google chrome - JavaScript - Make Proxy undetectable -


as understand, es spec says proxy (global constructor proxifying objects, functions , classes) not detectable. means if proxify function, nobody uses proxified function can detect used proxy. however, apparently misunderstood it, becuase proxifying functions detectable.

for example, new proxy(a=>a,{apply:a=>a})+'' throws error. says

uncaught typeerror: function.prototype.tostring requires 'this' function

however, typeof new proxy(a=>a,{apply:a=>a}) indeed "function", somehow fails stringify proxy. so, obviously, here situation when proxified function doesn't behave non-proxified 1 should. function.prototype.tostring able distinguish proxified , non-proxified function.

my goal proxify function such simple become undetectable. first idea literally proxify proxy so:

proxy.tostring = (a => () => a)(proxy + ''); proxy = new proxy(proxy, {   construct: (f, args) => {     if(typeof args[0] == 'function'){       var = args[0] + '';       args[0].tostring = () => a;     }     return new f(...args);   } });

but, sadly, detectable. if call function.prototype.tostring binded proxified function, error occur , can therefore detect function proxy. so, tried proxify function , function.prototype , function.prototype.tostring, realized cannot proxify function because if override global property function, may access using (a=>a).constructor.

so, why asking here because ran out of ideas. how proxify function make completelly undetectable? in es spec explicitly says "proxy undetectable", side question, why proxifying function detectable?

edit

the reason i'm trying achieve because i'm working on enhanced advertisement blocking extension chrome. dealing agressive website exploits huge amount of javascript tricks detect if i'm viewing ads or not. so, basically, deleted advertisement, , script checks if there specific element, if not, cannot visit website. so, tried proxify document.getelementbyid, check if proxified , if is, cannot visit website, must make undetectable.

i don't think you're trying possible proxies. spec function.prototype.tostring defines typeerror-throwing behavior. since there's no way give proxy [[ecmascriptcode]] "internal slot", it'll throw when called on proxy.

i see no mention of "proxy undetectable" statement in spec; string 'detectable' doesn't show anywhere in document. did find claim?

maybe can overwrite functions (and .tostring properties) achieve goal? roughly:

var original_getelementbyid = document.getelementbyid; document.getelementbyid = function(id) {   if (...) {     return original_getelementbyid(id);   } else {     // special handling here   } }

Comments

Post a Comment

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -

here tables: create table customer ( cid int primary key, name varchar(32) ) create table ord ( oid int primary key, cid int foreign key references customer, address varchar(20) ) here's linq-to-sql statement: var aaa = c in db.customer select new { c, o = c.ord.tolist() }; and here's inexplicable query generated linq-to-sql: select [t0].[cid] [cid], [t0].[name] [name], [t1].[oid] [oid], [t1].[cid] [cid2], [t1].[address] [address], (select count(*) [dbo].[ord] [t2] [t2].[cid] = [t0].[cid]) [value] [dbo].[customer] [t0] left outer join [dbo].[ord] [t1] on [t1].[cid] = [t0].[cid] order [t0].[cid], [t1].[oid] i want understand how rid of count(*) part. it's entirely uncalled for! linq needs count(*) in order determine number of entries returned o = c.ord.tolist() .
Read more