diff --git a/src/content/syncFetchPolicy.js b/src/content/syncFetchPolicy.js index e2358fd..9618c4c 100644 --- a/src/content/syncFetchPolicy.js +++ b/src/content/syncFetchPolicy.js @@ -66,15 +66,14 @@ return; } - debug("Initial readyState and body", document.readyState, document.body); + debug("Initial document state", document.readyState, document.documentElement, document.head, document.body); // DEV_ONLY - let mustFreeze = UA.isMozilla + let mustFreeze = document.head && UA.isMozilla && (!/^(?:image|video|audio)/.test(document.contentType) || document instanceof XMLDocument) && document.readyState !== "complete"; if (mustFreeze) { // Mozilla has already parsed the element, we must take extra steps... - try { DocumentFreezer.freeze(); @@ -85,7 +84,7 @@ debug("Readystate: %s, suppressedScripts = %s, canScript = %s", readyState, DocumentFreezer.suppressedScripts, ns.canScript); if (!ns.canScript) { - setTimeout(() => DocumentFreezer.unfreeze(), 0); + queueMicrotask(() => DocumentFreezer.unfreeze()); let normalizeDir = e => { // Chromium does this automatically. We need it to understand we're a directory earlier and allow browser UI scripts. if (document.baseURI === document.URL + "/") { @@ -156,7 +155,7 @@ DocumentFreezer.unfreeze(); let scripts = [], deferred = []; // push deferred scripts, if any, to the end - for (let s of [...document.querySelectorAll("script")]) { + for (let s of document.getElementsByTagName("script")) { (s.defer && !s.text ? deferred : scripts).push(s); s.addEventListener("beforescriptexecute", e => { console.debug("Suppressing", script); diff --git a/src/lib/DocumentFreezer.js b/src/lib/DocumentFreezer.js deleted file mode 100644 index 6b07294..0000000 --- a/src/lib/DocumentFreezer.js +++ /dev/null @@ -1,132 +0,0 @@ -/* - * NoScript - a Firefox extension for whitelist driven safe JavaScript execution - * - * Copyright (C) 2005-2023 Giorgio Maone - * - * SPDX-License-Identifier: GPL-3.0-or-later - * - * This program is free software: you can redistribute it and/or modify it under - * the terms of the GNU General Public License as published by the Free Software - * Foundation, either version 3 of the License, or (at your option) any later - * version. - * - * This program is distributed in the hope that it will be useful, but WITHOUT - * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS - * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License along with - * this program. If not, see . - */ - -'use strict' -var DocumentFreezer = (() => { - - const loaderAttributes = ["href", "src", "data"]; - const jsOrDataUrlRx = /^(?:data:(?:[^,;]*ml|unknown-content-type)|javascript:)/i; - - // List updated by build.sh from https://hg.mozilla.org/mozilla-central/raw-file/tip/xpcom/ds/StaticAtoms.py - // whenever html5_events/html5_events.pl retrieves something new. - const eventTypes = ['abort', 'mozaccesskeynotfound', 'activate', 'afterprint', 'afterscriptexecute', 'animationcancel', 'animationend', 'animationiteration', 'animationstart', 'audioprocess', 'auxclick', 'beforecopy', 'beforecut', 'beforeinput', 'beforepaste', 'beforeprint', 'beforescriptexecute', 'beforeunload', 'blocked', 'blur', 'bounce', 'boundschange', 'broadcast', 'bufferedamountlow', 'cached', 'cancel', 'change', 'chargingchange', 'chargingtimechange', 'checking', 'click', 'close', 'command', 'commandupdate', 'complete', 'compositionend', 'compositionstart', 'compositionupdate', 'connect', 'connectionavailable', 'contextmenu', 'contextlost', 'contextrestored', 'copy', 'cut', 'dblclick', 'dischargingtimechange', 'downloading', 'data', 'drag', 'dragdrop', 'dragend', 'dragenter', 'dragexit', 'dragleave', 'dragover', 'dragstart', 'drain', 'drop', 'error', 'finish', 'focus', 'focusin', 'focusout', 'fullscreenchange', 'fullscreenerror', 'get', 'hashchange', 'input', 'inputsourceschange', 'install', 'invalid', 'keydown', 'keypress', 'keyup', 'languagechange', 'levelchange', 'load', 'loading', 'loadingdone', 'loadingerror', 'popstate', 'merchantvalidation', 'message', 'messageerror', 'midimessage', 'mousedown', 'mouseenter', 'mouseleave', 'mouselongtap', 'mousemove', 'mouseout', 'mouseover', 'mouseup', 'mozfullscreenchange', 'mozfullscreenerror', 'mozpointerlockchange', 'mozpointerlockerror', 'mute', 'notificationclick', 'notificationclose', 'noupdate', 'obsolete', 'online', 'offline', 'open', 'orientationchange', 'overflow', 'pagehide', 'pageshow', 'paste', 'payerdetailchange', 'paymentmethodchange', 'pointerlockchange', 'pointerlockerror', 'popuphidden', 'popuphiding', 'popuppositioned', 'popupshowing', 'popupshown', 'processorerror', 'prioritychange', 'push', 'pushsubscriptionchange', 'readystatechange', 'rejectionhandled', 'remove', 'requestprogress', 'resourcetimingbufferfull', 'responseprogress', 'reset', 'resize', 'scroll', 'securitypolicyviolation', 'select', 'selectionchange', 'selectend', 'selectstart', 'set', 'shippingaddresschange', 'shippingoptionchange', 'show', 'slotchange', 'squeeze', 'squeezeend', 'squeezestart', 'statechange', 'storage', 'submit', 'success', 'systemstatusbarclick', 'typechange', 'terminate', 'text', 'toggle', 'tonechange', 'touchstart', 'touchend', 'touchmove', 'touchcancel', 'transitioncancel', 'transitionend', 'transitionrun', 'transitionstart', 'uncapturederror', 'underflow', 'unhandledrejection', 'unload', 'unmute', 'updatefound', 'updateready', 'upgradeneeded', 'versionchange', 'visibilitychange', 'voiceschanged', 'vrdisplayactivate', 'vrdisplayconnect', 'vrdisplaydeactivate', 'vrdisplaydisconnect', 'vrdisplaypresentchange', 'webkitanimationend', 'webkitanimationiteration', 'webkitanimationstart', 'webkittransitionend', 'wheel', 'zoom', 'begin', 'end', 'repeat', 'pointerdown', 'pointermove', 'pointerup', 'pointercancel', 'pointerover', 'pointerout', 'pointerenter', 'pointerleave', 'gotpointercapture', 'lostpointercapture', 'devicemotion', 'deviceorientation', 'deviceorientationabsolute', 'mozorientationchange', 'userproximity', 'devicelight', 'devicechange', 'mozvisualresize', 'mozvisualscroll', 'mozshowdropdown', 'scrollend', 'loadend', 'loadstart', 'progress', 'suspend', 'emptied', 'stalled', 'play', 'pause', 'loadedmetadata', 'loadeddata', 'waiting', 'playing', 'canplay', 'canplaythrough', 'seeking', 'seeked', 'timeout', 'timeupdate', 'ended', 'formdata', 'ratechange', 'durationchange', 'volumechange', 'addtrack', 'controllerchange', 'cuechange', 'enter', 'exit', 'encrypted', 'waitingforkey', 'keystatuseschange', 'removetrack', 'dataavailable', 'warning', 'start', 'stop', 'photo', 'gamepadbuttondown', 'gamepadbuttonup', 'gamepadaxismove', 'gamepadconnected', 'gamepaddisconnected', 'fetch', 'audiostart', 'audioend', 'soundstart', 'soundend', 'speechstart', 'speechend', 'result', 'nomatch', 'resume', 'mark', 'boundary', 'activated', 'deactivated', 'metadatachange', 'playbackstatechange', 'positionstatechange', 'supportedkeyschange', 'sourceopen', 'sourceended', 'sourceclose', 'updatestart', 'update', 'updateend', 'addsourcebuffer', 'removesourcebuffer', 'absolutedeviceorientation', 'deviceproximity', 'sourceclosed', 'mozkeydownonplugin', 'mozkeyuponplugin', 'appinstalled', 'activestatechanged', 'adapteradded', 'adapterremoved', 'alerting', 'antennaavailablechange', 'attributechanged', 'attributereadreq', 'attributewritereq', 'beforeevicted', 'busy', 'callschanged', 'cardstatechange', 'cfstatechange', 'characteristicchanged', 'clirmodechange', 'connected', 'connecting', 'connectionstatechanged', 'currentchannelchanged', 'currentsourcechanged', 'datachange', 'dataerror', 'deleted', 'deliveryerror', 'deliverysuccess', 'devicefound', 'devicepaired', 'deviceunpaired', 'dialing', 'disabled', 'disconnect', 'disconnected', 'disconnecting', 'displaypasskeyreq', 'draggesture', 'eitbroadcasted', 'emergencycbmodechange', 'enabled', 'enterpincodereq', 'evicted', 'failed', 'frequencychange', 'groupchange', 'headphoneschange', 'held', 'hfpstatuschanged', 'hidstatuschanged', 'holding', 'iccchange', 'iccdetected', 'iccinfochange', 'iccundetected', 'incoming', 'mapfolderlistingreq', 'mapgetmessagereq', 'mapmessageslistingreq', 'mapmessageupdatereq', 'mapsendmessagereq', 'mapsetmessagestatusreq', 'mousewheel', 'mozbrowserafterkeydown', 'mozbrowserafterkeyup', 'mozbrowserbeforekeydown', 'mozbrowserbeforekeyup', 'mozinterruptbegin', 'mozinterruptend', 'moznetworkdownload', 'moznetworkupload', 'moztimechange', 'newrdsgroup', 'obexpasswordreq', 'otastatuschange', 'overflowchanged', 'paint', 'pairingaborted', 'pairingconfirmationreq', 'pairingconsentreq', 'pendingchange', 'pichange', 'pschange', 'ptychange', 'pullphonebookreq', 'pullvcardentryreq', 'pullvcardlistingreq', 'radiostatechange', 'rdsdisabled', 'rdsenabled', 'readerror', 'readsuccess', 'ready', 'received', 'reloadpage', 'remoteheld', 'remoteresumed', 'requestmediaplaystatus', 'resuming', 'retrieving', 'rtchange', 'scanningstatechanged', 'scostatuschanged', 'sending', 'sent', 'speakerforcedchange', 'statuschanged', 'stkcommand', 'stksessionend', 'storageareachanged', 'ussdreceived', 'voicechange', 'websocket']; - eventTypes.push("DOMContentLoaded"); - let firedDOMContentLoaded; - function suppressEvents(e) { - if (e.type === "DOMContentLoaded" && e.isTrusted) { - firedDOMContentLoaded = true; - return; - } - e.stopPropagation(); - console.debug(`Suppressing ${e.type} on `, e.target); // DEV_ONLY - } - - function freezeAttributes() { - for (let element of document.querySelectorAll("*")) { - if (element._frozen) continue; - let fa = []; - let loaders = []; - for (let a of element.attributes) { - let name = a.localName.toLowerCase(); - if (loaderAttributes.includes(name)) { - if (jsOrDataUrlRx.test(a.value)) { - loaders.push(a); - } - } else if (name.startsWith("on")) { - console.debug("Removing", a, element.outerHTML); - fa.push(a.cloneNode()); - a.value = ""; - element[name] = null; - } - } - if (loaders.length) { - for (let a of loaders) { - fa.push(a.cloneNode()); - a.value = "javascript://frozen"; - } - if ("contentWindow" in element) { - element.replaceWith(element = element.cloneNode(true)); - } - } - if (fa.length) element._frozenAttributes = fa; - element._frozen = true; - } - } - - function unfreezeAttributes() { - for (let element of document.querySelectorAll("*")) { - if (!element._frozenAttributes) continue; - for (let a of element._frozenAttributes) { - element.setAttributeNS(a.namespaceURI, a.name, a.value); - } - if ("contentWindow" in element) { - element.replaceWith(element.cloneNode(true)); - } - } - } - - let domFreezer = new MutationObserver(records => { - console.debug("domFreezer on", document.documentElement.outerHTML); - freezeAttributes(); - }); - - let suppressedScripts = 0; - let scriptSuppressor = e => { - if (!e.isTrusted) return; - e.preventDefault(); - ++suppressedScripts; - console.debug(`Suppressed script #${suppressedScripts}`, e.target); - }; - - return { - freeze() { - if (document._frozen) return false; - console.debug("Freezing", document.URL); - document._frozen = true; - for (let et of eventTypes) document.addEventListener(et, suppressEvents, true); - try { - freezeAttributes(); - } catch(e) { - console.error(e); - } - domFreezer.observe(document, {childList: true, subtree: true}); - suppressedScripts = 0; - firedDOMContentLoaded = false; - addEventListener("beforescriptexecute", scriptSuppressor, true); - return true; - }, - unfreeze() { - if (!document._frozen) return false; - console.debug("Unfreezing", document.URL); - domFreezer.disconnect(); - try { - unfreezeAttributes(); - } catch(e) { - console.error(e); - } - removeEventListener("beforescriptexecute", scriptSuppressor, true); - for (let et of eventTypes) document.removeEventListener(et, suppressEvents, true); - document._frozen = false; - return true; - }, - get suppressedScripts() { return suppressedScripts; }, - get firedDOMContentLoaded() { return firedDOMContentLoaded; }, - }; -})() \ No newline at end of file