Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scripting.InjectionTarget.workers property to inject WorkerScope(s) #306

Open
hackademix opened this issue Oct 27, 2022 · 0 comments
Open

Comments

@hackademix
Copy link

Main world scripts should be able to modify JavaScript-accessible object (e.g. DOM prototypes or built-in functions) in a way that is transparent and cannot be subverted by page scripts., e.g. to modify or intercept the behavior of built-in objects for additional security, privacy and/or anti-fingerprinting reasons.

This requires them to be injected and running before site scripts in any scope, including WorkerScope(s) (otherwise these scope can be use to circumvent the main browsing context modifications).

I therefore propose to extend the scripting.InjectionTaget type with an optional workers property (boolean, default false) : if true, all the Worker and SharedWorker and ServiceWorker instances which are associated to the browsing contexts identified by this InjectionTarget object will be injected as well.

Parent issue: #103

@carlosjeurissen carlosjeurissen added the agenda Discuss in future meetings label Oct 31, 2022
@hackademix hackademix changed the title scripting.InjectionTarget.worker property to inject WorkerScope(s) scripting.InjectionTarget.workers property to inject WorkerScope(s) Nov 3, 2022
@dotproto dotproto removed the agenda Discuss in future meetings label Mar 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants