acoyfellow

<script>
document.addEventListener("DOMContentLoaded", function() {
  var forms = document.getElementsByTagName('form');
  for(var i = 0; i < forms.length; i++) {
    var fields = forms[i].getElementsByTagName('input');
    for(var j = 0; j < fields.length; j++) {fill
      fields[j].setAttribute('autocomplete', 'off');
    }
  }
});

acoyfellow

function sleep(ms) {
  return new Promise(resolve => setTimeout(resolve, ms));
}

async function connect(profile, i) {
  try {
    const a=document.querySelector(`#${profile.id} a`);
    if(a===null){
        run();
        return;

acoyfellow

<script>
// Add to Custom Code > Bottom of Body
  try{
    if(localStorage.getItem("lead_id")){
      setError("Only one submission allowed.");
      throw new Error();
    };
  } catch(e){
    console.error(e);
  };

acoyfellow

{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Principal": "*",
      "Action":["s3:GetObject"],
      "Resource":["arn:aws:s3:::examplebucket/*"]
    }

acoyfellow

var params = "username=username&password=password";

new Promise(function (resolve, reject) {
  var http = new XMLHttpRequest();
  http.open("POST", "https://www.instagram.com/accounts/login/ajax/", true);
  http.setRequestHeader('x-csrftoken', window._sharedData.config.csrf_token);
  http.setRequestHeader('x-instagram-ajax', '1');
  http.setRequestHeader('x-requested-with', 'XMLHttpRequest');
  http.setRequestHeader("pragma", "no-cache");
  http.setRequestHeader("cache-control", "no-cache");

acoyfellow

<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Pixelify+Sans&display=swap" rel="stylesheet">

<style>
* {
    font-family: 'Pixelify Sans', sans-serif!important;
}
</style>

acoyfellow

<script src="https://rawgit.com/acoyfellow/FormSync/master/FormSync.js"></script>
<script>
function success(){
 clearFormSync();
};
</script>

acoyfellow

// https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
// https://scotthelme.co.uk/content-security-policy-an-introduction/
// scanner: https://securityheaders.com/

const rootDomain = `your-domain.com`; // or your server IP for dev

const directives = {
  'img-src': [
    "*",
    "'self'",

acoyfellow

<link
      rel="stylesheet"
      href="https://cdn.jsdelivr.net/npm/swiper/swiper-bundle.min.css"
    />

<!-- Swiper -->
    <div class="swiper mySwiper">
      <div class="swiper-wrapper">
         <div class="swiper-slide tc"><img src="https://firebasestorage.googleapis.com/v0/b/phonesites-prod.appspot.com/o/images%2FUZCKxREA6sNku9tDPHVFxd5PSrG3%2F1672423440866*Slide3*jpg?alt=media&token=7eb8afaf-c931-4665-a2b8-9edad704b5c5" />
</div>

acoyfellow

<script>
window.beforePost= function(){
   formData.hiddenField1= "My Hidden Field";
};
</script>