block_page.hpp

Go to the documentation of this file.

/*
 * BastionGuard™
 * Copyright (C) 2025–2026 Calogero Scarnà
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 * BastionGuard™ is a trademark of Calogero Scarnà.
 * The BastionGuard™ name and branding are not licensed under the GPL.
 */
 
#pragma once
 
#include <string>
#include <fstream>
#include <sstream>
#include <glib/gi18n.h>
 
static inline std::string load_logo_base64() {
    static std::string cached;
    static bool loaded = false;
    if (loaded) return cached;
    loaded = true;
 
    std::ifstream f("/usr/share/BastionGuard/data/logo.png", std::ios::binary);
    if (!f) return cached;
 
    std::ostringstream ss;
    ss << f.rdbuf();
    const std::string raw = ss.str();
    if (raw.empty()) return cached;
 
    static constexpr char b64[] =
        "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
    std::string out;
    out.reserve(((raw.size() + 2) / 3) * 4);
    for (std::size_t i = 0; i < raw.size(); i += 3) {
        const unsigned char a = static_cast<unsigned char>(raw[i]);
        const unsigned char b = (i+1 < raw.size()) ? static_cast<unsigned char>(raw[i+1]) : 0;
        const unsigned char c = (i+2 < raw.size()) ? static_cast<unsigned char>(raw[i+2]) : 0;
        out += b64[(a >> 2) & 0x3F];
        out += b64[((a << 4) | (b >> 4)) & 0x3F];
        out += (i+1 < raw.size()) ? b64[((b << 2) | (c >> 6)) & 0x3F] : '=';
        out += (i+2 < raw.size()) ? b64[c & 0x3F] : '=';
    }
    cached = "data:image/png;base64," + out;
    return cached;
}
 
namespace BlockPage {
 
inline std::string make(const std::string& host, const std::string& type) {
 
    const std::string logo_uri = load_logo_base64();
    const std::string logo_html = logo_uri.empty()
        ? R"(<span style="font-size:28px;line-height:40px;">&#x1F6E1;</span>)"
        : R"(<img src=")" + logo_uri + R"(" alt="BastionGuard" width="36" height="36" style="border-radius:6px;">)";
 
    const std::string js_type = (type == "bank") ? "bank" : "payment";
 
    std::string body = R"(<!DOCTYPE html>
<html lang="en" dir="ltr">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>BastionGuard</title>
<style>
  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
  :root {
    --sidebar:    #3a6ea5;
    --sidebar-dk: #2c5d8a;
    --sidebar-lt: rgba(255,255,255,0.15);
    --bg:         #f8f9fa;
    --card-bg:    #ffffff;
    --border:     #dee2e6;
    --text:       #212529;
    --muted:      #6c757d;
    --green:      #198754;
    --green-bg:   rgba(25,135,84,0.10);
    --blue-chip:  #eef3fb;
    --blue-chip-border: #c6d9f0;
    --font: system-ui,-apple-system,sans-serif;
  }
  html,body { height:100%; font-family:var(--font); font-size:14px;
    color:var(--text); background:var(--bg); }
 
  /* ── Layout ── */
  .layout { display:flex; min-height:100vh; }
 
  /* ── Sidebar ── */
  .sidebar {
    width:220px; flex-shrink:0;
    background:var(--sidebar);
    display:flex; flex-direction:column;
  }
  .sidebar-header {
    display:flex; align-items:center; gap:10px;
    padding:14px 16px;
    border-bottom:1px solid var(--sidebar-lt);
  }
  .sidebar-brand {
    font-weight:700; font-size:15px; color:#fff;
  }
  .sidebar-section-title {
    padding:18px 16px 8px;
    font-size:11px; font-weight:700;
    color:rgba(255,255,255,0.5);
    letter-spacing:.08em; text-transform:uppercase;
  }
  .sidebar-active-item {
    display:flex; align-items:center; gap:10px;
    margin:0 10px; padding:8px 10px;
    border-radius:8px;
    background:rgba(255,255,255,0.22);
    color:#fff; font-weight:600; font-size:14px;
  }
  .sidebar-active-item svg {
    flex-shrink:0; opacity:.9;
  }
 
  /* ── Main ── */
  .main {
    flex:1; display:flex; flex-direction:column;
    align-items:center; justify-content:center;
    padding:40px 32px;
  }
  .card {
    background:var(--card-bg);
    border:1px solid var(--border);
    border-radius:12px;
    box-shadow:0 1px 3px rgba(0,0,0,0.08);
    padding:32px 28px 24px;
    width:100%; max-width:520px;
    text-align:center;
  }
  .type-icon { font-size:48px; line-height:1; margin-bottom:16px; display:block; }
  .card-heading { font-size:17px; font-weight:700; color:var(--text); margin-bottom:12px; }
  .domain-chip {
    display:inline-flex; align-items:center; gap:6px;
    background:var(--blue-chip); border:1px solid var(--blue-chip-border);
    border-radius:8px; padding:5px 14px;
    font-family:'Menlo','Consolas','Liberation Mono',monospace;
    font-size:13px; color:var(--sidebar); font-weight:600;
    margin-bottom:16px;
  }
  .badge {
    display:inline-flex; align-items:center; gap:7px;
    background:var(--green-bg); border:1px solid rgba(25,135,84,0.25);
    color:var(--green); border-radius:999px; padding:4px 14px;
    font-size:12px; font-weight:600;
    letter-spacing:.04em; text-transform:uppercase;
    margin-bottom:20px;
  }
  .badge-dot {
    width:7px; height:7px; border-radius:50%;
    background:var(--green); box-shadow:0 0 0 2px var(--green-bg);
    animation:pulse 2s ease-in-out infinite;
  }
  @keyframes pulse{0%,100%{opacity:1}50%{opacity:.35}}
  .description {
    color:var(--muted); line-height:1.65; font-size:13.5px; margin-bottom:20px;
  }
  .description strong { color:var(--text); font-weight:600; }
  .tip {
    background:var(--bg); border:1px solid var(--border);
    border-left:3px solid var(--sidebar);
    border-radius:0 8px 8px 0;
    padding:10px 14px; text-align:left;
    font-size:12.5px; color:var(--muted); line-height:1.5;
  }
  [dir=rtl] .tip {
    border-left:1px solid var(--border);
    border-right:3px solid var(--sidebar);
    border-radius:8px 0 0 8px; text-align:right;
  }
  .watermark {
    margin-top:18px; font-size:11px; color:#adb5bd;
    letter-spacing:.06em; text-transform:uppercase;
  }
</style>
</head>
<body>
<div class="layout">
 
  <!-- Sidebar -->
  <aside class="sidebar">
    <div class="sidebar-header">
      )" + logo_html + R"(
      <span class="sidebar-brand">BastionGuard</span>
    </div>
    <div class="sidebar-section-title" id="sb-section"></div>
    <div class="sidebar-active-item">
      <!-- icona lucchetto -->
      <svg width="18" height="18" viewBox="0 0 24 24" fill="none"
           stroke="white" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
        <rect x="3" y="11" width="18" height="11" rx="2" ry="2"/>
        <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
      </svg>
      <span id="sb-label"></span>
    </div>
  </aside>
 
  <!-- Contenuto -->
  <main class="main">
    <div class="card">
      <span class="type-icon" id="bg-icon"></span>
      <div class="card-heading" id="bg-heading"></div>
      <div class="domain-chip" id="bg-domain"></div>
      <div style="margin-bottom:4px">
        <span class="badge">
          <span class="badge-dot"></span>
          <span id="bg-badge"></span>
        </span>
      </div>
      <p class="description" id="bg-desc"></p>
      <div class="tip" id="bg-tip"></div>
      <div class="watermark">BastionGuard&#x2122; &middot; Secure Isolation Layer</div>
    </div>
  </main>
 
</div>
<script>
(function(){
var HOST=')" + host + R"(';
var TYPE=')" + js_type + R"(';
var ICON=TYPE==='bank'?'\uD83C\uDFE6':'\uD83D\uDCB3';
 
var T={
  en:{
    section:'Security',
    sidebarLabel:'Protected Session',
    pageTitle:'Protected Session',
    heading:'Protected session opened',
    bank:'Banking institution', payment:'Secure payment',
    verified:'Verified',
    desc:'BastionGuard has opened <strong>'+HOST+'</strong> in an isolated, protected window.<br><br>This tab has no access to the site. Use the BastionGuard window that just opened.',
    tip:'\uD83D\uDCA1 You can safely close this tab. The secure session is already active in the sandbox.',
    dir:'ltr'
  },
  it:{
    section:'Sicurezza',
    sidebarLabel:'Sessione protetta',
    pageTitle:'Sessione protetta',
    heading:'Sessione protetta aperta',
    bank:'Istituto bancario', payment:'Pagamento sicuro',
    verified:'Verificato',
    desc:'BastionGuard ha aperto <strong>'+HOST+'</strong> in una finestra isolata e protetta.<br><br>Questa scheda non ha accesso al sito. Usa la finestra BastionGuard appena aperta.',
    tip:'\uD83D\uDCA1 Puoi chiudere tranquillamente questa scheda. La sessione sicura \u00e8 gi\u00e0 attiva nella sandbox.',
    dir:'ltr'
  },
  de:{
    section:'Sicherheit',
    sidebarLabel:'Gesch\u00fctzte Sitzung',
    pageTitle:'Gesch\u00fctzte Sitzung',
    heading:'Gesch\u00fctzte Sitzung ge\u00f6ffnet',
    bank:'Kreditinstitut', payment:'Sicherer Zahlungsvorgang',
    verified:'Verifiziert',
    desc:'BastionGuard hat <strong>'+HOST+'</strong> in einem isolierten, gesch\u00fctzten Fenster ge\u00f6ffnet.<br><br>Dieser Tab hat keinen Zugriff auf die Website. Verwende das soeben ge\u00f6ffnete BastionGuard-Fenster.',
    tip:'\uD83D\uDCA1 Du kannst diesen Tab sicher schlie\u00dfen. Die sichere Sitzung ist bereits in der Sandbox aktiv.',
    dir:'ltr'
  },
  ar:{
    section:'\u0627\u0644\u0623\u0645\u0627\u0646',
    sidebarLabel:'\u062c\u0644\u0633\u0629 \u0645\u062d\u0645\u064a\u0629',
    pageTitle:'\u062c\u0644\u0633\u0629 \u0645\u062d\u0645\u064a\u0629',
    heading:'\u062a\u0645 \u0641\u062a\u062d \u062c\u0644\u0633\u0629 \u0645\u062d\u0645\u064a\u0629',
    bank:'\u0645\u0624\u0633\u0633\u0629 \u0645\u0635\u0631\u0641\u064a\u0629', payment:'\u062f\u0641\u0639 \u0622\u0645\u0646',
    verified:'\u0645\u0648\u062b\u0648\u0642',
    desc:'\u0641\u062a\u062d BastionGuard \u0645\u0648\u0642\u0639 <strong>'+HOST+'</strong> \u0641\u064a \u0646\u0627\u0641\u0630\u0629 \u0645\u0639\u0632\u0648\u0644\u0629 \u0648\u0645\u062d\u0645\u064a\u0629.<br><br>\u0644\u0627 \u064a\u0645\u0643\u0646 \u0644\u0647\u0630\u0627 \u0627\u0644\u062a\u0628\u0648\u064a\u0628 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0648\u0642\u0639. \u0627\u0633\u062a\u062e\u062f\u0645 \u0646\u0627\u0641\u0630\u0629 BastionGuard \u0627\u0644\u062a\u064a \u062a\u0645 \u0641\u062a\u062d\u0647\u0627 \u0644\u0644\u062a\u0648\u060c.',
    tip:'\uD83D\uDCA1 \u064a\u0645\u0643\u0646\u0643 \u0625\u063a\u0644\u0627\u0642 \u0647\u0630\u0627 \u0627\u0644\u062a\u0628\u0648\u064a\u0628 \u0628\u0623\u0645\u0627\u0646. \u0627\u0644\u062c\u0644\u0633\u0629 \u0627\u0644\u0622\u0645\u0646\u0629 \u0646\u0634\u0637\u0629 \u0628\u0627\u0644\u0641\u0639\u0644 \u0641\u064a \u0628\u064a\u0626\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a.',
    dir:'rtl'
  },
  fr:{
    section:'S\u00e9curit\u00e9',
    sidebarLabel:'Session prot\u00e9g\u00e9e',
    pageTitle:'Session prot\u00e9g\u00e9e',
    heading:'Session prot\u00e9g\u00e9e ouverte',
    bank:'\u00c9tablissement bancaire', payment:'Paiement s\u00e9curis\u00e9',
    verified:'V\u00e9rifi\u00e9',
    desc:'BastionGuard a ouvert <strong>'+HOST+'</strong> dans une fen\u00eatre isol\u00e9e et prot\u00e9g\u00e9e.<br><br>Cet onglet n\u2019a pas acc\u00e8s au site. Utilisez la fen\u00eatre BastionGuard qui vient de s\u2019ouvrir.',
    tip:'\uD83D\uDCA1 Vous pouvez fermer cet onglet en toute s\u00e9curit\u00e9. La session s\u00e9curis\u00e9e est d\u00e9j\u00e0 active dans le bac \u00e0 sable.',
    dir:'ltr'
  },
  ja:{
    section:'\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3',
    sidebarLabel:'\u4fdd\u8b77\u30bb\u30c3\u30b7\u30e7\u30f3',
    pageTitle:'\u4fdd\u8b77\u30bb\u30c3\u30b7\u30e7\u30f3',
    heading:'\u4fdd\u8b77\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u958b\u304d\u307e\u3057\u305f',
    bank:'\u91d1\u878d\u6a5f\u95a2', payment:'\u5b89\u5168\u306a\u6c7a\u6e08',
    verified:'\u8a8d\u8a3c\u6e08\u307f',
    desc:'BastionGuard \u306f <strong>'+HOST+'</strong> \u3092\u9694\u96e2\u3055\u308c\u305f\u4fdd\u8b77\u30a6\u30a3\u30f3\u30c9\u30a6\u3067\u958b\u3044\u305f\u307e\u3057\u305f\u3002<br><br>\u3053\u306e\u30bf\u30d6\u306f\u30b5\u30a4\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u305b\u3093\u3002\u958b\u3044\u305f BastionGuard \u30a6\u30a3\u30f3\u30c9\u30a6\u3092\u3054\u5229\u7528\u304f\u3060\u3055\u3044\u3002',
    tip:'\uD83D\uDCA1 \u3053\u306e\u30bf\u30d6\u306f\u5b89\u5168\u306b\u9589\u3058\u3089\u308c\u307e\u3059\u3002\u5b89\u5168\u306a\u30bb\u30c3\u30b7\u30e7\u30f3\u306f\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u3067\u3059\u3067\u306b\u30a2\u30af\u30c6\u30a3\u30d6\u3067\u3059\u3002',
    dir:'ltr'
  },
  nl:{
    section:'Beveiliging',
    sidebarLabel:'Beveiligde sessie',
    pageTitle:'Beveiligde sessie',
    heading:'Beveiligde sessie geopend',
    bank:'Bankinstelling', payment:'Veilige betaling',
    verified:'Geverifieerd',
    desc:'BastionGuard heeft <strong>'+HOST+'</strong> geopend in een ge\u00efsole\u00ebrd, beveiligd venster.<br><br>Dit tabblad heeft geen toegang tot de site. Gebruik het BastionGuard-venster dat zojuist is geopend.',
    tip:'\uD83D\uDCA1 Je kunt dit tabblad veilig sluiten. De beveiligde sessie is al actief in de sandbox.',
    dir:'ltr'
  },
  pl:{
    section:'Bezpiecze\u0144stwo',
    sidebarLabel:'Chroniona sesja',
    pageTitle:'Chroniona sesja',
    heading:'Chroniona sesja otwarta',
    bank:'Instytucja bankowa', payment:'Bezpieczna p\u0142atno\u015b\u0107',
    verified:'Zweryfikowano',
    desc:'BastionGuard otworzy\u0142 <strong>'+HOST+'</strong> w izolowanym, chronionym oknie.<br><br>Ta karta nie ma dost\u0119pu do witryny. U\u017cyj okna BastionGuard, kt\u00f3re w\u0142a\u015bnie si\u0119 otworzy\u0142o.',
    tip:'\uD83D\uDCA1 Mo\u017cesz bezpiecznie zamkn\u0105\u0107 t\u0119 kart\u0119. Bezpieczna sesja jest ju\u017c aktywna w sandboksie.',
    dir:'ltr'
  },
  pt:{
    section:'Seguran\u00e7a',
    sidebarLabel:'Sess\u00e3o protegida',
    pageTitle:'Sess\u00e3o protegida',
    heading:'Sess\u00e3o protegida aberta',
    bank:'Institui\u00e7\u00e3o banc\u00e1ria', payment:'Pagamento seguro',
    verified:'Verificado',
    desc:'O BastionGuard abriu <strong>'+HOST+'</strong> numa janela isolada e protegida.<br><br>Este separador n\u00e3o tem acesso ao site. Utilize a janela BastionGuard que acabou de abrir.',
    tip:'\uD83D\uDCA1 Pode fechar este separador com seguran\u00e7a. A sess\u00e3o segura j\u00e1 est\u00e1 ativa na sandbox.',
    dir:'ltr'
  },
  ru:{
    section:'\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c',
    sidebarLabel:'\u0417\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0441\u0441\u0438\u044f',
    pageTitle:'\u0417\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0441\u0441\u0438\u044f',
    heading:'\u0417\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0441\u0441\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0430',
    bank:'\u0411\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435', payment:'\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043f\u043b\u0430\u0442\u0451\u0436',
    verified:'\u041f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043e',
    desc:'BastionGuard \u043e\u0442\u043a\u0440\u044b\u043b <strong>'+HOST+'</strong> \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u043c \u043e\u043a\u043d\u0435.<br><br>\u042d\u0442\u0430 \u0432\u043a\u043b\u0430\u0434\u043a\u0430 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0443. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043e\u043a\u043d\u043e BastionGuard, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u043e\u0441\u044c.',
    tip:'\uD83D\uDCA1 \u0412\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0432\u043a\u043b\u0430\u0434\u043a\u0443. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0441\u0435\u0441\u0441\u0438\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0432 \u0441\u0430\u043d\u0434\u0431\u043e\u043a\u0441\u0435.',
    dir:'ltr'
  }
};
 
function getLang(){
  var ls=navigator.languages||[navigator.language||'en'];
  for(var i=0;i<ls.length;i++){
    var c=ls[i].toLowerCase().split('-')[0];
    if(T[c]) return c;
  }
  return 'en';
}
 
var lang=getLang(), t=T[lang];
document.documentElement.lang=lang;
document.documentElement.dir=t.dir||'ltr';
document.title='BastionGuard \u2014 '+t.pageTitle;
 
document.getElementById('sb-section').textContent=t.section;
document.getElementById('sb-label').textContent=t.sidebarLabel;
document.getElementById('bg-icon').textContent=ICON;
document.getElementById('bg-heading').textContent=t.heading;
document.getElementById('bg-domain').textContent=HOST;
document.getElementById('bg-badge').textContent=t.verified+' \u00b7 '+(TYPE==='bank'?t.bank:t.payment);
document.getElementById('bg-desc').innerHTML=t.desc;
document.getElementById('bg-tip').textContent=t.tip;
})();
</script>
</body>
</html>)";
 
    const std::string len = std::to_string(body.size());
    return "HTTP/1.1 403 Forbidden\r\n"
           "Content-Type: text/html; charset=UTF-8\r\n"
           "Content-Length: " + len + "\r\n"
           "Connection: close\r\n"
           "X-BastionGuard: intercepted\r\n"
           "\r\n" + body;
}
 
} // namespace BlockPage