Add referer header to Electron apps

GarboMuffin · GarboMuffin · commit 5d727ca17827 · 2025-12-06T14:25:55.000-06:00
Fixes YouTube embeds
diff --git a/src/packager/packager.js b/src/packager/packager.js
@@ -735,6 +735,15 @@ app.on('session-created', (session) => {
       cancel: !details.url.startsWith(resourcesURL)
     });
   });
+
+  const referer = 'https://packager.turbowarp.org/referer.html#' + app.getName();
+  session.webRequest.onBeforeSendHeaders((details, callback) => {
+    callback({
+      requestHeaders: {
+        referer
+      }
+    });
+  });
 });
 
 app.on('window-all-closed', () => {
diff --git a/static/referer.html b/static/referer.html
@@ -0,0 +1,43 @@
+<!DOCTYPE html>
+<html lang="en">
+    <head>
+        <title>TurboWarp Desktop Referer</title>
+        <meta charset="utf-8">
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+        <meta name="robots" content="noindex">
+        <style>
+            :root {
+                font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;
+            }
+            @media (prefers-color-scheme: dark) {
+                :root {
+                    color-scheme: dark;
+                    background-color: #111;
+                    color: #eee;
+                }
+            }
+            main {
+                max-width: 480px;
+                margin: auto;
+            }
+        </style>
+    </head>
+
+    <body>
+        <main>
+            <h1>TurboWarp Packager Referer</h1>
+            <p>If you're seeing requests to your website with this page in its <code>Referer</code> header, that probably means someone is using a program they created with the <a href="/">TurboWarp Packager</a> to interact with your website.</p>
+            <p hidden class="package-name-outer">The creator of the program set their program's package name to "<code class="package-name-value"></code>". They can set this to anything they want, so that may or may not be meaningful.</p>
+            <script>
+                var packageName = location.hash.substring(1);
+                if (packageName) {
+                    document.querySelector('.package-name-outer').hidden = false;
+                    document.querySelector('.package-name-value').textContent = packageName;
+                } else {
+                }
+            </script>
+            <p>Per our <a href="privacy.html">privacy policy</a>, we do not track our users and can't tell you who is accessing your website or why.</p>
+            <p>Questions or concerns? You can email contact at turbowarp dot org, but again, the TurboWarp Packager is just a programming environment. We aren't the people sending requests to your server.</p>
+        </main>
+    </body>
+</html>
