Minor improvements to proxy header handling

materialious/android/app/build.gradle

@@ -7,8 +7,8 @@ android {
         applicationId "us.materialio.app"
         minSdkVersion rootProject.ext.minSdkVersion
         targetSdkVersion rootProject.ext.targetSdkVersion
-        versionCode 84
-        versionName "1.7.2"
+        versionCode 85
+        versionName "1.7.3"
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
         aaptOptions {
              // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps.

materialious/electron/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "Materialious",
-	"version": "1.7.2",
+	"version": "1.7.3",
 	"description": "Modern material design for Invidious.",
 	"author": {
 		"name": "Ward Pearce",

materialious/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "materialious",
-	"version": "1.7.2",
+	"version": "1.7.3",
 	"private": true,
 	"scripts": {
 		"dev": "vite dev",

materialious/static/nodejs-android/index.js

@@ -4,10 +4,9 @@ const https = require('https');
 const HOST = 'localhost';
 const PORT = 3000;
 const MAX_REDIRECTS = 5;
-const ORIGIN = `https://${HOST}`;
 
 function setCorsHeaders(res) {
-    res.setHeader('Access-Control-Allow-Origin', ORIGIN);
+    res.setHeader('Access-Control-Allow-Origin', '*');
     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
     res.setHeader('Access-Control-Allow-Headers', '*');
     res.setHeader('Access-Control-Allow-Credentials', 'true');
@@ -17,6 +16,7 @@ function fetchWithRedirects(targetUrl, options, redirectCount = 0) {
     return new Promise((resolve, reject) => {
         const httpClient = targetUrl.protocol.startsWith('https') ? https : http;
 
+
         const req = httpClient.request(targetUrl, options, (res) => {
             if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
                 if (redirectCount >= MAX_REDIRECTS) {
@@ -78,10 +78,11 @@ const server = http.createServer(async (req, res) => {
     req.on('end', async () => {
         const options = {
             method: req.method,
-            headers: {
-                ...req.headers,
-                host: parsedTarget.hostname, // Ensure correct host header
-            }
+            headers: Object.fromEntries(
+                Object.entries(req.headers).filter(([key]) => ![
+                    'host', 'origin', 'referer', 'x-forwarded-for', 'x-requested-with'
+                ].includes(key.toLowerCase()))
+            )
         };
 
         // For POST and PUT methods, pass the body to the outgoing request
@@ -100,7 +101,7 @@ const server = http.createServer(async (req, res) => {
 
             res.writeHead(proxyRes.statusCode, {
                 ...proxyRes.headers,
-                'Access-Control-Allow-Origin': ORIGIN,
+                'Access-Control-Allow-Origin': '*',
                 'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
                 'Access-Control-Allow-Headers': '*',
                 'Access-Control-Allow-Credentials': 'true',

update_versions.py

@@ -5,7 +5,7 @@ import json
 import os
 import re
 
-LATEST_VERSION = "1.7.2"
+LATEST_VERSION = "1.7.3"
 WORKING_DIR = os.path.join(os.path.dirname(os.path.realpath(__file__)), "materialious")
 
 ROOT_PACKAGE = os.path.join(WORKING_DIR, "package.json")