Issue 3699 - Patch DOM API in order to prevent disabling the injected stylesheet

include.preload.js

 /*
  * This file is part of Adblock Plus <https://adblockplus.org/>,
  * Copyright (C) 2006-2016 Eyeo GmbH
  *
  * Adblock Plus is free software: you can redistribute it and/or modify
  * it under the terms of the GNU General Public License version 3 as
  * published by the Free Software Foundation.
  *
  * Adblock Plus is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
@@ skipping 313 matching lines @@
   },
 
   disconnect: function()
   {
     this.document.removeEventListener("DOMContentLoaded", this.trace);
     this.observer.disconnect();
     clearTimeout(this.timeout);
   }
 };
 
-function reinjectRulesWhenRemoved(document, style)
+function reinjectStyleSheetWhenRemoved(document, style)
 {
-  var MutationObserver = window.MutationObserver || window.WebKitMutationObserver;
+  var MutationObserver = window.MutationObserver ||
+                         window.WebKitMutationObserver;
   if (!MutationObserver)
-    return;
+    return null;
 
-  var observer = new MutationObserver(function(mutations)
+  var parentNode = style.parentNode;
+  var observer = new MutationObserver(function()
   {
-    var isStyleRemoved = false;
-    for (var i = 0; i < mutations.length; i++)
-    {
-      if ([].indexOf.call(mutations[i].removedNodes, style) != -1)
-      {
-        isStyleRemoved = true;
-        break;
-      }
-    }
-    if (!isStyleRemoved)
-      return;
-
-    observer.disconnect();
-
-    var n = document.styleSheets.length;
-    if (n == 0)
-      return;
-
-    var stylesheet = document.styleSheets[n - 1];
-    ext.backgroundPage.sendMessage(
-      {type: "get-selectors"},
-
-      function(response)
-      {
-        var selectors = response.selectors;
-        while (selectors.length > 0)
-        {
-          var selector = selectors.splice(0, SELECTOR_GROUP_SIZE).join(", ");
-
-          // Using non-standard addRule() here. This is the only way
-          // to add rules at the end of a cross-origin stylesheet
-          // because we don't know how many rules are already in there
-          stylesheet.addRule(selector, "display: none !important;");
-        }
-      }
-    );
+    if (style.parentNode != parentNode)
+      parentNode.appendChild(style);
   });
 
-  observer.observe(style.parentNode, {childList: true});
+  observer.observe(parentNode, {childList: true});
   return observer;
 }
 
+function protectStyleSheet(document, style)
+{
+  var id = Math.random().toString(36).substr(2)
+  style.id = id;
+
+  var code = [
+    "(function()",
+    "{",
+    '  var style = document.getElementById("' + id + '") ||',
+    '              document.documentElement.shadowRoot.getElementById("' + id + '");',

[Sebastian Noack, 2016/03/18 17:58:54]

(Yes, I know that this line is 6 characters too long. But I don't see anyway to
make it shorter without impairing readability.)

[kzar, 2016/03/18 19:18:32]

Acknowledged.

+    '  style.removeAttribute("id");'
+  ];
+
+  var disableables = ["style", "style.sheet"];
+  for (var i = 0; i < disableables.length; i++)
+  {
+    code.push("  Object.defineProperty(" + disableables[i] + ', "disabled", '
+                                         + "{value: false, enumerable: true});");
+  }
+
+  var methods = ["deleteRule", "removeRule"];
+  for (var j = 0; j < methods.length; j++)

[kzar, 2016/03/18 19:18:32]

Nit: Just re-use the existing `i` variable instead?

[Sebastian Noack, 2016/03/18 19:23:55]

I'm not sure whether it's a good idea to make the code here depend on a
unrelated variable declared in the headers of the previous loop.

+  {
+    var method = methods[j];
+    if (method in CSSStyleSheet.prototype)
+    {
+      var origin = "CSSStyleSheet.prototype." + method;
+      code.push("  var " + method + " = " + origin + ";",
+                "  " + origin + " = function(index)",
+                "  {",
+                "    if (this != style.sheet)",
+                "      " + method + ".apply(this, index);",
+                "  }");
+    }
+  }
+
+  code.push("})();");
+
+  var script = document.createElement("script");
+  script.async = false;
+  script.textContent = code.join("\n");
+  document.documentElement.appendChild(script);
+  document.documentElement.removeChild(script);
+}
+
 function init(document)
 {
   var shadow = null;
   var style = null;
   var observer = null;
   var tracer = null;
   var propertyFilters = new CSSPropertyFilters(window, addElemHideSelectors);
 
   // Use Shadow DOM if available to don't mess with web pages that rely on
   // the order of their own <style> tags (#309).
@@ skipping 23 matching lines @@
       style = document.createElement("style");
       (shadow || document.head || document.documentElement).appendChild(style);
 
       // It can happen that the frame already navigated to a different
       // document while we were waiting for the background page to respond.
       // In that case the sheet property will stay null, after addind the
       // <style> element to the shadow DOM.
       if (!style.sheet)
         return;
 
-      observer = reinjectRulesWhenRemoved(document, style);
+      observer = reinjectStyleSheetWhenRemoved(document, style);
+      protectStyleSheet(document, style);
     }
 
     // If using shadow DOM, we have to add the ::content pseudo-element
     // before each selector, in order to match elements within the
     // insertion point.
     if (shadow)
     {
       var preparedSelectors = [];
       for (var i = 0; i < selectors.length; i++)
       {
@@ skipping 99 matching lines @@
   }, true);
 
   return updateStylesheet;
 }
 
 if (document instanceof HTMLDocument)
 {
   checkSitekey();
   window.updateStylesheet = init(document);
 }