin modifies the origin header
-// so that it is the original origin, not the proxy
-func HideOrigin() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Set("origin", px.Request.URL.String())
-		return nil
-	}
-}

proxychain/requestmodifers/spoof_referrer.go

@@ -1,29 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// SpoofReferrer modifies the referrer header
-// useful if the page can be accessed from a search engine
-// or social media site, but not by browsing the website itself
-// if url is "", then the referrer header is removed
-func SpoofReferrer(url string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		if url == "" {
-			px.Request.Header.Del("referrer")
-			return nil
-		}
-		px.Request.Header.Set("referrer", url)
-		return nil
-	}
-}
-
-// HideReferrer modifies the referrer header
-// so that it is the original referrer, not the proxy
-func HideReferrer() proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Set("referrer", px.Request.URL.String())
-		return nil
-	}
-}

proxychain/requestmodifers/spoof_user_agent.go

@@ -1,13 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// SpoofUserAgent modifies the user agent
-func SpoofUserAgent(ua string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Set("user-agent", ua)
-		return nil
-	}
-}

proxychain/requestmodifers/spoof_x_forwarded_for.go

@@ -1,14 +0,0 @@
-package requestmodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// SpoofXForwardedFor modifies the X-Forwarded-For header
-// in some cases, a forward proxy may interpret this as the source IP
-func SpoofXForwardedFor(ip string) proxychain.RequestModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Request.Header.Set("X-FORWARDED-FOR", ip)
-		return nil
-	}
-}

proxychain/responsemodifers/bypass_cors.go

@@ -1,21 +0,0 @@
-package responsemodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// BypassCORS modifies response headers to prevent the browser
-// from enforcing any CORS restrictions. This should run at the end of the chain.
-func BypassCORS() proxychain.ResponseModification {
-	return func(chain *proxychain.ProxyChain) error {
-		chain.AddResponseModifications(
-			SetResponseHeader("Access-Control-Allow-Origin", "*"),
-			SetResponseHeader("Access-Control-Expose-Headers", "*"),
-			SetResponseHeader("Access-Control-Allow-Credentials", "true"),
-			SetResponseHeader("Access-Control-Allow-Methods", "GET, PUT, POST, DELETE, HEAD, OPTIONS, PATCH"),
-			SetResponseHeader("Access-Control-Allow-Headers", "*"),
-			DeleteResponseHeader("X-Frame-Options"),
-		)
-		return nil
-	}
-}

proxychain/responsemodifers/bypass_csp.go

@@ -1,27 +0,0 @@
-package responsemodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// BypassContentSecurityPolicy modifies response headers to prevent the browser
-// from enforcing any CSP restrictions. This should run at the end of the chain.
-func BypassContentSecurityPolicy() proxychain.ResponseModification {
-	return func(chain *proxychain.ProxyChain) error {
-		chain.AddResponseModifications(
-			DeleteResponseHeader("Content-Security-Policy"),
-			DeleteResponseHeader("Content-Security-Policy-Report-Only"),
-			DeleteResponseHeader("X-Content-Security-Policy"),
-			DeleteResponseHeader("X-WebKit-CSP"),
-		)
-		return nil
-	}
-}
-
-// SetContentSecurityPolicy modifies response headers to a specific CSP
-func SetContentSecurityPolicy(csp string) proxychain.ResponseModification {
-	return func(chain *proxychain.ProxyChain) error {
-		chain.Response.Header.Set("Content-Security-Policy", csp)
-		return nil
-	}
-}

proxychain/responsemodifers/modify_incoming_cookies.go

@@ -1,102 +0,0 @@
-package responsemodifers
-
-import (
-	"fmt"
-	"ladder/proxychain"
-	"net/http"
-)
-
-// DeleteIncomingCookies prevents ALL cookies from being sent from the proxy server
-// back down to the client.
-func DeleteIncomingCookies(whitelist ...string) proxychain.ResponseModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Response.Header.Del("Set-Cookie")
-		return nil
-	}
-}
-
-// DeleteIncomingCookiesExcept prevents non-whitelisted cookies from being sent from the proxy server
-// to the client. Cookies whose names are in the whitelist are not removed.
-func DeleteIncomingCookiesExcept(whitelist ...string) proxychain.ResponseModification {
-	return func(px *proxychain.ProxyChain) error {
-		// Convert whitelist slice to a map for efficient lookups
-		whitelistMap := make(map[string]struct{})
-		for _, cookieName := range whitelist {
-			whitelistMap[cookieName] = struct{}{}
-		}
-
-		// If the response has no cookies, return early
-		if px.Response.Header == nil {
-			return nil
-		}
-
-		// Filter the cookies in the response
-		filteredCookies := []string{}
-		for _, cookieStr := range px.Response.Header["Set-Cookie"] {
-			cookie := parseCookie(cookieStr)
-			if _, found := whitelistMap[cookie.Name]; found {
-				filteredCookies = append(filteredCookies, cookieStr)
-			}
-		}
-
-		// Update the Set-Cookie header with the filtered cookies
-		if len(filteredCookies) > 0 {
-			px.Response.Header["Set-Cookie"] = filteredCookies
-		} else {
-			px.Response.Header.Del("Set-Cookie")
-		}
-
-		return nil
-	}
-}
-
-// parseCookie parses a cookie string and returns an http.Cookie object.
-func parseCookie(cookieStr string) *http.Cookie {
-	header := http.Header{}
-	header.Add("Set-Cookie", cookieStr)
-	request := http.Request{Header: header}
-	return request.Cookies()[0]
-}
-
-// SetIncomingCookies adds a raw cookie string being sent from the proxy server down to the client
-func SetIncomingCookies(cookies string) proxychain.ResponseModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Response.Header.Set("Set-Cookie", cookies)
-		return nil
-	}
-}
-
-// SetIncomingCookie modifies a specific cookie in the response from the proxy server to the client.
-func SetIncomingCookie(name string, val string) proxychain.ResponseModification {
-	return func(px *proxychain.ProxyChain) error {
-		if px.Response.Header == nil {
-			return nil
-		}
-
-		updatedCookies := []string{}
-		found := false
-
-		// Iterate over existing cookies and modify the one that matches the cookieName
-		for _, cookieStr := range px.Response.Header["Set-Cookie"] {
-			cookie := parseCookie(cookieStr)
-			if cookie.Name == name {
-				// Replace the cookie with the new value
-				updatedCookies = append(updatedCookies, fmt.Sprintf("%s=%s", name, val))
-				found = true
-			} else {
-				// Keep the cookie as is
-				updatedCookies = append(updatedCookies, cookieStr)
-			}
-		}
-
-		// If the specified cookie wasn't found, add it
-		if !found {
-			updatedCookies = append(updatedCookies, fmt.Sprintf("%s=%s", name, val))
-		}
-
-		// Update the Set-Cookie header
-		px.Response.Header["Set-Cookie"] = updatedCookies
-
-		return nil
-	}
-}

proxychain/responsemodifers/modify_response_header.go

@@ -1,21 +0,0 @@
-package responsemodifers
-
-import (
-	"ladder/proxychain"
-)
-
-// SetResponseHeader modifies response headers from the upstream server
-func SetResponseHeader(key string, value string) proxychain.ResponseModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Context.Response().Header.Set(key, value)
-		return nil
-	}
-}
-
-// DeleteResponseHeader removes response headers from the upstream server
-func DeleteResponseHeader(key string) proxychain.ResponseModification {
-	return func(px *proxychain.ProxyChain) error {
-		px.Context.Response().Header.Del(key)
-		return nil
-	}
-}

proxychain/responsemodifers/monkey_patch_resource_urls.js

@@ -1,62 +0,0 @@
-// Overrides the global fetch and XMLHttpRequest open methods to modify the request URLs.
-// Also overrides the attribute setter prototype to modify the request URLs
-// fetch("/relative_script.js") -> fetch("http://localhost:8080/relative_script.js")
-(() => {
-   function rewriteURL(url) {
-        if (!url) return url
-        if (url.startsWith(window.location.origin)) return url
-
-        if (url.startsWith("//")) {
-            url = `${window.location.origin}/${encodeURIComponent(url.substring(2))}`;
-        } else if (url.startsWith("/")) {
-            url = `${window.location.origin}/${encodeURIComponent(url.substring(1))}`;
-        } else if (url.startsWith("http://") || url.startsWith("https://")) {
-            url = `${window.location.origin}/${encodeURIComponent(url)}`;
-        }
-        return url;
-   };
-
-   // monkey patch fetch
-   const oldFetch = globalThis.fetch ;
-   globalThis.fetch = async (url, init) => {
-        return oldFetch(rewriteURL(url), init)
-   }
-
-   // monkey patch xmlhttprequest
-   const oldOpen = XMLHttpRequest.prototype.open;
-   XMLHttpRequest.prototype.open = function(method, url, async = true, user = null, password = null) {
-       return oldOpen.call(this, method, rewriteURL(url), async, user, password);
-   };
-
-
-    // Monkey patch setter methods
-    const elements = [
-        { tag: 'a', attribute: 'href' },
-        { tag: 'img', attribute: 'src' },
-        { tag: 'script', attribute: 'src' },
-        { tag: 'link', attribute: 'href' },
-        { tag: 'iframe', attribute: 'src' },
-        { tag: 'audio', attribute: 'src' },
-        { tag: 'video', attribute: 'src' },
-        { tag: 'source', attribute: 'src' },
-        { tag: 'embed', attribute: 'src' },
-        { tag: 'object', attribute: 'src' },
-        { tag: 'input', attribute: 'src' },
-        { tag: 'track', attribute: 'src' },
-        { tag: 'form', attribute: 'action' },
-    ];
-
-    elements.forEach(({ tag, attribute }) => {
-        const proto = document.createElement(tag).constructor.prototype;
-        const descriptor = Object.getOwnPropertyDescriptor(proto, attribute);
-        if (descriptor && descriptor.set) {
-            Object.defineProperty(proto, attribute, {
-                ...descriptor,
-                set(value) {
-                    return descriptor.set.call(this, rewriteURL(value));
-                }
-            });
-        }
-    });
-
-})();

proxychain/responsemodifers/rewrite_http_resource_urls.go

@@ -1,262 +0,0 @@
-package responsemodifers
-
-import (
-	"bytes"
-	"fmt"
-	"io"
-	"ladder/proxychain"
-	"net/url"
-	"strings"
-
-	"golang.org/x/net/html"
-)
-
-// Define list of HTML attributes to try to rewrite
-var AttributesToRewrite map[string]bool
-
-func init() {
-	AttributesToRewrite = map[string]bool{
-		"src":         true,
-		"href":        true,
-		"action":      true,
-		"srcset":      true, // TODO: fix
-		"poster":      true,
-		"data":        true,
-		"cite":        true,
-		"formaction":  true,
-		"background":  true,
-		"usemap":      true,
-		"longdesc":    true,
-		"manifest":    true,
-		"archive":     true,
-		"codebase":    true,
-		"icon":        true,
-		"pluginspage": true,
-	}
-}
-
-// HTMLResourceURLRewriter is a struct that rewrites URLs within HTML resources to use a specified proxy URL.
-// It uses an HTML tokenizer to process HTML content and rewrites URLs in src/href attributes.
-// <img src='/relative_path'> -> <img src='/https://proxiedsite.com/relative_path'>
-type HTMLResourceURLRewriter struct {
-	baseURL               *url.URL
-	tokenizer             *html.Tokenizer
-	currentToken          html.Token
-	tokenBuffer           *bytes.Buffer
-	currentTokenIndex     int
-	currentTokenProcessed bool
-}
-
-// NewHTMLResourceURLRewriter creates a new instance of HTMLResourceURLRewriter.
-// It initializes the tokenizer with the provided source and sets the proxy URL.
-func NewHTMLResourceURLRewriter(src io.ReadCloser, baseURL *url.URL) *HTMLResourceURLRewriter {
-	return &HTMLResourceURLRewriter{
-		tokenizer:         html.NewTokenizer(src),
-		currentToken:      html.Token{},
-		currentTokenIndex: 0,
-		tokenBuffer:       new(bytes.Buffer),
-		baseURL:           baseURL,
-	}
-}
-
-// Close resets the internal state of HTMLResourceURLRewriter, clearing buffers and token data.
-func (r *HTMLResourceURLRewriter) Close() error {
-	r.tokenBuffer.Reset()
-	r.currentToken = html.Token{}
-	r.currentTokenIndex = 0
-	r.currentTokenProcessed = false
-	return nil
-}
-
-// Read processes the HTML content, rewriting URLs and managing the state of tokens.
-// It reads HTML content, token by token, rewriting URLs to route through the specified proxy.
-func (r *HTMLResourceURLRewriter) Read(p []byte) (int, error) {
-
-	if r.currentToken.Data == "" || r.currentTokenProcessed {
-		tokenType := r.tokenizer.Next()
-
-		// done reading html, close out reader
-		if tokenType == html.ErrorToken {
-			if r.tokenizer.Err() == io.EOF {
-				return 0, io.EOF
-			}
-			return 0, r.tokenizer.Err()
-		}
-
-		// flush the current token into an internal buffer
-		// to handle fragmented tokens
-		r.currentToken = r.tokenizer.Token()
-
-		// patch tokens with URLs
-		isTokenWithAttribute := r.currentToken.Type == html.StartTagToken || r.currentToken.Type == html.SelfClosingTagToken
-		if isTokenWithAttribute {
-			patchResourceURL(&r.currentToken, r.baseURL)
-		}
-
-		r.tokenBuffer.Reset()
-		r.tokenBuffer.WriteString(html.UnescapeString(r.currentToken.String()))
-		r.currentTokenProcessed = false
-		r.currentTokenIndex = 0
-	}
-
-	n, err := r.tokenBuffer.Read(p)
-	if err == io.EOF || r.tokenBuffer.Len() == 0 {
-		r.currentTokenProcessed = true
-		err = nil // EOF in this context is expected and not an actual error
-	}
-	return n, err
-}
-
-// Root-relative URLs: These are relative to the root path and start with a "/".
-func handleRootRelativePath(attr *html.Attribute, baseURL *url.URL) {
-	// doublecheck this is a valid relative URL
-	_, err := url.Parse(fmt.Sprintf("http://localhost.com%s", attr.Val))
-	if err != nil {
-		return
-	}
-
-	//log.Printf("BASEURL patch:  %s\n", baseURL)
-
-	attr.Val = fmt.Sprintf(
-		"/%s://%s/%s",
-		baseURL.Scheme,
-		baseURL.Host,
-		strings.TrimPrefix(attr.Val, "/"),
-	)
-	attr.Val = url.QueryEscape(attr.Val)
-	attr.Val = fmt.Sprintf("/%s", attr.Val)
-
-	//log.Printf("root rel url rewritten-> '%s'='%s'", attr.Key, attr.Val)
-}
-
-// Document-relative URLs: These are relative to the current document's path and don't start with a "/".
-func handleDocumentRelativePath(attr *html.Attribute, baseURL *url.URL) {
-	attr.Val = fmt.Sprintf(
-		"%s://%s/%s%s",
-		baseURL.Scheme,
-		strings.Trim(baseURL.Host, "/"),
-		strings.Trim(baseURL.RawPath, "/"),
-		strings.Trim(attr.Val, "/"),
-	)
-	attr.Val = url.QueryEscape(attr.Val)
-	attr.Val = fmt.Sprintf("/%s", attr.Val)
-	//log.Printf("doc rel url rewritten-> '%s'='%s'", attr.Key, attr.Val)
-}
-
-// Protocol-relative URLs: These start with "//" and will use the same protocol (http or https) as the current page.
-func handleProtocolRelativePath(attr *html.Attribute, baseURL *url.URL) {
-	attr.Val = strings.TrimPrefix(attr.Val, "/")
-	handleRootRelativePath(attr, baseURL)
-	//log.Printf("proto rel url rewritten-> '%s'='%s'", attr.Key, attr.Val)
-}
-
-func handleAbsolutePath(attr *html.Attribute, baseURL *url.URL) {
-	// check if valid URL
-	u, err := url.Parse(attr.Val)
-	if err != nil {
-		return
-	}
-	if !(u.Scheme == "http" || u.Scheme == "https") {
-		return
-	}
-	attr.Val = fmt.Sprintf(
-		"/%s",
-		url.QueryEscape(
-			strings.TrimPrefix(attr.Val, "/"),
-		),
-	)
-	//log.Printf("abs url rewritten-> '%s'='%s'", attr.Key, attr.Val)
-}
-
-func handleSrcSet(attr *html.Attribute, baseURL *url.URL) {
-	for i, src := range strings.Split(attr.Val, ",") {
-		src = strings.Trim(src, " ")
-		for j, s := range strings.Split(src, " ") {
-			s = strings.Trim(s, " ")
-			if j == 0 {
-				f := &html.Attribute{Val: s, Key: attr.Key}
-				switch {
-				case strings.HasPrefix(s, "//"):
-					handleProtocolRelativePath(f, baseURL)
-				case strings.HasPrefix(s, "/"):
-					handleRootRelativePath(f, baseURL)
-				case strings.HasPrefix(s, "https://") || strings.HasPrefix(s, "http://"):
-					handleAbsolutePath(f, baseURL)
-				default:
-					handleDocumentRelativePath(f, baseURL)
-				}
-				s = f.Val
-			}
-			if i == 0 && j == 0 {
-				attr.Val = s
-				continue
-			}
-			attr.Val = fmt.Sprintf("%s %s", attr.Val, s)
-		}
-		attr.Val = fmt.Sprintf("%s,", attr.Val)
-	}
-	attr.Val = strings.TrimSuffix(attr.Val, ",")
-}
-
-// TODO: figure out how to handle these
-// srcset
-func patchResourceURL(token *html.Token, baseURL *url.URL) {
-	for i := range token.Attr {
-		attr := &token.Attr[i]
-
-		switch {
-		// dont touch attributes except for the ones we defined
-		case !AttributesToRewrite[attr.Key]:
-			continue
-		case attr.Key == "srcset":
-			handleSrcSet(attr, baseURL)
-			continue
-		case strings.HasPrefix(attr.Val, "//"):
-			handleProtocolRelativePath(attr, baseURL)
-			continue
-		case strings.HasPrefix(attr.Val, "/"):
-			handleRootRelativePath(attr, baseURL)
-			continue
-		case strings.HasPrefix(attr.Val, "https://") || strings.HasPrefix(attr.Val, "http://"):
-			handleAbsolutePath(attr, baseURL)
-			continue
-		default:
-			handleDocumentRelativePath(attr, baseURL)
-			continue
-		}
-
-	}
-}
-
-// RewriteHTMLResourceURLs modifies HTTP responses
-// to rewrite URLs attributes in HTML content (such as src, href)
-//   - `<img src='/relative_path'>` -> `<img src='/https://proxiedsite.com/relative_path'>`
-//   - This function is designed to allow the proxified page
-//     to still be browsible by routing all resource URLs through the proxy.
-//
-// ---
-//
-//   - It works by replacing the io.ReadCloser of the http.Response.Body
-//     with another io.ReaderCloser (HTMLResourceRewriter) that wraps the first one.
-//
-//   - This process can be done multiple times, so that the response will
-//     be streamed and modified through each pass without buffering the entire response in memory.
-//
-//   - HTMLResourceRewriter reads the http.Response.Body stream,
-//     parsing each HTML token one at a time and replacing attribute tags.
-//
-//   - When ProxyChain.Execute() is called, the response body will be read from the server
-//     and pulled through each ResponseModification which wraps the ProxyChain.Response.Body
-//     without ever buffering the entire HTTP response in memory.
-func RewriteHTMLResourceURLs() proxychain.ResponseModification {
-	return func(chain *proxychain.ProxyChain) error {
-		// return early if it's not HTML
-		ct := chain.Response.Header.Get("content-type")
-		if !strings.HasPrefix(ct, "text/html") {
-			return nil
-		}
-
-		chain.Response.Body = NewHTMLResourceURLRewriter(chain.Response.Body, chain.Request.URL)
-		return nil
-	}
-}

ruleset.yaml

@@ -20,4 +20,175 @@
         </script>
     - position: h1
       replace: |
-        <h1>An example with a ladder ;-)</h1>
+        <h1>An example with a ladder ;-)</h1>
+- domain: www.americanbanker.com
+  paths:
+    - /news
+  injections:
+    - position: head
+      append: |
+        <script>
+          document.addEventListener("DOMContentLoaded", () => {
+            const inlineGate = document.querySelector('.inline-gate');
+            if (inlineGate) {
+              inlineGate.classList.remove('inline-gate');
+              const inlineGated = document.querySelectorAll('.inline-gated');
+              for (const elem of inlineGated) { elem.classList.remove('inline-gated'); }
+            }
+          });
+        </script>
+- domain: www.nzz.ch
+  paths:
+    - /international
+    - /sport
+    - /wirtschaft
+    - /technologie
+    - /feuilleton
+    - /zuerich
+    - /wissenschaft
+    - /gesellschaft
+    - /panorama
+    - /mobilitaet
+    - /reisen
+    - /meinung
+    - /finanze
+  injections:
+    - position: head
+      append: |
+        <script>
+          document.addEventListener("DOMContentLoaded", () => {
+            const paywall = document.querySelector('.dynamic-regwall');
+            removeDOMElement(paywall)
+          });
+        </script>
+- domains: 
+  - www.architecturaldigest.com
+  - www.bonappetit.com
+  - www.cntraveler.com
+  - www.epicurious.com
+  - www.gq.com
+  - www.newyorker.com
+  - www.vanityfair.com
+  - www.vogue.com
+  - www.wired.com
+  injections:
+    - position: head
+      append: |
+        <script>
+          document.addEventListener("DOMContentLoaded", () => {
+            const banners = document.querySelectorAll('.paywall-bar, div[class^="MessageBannerWrapper-"');
+            banners.forEach(el => { el.remove(); });
+          });
+        </script>
+- domains: 
+  - www.nytimes.com
+  - www.time.com
+  headers:
+    ueser-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
+    cookie: nyt-a=; nyt-gdpr=0; nyt-geo=DE; nyt-privacy=1
+    referer: https://www.google.com/ 
+  injections:
+    - position: head
+      append: |
+        <script>
+          window.localStorage.clear();
+          document.addEventListener("DOMContentLoaded", () => {
+            const banners = document.querySelectorAll('div[data-testid="inline-message"], div[id^="ad-"], div[id^="leaderboard-"], div.expanded-dock, div.pz-ad-box, div[id="top-wrapper"], div[id="bottom-wrapper"]');
+            banners.forEach(el => { el.remove(); });
+          });
+        </script>
+- domains: 
+  - www.thestar.com
+  - www.niagarafallsreview.ca
+  - www.stcatharinesstandard.ca
+  - www.thepeterboroughexaminer.com
+  - www.therecord.com
+  - www.thespec.com
+  - www.wellandtribune.ca
+  injections:
+    - position: head
+      append: |
+        <script>
+          window.localStorage.clear();
+          document.addEventListener("DOMContentLoaded", () => {
+            const paywall = document.querySelectorAll('div.subscriber-offers');
+            paywall.forEach(el => { el.remove(); });
+            const subscriber_only = document.querySelectorAll('div.subscriber-only');
+            for (const elem of subscriber_only) {
+              if (elem.classList.contains('encrypted-content') && dompurify_loaded) {
+                const parser = new DOMParser();
+                const doc = parser.parseFromString('<div>' + DOMPurify.sanitize(unscramble(elem.innerText)) + '</div>', 'text/html');
+                const content_new = doc.querySelector('div');
+                elem.parentNode.replaceChild(content_new, elem);
+              }
+              elem.removeAttribute('style');
+              elem.removeAttribute('class');
+            }
+            const banners = document.querySelectorAll('div.subscription-required, div.redacted-overlay, div.subscriber-hide, div.tnt-ads-container');
+            banners.forEach(el => { el.remove(); });
+            const ads = document.querySelectorAll('div.tnt-ads-container, div[class*="adLabelWrapper"]');
+            ads.forEach(el => { el.remove(); });
+            const recommendations = document.querySelectorAll('div[id^="tncms-region-article"]');
+            recommendations.forEach(el => { el.remove(); });
+          });
+        </script>
+- domain: www.usatoday.com
+  injections:
+    - position: head
+      append: |
+        <script>
+          document.addEventListener("DOMContentLoaded", () => {
+            const banners = document.querySelectorAll('div.roadblock-container, .gnt_nb, [aria-label="advertisement"], div[id="main-frame-error"]');
+            banners.forEach(el => { el.remove(); });
+          });
+        </script>
+- domain: www.washingtonpost.com
+  injections:
+    - position: head
+      append: |
+        <script>
+          document.addEventListener("DOMContentLoaded", () => {
+            let paywall = document.querySelectorAll('div[data-qa$="-ad"], div[id="leaderboard-wrapper"], div[data-qa="subscribe-promo"]');
+            paywall.forEach(el => { el.remove(); });
+            const images = document.querySelectorAll('img');
+            images.forEach(image => { image.parentElement.style.filter = ''; });
+            const headimage = document.querySelectorAll('div .aspect-custom');
+            headimage.forEach(image => { image.style.filter = ''; });
+          });
+        </script>
+- domain: medium.com
+  headers:
+    referer: https://t.co/x?amp=1
+    x-forwarded-for: none
+    user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
+    content-security-policy: script-src 'self';
+    cookie: 
+- domain: tagesspiegel.de
+  headers:
+    content-security-policy: script-src 'self';
+    user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
+  urlMods:
+    query:
+      - key: amp
+        value: 1
+- domain: www.ft.com
+  headers:
+    referer: https://t.co/x?amp=1
+  injections:
+    - position: head
+      append: |
+        <script>
+          document.addEventListener("DOMContentLoaded", () => {
+            const styleTags = document.querySelectorAll('link[rel="stylesheet"]');
+            styleTags.forEach(el => { 
+              const href = el.getAttribute('href').substring(1);
+              const updatedHref = href.replace(/(https?:\/\/.+?)\/{2,}/, '$1/');
+              el.setAttribute('href', updatedHref);
+            });
+            setTimeout(() => {
+              const cookie = document.querySelectorAll('.o-cookie-message, .js-article-ribbon, .o-ads, .o-banner, .o-message, .article__content-sign-up');
+              cookie.forEach(el => { el.remove(); });
+            }, 1000);
+          })
+        </script>
+

rulesets/ca/_multi-metroland-media-group.yaml

@@ -1,35 +0,0 @@
-- domains: 
-  - www.thestar.com
-  - www.niagarafallsreview.ca
-  - www.stcatharinesstandard.ca
-  - www.thepeterboroughexaminer.com
-  - www.therecord.com
-  - www.thespec.com
-  - www.wellandtribune.ca
-  injections:
-    - position: head
-      append: |
-        <script>
-          window.localStorage.clear();
-          document.addEventListener("DOMContentLoaded", () => {
-            const paywall = document.querySelectorAll('div.subscriber-offers');
-            paywall.forEach(el => { el.remove(); });
-            const subscriber_only = document.querySelectorAll('div.subscriber-only');
-            for (const elem of subscriber_only) {
-              if (elem.classList.contains('encrypted-content') && dompurify_loaded) {
-                const parser = new DOMParser();
-                const doc = parser.parseFromString('<div>' + DOMPurify.sanitize(unscramble(elem.innerText)) + '</div>', 'text/html');
-                const content_new = doc.querySelector('div');
-                elem.parentNode.replaceChild(content_new, elem);
-              }
-              elem.removeAttribute('style');
-              elem.removeAttribute('class');
-            }
-            const banners = document.querySelectorAll('div.subscription-required, div.redacted-overlay, div.subscriber-hide, div.tnt-ads-container');
-            banners.forEach(el => { el.remove(); });
-            const ads = document.querySelectorAll('div.tnt-ads-container, div[class*="adLabelWrapper"]');
-            ads.forEach(el => { el.remove(); });
-            const recommendations = document.querySelectorAll('div[id^="tncms-region-article"]');
-            recommendations.forEach(el => { el.remove(); });
-          });
-        </script>

rulesets/ch/nzz-ch.yaml

@@ -1,24 +0,0 @@
-- domain: www.nzz.ch
-  paths:
-    - /international
-    - /sport
-    - /wirtschaft
-    - /technologie
-    - /feuilleton
-    - /zuerich
-    - /wissenschaft
-    - /gesellschaft
-    - /panorama
-    - /mobilitaet
-    - /reisen
-    - /meinung
-    - /finanze
-  injections:
-    - position: head
-      append: |
-        <script>
-          document.addEventListener("DOMContentLoaded", () => {
-            const paywall = document.querySelector('.dynamic-regwall');
-            removeDOMElement(paywall)
-          });
-        </script>

rulesets/de/tagesspiegel-de.yaml

@@ -1,9 +0,0 @@
-# loads amp version of page
-- domain: tagesspiegel.de
-  headers:
-    content-security-policy: script-src 'self';
-    user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
-  urlMods:
-    query:
-      - key: amp
-        value: 1

rulesets/gb/ft-com.yaml

@@ -1,20 +0,0 @@
-- domain: www.ft.com
-  headers:
-    referer: https://t.co/x?amp=1
-  injections:
-    - position: head
-      append: |
-        <script>
-          document.addEventListener("DOMContentLoaded", () => {
-            const styleTags = document.querySelectorAll('link[rel="stylesheet"]');
-            styleTags.forEach(el => { 
-              const href = el.getAttribute('href').substring(1);
-              const updatedHref = href.replace(/(https?:\/\/.+?)\/{2,}/, '$1/');
-              el.setAttribute('href', updatedHref);
-            });
-            setTimeout(() => {
-              const cookie = document.querySelectorAll('.o-cookie-message, .js-article-ribbon, .o-ads, .o-banner, .o-message, .article__content-sign-up');
-              cookie.forEach(el => { el.remove(); });
-            }, 1000);
-          })
-        </script>

rulesets/us/_multi-conde-nast.yaml

@@ -1,19 +0,0 @@
-- domains: 
-  - www.architecturaldigest.com
-  - www.bonappetit.com
-  - www.cntraveler.com
-  - www.epicurious.com
-  - www.gq.com
-  - www.newyorker.com
-  - www.vanityfair.com
-  - www.vogue.com
-  - www.wired.com
-  injections:
-    - position: head
-      append: |
-        <script>
-          document.addEventListener("DOMContentLoaded", () => {
-            const banners = document.querySelectorAll('.paywall-bar, div[class^="MessageBannerWrapper-"');
-            banners.forEach(el => { el.remove(); });
-          });
-        </script>

rulesets/us/americanbanker-com.yaml

@@ -1,16 +0,0 @@
-- domain: americanbanker.com
-  paths:
-    - /news
-  injections:
-    - position: head
-      append: |
-        <script>
-          document.addEventListener("DOMContentLoaded", () => {
-            const inlineGate = document.querySelector('.inline-gate');
-            if (inlineGate) {
-              inlineGate.classList.remove('inline-gate');
-              const inlineGated = document.querySelectorAll('.inline-gated');
-              for (const elem of inlineGated) { elem.classList.remove('inline-gated'); }
-            }
-          });
-        </script>

rulesets/us/medium-com.yaml

@@ -1,7 +0,0 @@
-- domain: medium.com
-  headers:
-    referer: https://t.co/x?amp=1
-    x-forwarded-for: none
-    user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
-    content-security-policy: script-src 'self';
-    cookie: 

rulesets/us/nytimes-com.yaml

@@ -1,17 +0,0 @@
-- domains: 
-  - www.nytimes.com
-  - www.time.com
-  headers:
-    ueser-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
-    cookie: nyt-a=; nyt-gdpr=0; nyt-geo=DE; nyt-privacy=1
-    referer: https://www.google.com/ 
-  injections:
-    - position: head
-      append: |
-        <script>
-          window.localStorage.clear();
-          document.addEventListener("DOMContentLoaded", () => {
-            const banners = document.querySelectorAll('div[data-testid="inline-message"], div[id^="ad-"], div[id^="leaderboard-"], div.expanded-dock, div.pz-ad-box, div[id="top-wrapper"], div[id="bottom-wrapper"]');
-            banners.forEach(el => { el.remove(); });
-          });
-        </script>

rulesets/us/usatoday-com.yaml

@@ -1,10 +0,0 @@
-- domain: www.usatoday.com
-  injections:
-    - position: head
-      append: |
-        <script>
-          document.addEventListener("DOMContentLoaded", () => {
-            const banners = document.querySelectorAll('div.roadblock-container, .gnt_nb, [aria-label="advertisement"], div[id="main-frame-error"]');
-            banners.forEach(el => { el.remove(); });
-          });
-        </script>

rulesets/us/washingtonpost-com.yaml

@@ -1,14 +0,0 @@
-- domain: www.washingtonpost.com
-  injections:
-    - position: head
-      append: |
-        <script>
-          document.addEventListener("DOMContentLoaded", () => {
-            let paywall = document.querySelectorAll('div[data-qa$="-ad"], div[id="leaderboard-wrapper"], div[data-qa="subscribe-promo"]');
-            paywall.forEach(el => { el.remove(); });
-            const images = document.querySelectorAll('img');
-            images.forEach(image => { image.parentElement.style.filter = ''; });
-            const headimage = document.querySelectorAll('div .aspect-custom');
-            headimage.forEach(image => { image.style.filter = ''; });
-          });
-        </script>