├── .github
├── buttcoin.png
├── qr.svg
├── style-after.png
└── style-before.png
├── .gitignore
├── README.md
├── archive
├── index.js
├── package.json
└── wrangler.toml.example
├── buttcoin
├── index.js
├── package.json
└── wrangler.toml.example
├── cors
├── index.js
├── package.json
└── wrangler.toml.example
├── eruda
├── index.js
├── package.json
└── wrangler.toml.example
├── hash
├── index.js
├── package.json
└── wrangler.toml.example
├── instagram
├── index.js
├── package.json
└── wrangler.toml.example
├── ip
├── index.js
├── package.json
└── wrangler.toml.example
├── package-lock.json
├── package.json
├── proxy
├── index.js
├── package.json
└── wrangler.toml.example
├── pwned
├── index.js
├── package.json
└── wrangler.toml.example
├── qr
├── index.js
├── package.json
└── wrangler.toml.example
├── style
├── index.js
├── package.json
└── wrangler.toml.example
├── unroll
├── index.js
├── package.json
└── wrangler.toml.example
└── uuid
├── index.js
├── package.json
└── wrangler.toml.example
/.github/buttcoin.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ardislu/cloudflare-workers/4c71f7e633c14d73efbaee6341456a10597104e4/.github/buttcoin.png
--------------------------------------------------------------------------------
/.github/qr.svg:
--------------------------------------------------------------------------------
1 | Reverse Proxies
77 |
78 | ## proxy
79 |
80 | This is a minimal, basic reverse proxy. Proxy any request through the Cloudflare
81 | Worker by passing the **entire** URL as a query string to the Cloudflare Worker.
82 |
83 | For example, if the request you want to proxy is:
84 |
85 | ```
86 | https://api.example.com?param1=test1¶m2=test2
87 | ```
88 |
89 | then the final request URL should be:
90 |
91 | ```
92 | https://x.y.workers.dev?https://api.example.com?param1=test1¶m2=test2
93 | ```
94 |
95 | For simplicity, this worker does not configure the `cf` headers on the `fetch`
96 | request that is sent to the Cloudflare proxy. Set the `cf` request headers to
97 | configure the Cloudflare Worker's behavior on caching. See:
98 | [Cache using fetch](https://developers.cloudflare.com/workers/examples/cache-using-fetch).
99 |
100 | ## cors
101 |
102 | This reverse proxy injects permissive
103 | [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) response headers
104 | to a response. Useful for using APIs that have not enabled CORS.
105 |
106 | ```
107 | https://x.y.workers.dev?https://api-with-unconfigured-cors.example.com?param1=test1¶m2=test2
108 | ```
109 |
110 | ## style
111 |
112 | This reverse proxy injects a basic CSS style sheet to a page's `` and
113 | returns the result. Good for quickly "upgrading" old/minimalist web pages with
114 | no styling.
115 |
116 | ```
117 | https://x.y.workers.dev?https://site-with-no-styles.example.com
118 | ```
119 |
120 | Before (https://www.cs.virginia.edu/~robins/YouAndYourResearch.html):
121 | Web Utilities
149 |
150 | ## qr
151 |
152 | Generates a SVG file representing a QR code for the value passed to the
153 | endpoint.
154 |
155 | ```
156 | https://x.y.workers.dev?https://example.com
157 | > (The SVG file rendered below)
158 | ```
159 |
160 | Command Line Utilities
192 |
193 | ## pwned
194 |
195 | > [!CAUTION]
232 | ```
233 |
234 | In PowerShell:
235 |
236 | ```powershell
237 | PS> irm https://x.y.workers.dev
238 |
239 | ```
240 |
241 | ## uuid
242 |
243 | Returns a random version 4 UUID.
244 |
245 | In bash:
246 |
247 | ```bash
248 | $ curl https://x.y.workers.dev
249 |
250 | ```
251 |
252 | In PowerShell:
253 |
254 | ```powershell
255 | PS> irm https://x.y.workers.dev
256 |
257 | ```
258 |
259 | ## hash
260 |
261 | Returns the hash of a string or a hexadecimal byte array using the
262 | [Web Crypto API](https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest).
263 |
264 | In bash:
265 |
266 | ```bash
267 | # SHA-256 hash of the string "Hello, world!"
268 | $ curl "https://x.y.workers.dev?algorithm=SHA-256&query=Hello%2C%20world%21"
269 | 315F5BDB76D078C43B8AC0064E4A0164612B1FCE77C869345BFC94C75894EDD3
270 |
271 | # MD5 hash of the literal byte array [00, AA, BB, CC]
272 | $ curl "https://x.y.workers.dev?algorithm=MD5&hex=00AABBCC"
273 | CD7409B51FDE80807E2E1532B7432A00
274 | ```
275 |
276 | In PowerShell:
277 |
278 | ```powershell
279 | # SHA-256 hash of the string "Hello, world!"
280 | PS> irm "https://x.y.workers.dev?algorithm=SHA-256&query=Hello%2C%20world%21"
281 | 315F5BDB76D078C43B8AC0064E4A0164612B1FCE77C869345BFC94C75894EDD3
282 |
283 | # MD5 hash of the literal byte array [00, AA, BB, CC]
284 | PS> irm "https://x.y.workers.dev?algorithm=MD5&hex=00AABBCC"
285 | CD7409B51FDE80807E2E1532B7432A00
286 | ```
287 |
288 | ### `algorithm` (alias `a`)
289 |
290 | Supported values are:
291 |
292 | - `MD5` (not part of the Web Crypto API but supported by Cloudflare Workers)
293 | - `SHA-1`
294 | - `SHA-256`
295 | - `SHA-384`
296 | - `SHA-512`
297 |
298 | ### `query` (alias `q`)
299 |
300 | The string you want to get the hash of.
301 |
302 | ### `hex` (alias `h`)
303 |
304 | The hexadecimal byte array you want to get the hash of. An optional "0x" prefix
305 | may be given, the prefix is ignored.
306 |
307 | If both `query` and `hex` are provided, `query` will be used.
308 |
--------------------------------------------------------------------------------
/archive/index.js:
--------------------------------------------------------------------------------
1 | export default {
2 | async fetch(request) {
3 | const url = new URL(request.url);
4 | const queryString = decodeURIComponent(url.search.substring(1));
5 |
6 | return Response.redirect(`https://archive.ph/${queryString}`);
7 | }
8 | }
9 |
--------------------------------------------------------------------------------
/archive/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "archive",
3 | "version": "0.3.0",
4 | "description": "Web utility that automatically sends a webpage to archive.ph.",
5 | "license": "ISC",
6 | "author": "Ardis Lu",
7 | "private": true,
8 | "scripts": {
9 | "dev": "wrangler dev",
10 | "deploy": "wrangler deploy"
11 | },
12 | "repository": {
13 | "type": "git",
14 | "url": "https://github.com/ardislu/cloudflare-workers.git"
15 | }
16 | }
17 |
--------------------------------------------------------------------------------
/archive/wrangler.toml.example:
--------------------------------------------------------------------------------
1 | name = 'archive'
2 | main = 'index.js'
3 | compatibility_date = '2025-05-23'
4 | route = { pattern = 'archive.example.com', custom_domain = true }
5 |
--------------------------------------------------------------------------------
/buttcoin/index.js:
--------------------------------------------------------------------------------
1 | import { decode } from 'html-entities';
2 | import { SetBase, UpdateLink } from '../proxy';
3 |
4 | class ReplaceBitcoin {
5 | #buffer = '';
6 |
7 | text(text) {
8 | this.#buffer += text.text;
9 |
10 | if (text.lastInTextNode) {
11 | const buttText = this.#buffer
12 | .replaceAll('bitcoin', 'buttcoin')
13 | .replaceAll('Bitcoin', 'Buttcoin')
14 | .replaceAll('BITCOIN', 'BUTTCOIN')
15 | .replaceAll(/bitcoin/gi, 'buttcoin'); // Any other mixed case just become buttcoin
16 | text.replace(decode(buttText));
17 | this.#buffer = '';
18 | }
19 | else {
20 | text.remove();
21 | }
22 | }
23 | }
24 |
25 | export default {
26 | async fetch(request) {
27 | const url = /^http(s)?:\/\//i.test(request.url) ? new URL(request.url) : new URL(`https://${request.url}`);
28 |
29 | const queryString = decodeURIComponent(url.search.substring(1));
30 | let remoteUrl;
31 | try {
32 | remoteUrl = new URL(queryString);
33 | }
34 | catch {
35 | return new Response('Invalid URL provided in query string.', { status: 400 });
36 | }
37 |
38 | const response = await fetch(remoteUrl);
39 |
40 | return new HTMLRewriter()
41 | .on('head', new SetBase(remoteUrl.origin))
42 | .on('link, script', new UpdateLink())
43 | .on('html', new ReplaceBitcoin())
44 | .transform(response);
45 | }
46 | }
47 |
--------------------------------------------------------------------------------
/buttcoin/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "buttcoin",
3 | "version": "0.3.0",
4 | "description": "Reverse proxy which replaces all instances of the word \"bitcoin\" to \"buttcoin\".",
5 | "license": "ISC",
6 | "author": "Ardis Lu",
7 | "private": true,
8 | "scripts": {
9 | "dev": "wrangler dev",
10 | "deploy": "wrangler deploy"
11 | },
12 | "dependencies": {
13 | "html-entities": "^2.5.2"
14 | },
15 | "repository": {
16 | "type": "git",
17 | "url": "https://github.com/ardislu/cloudflare-workers.git"
18 | }
19 | }
20 |
--------------------------------------------------------------------------------
/buttcoin/wrangler.toml.example:
--------------------------------------------------------------------------------
1 | name = 'buttcoin'
2 | main = 'index.js'
3 | compatibility_date = '2025-05-23'
4 | route = { pattern = 'buttcoin.example.com', custom_domain = true }
5 |
--------------------------------------------------------------------------------
/cors/index.js:
--------------------------------------------------------------------------------
1 | export default {
2 | async fetch(request) {
3 | const url = /^http(s)?:\/\//i.test(request.url) ? new URL(request.url) : new URL(`https://${request.url}`);
4 | const queryString = decodeURIComponent(url.search.substring(1));
5 |
6 | let response;
7 | if (request.method === 'OPTIONS') {
8 | response = new Response();
9 | response.headers.set('Access-Control-Allow-Origin', request.headers.get('Origin'));
10 | response.headers.set('Access-Control-Allow-Methods', request.headers.get('Access-Control-Request-Method'));
11 | response.headers.set('Access-Control-Allow-Headers', request.headers.get('Access-Control-Request-Headers'));
12 | response.headers.set('Access-Control-Allow-Credentials', 'true');
13 | response.headers.set('Access-Control-Max-Age', '86400');
14 | response.headers.append('Vary', 'Origin');
15 | }
16 | else {
17 | response = await fetch(queryString);
18 | response = new Response(response.body, response);
19 | response.headers.set('Access-Control-Allow-Origin', request.headers.get('Origin'));
20 | response.headers.set('Access-Control-Allow-Credentials', 'true');
21 | response.headers.set('Access-Control-Expose-Headers', '*, Authorization');
22 | response.headers.append('Vary', 'Origin');
23 | }
24 |
25 | return response;
26 | }
27 | }
28 |
--------------------------------------------------------------------------------
/cors/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "cors",
3 | "version": "0.3.0",
4 | "description": "This reverse proxy injects permissive CORS response headers to a response.",
5 | "license": "ISC",
6 | "author": "Ardis Lu",
7 | "private": true,
8 | "scripts": {
9 | "dev": "wrangler dev",
10 | "deploy": "wrangler deploy"
11 | },
12 | "repository": {
13 | "type": "git",
14 | "url": "https://github.com/ardislu/cloudflare-workers.git"
15 | }
16 | }
17 |
--------------------------------------------------------------------------------
/cors/wrangler.toml.example:
--------------------------------------------------------------------------------
1 | name = 'cors'
2 | main = 'index.js'
3 | compatibility_date = '2025-05-23'
4 | route = { pattern = 'cors.example.com', custom_domain = true }
5 |
--------------------------------------------------------------------------------
/eruda/index.js:
--------------------------------------------------------------------------------
1 | import { SetBase, UpdateLink } from '../proxy';
2 |
3 | class InjectEruda {
4 | element(element) {
5 | element.prepend('', { html: true });
6 | }
7 | }
8 |
9 | export default {
10 | async fetch(request) {
11 | const url = /^http(s)?:\/\//i.test(request.url) ? new URL(request.url) : new URL(`https://${request.url}`);
12 | const remoteUrl = new URL(decodeURIComponent(url.search.substring(1)));
13 |
14 | const response = await fetch(remoteUrl);
15 | return new HTMLRewriter()
16 | .on('head', new SetBase(remoteUrl.origin))
17 | .on('link, script', new UpdateLink())
18 | .on('body', new InjectEruda())
19 | .transform(response);
20 | }
21 | }
22 |
--------------------------------------------------------------------------------
/eruda/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "eruda",
3 | "version": "0.3.0",
4 | "description": "Reverse proxy which injects eruda into a webpage.",
5 | "license": "ISC",
6 | "author": "Ardis Lu",
7 | "private": true,
8 | "scripts": {
9 | "dev": "wrangler dev",
10 | "deploy": "wrangler deploy"
11 | },
12 | "repository": {
13 | "type": "git",
14 | "url": "https://github.com/ardislu/cloudflare-workers.git"
15 | }
16 | }
17 |
--------------------------------------------------------------------------------
/eruda/wrangler.toml.example:
--------------------------------------------------------------------------------
1 | name = 'eruda'
2 | main = 'index.js'
3 | compatibility_date = '2025-05-23'
4 | route = { pattern = 'eruda.example.com', custom_domain = true }
5 |
--------------------------------------------------------------------------------
/hash/index.js:
--------------------------------------------------------------------------------
1 | export default {
2 | async fetch(request) {
3 | const url = new URL(request.url);
4 | let algorithm;
5 | let query;
6 | let hex;
7 |
8 | // Parse URLSearchParams
9 | for (const [key, value] of url.searchParams) {
10 | const normalizedKey = key.toLowerCase();
11 | if ((normalizedKey === 'a' || normalizedKey === 'algorithm')) {
12 | if (/^SHA-?(1|256|384|512)$/i.test(value)) {
13 | algorithm = value.includes('-') ? value : `SHA-${value.slice(3)}`; // Insert a '-' character if it's not present; crypto.subtle.digest() requires it.
14 | }
15 | else if (value.toUpperCase() === 'MD5') {
16 | algorithm = 'MD5';
17 | }
18 | }
19 | else if ((normalizedKey === 'q' || normalizedKey === 'query') && value) { // Intentionally fail for falsy values because a null or empty string is also invalid
20 | query = value;
21 | }
22 | else if ((normalizedKey === 'h' || normalizedKey === 'hex') && value) {
23 | hex = value;
24 | }
25 | }
26 |
27 | // Handling bad params
28 | if (algorithm === undefined) {
29 | return new Response('Invalid algorithm provided. Provide one of the following values for the parameter "a" or "algorithm": MD5, SHA-1, SHA-256, SHA-384, or SHA-512.', { status: 400 });
30 | }
31 | if (query === undefined && hex === undefined) {
32 | return new Response('No input provided. Provide a string value for the parameter "q" or "query", or a hex value for the parameter "h" or "hex".', { status: 400 });
33 | }
34 | if (hex !== undefined) {
35 | if (hex.length % 2 === 1 || !/^(0x)?[a-fA-F0-9]+$/.test(hex)) {
36 | return new Response('Invalid hexadecimal input provided.', { status: 400 });
37 | }
38 | }
39 |
40 | let inputArray;
41 | if (query) {
42 | inputArray = new TextEncoder().encode(query);
43 | }
44 | else {
45 | inputArray = Uint8Array.from(hex.replace('0x', '').match(/.{2}/g), v => parseInt(v, 16));
46 | }
47 | const digest = await crypto.subtle.digest(algorithm, inputArray);
48 | const outputArray = [...new Uint8Array(digest)]; // Need to spread typed array into a non-typed array to allow .map() to output strings
49 | const hash = outputArray.map(v => v.toString(16).padStart(2, '0')).join('').toUpperCase();
50 |
51 | return new Response(hash);
52 | }
53 | }
54 |
--------------------------------------------------------------------------------
/hash/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "hash",
3 | "version": "0.3.0",
4 | "description": "Return the hash of the input query.",
5 | "license": "ISC",
6 | "author": "Ardis Lu",
7 | "private": true,
8 | "scripts": {
9 | "dev": "wrangler dev",
10 | "deploy": "wrangler deploy"
11 | },
12 | "repository": {
13 | "type": "git",
14 | "url": "https://github.com/ardislu/cloudflare-workers.git"
15 | }
16 | }
17 |
--------------------------------------------------------------------------------
/hash/wrangler.toml.example:
--------------------------------------------------------------------------------
1 | name = 'hash'
2 | main = 'index.js'
3 | compatibility_date = '2025-05-23'
4 | route = { pattern = 'hash.example.com', custom_domain = true }
5 |
--------------------------------------------------------------------------------
/instagram/index.js:
--------------------------------------------------------------------------------
1 | export default {
2 | async fetch(request) {
3 | const url = new URL(request.url);
4 | const queryString = decodeURIComponent(url.search.substring(1));
5 |
6 | const segments = queryString.split('/');
7 | const id = segments.pop() || segments.pop(); // If there's a trailing '/' character, need to pop() twice
8 |
9 | const responseBody = `
10 |
11 | 
122 |
123 | After
124 | (https://x.y.workers.dev?https://www.cs.virginia.edu/~robins/YouAndYourResearch.html):
125 | 
126 |
127 | ## buttcoin
128 |
129 | Returns a page where all instances of the word "bitcoin" are replaced with
130 | "buttcoin".
131 |
132 | ```
133 | https://x.y.workers.dev?https://en.wikipedia.org/wiki/Bitcoin
134 | > (See image below)
135 | ```
136 |
137 | 
138 |
139 | ## eruda
140 |
141 | This reverse proxy injects [eruda](https://github.com/liriliri/eruda) into a
142 | webpage. Good for quickly injecting DevTools into a webpage.
143 |
144 | ```
145 | https://x.y.workers.dev?https://example.com
146 | ```
147 |
148 | 
161 |
162 | ## unroll
163 |
164 | Redirects a Twitter thread to the corresponding Threadreader thread.
165 |
166 | ```
167 | https://x.y.workers.dev?https://twitter.com/{username}/status/{id}
168 | > (HTTP redirect to https://threadreaderapp.com/thread/{id})
169 | ```
170 |
171 | ## instagram
172 |
173 | Returns a page with an Instagram post embedded in it so the post can be viewed
174 | without logging in.
175 |
176 | ```
177 | https://x.y.workers.dev?https://www.instagram.com/p/{POST_ID}/
178 | > (Page with the Instagram post's embedded view in it)
179 | ```
180 |
181 | ## archive
182 |
183 | Redirects a webpage to the corresponding [archive.ph](https://archive.ph)
184 | capture. Useful to bypass news article paywalls.
185 |
186 | ```
187 | https://x.y.workers.dev?https://example.com
188 | > (HTTP redirect to https://archive.ph/https://example.com)
189 | ```
190 |
191 |