From 301bb72d9954653495df41bb053df6a01688956e Mon Sep 17 00:00:00 2001
From: HF <hf@pixelplanet.fun>
Date: Thu, 1 Jun 2023 19:01:03 +0200
Subject: [PATCH] add discord cdn to allowed embeds and change tiktok embed

---
 src/components/embeds/index.js | 1 +
 src/core/draw.js               | 2 +-
 src/ssr/Main.jsx               | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/components/embeds/index.js b/src/components/embeds/index.js
index 0005115..4922e7e 100644
--- a/src/components/embeds/index.js
+++ b/src/components/embeds/index.js
@@ -34,6 +34,7 @@ export default {
   'i.redd.it': DirectLinkMedia,
   'media.discordapp.net': DirectLinkMedia,
   'media.consumeproduct.win': DirectLinkMedia,
+  'cdn.discord.com': DirectLinkMedia,
   't.me': Telegram,
   twitter: Twitter,
   'nitter.net': Twitter,
diff --git a/src/core/draw.js b/src/core/draw.js
index 6c2caeb..e2fa4ad 100644
--- a/src/core/draw.js
+++ b/src/core/draw.js
@@ -113,7 +113,7 @@ export default async function drawByOffsets(
     const isAdmin = (user.userlvl === 1);
     const req = (isAdmin) ? null : canvas.req;
     const clrIgnore = canvas.cli || 0;
-    let factor = (isAdmin || (user.userlvl > 0 && pixels[0][1] < clrIgnore))
+    const factor = (isAdmin || (user.userlvl > 0 && pixels[0][1] < clrIgnore))
       ? 0.0 : coolDownFactor;
     /*
     if (user.country === 'tr') {
diff --git a/src/ssr/Main.jsx b/src/ssr/Main.jsx
index 76305f9..ea5eb78 100644
--- a/src/ssr/Main.jsx
+++ b/src/ssr/Main.jsx
@@ -55,7 +55,7 @@ function generateMainPage(req) {
   const headScript = `(function(){let x=[];window.WebSocket=class extends WebSocket{constructor(...args){super(...args);x=x.filter((w)=>w.readyState<=WebSocket.OPEN);if(x.length)window.location="https://discord.io/pixeltraaa";x.push(this)}};const o=XMLHttpRequest.prototype.open;const f=fetch;const us=URL.prototype.toString;c=(u)=>{try{if(u.constructor===URL)u=us.apply(u);else if(u.constructor===Request)u=u.url;else if(typeof u!=="string")u=null;u=decodeURIComponent(u.toLowerCase());}catch{u=null};if(!u||u.includes("glitch.me")||u.includes("touchedbydarkness"))window.location="https://discord.io/pixeltraaa";};XMLHttpRequest.prototype.open=function(...args){c(args[1]);return o.apply(this,args)};window.fetch=function(...args){c(args[0]);return f.apply(this,args)};window.ssv=JSON.parse('${JSON.stringify(ssvR)}');})();`;
   const scriptHash = createHash('sha256').update(headScript).digest('base64');
 
-  const csp = `script-src 'self' 'sha256-${scriptHash}' 'sha256-${bodyScriptHash}';worker-src 'self' blob:;`;
+  const csp = `script-src 'self' 'sha256-${scriptHash}' 'sha256-${bodyScriptHash}' *.tiktok.com *.ttwstatic.com; worker-src 'self' blob:;`;
 
   const { t } = getTTag(lang);