nekostream 2026.4.2 → 2026.4.3

package/dist/player-policy.js

@@ -18,7 +18,13 @@ exports.PROVIDER_LABELS = ['animevietsub', 'anime47', 'animehay'];
 exports.STREAM_HOSTS = [
     'abyss.to',
     'abysscdn.com',
+    'abyssplayer.com',
+    'abysshost.com',
+    'abysscss.com',
     'hydrax.net',
+    'playhydrax.com',
+    'short.ink',
+    'iamcdn.net',
     'googleapiscdn.com',
     'googleapis.com',
     'gstatic.com',

package/dist/scrapers/providers/animevietsub/streams/extractors.js

@@ -45,106 +45,37 @@ function extractFromAbyssServer(embedUrl, server, defaultBaseUrl) {
     }
 }
 /**
- * Extract video from DU server (storage.googleapiscdn.com)
+ * Extract video from DU server (stream.googleapiscdn.com / storage.googleapiscdn.com)
  */
-async function extractFromDUServer(embedUrl, server, baseUrl) {
-    const crawler = await (0, crawler_1.getCrawler)();
-    const page = await crawler.newPage();
+function extractFromDUServer(embedUrl, server, defaultBaseUrl) {
     try {
-        const interceptedUrls = [];
-        page.on('response', async (response) => {
-            const url = response.url();
-            const contentType = response.headers()['content-type'] || '';
-            if (url.includes('.m3u8') ||
-                url.includes('.mp4') ||
-                url.includes('/playlist/') ||
-                url.includes('/hls/') ||
-                url.includes('/video/') ||
-                contentType.includes('mpegurl') ||
-                contentType.includes('video/')) {
-                interceptedUrls.push(url);
-            }
-        });
-        await page.goto(embedUrl, {
-            waitUntil: 'domcontentloaded',
-            timeout: 30000
-        });
-        await page.waitForTimeout(3000);
-        const jsUrls = await (0, interceptor_1.extractVideoFromJS)(page);
-        interceptedUrls.push(...jsUrls);
+        const refererVal = server.referer || defaultBaseUrl;
+        let origin = defaultBaseUrl;
         try {
-            await page.click('video, .play-button, [class*="play"]').catch(() => { });
-            await page.waitForTimeout(2000);
+            origin = new URL(refererVal).origin;
         }
         catch { }
-        const cleanUrls = interceptedUrls.filter(url => !(0, adblock_policy_1.isAdUrl)(url));
-        const m3u8Url = cleanUrls.find(url => url.includes('.m3u8'));
-        const playlistUrl = cleanUrls.find(url => url.includes('/playlist/'));
-        const mp4Url = cleanUrls.find(url => url.includes('.mp4'));
-        const streamUrl = m3u8Url || playlistUrl || mp4Url;
-        if (streamUrl) {
-            if (streamUrl.includes('/playlist/')) {
-                return {
-                    url: embedUrl,
-                    type: 'iframe',
-                    quality: server.quality || 'FHD',
-                    headers: {
-                        'Referer': baseUrl,
-                        'Origin': baseUrl
-                    }
-                };
-            }
-            if (streamUrl.includes('/chunks/')) {
-                return {
-                    url: embedUrl,
-                    type: 'iframe',
-                    quality: server.quality || 'FHD',
-                    headers: {
-                        'Referer': baseUrl,
-                        'Origin': baseUrl
-                    }
-                };
-            }
-            if (streamUrl.includes('.m3u8')) {
-                const finalM3u8 = toMediaProxyUrl(streamUrl, embedUrl);
-                const playlist = await (0, interceptor_1.fetchM3U8)(streamUrl, { Referer: embedUrl });
-                if (playlist && playlist.qualities.length > 0) {
-                    return {
-                        url: finalM3u8,
-                        type: 'hls',
-                        quality: playlist.qualities[0].quality,
-                        headers: {
-                            'Referer': embedUrl,
-                            'Origin': new URL(embedUrl).origin
-                        }
-                    };
-                }
+        return {
+            url: embedUrl,
+            type: 'iframe',
+            quality: server.quality || 'FHD',
+            headers: {
+                'Referer': refererVal,
+                'Origin': origin
             }
-            return {
-                url: streamUrl.includes('storage.googleapis') || streamUrl.includes('/chunks/')
-                    ? toMediaProxyUrl(streamUrl, embedUrl)
-                    : streamUrl,
-                type: streamUrl.includes('.m3u8') ? 'hls' : 'mp4',
-                quality: server.quality || 'FHD',
-                headers: {
-                    'Referer': embedUrl,
-                    'Origin': new URL(embedUrl).origin
-                }
-            };
-        }
+        };
+    }
+    catch {
         return {
             url: embedUrl,
             type: 'iframe',
             quality: server.quality || 'HD',
             headers: {
-                'Referer': baseUrl,
-                'Origin': baseUrl
+                'Referer': defaultBaseUrl,
+                'Origin': defaultBaseUrl
             }
         };
     }
-    finally {
-        await page.close();
-    }
 }
 /**
  * Generic Playwright-based extraction
@@ -246,9 +177,11 @@ async function extractFromAPIServer(hash, server, context) {
                     const dummyServer = { ...server, embedUrl: link, referer: refererUrl };
                     return extractFromAbyssServer(link, dummyServer, context.baseUrl);
                 }
-                if (link.includes('storage.googleapiscdn.com') || link.includes('storage.googleapis.com')) {
-                    const dummyServer = { ...server, embedUrl: link };
-                    return await extractFromDUServer(link, dummyServer, context.baseUrl);
+                if (link.includes('googleapiscdn.com') ||
+                    link.includes('googleapis.com') ||
+                    link.includes('storage.')) {
+                    const dummyServer = { ...server, embedUrl: link, referer: refererUrl };
+                    return extractFromDUServer(link, dummyServer, context.baseUrl);
                 }
                 return {
                     url: link,
@@ -305,15 +238,19 @@ async function extractAnimeVietsubStream(server, context) {
             if (!embedUrl.startsWith('http')) {
                 embedUrl = embedUrl.startsWith('//') ? `https:${embedUrl}` : `https://${embedUrl}`;
             }
-            if (embedUrl.includes('storage.googleapiscdn.com') || server.type === 'iframe') {
-                res = await extractFromDUServer(embedUrl, server, context.baseUrl);
-            }
-            else if (embedUrl.includes('abyss') ||
+            if (embedUrl.includes('abyss') ||
                 embedUrl.includes('playhydrax') ||
                 server.name.includes('HDX') ||
                 server.name.includes('Hydrax')) {
                 res = extractFromAbyssServer(embedUrl, server, context.baseUrl);
             }
+            else if (embedUrl.includes('googleapiscdn.com') ||
+                embedUrl.includes('googleapis.com') ||
+                embedUrl.includes('storage.') ||
+                server.name.includes('DU') ||
+                server.type === 'iframe') {
+                res = extractFromDUServer(embedUrl, server, context.baseUrl);
+            }
             else if (server.type === 'api') {
                 res = await extractFromAPIServer(embedUrl, server, context);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nekostream",
-  "version": "2026.4.2",
+  "version": "2026.4.3",
   "description": "A polished CLI for discovering and streaming anime from Vietnamese providers",
   "keywords": [
     "anime",

package/player-main.js

@@ -65,7 +65,13 @@ const PROVIDER_LABELS = playerPolicy?.PROVIDER_LABELS || ['animevietsub', 'anime
 const STREAM_HOSTS = playerPolicy?.STREAM_HOSTS || [
   'abyss.to',
   'abysscdn.com',
+  'abyssplayer.com',
+  'abysshost.com',
+  'abysscss.com',
   'hydrax.net',
+  'playhydrax.com',
+  'short.ink',
+  'iamcdn.net',
   'googleapiscdn.com',
   'googleapis.com',
   'gstatic.com',
@@ -339,6 +345,10 @@ function createWindow() {
       }
 
       // ── Step 3: Block ad domains everywhere else (players/iframes) ──
+      if (details.url && details.url.includes('devtools-warning')) {
+        return callback({ cancel: true })
+      }
+
       if (hostMatches(hostname, AD_PROBE_HOSTS)) {
         return callback({ cancel: true })
       }
@@ -425,6 +435,11 @@ function createWindow() {
 
     // Block navigation away from the provider/stream hosts.
     guestWebContents.on('will-navigate', (e, url) => {
+      if (url && url.includes('devtools-warning')) {
+        console.log('[Webview Blocked devtools-warning redirect]:', url)
+        e.preventDefault()
+        return
+      }
       const scheme = (url.split(':')[0] || '').toLowerCase()
       const isAllowed =
         scheme === 'about' || scheme === 'chrome-extension' || isPlaybackHost(hostnameOf(url))
@@ -434,6 +449,13 @@ function createWindow() {
       }
     })
 
+    guestWebContents.on('will-frame-navigate', (e) => {
+      if (e.url && e.url.includes('devtools-warning')) {
+        console.log('[Webview Blocked frame devtools-warning redirect]:', e.url)
+        e.preventDefault()
+      }
+    })
+
     const injectIntoFrame = (frame) => {
       try {
         if (!isStreamHost(hostnameOf(frame.url))) return
@@ -461,7 +483,40 @@ function createWindow() {
             if (window.__neko_cleaner_active__) return;
             window.__neko_cleaner_active__ = true;
 
-            // --- CSS block ---
+            // --- 1. Neutralize window.open to prevent popup blockers from throwing on .focus() ---
+            // Anti-adblock scripts on Abyss/Hydrax catch .focus() TypeError on blocked windows to trigger
+            // "Due to certain reasons (AdBlock/Sandbox), ads are not being displayed..."
+            try {
+              window.open = function(url) {
+                return {
+                  closed: false,
+                  focus: function() {},
+                  blur: function() {},
+                  close: function() {},
+                  postMessage: function() {},
+                  location: { href: url || '' }
+                };
+              };
+            } catch(e) {}
+
+            // --- 2. Prevent anti-adblock document.write from wiping out the player ---
+            try {
+              const _origDocWrite = document.write.bind(document);
+              document.write = function(content) {
+                if (
+                  typeof content === 'string' &&
+                  (content.includes('AdBlock/Sandbox') ||
+                   content.includes('Due to certain reasons') ||
+                   content.includes('disable AdBlock') ||
+                   content.includes('removing the Sandbox'))
+                ) {
+                  return;
+                }
+                return _origDocWrite(content);
+              };
+            } catch(e) {}
+
+            // --- 3. CSS block ---
             if (!document.getElementById('__neko_adblock__')) {
               const style = document.createElement('style');
               style.id = '__neko_adblock__';
@@ -478,33 +533,35 @@ function createWindow() {
               (document.head || document.documentElement).appendChild(style);
             }
 
-            // --- DOM cleaner ---
+            // --- 4. DOM cleaner ---
             const AD_TEXTS = ['Đóng quảng cáo', 'Đóng và xem tiếp', 'Quảng cáo'];
-            // Specific gambling-brand fragments only. Bare 'bet' and 'game'
-            // used to be in this list and removed unrelated player controls.
             const AD_SRCS  = ['in88', 'quayhu', 'nohu', '188bet', 'kubet', 'w88', 'fun88', 'sin88'];
 
             const clean = () => {
               try {
-                // Bypass Abyss popup click-jacking by rewriting the overlay click event
-                if (window.abyssConfig || document.onclick || document.ontouchend) {
-                  if (document.onclick !== null || document.ontouchend !== null) {
-                    document.onclick = null;
-                    document.ontouchend = null;
-                    const overlay = document.getElementById('overlay');
-                    if (overlay) {
-                      overlay.onclick = (e) => {
-                        e.stopPropagation();
-                        e.preventDefault();
-                        if (window.jwplayer && typeof window.jwplayer === 'function') {
-                          try {
-                            window.jwplayer().play();
-                          } catch(err) {}
-                        }
-                        overlay.remove();
-                      };
-                      overlay.ontouchend = overlay.onclick;
+                // Bypass Abyss/Hydrax popup click-jacking by rewriting the overlay click event
+                const overlay = document.getElementById('overlay');
+                if (overlay) {
+                  overlay.onclick = (e) => {
+                    if (e) {
+                      e.stopPropagation();
+                      e.preventDefault();
                     }
+                    if (window.jwplayer && typeof window.jwplayer === 'function') {
+                      try {
+                        window.jwplayer().play();
+                      } catch(err) {}
+                    }
+                    overlay.remove();
+                  };
+                  overlay.ontouchend = overlay.onclick;
+
+                  // Auto-remove overlay if player is active
+                  if (document.querySelector('video') || (window.jwplayer && typeof window.jwplayer === 'function')) {
+                    try {
+                      window.jwplayer().play();
+                    } catch(e) {}
+                    overlay.remove();
                   }
                 }
 
@@ -559,9 +616,13 @@ function createWindow() {
 
     guestWebContents.on('frame-created', (e, details) => {
       const frame = details.frame
+      injectIntoFrame(frame)
+      setTimeout(() => {
+        injectIntoFrame(frame)
+      }, 300)
       setTimeout(() => {
         injectIntoFrame(frame)
-      }, 500)
+      }, 1000)
     })
   })
 

package/player.html

@@ -298,6 +298,7 @@
                     f.id = '__neko_player__';
                     f.src = ${streamUrl};
                     f.setAttribute('allowfullscreen','true');
+                    f.setAttribute('allow', 'autoplay; encrypted-media; fullscreen');
                     document.body.appendChild(f);
                     console.log('[Injected] Google Player iframe appended:', f.src);
                     return true;

package/webview-preload.js

@@ -63,6 +63,62 @@ function nekoIsProviderHost(host, label) {
     if (nekoIsProviderHost(nekoHost, 'animevietsub')) {
       return;
     }
+
+    // Neutralize anti-devtools console serialization probe & devtools-warning redirect on DU/googleapiscdn
+    if (/(^|\.)googleapiscdn\.com$|(^|\.)googleapis\.com$/.test(nekoHost)) {
+      try {
+        var noop = function() {};
+        window.console.log = noop;
+        window.console.warn = noop;
+        window.console.error = noop;
+        window.console.info = noop;
+        window.console.clear = noop;
+        window.console.table = noop;
+
+        var _origReplace = window.location.replace ? window.location.replace.bind(window.location) : null;
+        var _origAssign = window.location.assign ? window.location.assign.bind(window.location) : null;
+        if (_origReplace) {
+          window.location.replace = function(u) {
+            if (typeof u === 'string' && u.includes('devtools-warning')) return;
+            return _origReplace(u);
+          };
+        }
+        if (_origAssign) {
+          window.location.assign = function(u) {
+            if (typeof u === 'string' && u.includes('devtools-warning')) return;
+            return _origAssign(u);
+          };
+        }
+      } catch (e) {}
+    }
+
+    // Neutralize anti-adblock click-jacking / popup triggers without throwing
+    window.open = function(url, target, features) {
+      return {
+        closed: false,
+        focus: function() {},
+        blur: function() {},
+        close: function() {},
+        postMessage: function() {},
+        location: { href: url || '' }
+      };
+    };
+
+    // Guard document.write against wiping out the player with anti-adblock / sandbox warnings
+    const _origDocWrite = document.write.bind(document);
+    document.write = function(content) {
+      if (
+        typeof content === 'string' &&
+        (content.includes('AdBlock/Sandbox') ||
+         content.includes('Due to certain reasons') ||
+         content.includes('disable AdBlock') ||
+         content.includes('removing the Sandbox'))
+      ) {
+        return;
+      }
+      return _origDocWrite(content);
+    };
+
     // ── 1. Fake Google Ad Manager (DFP / GPT) ──────────────────────────────
     if (!window.googletag) {
       const cmd = [];
@@ -178,6 +234,10 @@ function nekoIsProviderHost(host, label) {
       'please disable your ad blocker',
       'disable adblock',
       'turn off adblock',
+      'Due to certain reasons',
+      'AdBlock/Sandbox',
+      'removing the Sandbox',
+      'disable AdBlock'
     ];
     const ADBLOCK_CLASSES = /adblock|ad.block|adblocker|ad.detect|detect.ad/i;
 
@@ -415,11 +475,36 @@ var cleanDOM = function() {
         a.remove();
       }
     });
+
+    // Neutralize Abyss/Hydrax popup overlay
+    var overlay = doc.getElementById('overlay');
+    if (overlay) {
+      overlay.onclick = function(e) {
+        if (e) {
+          e.stopPropagation();
+          e.preventDefault();
+        }
+        try {
+          if (window.jwplayer && typeof window.jwplayer === 'function') {
+            window.jwplayer().play();
+          }
+        } catch(err) {}
+        overlay.remove();
+      };
+      overlay.ontouchend = overlay.onclick;
+
+      if (doc.querySelector('video') || (window.jwplayer && typeof window.jwplayer === 'function')) {
+        try {
+          window.jwplayer().play();
+        } catch(e) {}
+        overlay.remove();
+      }
+    }
     
     // Meta-CSP removal is limited to the stream player hosts, whose pages we
     // rewrite into a bare fullscreen iframe. Stripping it everywhere removed a
     // real defence from every other origin the webview happened to visit.
-    if (/(^|\.)googleapiscdn\.com$|(^|\.)googleapis\.com$|(^|\.)abyss\.to$|(^|\.)hydrax\.net$/.test(nekoHost)) {
+    if (/(^|\.)googleapiscdn\.com$|(^|\.)googleapis\.com$|(^|\.)abyss\.to$|(^|\.)abyssplayer\.com$|(^|\.)abysshost\.com$|(^|\.)abysscss\.com$|(^|\.)hydrax\.net$|(^|\.)playhydrax\.com$/.test(nekoHost)) {
       doc.querySelectorAll('meta[http-equiv="content-security-policy" i]').forEach(function(m) { m.remove(); });
     }