security-and-privacy/CanvasBlocker
security-and-privacy/CanvasBlocker
1
0
Fork 0
mirror of https://github.com/kkapsner/CanvasBlocker synced 2025-05-19 19:02:21 +02:00
Code Releases Activity

Protection for document.write and document.wirteln broke in Firefox 69

Browse Source 
Fixes #357
This commit is contained in:
kkapsner 2019-05-29 00:20:27 +02:00
parent b7d888dee1
commit 308592e785
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/iframeProtection.js
View File

@ -142,6 +142,9 @@
const documentWriteDescriptor = Object.getOwnPropertyDescriptor( const documentWriteDescriptor = Object.getOwnPropertyDescriptor(
wrappedWindow.HTMLDocument.prototype, wrappedWindow.HTMLDocument.prototype,
"write" "write"
) || Object.getOwnPropertyDescriptor(
wrappedWindow.Document.prototype,
"write"
); );
const documentWrite = documentWriteDescriptor.value; const documentWrite = documentWriteDescriptor.value;
documentWriteDescriptor.value = exportFunction(function write(str){ documentWriteDescriptor.value = exportFunction(function write(str){
@ -161,6 +164,9 @@
const documentWritelnDescriptor = Object.getOwnPropertyDescriptor( const documentWritelnDescriptor = Object.getOwnPropertyDescriptor(
wrappedWindow.HTMLDocument.prototype, wrappedWindow.HTMLDocument.prototype,
"writeln" "writeln"
) || Object.getOwnPropertyDescriptor(
wrappedWindow.Document.prototype,
"writeln"
); );
const documentWriteln = documentWritelnDescriptor.value; const documentWriteln = documentWritelnDescriptor.value;
documentWritelnDescriptor.value = exportFunction(function writeln(str){ documentWritelnDescriptor.value = exportFunction(function writeln(str){

1
releaseNotes.txt
View File

@ -7,6 +7,7 @@ Version 0.5.10:
fixes: fixes:
- setter for innerHTML broke pages - setter for innerHTML broke pages
- protection for document.write and document.wirteln broke in Firefox 69
known issues: known issues:
- if a data URL is blocked the page action button does not appear - if a data URL is blocked the page action button does not appear