| Left: | ||
| Right: |
| LEFT | RIGHT |
|---|---|
| 1 /* | 1 /* |
| 2 * This file is part of Adblock Plus <https://adblockplus.org/>, | 2 * This file is part of Adblock Plus <https://adblockplus.org/>, |
| 3 * Copyright (C) 2006-present eyeo GmbH | 3 * Copyright (C) 2006-present eyeo GmbH |
| 4 * | 4 * |
| 5 * Adblock Plus is free software: you can redistribute it and/or modify | 5 * Adblock Plus is free software: you can redistribute it and/or modify |
| 6 * it under the terms of the GNU General Public License version 3 as | 6 * it under the terms of the GNU General Public License version 3 as |
| 7 * published by the Free Software Foundation. | 7 * published by the Free Software Foundation. |
| 8 * | 8 * |
| 9 * Adblock Plus is distributed in the hope that it will be useful, | 9 * Adblock Plus is distributed in the hope that it will be useful, |
| 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of | 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| (...skipping 208 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 219 /* | 219 /* |
| 220 * RTCPeerConnection wrapper | 220 * RTCPeerConnection wrapper |
| 221 * | 221 * |
| 222 * The webRequest API in Chrome does not yet allow the blocking of | 222 * The webRequest API in Chrome does not yet allow the blocking of |
| 223 * WebRTC connections. | 223 * WebRTC connections. |
| 224 * See https://bugs.chromium.org/p/chromium/issues/detail?id=707683 | 224 * See https://bugs.chromium.org/p/chromium/issues/detail?id=707683 |
| 225 */ | 225 */ |
| 226 let RealRTCPeerConnection = window.RTCPeerConnection || | 226 let RealRTCPeerConnection = window.RTCPeerConnection || |
| 227 window.webkitRTCPeerConnection; | 227 window.webkitRTCPeerConnection; |
| 228 | 228 |
| 229 // Firefox has the option (media.peerconnection.enabled) to disable WebRTC | 229 // Firefox has the option (media.peerconnection.enabled) to disable WebRTC |
|
Manish Jethani
2017/11/14 10:57:56
Wouldn't it be better to wrap the entire code for
Wladimir Palant
2017/11/14 11:12:49
I agree. While I'm normally not a big fan of incre
kzar
2017/11/14 11:36:35
Done.
| |
| 230 // in which case RealRTCPeerConnection is undefined. Note: This logic assumes | 230 // in which case RealRTCPeerConnection is undefined. |
| 231 // that the WebRTC wrapping code comes last in the injected function! | 231 if (typeof RealRTCPeerConnection != "undefined") |
| 232 if (typeof RealRTCPeerConnection == "undefined") | 232 { |
| 233 return; | 233 let closeRTCPeerConnection = Function.prototype.call.bind( |
| 234 | 234 RealRTCPeerConnection.prototype.close |
| 235 let closeRTCPeerConnection = Function.prototype.call.bind( | 235 ); |
| 236 RealRTCPeerConnection.prototype.close | 236 let RealArray = Array; |
| 237 ); | 237 let RealString = String; |
| 238 let RealArray = Array; | 238 let {create: createObject, defineProperty} = Object; |
| 239 let RealString = String; | 239 |
| 240 let {create: createObject, defineProperty} = Object; | 240 let normalizeUrl = url => |
|
kzar
2017/11/14 11:36:35
This change - and several like it below - are nece
| |
| 241 | 241 { |
| 242 function normalizeUrl(url) | 242 if (typeof url != "undefined") |
| 243 { | 243 return RealString(url); |
| 244 if (typeof url != "undefined") | 244 }; |
| 245 return RealString(url); | 245 |
| 246 } | 246 let safeCopyArray = (originalArray, transform) => |
| 247 | 247 { |
| 248 function safeCopyArray(originalArray, transform) | 248 if (originalArray == null || typeof originalArray != "object") |
| 249 { | 249 return originalArray; |
| 250 if (originalArray == null || typeof originalArray != "object") | 250 |
| 251 return originalArray; | 251 let safeArray = RealArray(originalArray.length); |
| 252 | 252 for (let i = 0; i < safeArray.length; i++) |
| 253 let safeArray = RealArray(originalArray.length); | 253 { |
| 254 for (let i = 0; i < safeArray.length; i++) | 254 defineProperty(safeArray, i, { |
| 255 { | 255 configurable: false, enumerable: false, writable: false, |
| 256 defineProperty(safeArray, i, { | 256 value: transform(originalArray[i]) |
| 257 configurable: false, enumerable: false, writable: false, | |
| 258 value: transform(originalArray[i]) | |
| 259 }); | |
| 260 } | |
| 261 defineProperty(safeArray, "length", { | |
| 262 configurable: false, enumerable: false, writable: false, | |
| 263 value: safeArray.length | |
| 264 }); | |
| 265 return safeArray; | |
| 266 } | |
| 267 | |
| 268 // It would be much easier to use the .getConfiguration method to obtain | |
| 269 // the normalized and safe configuration from the RTCPeerConnection | |
| 270 // instance. Unfortunately its not implemented as of Chrome unstable 59. | |
| 271 // See https://www.chromestatus.com/feature/5271355306016768 | |
| 272 function protectConfiguration(configuration) | |
| 273 { | |
| 274 if (configuration == null || typeof configuration != "object") | |
| 275 return configuration; | |
| 276 | |
| 277 let iceServers = safeCopyArray( | |
| 278 configuration.iceServers, | |
| 279 iceServer => | |
| 280 { | |
| 281 let {url, urls} = iceServer; | |
| 282 | |
| 283 // RTCPeerConnection doesn't iterate through pseudo Arrays of urls. | |
| 284 if (typeof urls != "undefined" && !(urls instanceof RealArray)) | |
| 285 urls = [urls]; | |
| 286 | |
| 287 return createObject(iceServer, { | |
| 288 url: { | |
| 289 configurable: false, enumerable: false, writable: false, | |
| 290 value: normalizeUrl(url) | |
| 291 }, | |
| 292 urls: { | |
| 293 configurable: false, enumerable: false, writable: false, | |
| 294 value: safeCopyArray(urls, normalizeUrl) | |
| 295 } | |
| 296 }); | 257 }); |
| 297 } | 258 } |
| 298 ); | 259 defineProperty(safeArray, "length", { |
| 299 | |
| 300 return createObject(configuration, { | |
| 301 iceServers: { | |
| 302 configurable: false, enumerable: false, writable: false, | 260 configurable: false, enumerable: false, writable: false, |
| 303 value: iceServers | 261 value: safeArray.length |
| 304 } | 262 }); |
| 305 }); | 263 return safeArray; |
| 306 } | 264 }; |
| 307 | 265 |
| 308 function checkUrl(peerconnection, url) | 266 // It would be much easier to use the .getConfiguration method to obtain |
| 309 { | 267 // the normalized and safe configuration from the RTCPeerConnection |
| 310 checkRequest("webrtc", url, blocked => | 268 // instance. Unfortunately its not implemented as of Chrome unstable 59. |
| 311 { | 269 // See https://www.chromestatus.com/feature/5271355306016768 |
| 312 if (blocked) | 270 let protectConfiguration = configuration => |
| 313 { | 271 { |
| 314 // Calling .close() throws if already closed. | 272 if (configuration == null || typeof configuration != "object") |
| 315 try | 273 return configuration; |
| 274 | |
| 275 let iceServers = safeCopyArray( | |
| 276 configuration.iceServers, | |
| 277 iceServer => | |
| 316 { | 278 { |
| 317 closeRTCPeerConnection(peerconnection); | 279 let {url, urls} = iceServer; |
| 280 | |
| 281 // RTCPeerConnection doesn't iterate through pseudo Arrays of urls. | |
| 282 if (typeof urls != "undefined" && !(urls instanceof RealArray)) | |
| 283 urls = [urls]; | |
| 284 | |
| 285 return createObject(iceServer, { | |
| 286 url: { | |
| 287 configurable: false, enumerable: false, writable: false, | |
| 288 value: normalizeUrl(url) | |
| 289 }, | |
| 290 urls: { | |
| 291 configurable: false, enumerable: false, writable: false, | |
| 292 value: safeCopyArray(urls, normalizeUrl) | |
| 293 } | |
| 294 }); | |
| 318 } | 295 } |
| 319 catch (e) {} | 296 ); |
| 320 } | 297 |
| 321 }); | 298 return createObject(configuration, { |
| 322 } | 299 iceServers: { |
| 323 | 300 configurable: false, enumerable: false, writable: false, |
| 324 function checkConfiguration(peerconnection, configuration) | 301 value: iceServers |
| 325 { | 302 } |
| 326 if (configuration && configuration.iceServers) | 303 }); |
| 327 { | 304 }; |
| 328 for (let i = 0; i < configuration.iceServers.length; i++) | 305 |
| 329 { | 306 let checkUrl = (peerconnection, url) => |
| 330 let iceServer = configuration.iceServers[i]; | 307 { |
| 331 if (iceServer) | 308 checkRequest("webrtc", url, blocked => |
| 309 { | |
| 310 if (blocked) | |
| 332 { | 311 { |
| 333 if (iceServer.url) | 312 // Calling .close() throws if already closed. |
| 334 checkUrl(peerconnection, iceServer.url); | 313 try |
| 335 | |
| 336 if (iceServer.urls) | |
| 337 { | 314 { |
| 338 for (let j = 0; j < iceServer.urls.length; j++) | 315 closeRTCPeerConnection(peerconnection); |
| 339 checkUrl(peerconnection, iceServer.urls[j]); | 316 } |
| 317 catch (e) {} | |
| 318 } | |
| 319 }); | |
| 320 }; | |
| 321 | |
| 322 let checkConfiguration = (peerconnection, configuration) => | |
| 323 { | |
| 324 if (configuration && configuration.iceServers) | |
| 325 { | |
| 326 for (let i = 0; i < configuration.iceServers.length; i++) | |
| 327 { | |
| 328 let iceServer = configuration.iceServers[i]; | |
| 329 if (iceServer) | |
| 330 { | |
| 331 if (iceServer.url) | |
| 332 checkUrl(peerconnection, iceServer.url); | |
| 333 | |
| 334 if (iceServer.urls) | |
| 335 { | |
| 336 for (let j = 0; j < iceServer.urls.length; j++) | |
| 337 checkUrl(peerconnection, iceServer.urls[j]); | |
| 338 } | |
| 340 } | 339 } |
| 341 } | 340 } |
| 342 } | 341 } |
| 342 }; | |
| 343 | |
| 344 // Chrome unstable (tested with 59) has already implemented | |
| 345 // setConfiguration, so we need to wrap that if it exists too. | |
| 346 // https://www.chromestatus.com/feature/5596193748942848 | |
| 347 if (RealRTCPeerConnection.prototype.setConfiguration) | |
| 348 { | |
| 349 let realSetConfiguration = Function.prototype.call.bind( | |
| 350 RealRTCPeerConnection.prototype.setConfiguration | |
| 351 ); | |
| 352 | |
| 353 RealRTCPeerConnection.prototype.setConfiguration = function(configuration) | |
| 354 { | |
| 355 configuration = protectConfiguration(configuration); | |
| 356 | |
| 357 // Call the real method first, so that validates the configuration for | |
| 358 // us. Also we might as well since checkRequest is asynchronous anyway. | |
| 359 realSetConfiguration(this, configuration); | |
| 360 checkConfiguration(this, configuration); | |
| 361 }; | |
| 343 } | 362 } |
| 344 } | 363 |
| 345 | 364 let WrappedRTCPeerConnection = function(...args) |
| 346 // Chrome unstable (tested with 59) has already implemented | 365 { |
| 347 // setConfiguration, so we need to wrap that if it exists too. | 366 if (!(this instanceof WrappedRTCPeerConnection)) |
| 348 // https://www.chromestatus.com/feature/5596193748942848 | 367 return RealRTCPeerConnection(); |
| 349 if (RealRTCPeerConnection.prototype.setConfiguration) | 368 |
| 350 { | 369 let configuration = protectConfiguration(args[0]); |
| 351 let realSetConfiguration = Function.prototype.call.bind( | 370 |
| 352 RealRTCPeerConnection.prototype.setConfiguration | 371 // Since the old webkitRTCPeerConnection constructor takes an optional |
| 353 ); | 372 // second argument we need to take care to pass that through. Necessary |
| 354 | 373 // for older versions of Chrome such as 49. |
| 355 RealRTCPeerConnection.prototype.setConfiguration = function(configuration) | 374 let constraints = undefined; |
| 356 { | 375 if (args.length > 1) |
| 357 configuration = protectConfiguration(configuration); | 376 constraints = args[1]; |
| 358 | 377 |
| 359 // Call the real method first, so that validates the configuration for | 378 let peerconnection = new RealRTCPeerConnection(configuration, |
| 360 // us. Also we might as well since checkRequest is asynchronous anyway. | 379 constraints); |
| 361 realSetConfiguration(this, configuration); | 380 checkConfiguration(peerconnection, configuration); |
| 362 checkConfiguration(this, configuration); | 381 return peerconnection; |
| 363 }; | 382 }; |
| 364 } | 383 |
| 365 | 384 WrappedRTCPeerConnection.prototype = RealRTCPeerConnection.prototype; |
| 366 function WrappedRTCPeerConnection(...args) | 385 |
| 367 { | 386 let boundWrappedRTCPeerConnection = WrappedRTCPeerConnection.bind(); |
| 368 if (!(this instanceof WrappedRTCPeerConnection)) | 387 copyProperties(RealRTCPeerConnection, boundWrappedRTCPeerConnection, |
| 369 return RealRTCPeerConnection(); | 388 ["generateCertificate", "name", "prototype"]); |
| 370 | 389 RealRTCPeerConnection.prototype.constructor = boundWrappedRTCPeerConnection; |
| 371 let configuration = protectConfiguration(args[0]); | 390 |
| 372 | 391 if ("RTCPeerConnection" in window) |
| 373 // Since the old webkitRTCPeerConnection constructor takes an optional | 392 window.RTCPeerConnection = boundWrappedRTCPeerConnection; |
| 374 // second argument we need to take care to pass that through. Necessary | 393 if ("webkitRTCPeerConnection" in window) |
| 375 // for older versions of Chrome such as 49. | 394 window.webkitRTCPeerConnection = boundWrappedRTCPeerConnection; |
| 376 let constraints = undefined; | 395 } |
| 377 if (args.length > 1) | |
| 378 constraints = args[1]; | |
| 379 | |
| 380 let peerconnection = new RealRTCPeerConnection(configuration, constraints); | |
| 381 checkConfiguration(peerconnection, configuration); | |
| 382 return peerconnection; | |
| 383 } | |
| 384 | |
| 385 WrappedRTCPeerConnection.prototype = RealRTCPeerConnection.prototype; | |
| 386 | |
| 387 let boundWrappedRTCPeerConnection = WrappedRTCPeerConnection.bind(); | |
| 388 copyProperties(RealRTCPeerConnection, boundWrappedRTCPeerConnection, | |
| 389 ["generateCertificate", "name", "prototype"]); | |
| 390 RealRTCPeerConnection.prototype.constructor = boundWrappedRTCPeerConnection; | |
| 391 | |
| 392 if ("RTCPeerConnection" in window) | |
| 393 window.RTCPeerConnection = boundWrappedRTCPeerConnection; | |
| 394 if ("webkitRTCPeerConnection" in window) | |
| 395 window.webkitRTCPeerConnection = boundWrappedRTCPeerConnection; | |
| 396 } | 396 } |
| 397 | 397 |
| 398 if (document instanceof HTMLDocument) | 398 if (document instanceof HTMLDocument) |
| 399 { | 399 { |
| 400 let sandbox = window.frameElement && | 400 let sandbox = window.frameElement && |
| 401 window.frameElement.getAttribute("sandbox"); | 401 window.frameElement.getAttribute("sandbox"); |
| 402 | 402 |
| 403 if (typeof sandbox != "string" || /(^|\s)allow-scripts(\s|$)/i.test(sandbox)) | 403 if (typeof sandbox != "string" || /(^|\s)allow-scripts(\s|$)/i.test(sandbox)) |
| 404 { | 404 { |
| 405 let script = document.createElement("script"); | 405 let script = document.createElement("script"); |
| 406 script.type = "application/javascript"; | 406 script.type = "application/javascript"; |
| 407 script.async = false; | 407 script.async = false; |
| 408 script.textContent = "(" + injected + ")('" + randomEventName + "');"; | 408 script.textContent = "(" + injected + ")('" + randomEventName + "');"; |
| 409 document.documentElement.appendChild(script); | 409 document.documentElement.appendChild(script); |
| 410 document.documentElement.removeChild(script); | 410 document.documentElement.removeChild(script); |
| 411 } | 411 } |
| 412 } | 412 } |
| LEFT | RIGHT |