Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code

Side by Side Diff: lib/filterClasses.js

Issue 29680689: [$csp2 adblockpluscore] Issue 6329 - Add the CSP filter type (Closed)
Patch Set: New approach, added more unit tests Created March 14, 2018, 1:41 p.m.
Left:
Right:
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | test/filterClasses.js » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 /* 1 /*
2 * This file is part of Adblock Plus <https://adblockplus.org/>, 2 * This file is part of Adblock Plus <https://adblockplus.org/>,
3 * Copyright (C) 2006-present eyeo GmbH 3 * Copyright (C) 2006-present eyeo GmbH
4 * 4 *
5 * Adblock Plus is free software: you can redistribute it and/or modify 5 * Adblock Plus is free software: you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 3 as 6 * it under the terms of the GNU General Public License version 3 as
7 * published by the Free Software Foundation. 7 * published by the Free Software Foundation.
8 * 8 *
9 * Adblock Plus is distributed in the hope that it will be useful, 9 * Adblock Plus is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
(...skipping 79 matching lines...) Expand 10 before | Expand all | Expand 10 after
90 Filter.elemhideRegExp = /^([^/*|@"!]*?)#([@?])?#(.+)$/; 90 Filter.elemhideRegExp = /^([^/*|@"!]*?)#([@?])?#(.+)$/;
91 /** 91 /**
92 * Regular expression that RegExp filters specified as RegExps should match 92 * Regular expression that RegExp filters specified as RegExps should match
93 * @type {RegExp} 93 * @type {RegExp}
94 */ 94 */
95 Filter.regexpRegExp = /^(@@)?\/.*\/(?:\$~?[\w-]+(?:=[^,\s]+)?(?:,~?[\w-]+(?:=[^, \s]+)?)*)?$/; 95 Filter.regexpRegExp = /^(@@)?\/.*\/(?:\$~?[\w-]+(?:=[^,\s]+)?(?:,~?[\w-]+(?:=[^, \s]+)?)*)?$/;
96 /** 96 /**
97 * Regular expression that options on a RegExp filter should match 97 * Regular expression that options on a RegExp filter should match
98 * @type {RegExp} 98 * @type {RegExp}
99 */ 99 */
100 Filter.optionsRegExp = /\$(~?[\w-]+(?:=[^,\s]+)?(?:,~?[\w-]+(?:=[^,\s]+)?)*)$/; 100 Filter.optionsRegExp = /\$(~?[\w-]+(?:=[^,]+)?(?:,~?[\w-]+(?:=[^,]+)?)*)$/;
101 101
102 /** 102 /**
103 * Creates a filter of correct type from its text representation - does the 103 * Creates a filter of correct type from its text representation - does the
104 * basic parsing and calls the right constructor then. 104 * basic parsing and calls the right constructor then.
105 * 105 *
106 * @param {string} text as in Filter() 106 * @param {string} text as in Filter()
107 * @return {Filter} 107 * @return {Filter}
108 */ 108 */
109 Filter.fromText = function(text) 109 Filter.fromText = function(text)
110 { 110 {
(...skipping 57 matching lines...) Expand 10 before | Expand all | Expand 10 after
168 * @return {string} 168 * @return {string}
169 */ 169 */
170 Filter.normalize = function(text) 170 Filter.normalize = function(text)
171 { 171 {
172 if (!text) 172 if (!text)
173 return text; 173 return text;
174 174
175 // Remove line breaks and such 175 // Remove line breaks and such
176 text = text.replace(/[^\S ]/g, ""); 176 text = text.replace(/[^\S ]/g, "");
177 177
178 // Don't remove spaces inside comments
178 if (/^\s*!/.test(text)) 179 if (/^\s*!/.test(text))
180 return text.trim();
181
182 // Special treatment for element hiding filters, right side is allowed to
183 // contain spaces
184 if (Filter.elemhideRegExp.test(text))
179 { 185 {
180 // Don't remove spaces inside comments
181 return text.trim();
182 }
183 else if (Filter.elemhideRegExp.test(text))
184 {
185 // Special treatment for element hiding filters, right side is allowed to
186 // contain spaces
187 let [, domain, separator, selector] = /^(.*?)(#@?#?)(.*)$/.exec(text); 186 let [, domain, separator, selector] = /^(.*?)(#@?#?)(.*)$/.exec(text);
188 return domain.replace(/\s/g, "") + separator + selector.trim(); 187 return domain.replace(/\s/g, "") + separator + selector.trim();
189 } 188 }
190 return text.replace(/\s/g, ""); 189
190 // For most regexp filters we strip all whitespace.
191 let strippedText = text.replace(/\s/g, "");
192 if (!/csp=/i.test(strippedText))
193 return strippedText;
194
195 let optionsMatch = Filter.optionsRegExp.exec(strippedText);
196 if (!optionsMatch)
197 return strippedText;
198
199 // But since the values of $csp filter options are allowed to contain single
200 // (non trailing) spaces we have to be more careful if they might be present.
201 let beforeOptions = strippedText.substring(0, optionsMatch.index);
202 let optionsText = text;
203 for (let i = beforeOptions.split("$").length; i > 0; i--)
204 optionsText = optionsText.substr(optionsText.indexOf("$") + 1);
205
206 let options = [];
207 for (let option of optionsText.split(","))
208 {
209 let cspMatch = /^(\s*c\s*s\s*p\s*=)([^,]+)/i.exec(option);
210 if (cspMatch)
211 {
212 options.push(
213 cspMatch[1].replace(/\s/g, "") + cspMatch[2].trim().replace(/\s+/g, " ")
214 );
215 }
216 else
217 options.push(option.replace(/\s/g, ""));
218 }
219
220 return beforeOptions + "$" + options.join();
191 }; 221 };
192 222
193 /** 223 /**
194 * @see filterToRegExp 224 * @see filterToRegExp
195 */ 225 */
196 Filter.toRegExp = filterToRegExp; 226 Filter.toRegExp = filterToRegExp;
197 227
198 /** 228 /**
199 * Class for invalid filters 229 * Class for invalid filters
200 * @param {string} text see Filter() 230 * @param {string} text see Filter()
(...skipping 519 matching lines...) Expand 10 before | Expand all | Expand 10 after
720 blocking = false; 750 blocking = false;
721 text = text.substr(2); 751 text = text.substr(2);
722 } 752 }
723 753
724 let contentType = null; 754 let contentType = null;
725 let matchCase = null; 755 let matchCase = null;
726 let domains = null; 756 let domains = null;
727 let sitekeys = null; 757 let sitekeys = null;
728 let thirdParty = null; 758 let thirdParty = null;
729 let collapse = null; 759 let collapse = null;
760 let csp = null;
730 let options; 761 let options;
731 let match = (text.indexOf("$") >= 0 ? Filter.optionsRegExp.exec(text) : null); 762 let match = (text.indexOf("$") >= 0 ? Filter.optionsRegExp.exec(text) : null);
732 if (match) 763 if (match)
733 { 764 {
734 options = match[1].toUpperCase().split(","); 765 options = match[1].split(",");
735 text = match.input.substr(0, match.index); 766 text = match.input.substr(0, match.index);
736 for (let option of options) 767 for (let option of options)
737 { 768 {
738 let value = null; 769 let value = null;
739 let separatorIndex = option.indexOf("="); 770 let separatorIndex = option.indexOf("=");
740 if (separatorIndex >= 0) 771 if (separatorIndex >= 0)
741 { 772 {
742 value = option.substr(separatorIndex + 1); 773 value = option.substr(separatorIndex + 1);
743 option = option.substr(0, separatorIndex); 774 option = option.substr(0, separatorIndex);
744 } 775 }
745 option = option.replace(/-/, "_"); 776 option = option.replace(/-/, "_").toUpperCase();
746 if (option in RegExpFilter.typeMap) 777 if (option in RegExpFilter.typeMap)
747 { 778 {
748 if (contentType == null) 779 if (contentType == null)
749 contentType = 0; 780 contentType = 0;
750 contentType |= RegExpFilter.typeMap[option]; 781 contentType |= RegExpFilter.typeMap[option];
782
783 if (option == "CSP" && typeof value != "undefined")
784 {
785 if (csp)
786 csp.push(value);
787 else
788 csp = [value];
789 }
751 } 790 }
752 else if (option[0] == "~" && option.substr(1) in RegExpFilter.typeMap) 791 else if (option[0] == "~" && option.substr(1) in RegExpFilter.typeMap)
753 { 792 {
754 if (contentType == null) 793 if (contentType == null)
755 ({contentType} = RegExpFilter.prototype); 794 ({contentType} = RegExpFilter.prototype);
756 contentType &= ~RegExpFilter.typeMap[option.substr(1)]; 795 contentType &= ~RegExpFilter.typeMap[option.substr(1)];
757 } 796 }
758 else if (option == "MATCH_CASE") 797 else if (option == "MATCH_CASE")
759 matchCase = true; 798 matchCase = true;
760 else if (option == "~MATCH_CASE") 799 else if (option == "~MATCH_CASE")
761 matchCase = false; 800 matchCase = false;
762 else if (option == "DOMAIN" && typeof value != "undefined") 801 else if (option == "DOMAIN" && typeof value != "undefined")
763 domains = value; 802 domains = value.toUpperCase();
764 else if (option == "THIRD_PARTY") 803 else if (option == "THIRD_PARTY")
765 thirdParty = true; 804 thirdParty = true;
766 else if (option == "~THIRD_PARTY") 805 else if (option == "~THIRD_PARTY")
767 thirdParty = false; 806 thirdParty = false;
768 else if (option == "COLLAPSE") 807 else if (option == "COLLAPSE")
769 collapse = true; 808 collapse = true;
770 else if (option == "~COLLAPSE") 809 else if (option == "~COLLAPSE")
771 collapse = false; 810 collapse = false;
772 else if (option == "SITEKEY" && typeof value != "undefined") 811 else if (option == "SITEKEY" && typeof value != "undefined")
773 sitekeys = value; 812 sitekeys = value.toUpperCase();
774 else 813 else
775 return new InvalidFilter(origText, "filter_unknown_option"); 814 return new InvalidFilter(origText, "filter_unknown_option");
776 } 815 }
777 } 816 }
778 817
779 try 818 try
780 { 819 {
781 if (blocking) 820 if (blocking)
782 { 821 {
822 if (csp)
823 {
824 csp = csp.join("; ").toLowerCase();
825
826 // Prevent filters from injecting report-uri or report-to directives
827 // since they are a privacy concern. Regexp based upon reBadCSP[1].
828 // [1] - https://github.com/gorhill/uBlock/blob/67e06f53b4d73df6179f6d32 0553a55da4ead40e/src/js/static-net-filtering.js#L1362
829 if (/(;|^)\s*report-(to|uri)\b/.test(csp))
830 return new InvalidFilter(origText, "filter_invalid_csp");
831 }
832
783 return new BlockingFilter(origText, text, contentType, matchCase, domains, 833 return new BlockingFilter(origText, text, contentType, matchCase, domains,
784 thirdParty, sitekeys, collapse); 834 thirdParty, sitekeys, collapse, csp);
785 } 835 }
786 return new WhitelistFilter(origText, text, contentType, matchCase, domains, 836 return new WhitelistFilter(origText, text, contentType, matchCase, domains,
787 thirdParty, sitekeys); 837 thirdParty, sitekeys);
788 } 838 }
789 catch (e) 839 catch (e)
790 { 840 {
791 return new InvalidFilter(origText, "filter_invalid_regexp"); 841 return new InvalidFilter(origText, "filter_invalid_regexp");
792 } 842 }
793 }; 843 };
794 844
795 /** 845 /**
796 * Maps type strings like "SCRIPT" or "OBJECT" to bit masks 846 * Maps type strings like "SCRIPT" or "OBJECT" to bit masks
797 */ 847 */
798 RegExpFilter.typeMap = { 848 RegExpFilter.typeMap = {
799 OTHER: 1, 849 OTHER: 1,
800 SCRIPT: 2, 850 SCRIPT: 2,
801 IMAGE: 4, 851 IMAGE: 4,
802 STYLESHEET: 8, 852 STYLESHEET: 8,
803 OBJECT: 16, 853 OBJECT: 16,
804 SUBDOCUMENT: 32, 854 SUBDOCUMENT: 32,
805 DOCUMENT: 64, 855 DOCUMENT: 64,
806 WEBSOCKET: 128, 856 WEBSOCKET: 128,
807 WEBRTC: 256, 857 WEBRTC: 256,
858 CSP: 512,
808 XBL: 1, 859 XBL: 1,
809 PING: 1024, 860 PING: 1024,
810 XMLHTTPREQUEST: 2048, 861 XMLHTTPREQUEST: 2048,
811 OBJECT_SUBREQUEST: 4096, 862 OBJECT_SUBREQUEST: 4096,
812 DTD: 1, 863 DTD: 1,
813 MEDIA: 16384, 864 MEDIA: 16384,
814 FONT: 32768, 865 FONT: 32768,
815 866
816 BACKGROUND: 4, // Backwards compat, same as IMAGE 867 BACKGROUND: 4, // Backwards compat, same as IMAGE
817 868
818 POPUP: 0x10000000, 869 POPUP: 0x10000000,
819 GENERICBLOCK: 0x20000000, 870 GENERICBLOCK: 0x20000000,
820 ELEMHIDE: 0x40000000, 871 ELEMHIDE: 0x40000000,
821 GENERICHIDE: 0x80000000 872 GENERICHIDE: 0x80000000
822 }; 873 };
823 874
824 // DOCUMENT, ELEMHIDE, POPUP, GENERICHIDE and GENERICBLOCK options shouldn't 875 // CSP, DOCUMENT, ELEMHIDE, POPUP, GENERICHIDE and GENERICBLOCK options
825 // be there by default 876 // shouldn't be there by default
826 RegExpFilter.prototype.contentType &= ~(RegExpFilter.typeMap.DOCUMENT | 877 RegExpFilter.prototype.contentType &= ~(RegExpFilter.typeMap.CSP |
878 RegExpFilter.typeMap.DOCUMENT |
827 RegExpFilter.typeMap.ELEMHIDE | 879 RegExpFilter.typeMap.ELEMHIDE |
828 RegExpFilter.typeMap.POPUP | 880 RegExpFilter.typeMap.POPUP |
829 RegExpFilter.typeMap.GENERICHIDE | 881 RegExpFilter.typeMap.GENERICHIDE |
830 RegExpFilter.typeMap.GENERICBLOCK); 882 RegExpFilter.typeMap.GENERICBLOCK);
831 883
832 /** 884 /**
833 * Class for blocking filters 885 * Class for blocking filters
834 * @param {string} text see Filter() 886 * @param {string} text see Filter()
835 * @param {string} regexpSource see RegExpFilter() 887 * @param {string} regexpSource see RegExpFilter()
836 * @param {number} contentType see RegExpFilter() 888 * @param {number} contentType see RegExpFilter()
837 * @param {boolean} matchCase see RegExpFilter() 889 * @param {boolean} matchCase see RegExpFilter()
838 * @param {string} domains see RegExpFilter() 890 * @param {string} domains see RegExpFilter()
839 * @param {boolean} thirdParty see RegExpFilter() 891 * @param {boolean} thirdParty see RegExpFilter()
840 * @param {string} sitekeys see RegExpFilter() 892 * @param {string} sitekeys see RegExpFilter()
841 * @param {boolean} collapse 893 * @param {boolean} collapse
842 * defines whether the filter should collapse blocked content, can be null 894 * defines whether the filter should collapse blocked content, can be null
895 * @param {string} [csp]
896 * Content Security Policy to inject when the filter matches
843 * @constructor 897 * @constructor
844 * @augments RegExpFilter 898 * @augments RegExpFilter
845 */ 899 */
846 function BlockingFilter(text, regexpSource, contentType, matchCase, domains, 900 function BlockingFilter(text, regexpSource, contentType, matchCase, domains,
847 thirdParty, sitekeys, collapse) 901 thirdParty, sitekeys, collapse, csp)
848 { 902 {
849 RegExpFilter.call(this, text, regexpSource, contentType, matchCase, domains, 903 RegExpFilter.call(this, text, regexpSource, contentType, matchCase, domains,
850 thirdParty, sitekeys); 904 thirdParty, sitekeys);
851 905
852 this.collapse = collapse; 906 this.collapse = collapse;
907 this.csp = csp;
853 } 908 }
854 exports.BlockingFilter = BlockingFilter; 909 exports.BlockingFilter = BlockingFilter;
855 910
856 BlockingFilter.prototype = extend(RegExpFilter, { 911 BlockingFilter.prototype = extend(RegExpFilter, {
857 type: "blocking", 912 type: "blocking",
858 913
859 /** 914 /**
860 * Defines whether the filter should collapse blocked content. 915 * Defines whether the filter should collapse blocked content.
861 * Can be null (use the global preference). 916 * Can be null (use the global preference).
862 * @type {boolean} 917 * @type {boolean}
863 */ 918 */
864 collapse: null 919 collapse: null,
920
921 /**
922 * Content Security Policy to inject for matching requests.
923 * @type {string}
924 */
925 csp: null
865 }); 926 });
866 927
867 /** 928 /**
868 * Class for whitelist filters 929 * Class for whitelist filters
869 * @param {string} text see Filter() 930 * @param {string} text see Filter()
870 * @param {string} regexpSource see RegExpFilter() 931 * @param {string} regexpSource see RegExpFilter()
871 * @param {number} contentType see RegExpFilter() 932 * @param {number} contentType see RegExpFilter()
872 * @param {boolean} matchCase see RegExpFilter() 933 * @param {boolean} matchCase see RegExpFilter()
873 * @param {string} domains see RegExpFilter() 934 * @param {string} domains see RegExpFilter()
874 * @param {boolean} thirdParty see RegExpFilter() 935 * @param {boolean} thirdParty see RegExpFilter()
(...skipping 144 matching lines...) Expand 10 before | Expand all | Expand 10 after
1019 */ 1080 */
1020 function ElemHideEmulationFilter(text, domains, selector) 1081 function ElemHideEmulationFilter(text, domains, selector)
1021 { 1082 {
1022 ElemHideBase.call(this, text, domains, selector); 1083 ElemHideBase.call(this, text, domains, selector);
1023 } 1084 }
1024 exports.ElemHideEmulationFilter = ElemHideEmulationFilter; 1085 exports.ElemHideEmulationFilter = ElemHideEmulationFilter;
1025 1086
1026 ElemHideEmulationFilter.prototype = extend(ElemHideBase, { 1087 ElemHideEmulationFilter.prototype = extend(ElemHideBase, {
1027 type: "elemhideemulation" 1088 type: "elemhideemulation"
1028 }); 1089 });
OLDNEW
« no previous file with comments | « no previous file | test/filterClasses.js » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld