Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code

Unified Diff: lib/content/snippets.js

Issue 29886700: Issue 6969 - Implement abort-on-property-read snippet (Closed) Base URL: https://hg.adblockplus.org/adblockpluscore/
Patch Set: Another round of changes Created Oct. 31, 2018, 8:43 p.m.
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: lib/content/snippets.js
===================================================================
--- a/lib/content/snippets.js
+++ b/lib/content/snippets.js
@@ -486,8 +486,74 @@
{
event.preventDefault();
}
},
true);
}
exports["prevent-inline-scripts"] = preventInlineScripts;
+
+/**
+ * Generates a random alphanumeric ID consisting of 6 base-36 digits
+ * from the range 100000..zzzzzz (both inclusive).
+ *
+ * @returns {string} The random ID.
+ */
+function randomId()
+{
+ // 2176782336 is 36^6 which mean 6 chars [a-z0-9]
+ // 60466176 is 36^5
+ // 2176782336 - 60466176 = 2116316160. This ensure to always have 6
+ // chars even if Math.random() returns its minimum value 0.0
+ //
+ return Math.floor(Math.random() * 2116316160 + 60466176).toString(36);
+}
+
+function wrapPropertyAccess(object, property, descriptor)
+{
+ let currentDescriptor = Object.getOwnPropertyDescriptor(object, property);
+ if (currentDescriptor && !currentDescriptor.configurable)
+ return false;
+
+ Object.defineProperty(object, property, descriptor);
+ return true;
+}
+
+/**
+ * Patches a property on the window object to abort execution when the
+ * property is read.
+ *
+ * No error is be printed to the console.
+ *
+ * The idea originates from
+ * {@link https://github.com/uBlockOrigin/uAssets/blob/80b195436f8f8d78ba713237bfc268ecfc9d9d2b/filters/resources.txt#L1703 uBlock Origin}.
+ *
+ * @param {string} property The name of the property.
+ */
+function abortOnPropertyRead(property)
+{
+ if (!property)
+ return;
+
+ let rid = randomId();
+
+ function abort()
+ {
+ throw new ReferenceError(rid);
+ }
+
+ let {onerror} = window;
+ if (wrapPropertyAccess(window, property, {get: abort, set() {}}))
+ {
+ window.onerror = (message, ...rest) =>
+ {
+ if (typeof message == "string" && message.includes(rid))
+ return true;
+ if (typeof onerror == "function")
+ return (() => {}).call.call(onerror, this, message, ...rest);
+ };
+ }
+}
+
+exports["abort-on-property-read"] = makeInjector(abortOnPropertyRead,
+ wrapPropertyAccess,
+ randomId);
« no previous file with comments | « no previous file | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld