Code.gs Update

[nyetest]

• Code.gs improvements

Code.gs now strips host, proxy/IP headers, origin, referrer, and caller-supplied user-agent. Also Forces User-Agent: Mozilla/5.0.
Should prevent some IP leakage (but does not fully prevent it).

• Obfuscated variants

Added 4 obfuscated versions; should be used instead of the raw version, as they reduces the chances of detection and potential ban.

• Navid

[nyetest]

Added minified version of Code.gs; I think it's a sweetspot between detection resistance and performance for what it's worth.

• Navid

[Stazzical]

You put your personal auth key in the mini version.

[nyetest]

You put your personal auth key in the mini version.

Ty. Already changed. Forgot to remove after testing it.
All obfuscated versions have also been tested, but they're slightly slower.

I've also found out there's per-account rate limits (not per-deployment), so deploying on multiple accounts is the most effective way.

[creep247]

obfuscated code in a GitHub project is usually a bad idea.

[kingparsa1010]

does it conflict with #18 ?

[abolix]

I agree with @creep247, it's not good to have obfuscated code in github.
but some of the changes in Code.gs can be good . I'm down to check the seperately if you want.

[creep247]

since there is no issues page, im writing here:

Problem:
The Real IP address of users is leaked via X-Forwarded-For header

Two options:
1- If there is no solution, Warn the users in readme file
2- find a solution to remove this header from requests

Thanks

[abolix]

@creep247 there is no issues page because there is many people having a simple problem on setup and we rather let the telegram community solves it.

about the issue you mentioned, yes you are right. we should strip some headers like x-forwarded-for and proxy stuff. I'll add them after merging some PRs

[creep247]

Maybe it is a good idea to save time by moving "Installing dependencies" step to a setup.bat file. This will save a few seconds opening the app. start.bat can just start the app. or maybe checking the .venv folder to see if the app is already installed or no and bypass these steps.
We can also add the feature to check if quota is exceeded and automatically use another script_id from our second google account that has the same auth_key

[BOplaid]

Maybe it is a good idea to save time by moving "Installing dependencies" step to a setup.bat file. This will save a few seconds opening the app. start.bat can just start the app. or maybe checking the .venv folder to see if the app is already installed or no and bypass these steps.

run.bat / run.sh is only for the first-time run. Afterwards, you can just go .venv\bin\python3 main.py.
Though I do agree the script should be called setup instead. It's a better name for what it does.

[creep247]

start.bat script also uses unofficial mirror without using Hash-checking Mode , which enables the mirror to install arbitrary code.

[BOplaid]

start.bat script also uses unofficial mirror without using Hash-checking Mode , which enables the mirror to install arbitrary code.

@abolix
@masterking32

[abolix]

I will check on that, but it's not like we have many choices here, I might of release CI/CD for exe

[BOplaid]

Does this really change the UA? I didn't think that was possible

[OnceUponATimeInAmerica]

As there is no issues section I thought it to mention it here.

The Windows version of start batch script start.bat is line-terminated with LF; which causes strange error messages to be issued.

The problem is resolved once the script is saved with CRLF line endings, as expected for Windows.

[BOplaid]

As there is no issues section I thought it to mention it here.

The Windows version of start batch script start.bat is line-terminated with LF; which causes strange error messages to be issued.

The problem is resolved once the script is saved with CRLF line endings, as expected for Windows.

Fork this project, edit start.bat in your fork, commit, make a pull request here

[Parsa307]

obfuscation is never a good idea and never be and also in open source software it does violate honesty

mostly nobody gotten banned for this code.gs abuse anyways google could tell if there is a abuse with network traffic

[BOplaid]

I tested this (using Code.gs from the overhaul commit) and the UA thing didn't work. What gives?