732032 - Making script text available to beforescriptexecute hook for external scripts

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[Loic Duros]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Build ID: 20120215223356

Steps to reproduce:

I am trying to intercept/analyze JavaScript code before it is executed by the browser.

So far I have used tracing listeners to intercept certain mimetypes (text/html, */javascript, ...) and after analyzing them, remove/block them in the DOM before giving the serialized DOM back to the original listener. This is not sufficient, however, for scripts that might have a different mime-type. Getting access to the script text for external scripts would allow the add-on to analyze the code at "beforescriptexecute" and use preventDefault(); if it needs to be blocked.

More info on the add-on: http://lduros.net/librejs/

Comment 1

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

We can only do this for <script> elements marked with the crossorigin attribute since otherwise you could read arbitrary content cross site.

But exposing it in <script crossorigin> sounds like a good idea to me. We could even allow event handlers to modify the code before it executes.

Comment 2

[Stefan Weiss [:sir_none]]

Hello,

I just found your old Bug about JS analyze.
I think that all the things you want are already included in FF 31 Version?
can you confirm this? or if not, please give us detailed information, what you are missing...

Comment 3

[Stefan Weiss [:sir_none]]

Closed -> no response from reporter on NEEDINFO

please feel free to reopen, if you have new information or new steps to reproduce.
thank you for opening this bug report