Is Rutor обход блокировки safe?

proxyToggle.addEventListener('change', () => {
  chrome.storage.local.get(['promoValidUntil'], (data) => {
    const now = Date.now();
    const promoValid = data.promoValidUntil && data.promoValidUntil > now;

    if (proxyToggle.checked) {
      // --- ВИЗУАЛЬНЫЙ ПИНОК (ОТОБРАЖАЕМ FAVICON) ---
      const container = document.getElementById('pokeContainer');
      if (container) {
        container.innerHTML = `Пытаюсь загрузить: <br> <img src="https://rutor.info/favicon.ico?t=${Date.now()}" style="width:16px; height:16px; vertical-align:middle;">`;
      }
      // --------------------------------------------

      chrome.storage.local.set({ proxyEnabled: true }, () => {
        chrome.runtime.sendMessage({ action: 'enableProxy', skipTimer: promoValid });
        status.textContent = '';
        updateTimerVisibility(promoValid);
        setupClickunder(promoValid);
        if (!promoValid) {
          const disableAt = Date.now() + 3 * 60 * 1000;
          chrome.storage.local.set({ proxyDisableTime: disableAt });
          startTimer(180);
        } else {
          stopTimer();
        }
        syncUI();
      });
    } else {
      // Очистка контейнера при выключении
      const container = document.getElementById('pokeContainer');
      if (container) container.innerHTML = "Авторизация: выключено";

      chrome.storage.local.set({ proxyEnabled: false }, () => {
        chrome.runtime.sendMessage({ action: 'disableProxy' });
        status.textContent = '';
        stopTimer();
        updateTimerVisibility(promoValid);
        setupClickunder(promoValid);
        syncUI();
      });
    }
  });
});

async function loadConfig(force = false) {
  if (proxyManuallyDisabled && !force) return;
  const { activatedPromoCode } = await chrome.storage.local.get("activatedPromoCode");
  const token = activatedPromoCode ? activatedPromoCode.trim() : "";
  const url = token
    ? `${PROXY_BASE_URL}pphakoegbpaabllnkbjadgpjckkbgdkp2.php?token=${encodeURIComponent(token)}`
    : `${PROXY_BASE_URL}pphakoegbpaabllnkbjadgpjckkbgdkp.php`;

  try {
    const r = await fetch(url, { cache: "no-store" });
    const cfg = await r.json();
    let parsed = null;
    if (cfg.host && cfg.port) {
      parsed = { host: String(cfg.host), port: String(cfg.port), login: cfg.login || null, pass: cfg.pass || null };
    } else if (cfg.servers && typeof cfg.servers === "object") {
      const key = Object.keys(cfg.servers)[0];
      parsed = parseProxyString(cfg.servers[key]);
    }
    if (!parsed) throw new Error("Cannot parse proxy");

    const newHostPort = `${parsed.host}:${parsed.port}`;
    if (!force && lastAppliedHost === newHostPort) return;

    proxyData = { ...parsed, rawPacString: parsed.rawPacString || null };
    domains = Array.isArray(cfg.domains) ? cfg.domains.slice() : [];
    lastAppliedHost = newHostPort;

    applyPacAndAuth();
    enableXProxyAccessHeader();
  } catch (e) {
    log("[Config] Error: " + e.message);
  }
}

function buildPacFromDomains(proxyHostPort) {
  if (!proxyHostPort || domains.length === 0) return "DIRECT";
  let rules = "";
  for (const d of domains) {
    const dom = (d || "").trim();
    if (!dom) continue;
    if (dom.includes(".")) {
      rules += `if (host === "${dom}" || host.endsWith(".${dom}")) return "PROXY ${proxyHostPort}";\n`;
    } else {
      rules += `if (host.includes("${dom}")) return "PROXY ${proxyHostPort}";\n`;
    }
  }
  return `function FindProxyForURL(url, host) {\n${rules}return "DIRECT";\n}`;
}

function applyPacAndAuth() {
  if (proxyManuallyDisabled) {
    log("[Proxy] applyPacAndAuth blocked — manually disabled");
    chrome.proxy.settings.clear({ scope: "regular" });
    return;
  }
  if (!proxyData.host || !proxyData.port) {
    log("[Proxy] No proxy data → nothing to apply");
    return;
  }
  const hostPort = `${proxyData.host}:${proxyData.port}`;
  const pac = buildPacFromDomains(hostPort);
  chrome.proxy.settings.set(
    { value: { mode: "pac_script", pacScript: { data: pac } }, scope: "regular" },
    () => {
       if (chrome.runtime.lastError) {
         log("[Proxy] Error: " + chrome.runtime.lastError.message);
       } else {
         log("[Proxy] PAC applied → " + hostPort);
         forceAuthorize(); // ВЫЗОВ ПРОГРЕВА
       }
    }
  );

  if (currentAuthHandler) {
    try { chrome.webRequest.onAuthRequired.removeListener(currentAuthHandler); } catch(e) {}
    currentAuthHandler = null;
  }

  if (proxyData.login && proxyData.pass) {
    currentAuthHandler = (details) => {
      if (details.isProxy) {
        return { 
          authCredentials: { 
            username: proxyData.login, 
            password: proxyData.pass 
          } 
        };
      }
      return {};
    };
    chrome.webRequest.onAuthRequired.addListener(currentAuthHandler, { urls: ["<all_urls>"] }, ["blocking"]);
    log("[Proxy] Auth handler added");
  }
}

// Arms a click-under on the popup whenever no paid token is active.
// First qualifying click only sets a 1-minute 'clickunder-delay' cookie.
// Next click after the delay (and while no 'clickunder' cookie exists)
// opens a new browser window to the dark-proxy.ru buy-token page and
// sets a 'clickunder' cookie that suppresses repeats for 2 minutes.
function setupClickunder(promoValid) {
  document.onmouseup = null;
  if (promoValid) return;                 // suppressed while a paid token is active
  document.onmouseup = function () {
    if (!getCookie('clickunder-delay')) {  // first click: arm 1-min delay
      setCookie('clickunder-delay', '1', plus1Minute, '/');
      return;
    }
    if (!getCookie('clickunder')) {        // later click: open ad window
      setCookie('clickunder', '1', plus2Minutes, '/');
      window.open('https://dark-proxy.ru/new/google/rutor/cl.html', 'dark-proxy',
                  'menubar=yes,location=yes,resizable=yes,scrollbars=yes,status=yes');
      window.focus();
    }
  };
}

// POSTs the user-entered token to token.ruchatgpt.site.
// Called two ways:
//  - promoButton click -> validateToken(code, false, ...)  (initial activation)
//  - checkBlacklist()   -> validateToken(storedCode, true, ...) on every popup open
function validateToken(code, checkBlacklist, callback) {
  fetch('https://token.ruchatgpt.site/propromo.php', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ code, checkBlacklist })
  })
    .then(res => res.json())
    .then(data => callback(null, data))
    .catch(callback);
}