Haketilo

/**

 * part of Hachette

 * Filtering request headers to remove hachette cookies that might have slipped

 * through.

 *

 * Copyright (C) 2021 Wojtek Kosior

 * Redistribution terms are gathered in the `copyright' file.

 */

/*

 * IMPORTS_START

 * IMPORT extract_signed

 * IMPORTS_END

 */

function is_valid_hachette_cookie(cookie)

{

    const match = /^hachette-(\w*)=(.*)$/.exec(cookie);

    if (!match)

	return false;

    return !extract_signed(match.slice(1, 3)).fail;

}

function remove_hachette_cookies(header)

{

    if (header.name !== "Cookie")

	return header;

    const cookies = header.value.split("; ");

    const value = cookies.filter(c => !is_valid_hachette_cookie(c)).join("; ");

    return value ? {name: "Cookie", value} : null;

}

function filter_cookie_headers(headers)

{

    return headers.map(remove_hachette_cookies).filter(h => h);

}

/*

 * EXPORTS_START

 * EXPORT filter_cookie_headers

 * EXPORTS_END

 */

 * IMPORT filter_cookie_headers

function on_before_send_headers(details)

{

    let headers = details.requestHeaders;

    headers = filter_cookie_headers(headers);

    return {requestHeaders: headers};

}

const all_types = [

    "main_frame", "sub_frame", "stylesheet", "script", "image", "font",

    "object", "xmlhttprequest", "ping", "csp_report", "media", "websocket",

    "other", "main_frame", "sub_frame"

];

    const extra_opts = ["blocking"];

	extra_opts.concat("responseHeaders")

    );

    browser.webRequest.onBeforeSendHeaders.addListener(

	on_before_send_headers,

	{urls: ["<all_urls>"], types: all_types},

	extra_opts.concat("requestHeaders")