block render from being proxied

domains/gg.shockbs.json

@@ -5,6 +5,5 @@
   },
   "records": {
     "CNAME": "ziplineshockbs.onrender.com"
-  },
-  "proxied": true
+  }
 }

tests/proxy.test.js

@@ -49,3 +49,40 @@ t("Domains with proxy enabled must have at least one proxy-able record", (t) =>
         validateProxiedRecords(t, data, file);
     });
 });
+
+const disallowedRecords = [
+    {
+        type: "CNAME",
+        value: "*.onrender.com"
+    }
+];
+
+t("Domains with specific records must not have proxy enabled", (t) => {
+    files.forEach((file) => {
+        const data = getDomainData(file);
+
+        if (data.proxied) {
+            disallowedRecords.forEach((record) => {
+                let recordExists = false;
+
+                if (!data.records[record.type]) {
+                    t.pass();
+                    return;
+                } else if (Array.isArray(data.records[record.type])) {
+                    recordExists = data.records[record.type].some((r) =>
+                        record.value.startsWith("*.") ? r.endsWith(record.value.slice(2)) : r === record.value
+                    );
+                } else {
+                    recordExists = record.value.startsWith("*.")
+                        ? data.records[record.type].endsWith(record.value.slice(2))
+                        : data.records[record.type] === record.value;
+                }
+
+                t.false(
+                    recordExists,
+                    `${file}: Records matching \`${record.type}: "${record.value}"\` cannot be proxied`
+                );
+            });
+        }
+    });
+});