From f5bd46c2920da8d036db99faa03880a55ed10c1b Mon Sep 17 00:00:00 2001
From: gautamkrishnar <r.gautamkrishna@gmail.com>
Date: Wed, 11 Sep 2019 19:15:20 +0530
Subject: [PATCH] Updated js to use const variable for URL

---
 main.js | 270 ++++++++++++++++++++++++++++----------------------------
 1 file changed, 136 insertions(+), 134 deletions(-)

diff --git a/main.js b/main.js
index a0c4236..c750896 100644
--- a/main.js
+++ b/main.js
@@ -1,134 +1,136 @@
-/*jshint sub:true*/
-"use strict";
-
-/**
- * Function to handle saving of fingerprint and initial loading of API.
- * @param check flag specify certain tasks 0 => Initial checking of whether the fingerprint exists in db.
- */
-function savefingerprint(check) {
-
-    var param = "";
-    var client = new ClientJS(); // Create A New Client Object
-    var fingerprint = client.getFingerprint(); // Calculate Device/Browser Fingerprint
-
-    // Constructing GET Params
-    if (check === 0) {
-        // Checks whether the fingerprint already exists in DB.
-        param = encodeURI("?finger=" + fingerprint + "&check=1");
-    } else {
-        // Saves the name with fingerprint to DB.
-        var name = document.getElementById("name").value;
-
-        if (!name.trim()) {
-            name = "NoNameEntered :D";
-        }
-        param = encodeURI("?finger=" + fingerprint + "&name=" + name);
-    }
-
-    // Constructing request
-    var xhr = new XMLHttpRequest();
-    var url = window.location.protocol + "//nothingprivate.000webhostapp.com/safedb.php";
-
-    xhr.onreadystatechange = function () {
-        if (this.readyState === 4 && this.status === 200) {
-            var arr = JSON.parse(this.responseText);
-            if (arr['status'] === 0) {
-                // Fingerprint already exists.
-                rendernewtabpage(arr['name']);
-            } else if (arr['status'] === 1) {
-                // Fingerprint saved successfully
-                rendersubmit(name);
-            } else if (arr['status'] === 3) {
-                // New user. No fingerprint found in the DB.
-                rendermain();
-            }
-        }
-    };
-    xhr.open("GET", url + param);
-    xhr.onerror = function () {
-        errorHandler(); // Error handler
-    };
-    xhr.send();
-}
-
-/**
- * Function to remove the saved fingerprint from the database.
- */
-function forgetme() {
-    var client = new ClientJS(); // Create A New Client Object
-    var fingerprint = client.getFingerprint(); // Calculate Device/Browser Fingerprint
-
-    // Param
-    var param = encodeURI("?finger=" + fingerprint);
-
-    // Constructing request
-    var xhr = new XMLHttpRequest();
-    var url = window.location.protocol + "//nothingprivate.000webhostapp.com/forgetme.php";
-
-    xhr.onreadystatechange = function () {
-        if (this.readyState === 4 && this.status === 200) {
-            var responsetext = JSON.parse(this.responseText);
-            if (responsetext['state'] === 1) {
-                document.getElementById("user").innerHTML = 'Are you <em>Anonymous?</em>';
-                rendermain();
-            }
-        }
-    };
-    xhr.open("GET", url + param);
-    xhr.onerror = function () {
-        errorHandler(); // Error handler
-    };
-    xhr.send();
-}
-
-/**
- * Renders the page when the fingerprint is found in the db with the users name.
- * @param name saved name of the user in the DB
- */
-function rendernewtabpage(name) {
-    document.getElementById("maindiv").innerHTML = '<h3>Welcome back to the website <b>' + htmlEncode(name) + '</b>. If I can remember your name even though you are using <b>private browsing</b> / <b>incognito mode</b>, I can surely track you.<br/><br/> This is what big companies are doing. They are spying on you even when you are using <b>private browsing</b> or <b>incognito mode</b>.<br/><br/><a href="https://github.com/gautamkrishnar/nothing-private" target="_blank">Read more</a><br/><br/><input type="button" class="btn" onclick="forgetme()" value="Forget Me!" /><br><br>If you liked this project, don\'t forget to give it a Star:<br/></h3>';
-    document.getElementById("user").innerHTML = 'You are <em>' + htmlEncode(name) + '!</em>';
-}
-
-/**
- * Function to encode HYML value to prevent XSS Attack.
- * @param value Value to encode
- * @return {string} encoded value
- */
-function htmlEncode(value){
-    // Code to prevent xss attack
-    var temp_div = document.createElement("div");
-    temp_div.textContent = value;
-    return temp_div.innerHTML;
-}
-
-/**
- * Renders the page after submitting the fingerprint to the API
- * @param name
- */
-function rendersubmit(name) {
-    document.getElementById("maindiv").innerHTML = '<h3><b>Thank you, ' + htmlEncode(name) + '! </b> Let\'s see the magic... <br/><br/>Now open a <b>private browsing window</b> or <b>incognito window</b> on your browser and visit <b>www.nothingprivate.ml</b> to see the magic...</h3><br><br><input type="button" class="btn" onclick="forgetme()" value="Forget Me!" /><br><br>';
-
-}
-
-/**
- * Renders the page on initial loading of the page (No fingerprint is found)
- */
-function rendermain() {
-    document.getElementById("maindiv").innerHTML = '<div id="maindiv"><h3>Do you think that switching to your browser\'s <b>private browsing mode</b> or <b>incognito mode</b> will make you anonymous?<br/><br/> Sorry to disappoint you, <b>but you are wrong!.</b> Everyone can track you. You can check it out for yourself. Just type your name below.</h3><input type="text" name="name" id="name" class="txt" placeholder="Your Name" autofocus/><br/><br/><input type="button" class="btn" onclick="savefingerprint(1)" value="See the magic!" /><br/></div>';
-}
-
-/**
- * Redo the API Call on clicking the retry button
- */
-function reload() {
-    document.getElementById("maindiv").innerHTML = '<div id="maindiv"><h3>Loading... please wait...</h3></div>';
-    savefingerprint(0);
-}
-
-/**
- * Error handling code
- */
-function errorHandler() {
-    document.getElementById("maindiv").innerHTML = '<h3><b>An API error occurred! Please try again.</b> <br/><br/> Nothing Private is using free hosting (00Webhost) to host the APIs.<br/><br/> It doesn\'t guarantee 100% uptime. Sorry for the inconvenience caused.  </h3><br><br><input type="button" class="btn" onclick="reload(0)" value="Retry" /><br><br>';
-}
+/*jshint sub:true*/
+"use strict";
+
+/**
+ * Function to handle saving of fingerprint and initial loading of API.
+ * @param check flag specify certain tasks 0 => Initial checking of whether the fingerprint exists in db.
+ */
+
+const API_ROOT = window.location.protocol + "//nothingprivate.000webhostapp.com";
+
+function savefingerprint(check) {
+    var param = "";
+    var client = new ClientJS(); // Create A New Client Object
+    var fingerprint = client.getFingerprint(); // Calculate Device/Browser Fingerprint
+
+    // Constructing GET Params
+    if (check === 0) {
+        // Checks whether the fingerprint already exists in DB.
+        param = encodeURI("?finger=" + fingerprint + "&check=1");
+    } else {
+        // Saves the name with fingerprint to DB.
+        var name = document.getElementById("name").value;
+
+        if (!name.trim()) {
+            name = "NoNameEntered :D";
+        }
+        param = encodeURI("?finger=" + fingerprint + "&name=" + name);
+    }
+
+    // Constructing request
+    var xhr = new XMLHttpRequest();
+    var url = API_ROOT + "/safedb.php";
+
+    xhr.onreadystatechange = function () {
+        if (this.readyState === 4 && this.status === 200) {
+            var arr = JSON.parse(this.responseText);
+            if (arr['status'] === 0) {
+                // Fingerprint already exists.
+                rendernewtabpage(arr['name']);
+            } else if (arr['status'] === 1) {
+                // Fingerprint saved successfully
+                rendersubmit(name);
+            } else if (arr['status'] === 3) {
+                // New user. No fingerprint found in the DB.
+                rendermain();
+            }
+        }
+    };
+    xhr.open("GET", url + param);
+    xhr.onerror = function () {
+        errorHandler(); // Error handler
+    };
+    xhr.send();
+}
+
+/**
+ * Function to remove the saved fingerprint from the database.
+ */
+function forgetme() {
+    var client = new ClientJS(); // Create A New Client Object
+    var fingerprint = client.getFingerprint(); // Calculate Device/Browser Fingerprint
+
+    // Param
+    var param = encodeURI("?finger=" + fingerprint);
+
+    // Constructing request
+    var xhr = new XMLHttpRequest();
+    var url = API_ROOT + "/forgetme.php";
+
+    xhr.onreadystatechange = function () {
+        if (this.readyState === 4 && this.status === 200) {
+            var responsetext = JSON.parse(this.responseText);
+            if (responsetext['state'] === 1) {
+                document.getElementById("user").innerHTML = 'Are you <em>Anonymous?</em>';
+                rendermain();
+            }
+        }
+    };
+    xhr.open("GET", url + param);
+    xhr.onerror = function () {
+        errorHandler(); // Error handler
+    };
+    xhr.send();
+}
+
+/**
+ * Renders the page when the fingerprint is found in the db with the users name.
+ * @param name saved name of the user in the DB
+ */
+function rendernewtabpage(name) {
+    document.getElementById("maindiv").innerHTML = '<h3>Welcome back to the website <b>' + htmlEncode(name) + '</b>. If I can remember your name even though you are using <b>private browsing</b> / <b>incognito mode</b>, I can surely track you.<br/><br/> This is what big companies are doing. They are spying on you even when you are using <b>private browsing</b> or <b>incognito mode</b>.<br/><br/><a href="https://github.com/gautamkrishnar/nothing-private" target="_blank">Read more</a><br/><br/><input type="button" class="btn" onclick="forgetme()" value="Forget Me!" /><br><br>If you liked this project, don\'t forget to give it a Star:<br/></h3>';
+    document.getElementById("user").innerHTML = 'You are <em>' + htmlEncode(name) + '!</em>';
+}
+
+/**
+ * Function to encode HYML value to prevent XSS Attack.
+ * @param value Value to encode
+ * @return {string} encoded value
+ */
+function htmlEncode(value){
+    // Code to prevent xss attack
+    var temp_div = document.createElement("div");
+    temp_div.textContent = value;
+    return temp_div.innerHTML;
+}
+
+/**
+ * Renders the page after submitting the fingerprint to the API
+ * @param name
+ */
+function rendersubmit(name) {
+    document.getElementById("maindiv").innerHTML = '<h3><b>Thank you, ' + htmlEncode(name) + '! </b> Let\'s see the magic... <br/><br/>Now open a <b>private browsing window</b> or <b>incognito window</b> on your browser and visit <b>www.nothingprivate.ml</b> to see the magic...</h3><br><br><input type="button" class="btn" onclick="forgetme()" value="Forget Me!" /><br><br>';
+
+}
+
+/**
+ * Renders the page on initial loading of the page (No fingerprint is found)
+ */
+function rendermain() {
+    document.getElementById("maindiv").innerHTML = '<div id="maindiv"><h3>Do you think that switching to your browser\'s <b>private browsing mode</b> or <b>incognito mode</b> will make you anonymous?<br/><br/> Sorry to disappoint you, <b>but you are wrong!.</b> Everyone can track you. You can check it out for yourself. Just type your name below.</h3><input type="text" name="name" id="name" class="txt" placeholder="Your Name" autofocus/><br/><br/><input type="button" class="btn" onclick="savefingerprint(1)" value="See the magic!" /><br/></div>';
+}
+
+/**
+ * Redo the API Call on clicking the retry button
+ */
+function reload() {
+    document.getElementById("maindiv").innerHTML = '<div id="maindiv"><h3>Loading... please wait...</h3></div>';
+    savefingerprint(0);
+}
+
+/**
+ * Error handling code
+ */
+function errorHandler() {
+    document.getElementById("maindiv").innerHTML = '<h3><b>An API error occurred! Please try again.</b> <br/><br/> Nothing Private is using free hosting (00Webhost) to host the APIs.<br/><br/> It doesn\'t guarantee 100% uptime. Sorry for the inconvenience caused.  </h3><br><br><input type="button" class="btn" onclick="reload(0)" value="Retry" /><br><br>';
+}