Updated Alloy Proxy

XSS Fix Update.

app.js

@@ -6,6 +6,7 @@ var fs = require('fs');
 var app = express();
 var cookieParser = require('cookie-parser');
 var session = require('express-session');
+var xss = require("xss");
 
 var config = JSON.parse(fs.readFileSync('config.json', 'utf-8')),
   httpsAgent = new https.Agent({
@@ -20,8 +21,7 @@ var config = JSON.parse(fs.readFileSync('config.json', 'utf-8')),
   server,
   port = process.env.PORT || config.port,
   ready = (() => {
-        var a = 'http://',
+    var a = 'http://', b = config.listenip;
-            b = config.listenip;
     if (config.ssl) a = 'https://';
     if (b == '0.0.0.0' || b == '127.0.0.1') b = 'localhost';
     console.log('AlloyProxy is now running at', a + b + ':' + port);
@@ -98,12 +98,12 @@ function error(statusCode, info) {
   return fs.readFileSync('alloy/assets/error.html', 'utf8').toString().replace('%ERROR%', `Error ${statusCode}: ${info}`)
   }
   if (info && !statusCode) {
-        return fs.readFileSync('alloy/assets/error.html', 'utf8').toString().replace('%ERROR%', `Error: ${info}`)
+    return (fs.readFileSync('alloy/assets/error.html', 'utf8').toString().replace('%ERROR%', `Error: ${info}`))
   }
   if (statusCode && !info) {
-        return fs.readFileSync('alloy/assets/error.html', 'utf8').toString().replace('%ERROR%', `Error ${statusCode}`)
+    return (fs.readFileSync('alloy/assets/error.html', 'utf8').toString().replace('%ERROR%', `Error ${statusCode}`))
   }
-    return fs.readFileSync('public/assets/error.html', 'utf8').toString().replace('%ERROR%', `An error has occurred!`)
+  return (fs.readFileSync('public/assets/error.html', 'utf8').toString().replace('%ERROR%', `An error has occurred!`))
 }
 
 app.post('/createSession', async (req, res) => {
@@ -196,7 +196,7 @@ app.use(prefix, async(req, res, next) => {
     }
     return res.redirect(307, '/fetch/' + base64Encode('https://old.reddit.com') + location.path)
   }
-    const response = await fetch(location.href, options).catch(err => res.send(error('404', `"${location.href}" was not found!`)));
+  const response = await fetch(location.href, options).catch(err => res.send(error('404', `"${xss(location.href)}" was not found!`)));
   if(typeof response.buffer != 'function')return;
   var resbody = await response.buffer();
   var contentType = 'text/plain'

app.json

@@ -1,6 +1,7 @@
 {
-  "name": "Holy Unblocker",
+  "name": "Alloy Proxy",
-  "description": "A website that can be used to bypass web filters; both extension and firewall. Hosted on Alloy Proxy. Node Unblocker hosted externally.",
+  "description": "A node.js web proxy featuring URL encoding, and amazing compatablity!",
-  "repository": "https://github.com/QuiteAFancyEmerald/HolyUB/",
+  "repository": "https://github.com/titaniumnetwork-dev/alloyproxy/",
+  "logo": "https://avatars1.githubusercontent.com/u/47227492?s=200&v=4",
   "keywords": ["node", "proxy", "unblocker"]
 }

package-lock.json

@@ -40,6 +40,11 @@
       "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.0.tgz",
       "integrity": "sha512-zauLjrfCG+xvoyaqLoV8bLVXXNGC4JqlxFCutSDWA6fJrTo2ZuvLYTqZ7aHBLZSMOopbzwv8f+wZcVzfVTI2Dg=="
     },
+    "commander": {
+      "version": "2.20.3",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
+      "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="
+    },
     "content-disposition": {
       "version": "0.5.3",
       "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.3.tgz",
@@ -72,6 +77,11 @@
       "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
       "integrity": "sha1-4wOogrNCzD7oylE6eZmXNNqzriw="
     },
+    "cssfilter": {
+      "version": "0.0.10",
+      "resolved": "https://registry.npmjs.org/cssfilter/-/cssfilter-0.0.10.tgz",
+      "integrity": "sha1-xtJnJjKi5cg+AT5oZKQs6N79IK4="
+    },
     "debug": {
       "version": "2.6.9",
       "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
@@ -277,9 +287,9 @@
       "integrity": "sha512-hZXc7K2e+PgeI1eDBe/10Ard4ekbfrrqG8Ep+8Jmf4JID2bNg7NvCPOZN+kfF574pFQI7mum2AUqDidoKqcTOw=="
     },
     "node-fetch": {
-      "version": "2.6.0",
+      "version": "2.6.1",
-      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz",
-      "integrity": "sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA=="
+      "integrity": "sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw=="
     },
     "on-finished": {
       "version": "2.3.0",
@@ -438,6 +448,15 @@
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
       "integrity": "sha1-IpnwLG3tMNSllhsLn3RSShj2NPw="
+    },
+    "xss": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/xss/-/xss-1.0.8.tgz",
+      "integrity": "sha512-3MgPdaXV8rfQ/pNn16Eio6VXYPTkqwa0vc7GkiymmY/DqR1SE/7VPAAVZz1GJsJFrllMYO3RHfEaiUGjab6TNw==",
+      "requires": {
+        "commander": "^2.20.3",
+        "cssfilter": "0.0.10"
+      }
     }
   }
 }

package.json

@@ -26,7 +26,8 @@
     "express": "^4.17.1",
     "express-session": "^1.17.1",
     "follow-redirects": "^1.13.0",
-    "node-fetch": "^2.6.0",
+    "node-fetch": ">=2.6.1",
-    "parse-raw-http": "0.0.1"
+    "parse-raw-http": "0.0.1",
+     "xss": "^1.0.8"
   }
 }