| OLD | NEW |
| 1 /* | 1 /* |
| 2 * This file is part of Adblock Plus <https://adblockplus.org/>, | 2 * This file is part of Adblock Plus <https://adblockplus.org/>, |
| 3 * Copyright (C) 2006-present eyeo GmbH | 3 * Copyright (C) 2006-present eyeo GmbH |
| 4 * | 4 * |
| 5 * Adblock Plus is free software: you can redistribute it and/or modify | 5 * Adblock Plus is free software: you can redistribute it and/or modify |
| 6 * it under the terms of the GNU General Public License version 3 as | 6 * it under the terms of the GNU General Public License version 3 as |
| 7 * published by the Free Software Foundation. | 7 * published by the Free Software Foundation. |
| 8 * | 8 * |
| 9 * Adblock Plus is distributed in the hope that it will be useful, | 9 * Adblock Plus is distributed in the hope that it will be useful, |
| 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of | 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| (...skipping 339 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 350 | 350 |
| 351 if ("RTCPeerConnection" in window) | 351 if ("RTCPeerConnection" in window) |
| 352 window.RTCPeerConnection = boundWrappedRTCPeerConnection; | 352 window.RTCPeerConnection = boundWrappedRTCPeerConnection; |
| 353 if ("webkitRTCPeerConnection" in window) | 353 if ("webkitRTCPeerConnection" in window) |
| 354 window.webkitRTCPeerConnection = boundWrappedRTCPeerConnection; | 354 window.webkitRTCPeerConnection = boundWrappedRTCPeerConnection; |
| 355 } | 355 } |
| 356 } | 356 } |
| 357 | 357 |
| 358 if (document instanceof HTMLDocument) | 358 if (document instanceof HTMLDocument) |
| 359 { | 359 { |
| 360 let sandbox = window.frameElement && | 360 let sandbox; |
| 361 window.frameElement.getAttribute("sandbox"); | 361 |
| 362 // We have to wrap the following code in a try catch |
| 363 // because of this Microsoft Edge bug: |
| 364 // https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/190829
80/ |
| 365 try |
| 366 { |
| 367 sandbox = window.frameElement && |
| 368 window.frameElement.getAttribute("sandbox"); |
| 369 } |
| 370 catch (e) {} |
| 362 | 371 |
| 363 if (typeof sandbox != "string" || /(^|\s)allow-scripts(\s|$)/i.test(sandbox)) | 372 if (typeof sandbox != "string" || /(^|\s)allow-scripts(\s|$)/i.test(sandbox)) |
| 364 { | 373 { |
| 365 let script = document.createElement("script"); | 374 let script = document.createElement("script"); |
| 366 let code = "(" + injected + ")('" + randomEventName + "');"; | 375 let code = "(" + injected + ")('" + randomEventName + "');"; |
| 367 | 376 |
| 368 script.type = "application/javascript"; | 377 script.type = "application/javascript"; |
| 369 script.async = false; | 378 script.async = false; |
| 370 | 379 |
| 371 // Firefox 58 only bypasses site CSPs when assigning to 'src', | 380 // Firefox 58 only bypasses site CSPs when assigning to 'src', |
| 372 // while Chrome 67 only bypasses site CSPs when using 'textContent'. | 381 // while Chrome 67 only bypasses site CSPs when using 'textContent'. |
| 373 if (browser.runtime.getURL("").startsWith("chrome-extension://")) | 382 if (browser.runtime.getURL("").startsWith("chrome-extension://")) |
| 374 { | 383 { |
| 375 script.textContent = code; | 384 script.textContent = code; |
| 376 document.documentElement.appendChild(script); | 385 document.documentElement.appendChild(script); |
| 377 } | 386 } |
| 378 else | 387 else |
| 379 { | 388 { |
| 380 let url = URL.createObjectURL(new Blob([code])); | 389 let url = URL.createObjectURL(new Blob([code])); |
| 381 script.src = url; | 390 script.src = url; |
| 382 document.documentElement.appendChild(script); | 391 document.documentElement.appendChild(script); |
| 383 URL.revokeObjectURL(url); | 392 URL.revokeObjectURL(url); |
| 384 } | 393 } |
| 385 | 394 |
| 386 document.documentElement.removeChild(script); | 395 document.documentElement.removeChild(script); |
| 387 } | 396 } |
| 388 } | 397 } |
| OLD | NEW |