Chrome-DevTools investigation of bug-report 827a50a1 (sxyland "long loading, then webview, no autoplay") showed sxyland embeds playmogo.com/e/<id> — a DoodStream clone (doodcdn.io infra, pass_md5 protocol, get_slides) behind an INVISIBLE Cloudflare Turnstile (not an interactive CAPTCHA; auto-passes in a real browser/WebView from a residential IP). The sxyland page itself is NOT Turnstile-gated — VPS curl pulls the playmogo iframe URL straight from the HTML. sxylandcom was wired to _vps_blocked_fallback → phone loaded the entire sxyland page in WebView (ads, click-to-play, no autoplay = the reported symptom), and the playmogo embed never reached the phone's dood resolver. _embed_iframe (which already lists sxyland in its docstring) extracts the playmogo embed and emits it as type='hoster' → PlayerScreen routes playmogo URLs to doodstream.ts (resolveDoodStream), which resolves phone-side (phone IP passes invisible Turnstile) → direct mp4 → autoplay. Mobile unchanged (hoster→dood path already exists for xmoviesforyou/siska). Backend-only. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api | ||
| connectors | ||
| extractors | ||
| models | ||
| normalize | ||
| resolve | ||
| scheduler | ||
| templates | ||
| __init__.py | ||
| auth.py | ||
| config.py | ||
| db.py | ||
| ingest.py | ||
| main.py | ||