web: PluginArray, MimeType and MimeTypeArray prototype spoofing #18229
+141
−4
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
evilpie
force-pushed
the
plugins-array
branch
3 times, most recently
from
73bb179
to
b92b459
Compare
evilpie
changed the title
evilpie
added
A-web
|
Do you think we can add a test with that script on it, like how we check that we fool swfobject? |
evilpie
force-pushed
the
plugins-array
branch
from
ee12922
to
7423537
Compare
evilpie
force-pushed
the
plugins-array
branch
2 times, most recently
from
0038ba4
to
60c78a0
Compare
Dinnerbone
approved these changes
Oct 18, 2024
torokati44
force-pushed
the
plugins-array
branch
from
60c78a0
to
6be3335
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is enough to fool https://fingerprintjs.github.io/BotD/main/, but doesn't require a huge refactoring.
The only annoying part is faking
MimeType, which is not a constructable type in the DOM, so we have to create a new wrapper for it.This is a replacement for #18157.