tika

algolia

Trending (LANGUAGE) repositories on GitHub today -- 有空來瀏覽
sahat/hackathon-starter: A boilerplate for Node.js web applications -- 寫任何應用的開始起點
ryanoasis/nerd-fonts: Iconic font aggregator, collection, and patcher: 39 patched fonts (87k+ variations). Includes popular glyph collections such as Font Awesome & fonts such as Hack -- 圖型字型
xxhomey19/github-file-icon: 🌈 🗂 A browser extension which gives different filetypes different icons on GitHub. -- github 的小圖示
airbnb/javascript: JavaScript Style Guide -- 還有其他 style guide 連結
uikit/uikit: A lightweight and modular front-end framework for developing fast and powerful web interfaces -- 另個輕量級UI
UIkit
Requarks/wiki: Wiki.js | A modern, lightweight and powerful wiki app built on NodeJS, Git and Markdown -- nodejs的wiki系統
Wiki.js | A modern open-source Wiki software
facebook/Docusaurus: Easy to maintain open source documentation websites. -- 用來維護網頁網站
Docusaurus · Easy to Maintain Open Source Documentation Websites
developit/workerize: 🏗️ Run a module in a Web Worker. -- 瀏覽器上的worker
ElementsProject/lightning-charge: A simple drop-in solution for accepting lightning payments -- 付費機制
transloadit/uppy: The next open source file uploader for web browsers -- 上傳工具介面
Uppy File Uploader
yangshun/tech-interview-handbook: 💯 Algorithms study materials, behavioral content and tips for rocking your coding interview -- 科技方面面談手冊
Polyfill - 術語表 | MDN -- autocomplete
更輕鬆使用自動補完函式庫 (Polyfill) | 部落格 | Mozilla Taiwan
Polyfill (programming) - Wikipedia
GoogleChrome/dialog-polyfill: Polyfill for the HTML dialog element
Chalarangelo/30-seconds-of-code: Curated collection of useful Javascript snippets that you can understand in 30 seconds or less. -- 必學js的各議題
30 seconds of code
elastic/logstash: Logstash - transport and process your logs, events, or other data -- 處理logs的工具
atech/postal: 📨 A fully featured open source mail delivery platform for incoming & outgoing e-mail -- 可收送email
exercism/exercism.io: Quickly ramp up in new programming languages. -- 快速學各種程式語言的
GoogleChrome/puppeteer: Headless Chrome Node API -- 無頭瀏覽器
tootsuite/mastodon: Your self-hosted, globally interconnected microblogging community -- 另種社交媒體但在本地端
discourse/discourse: A platform for community discussion. Free, open, simple. -- 討論群用rails為底
ecomfe/echarts: A powerful, interactive charting and visualization library for browser -- 視覺化js
nhnent/tui.editor: 🍞📝 Markdown WYSIWYG Editor. GFM Markdown + Chart & UML Extensions. -- 視覺編輯器在js
anaibol/awesome-serverless: A curated list of awesome services, solutions and resources for serverless / nobackend applications. -- serverless必讀列表
jbtronics/CrookedStyleSheets: Webpage tracking only using CSS (and no JS) -- 追蹤網頁上的動作
tenderlove/uart: Simple serial / UART interface for Ruby -- 與 RS232 有關
arika/ruby-termios: A simple wrapper or termios(3) for Ruby.
Linux RS-232 程式設計 @ IceCream 的程式設計網路筆記 :: 隨意窩 Xuite日誌
冷靜: 用程序來獲得終端和修改終端參數：tcgetattr, termios, tcsetattr

SQL style guide

coffeescript

Install Elixir steps

Installing multiple Elixir versions with Kiex – Learning Elixir

Elixir tutorials

Elixir web framework

Phoenix

remove linux packages

how to remove https CSP headers

為什麼要處理這個議題？

寫了些自己常用的 bookmarklets，但總不能在 github 的網頁運行，是因為裡面有 CSP: Content Security Policy 政策，讓 chrome, firefox 看到這些 headers: content-security-policy, strict-transport-securitystrict-transport-security，而造成 bookmarklet 無法執行。

找了這些方案無效

Doesn't work because of Content Security Policy - Greasy Forum -- 這招在 firefox 有解決

CSP Tester -- 來測試

Content Security Policy -- github 一直解決不了的原因所在！

javascript - Does Content Security Policy block bookmarklets? - Stack Overflow -- 不是很有效，可參考

HomeMarks - Bookmarklet Fixed For Sites With Strict CSP Policies -- 號稱可解決？

homemarks: HomeMarks is a web based GUI to build HTML start pages -- 其github裡原始碼值得看

_bookmarklet.html.erb

試過調整 squid cache 來移除 response header，無效。

以上是透過既有的軟體設定無效的過程。

從 ruby 來解決

將用 torsten/proxy.rb 來改寫可移掉 Content-Security-Policy 的 header 的簡單 proxy。但只能處理 port 80, SSL 無法處理。

參考：
ruby SSL proxy (MITM) - Stack Overflow

ssl - How do I write a simple HTTPS proxy server in Ruby? - Stack Overflow

利用 rack-proxy 試試能不能如願，但不確認是否能做成給一般 browser 用的 proxy，而沒再試。

以 webrick 來建立 proxy

fedux.org – Setting up an HTTP proxy with ruby
Creating a Forward Proxy with WEBrick | Independent Software
根據這兩篇，再看 webrick/lib/webrick/httpproxy.rb 來寫了這個：

# encoding: utf-8
# https://www.fedux.org/articles/2015/04/11/setup-a-proxy-with-ruby.html
# http://www.independent-software.com/creating-a-forward-proxy-with-webrick/
#
require 'webrick'
require 'webrick/httpproxy'
require 'logger'

#logger = Logger.new($stderr)
#logger.level = Logger::DEBUG

def handle_resquest(req, res)
  #puts "[REQUEST] " + req.request_line
  #res.header.delete('Content-Security-Policy')
end

handler = proc do |req, res|
  puts res['content-type']
  puts res.body.class
  if res['content-type'] == 'text/html'
    res.body = res.body.upcase
  end
  #res.body << "\nCHANGED\n"
end

#proxy = WEBrick::HTTPProxyServer.new Port: 3128
#proxy = WEBrick::HTTPProxyServer.new Port: 3128, Logger: logger
proxy = WEBrick::HTTPProxyServer.new(
  :Port => 3128,
  #:Logger => logger,
  :ProxyContentHandler => handler)
trap 'INT' do proxy.shutdown end
trap 'TERM' do proxy.shutdown end

proxy.start

結果是 http 可以，https 不行，原來若 https ， header, body 都是空的。
試著把 $HOME/.rvm/rubies/ruby-2.5.0/lib/ruby/2.5.0/webrick/httpproxy.rb 直接接抓改 header，結果也是 http 可以，但 https 的 headers, body 都是空的。

最終解決方案 evil-proxy

bbtfr/evil-proxy: A ruby http/https proxy to do EVIL things. 是對 https 的正解

改body：

# encoding: utf-8
# change http body
require 'evil-proxy'

proxy = EvilProxy::MITMProxyServer.new Port: 3128

proxy.before_response do |req, res|
  #puts res.inspect
  body = res.body << "\nCHANGED\n"
  res.header['content-length'] = body.length
  res.body = body
end

proxy.start

改 header：

# encoding: utf-8
# remove https header
# import CA certificate (./certs/CA/cacert.pem) into browser
# https://github.com/bbtfr/evil-proxy/blob/master/lib/evil-proxy/quickcert.rb
#
require 'evil-proxy'

proxy = EvilProxy::MITMProxyServer.new Port: 3128

proxy.before_response do |req, res|
  res.header.delete('content-security-policy')
  res.header.delete('strict-transport-security')
  #puts res.header.inspect
end

proxy.start

但 browser 要先匯入 CA certificate (./certs/CA/cacert.pem)