Files
KoalaSync/shared/blacklist.js
T
MacBook f7829bbebb security: harden server relay + documentation audit
Server Security (S-1 through S-8):
- S-1: Type-check and clamp peerId, protocolVersion, password
- S-2: Validate numeric/boolean/enum fields in relay peerData
- S-3: Construct explicit relay payload (stop spreading raw data)
- S-4: Type-check targetId and actionTimestamp in EVENT_ACK
- S-5: Restrict room IDs to [a-zA-Z0-9-] only
- S-7: Add eventCounts periodic cleanup alongside connectionCounts
- S-8: Guard version parsing against NaN bypass

Documentation (P-1, R-1 through R-6):
- P-1: Fix PRIVACY.md typo, document all in-memory data maps
- R-1/R-5: Fix stale sync-constants.bat references in shared/
- R-2: Fix stale lastTargetState ref in ARCHITECTURE.md
- R-3: Extension README title reflects cross-browser support
- R-6: Document content injection markers in scripts/README.md
2026-05-04 05:19:18 +02:00

107 lines
2.1 KiB
JavaScript

/**
* blacklist.js
*
* ⚠️ WARNING: This is the SINGLE SOURCE OF TRUTH.
* If you edit this file, you MUST run: node scripts/build-extension.js
* to propagate changes to the extension and relay server.
*
* Domains to be filtered out from the tab selection dropdown to reduce "noise".
* These are typically sites that won't contain shareable video content.
*/
export const BLACKLIST_DOMAINS = [
// Search Engines & Portals
'google.com',
'bing.com',
'duckduckgo.com',
'yahoo.com',
'msn.com',
'baidu.com',
'yandex.ru',
// Mail Providers
'mail.google.com',
'outlook.live.com',
'outlook.office.com',
'gmx.net',
'web.de',
// Cloud Storage & Documents
'docs.google.com',
'sheets.google.com',
'slides.google.com',
'drive.google.com',
'dropbox.com',
'onedrive.live.com',
'icloud.com',
// Messengers
'web.whatsapp.com',
'web.telegram.org',
'discord.com',
'element.io',
'app.slack.com',
// Productivity & Project Management
'atlassian.net',
'jira',
'trello.com',
'notion.so',
'monday.com',
'asana.com',
'github.com',
'gitlab.com',
'bitbucket.org',
'stackoverflow.com',
// Social Media & Forums
'linkedin.com',
'twitter.com',
'x.com',
'facebook.com',
'instagram.com',
'reddit.com',
'quora.com',
// E-Commerce
'amazon.',
'ebay.com',
'aliexpress.com',
'etsy.com',
// Media Information & Reviews
'rottentomatoes.com',
'imdb.com',
'thetvdb.com',
'themoviedb.org',
'letterboxd.com',
'metacritic.com',
'myanimelist.net',
// Development & Utilities
'timer.shik3i.net',
'localhost',
'zoom.us',
'teams.microsoft.com',
'meet.google.com',
'chrome.google.com',
// Games & Idle Sites
'milkywayidle.com',
'melvoridle.com',
'cookieclicker.',
'clickerheroes.com',
'kongregate.com',
'armorgames.com',
'crazygames.com',
'poki.com',
'newgrounds.com',
'krunker.io',
'slither.io',
'agar.io',
'diep.io',
'geoguessr.com',
'chess.com',
'lichess.org',
'skribbl.io'
];