librejs.git, branch masterMirror of LibreJS at https://git.savannah.gnu.org/cgit/librejs.git
https://g.ypei.me/librejs.git/atom?h=master2023-09-10T02:02:37+00:00Fixing bypassing Function("...").2023-09-10T02:02:37+00:00Yuchen Peiid@ypei.org2023-09-10T02:02:37+00:00urn:sha1:e942bb98325d0a4fdb79cdc75782f065c0289d70
It is similar to eval(). See,
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Function/Function
As a prior art, another extension did the blank ban of Function():
https://addons.mozilla.org/en-US/firefox/addon/noeval-disable-eval/
So let's ban it as well.
Bug reported at
https://lists.gnu.org/archive/html/bug-librejs/2023-09/msg00000.html
changing license definition to json2022-10-13T06:21:56+00:00Yuchen Peihi@ypei.me2022-10-13T06:15:23+00:00urn:sha1:46ecac9ab60b32ccc7b40a668938c84117de1b4d
and reuse it in the manual
fixing a few problems with @license / @license-end regexes2022-10-13T04:48:44+00:00Yuchen Peihi@ypei.me2022-10-13T04:48:44+00:00urn:sha1:dbfe1fb86719a18364f24bff57781aeb3262cb90
- trailing whitespace, including newlines are consumed by the opneing
regex (added a test case)
- added a test case for /* @license ... */ ... /* @license-end */
let -> const in tests2022-10-13T03:27:08+00:00Yuchen Peihi@ypei.me2022-10-13T03:20:07+00:00urn:sha1:388b1b9218a5f8971b6c1cdeb9cfa67940e1d33e`// @license` should be at the beginning of a line (mod whitespace)2022-10-13T03:14:29+00:00Yuchen Peihi@ypei.me2022-10-13T02:55:41+00:00urn:sha1:fcd816e95e73a78fd24a7e6baef709d7657d265f
Otherwise the following will be processed for @license / @license-end
method:
// foo.js
// // @license magnet:?xt=urn:btih:1f739d935676111cfff4b4693e3816e664797050&dn=gpl-3.0.txt GPL-3.0
// document.getElementById('bar');
// // @license-end
function foo(x, y) {
console.log(x + y);
}
$ node ./utitlities/check-script foo.js
[
true,
'// // @license magnet:?xt=urn:btih:1f739d935676111cfff4b4693e3816e664797050&dn=gpl-3.0.txt GPL-3.0\n' +
"// document.getElementById('bar');\n" +
'// // @license-end\n' +
'function foo(x, y) {\n' +
' console.log(x + y);\n' +
'}\n',
'\n' +
'Recognized license: "GNU General Public License (GPL) version 3".\n' +
'Script appears to be trivial.'
]
minor comment fix2022-10-12T07:37:26+00:00Yuchen Peihi@ypei.me2022-10-12T07:37:26+00:00urn:sha1:88fa677b51b6b1eb814866ea08129a6b7cda9ddbrefactoring: clean up main_background2022-09-27T03:22:20+00:00Yuchen Peihi@ypei.me2022-09-27T03:22:20+00:00urn:sha1:9bdf30ef02f3f67a7c45e7ac64db3c1ef15340d4refactoring ResponseHandler2022-09-27T02:49:27+00:00Yuchen Peihi@ypei.me2022-09-27T02:49:27+00:00urn:sha1:e2230c23e4aa7a74ea34825856acf7edd8a61e04Refactoring response handler to improve readability2022-09-27T02:43:24+00:00Yuchen Peihi@ypei.me2022-09-27T02:40:23+00:00urn:sha1:c26ad83e2e0c29a6e18a36fcff86554815ea6beaA better fix for bugs #581312022-09-27T01:59:00+00:00Yuchen Peihi@ypei.me2022-09-27T01:58:12+00:00urn:sha1:ad1a6ea51386feccfb1da0bc0fc4f5ace101b71b