Changeset eae86f5 for apps/proxyscript

Timestamp:

Sep 8, 2004 7:25:09 AM (16 years ago)

Author:

zzz <zzz@…>

Branches:

master

Children:

8e63974

Parents:

30128a1

git-author:

hypercubus <hypercubus> (09/08/04 07:25:09)

git-committer:

zzz <zzz@…> (09/08/04 07:25:09)

Message:

Updates by cervantes:

• Proxy recursion disabled by default (strict)
• Password Authentication for session commands
• Support for ​http://path?i2paddresshelper=BASE64
• Support for ​http://i2p/BASE64/path syntax

File:

• apps/proxyscript/i2pProxy.pac (modified) (7 diffs)

apps/proxyscript/i2pProxy.pac

@@ -6 +6 @@
 ** Date:    11 May 2004
 **
+** Revised: 07 Sep 2004
+** Changes:
+**       Proxy recursion disabled by default (strict)
+**       Password Authentication for session commands
+**       Support for http://path?i2paddresshelper=BASE64
+**       Support for http://i2p/BASE64/path syntax
 ** Revised: 17 May 2004
-** Added:
+** Changes:
 **       Ability for the user to control the proxy
 **       status on a per browser-session basis.
 ********************************************************/
+
 
 /* C O N F I G U R A T I O N
@@ -54 +61 @@
 **   eg. <img src="i2p.off" ...
 **   This is why the default setting for statusKeyword is "limited", which only
-**   allows you to set the proxy status to "on".
+**   allows you to set the proxy status to "on". See also keywordAuthPassword.
 **
 **   [1] "all"  => All proxy status urls are available.
 **               '->  i2p.on, i2p.off, i2p.auto (respective to proxyStatus settings)
 **               '->  WARNING: Setting "all" is a big risk to your anonymity!
-**               
+**               '->  In this mode it is highly recommended you set an AuthPassword too!
+**
 **   [2] "limited"  => Only i2p.on is available..
 **                      '->  This setting lasts for the duration of the browser setting.
@@ -71 +79 @@
 */
 
-var statusKeyword = "limited";
+var statusKeyword = "all";
 
 /*
@@ -85 +93 @@
 */
 
-var strict = false;
+var strict = true;
+
+/*
+**   By setting an authentication password, all activated session keywords
+**   will require the addition of a password to prevent malicious sites from
+**   hijacking your proxy settings. ie. <img src="i2p.off" ...
+**   Users should append whatever they set here to any command keywords
+**   they use. 
+**   eg. i2p.on.passw0rd
+**   If left blank, authentication is ignored - it is recommended that
+**   you use "limited" statusKeyword mode if you choose not to require a password.
+**   If you do require this feature then you should replace the default "passw0rd" with
+**   one of your own (recommend at least 8 letters with a case-sensitive alpha-numeric
+**   mix of characters).
+**
+*/
+
+var keywordAuthPassword = "passw0rd";
 
 
@@ -97 +122 @@
 
 if (strict == false) {
-        i2pProxy = i2pProxy + "; " + normal;
+     i2pProxy = i2pProxy + "; " + normal;
+}
+
+/*Check for User Authentication Password.
+*/
+if (keywordAuthPassword != "") {
+     keywordAuthPassword = "." + keywordAuthPassword;
 }
 
@@ -109 +140 @@
 
    if (statusKeyword != "off") {
-      if (host == "i2p.off" && statusKeyword == "all") {
+      if (host == "i2p.off" + keywordAuthPassword && statusKeyword == "all") {
          /*Proxy is bypassed - outweb available only
          */
          proxyStatus = "off";
-      } else if (host == "i2p.auto" && statusKeyword == "all") {
+      } else if (host == "i2p.auto" + keywordAuthPassword && statusKeyword == "all") {
           /* Proxy is used only for .i2p hosts otherwise
           ** '-> browse as normal.
           */
           proxyStatus = "auto";
-      } else if (host == "i2p.on" && statusKeyword == "limited") {
+      } else if (host == "i2p.on" + keywordAuthPassword && (statusKeyword == "limited" ||
+                                                            statusKeyword == "all"        )) {
           /* Only I2P traffic is accepted.
           */
@@ -136 +168 @@
    
    host = host.toLowerCase();
-   /* check tld for "i2p" - if found then redirect
+   /* check tld for "i2p" or oOo's new "i2paddresshelper" syntax - if found then redirect
    ** '-> request to the i2p proxy
    */
    
-   if (shExpMatch(host, "*.i2p")) {    // seems more reliable than:
-       return i2pProxy;                     // dnsDomainIs(host, ".i2p") || 
-   } else {                                      // i2pRegex.test(host)
+   if (url.match(/^http:\/\/i2p\/[a-zA-Z0-9\-\~]{516}|i2paddresshelper=/i) ||
+       shExpMatch(host, "*.i2p")) {                       // seems more reliable than:
+       return i2pProxy;                                     // dnsDomainIs(host, ".i2p") || 
+   } else {                                                   // i2pRegex.test(host)
        return normal;
    }