Index: lib/content/snippets.js |
=================================================================== |
--- a/lib/content/snippets.js |
+++ b/lib/content/snippets.js |
@@ -486,8 +486,57 @@ |
{ |
event.preventDefault(); |
} |
}, |
true); |
} |
exports["prevent-inline-scripts"] = preventInlineScripts; |
+ |
+function randomId() |
+{ |
+ // 2176782336 is 36^6 which mean 6 chars [a-z0-9] |
+ // 60466176 is 36^5 |
+ // 2176782336 - 60466176 = 2116316160. This ensure always 6 chars |
+ // for when Math.random() returns 0.0 |
+ return Math.floor(Math.random() * 2116316160 + 60466176).toString(36); |
+} |
+ |
+/** |
+ * Will patch a property on the window object to abort when read. |
+ * It will intercept the onerror callback and block it if tagged. |
+ * |
+ * @todo handle properties of properties. |
+ * |
+ * @param {string} prop the name of the property. |
+ */ |
+function abortOnPropertyRead(prop) |
+{ |
+ if (!prop) |
+ return; |
+ |
+ let magic = randomId(); |
+ |
+ let abort = function() |
+ { |
+ throw new ReferenceError(magic); |
+ }; |
+ |
+ let {onerror} = window; |
+ window.onerror = (message, ...rest) => |
+ { |
+ if (typeof message == "string" && message.includes(magic)) |
+ return true; |
+ if (onerror && typeof onerro == "function") |
+ return onerror(this, message, ...rest); |
+ }; |
+ |
+ (function(o, p) |
+ { |
+ // simple property |
+ let d = Object.getOwnPropertyDescriptor(o, p); |
+ if (!d || d.get != abort) |
+ Object.defineProperty(o, p, {get: abort, set() {}}); |
+ })(window, prop); |
+} |
+ |
+exports["abort-on-property-read"] = makeInjector(abortOnPropertyRead, randomId); |