1 |
cd5272ac
|
Wojtek Kosior
|
/**
|
2 |
2bd35bc4
|
Wojtek Kosior
|
* This file is part of Haketilo.
|
3 |
|
|
*
|
4 |
|
|
* Function: Miscellaneous operations refactored to a separate file.
|
5 |
cd5272ac
|
Wojtek Kosior
|
*
|
6 |
|
|
* Copyright (C) 2021 Wojtek Kosior
|
7 |
dcfc78b0
|
jahoti
|
* Copyright (C) 2021 jahoti
|
8 |
263d03d5
|
jahoti
|
*
|
9 |
|
|
* This program is free software: you can redistribute it and/or modify
|
10 |
|
|
* it under the terms of the GNU General Public License as published by
|
11 |
|
|
* the Free Software Foundation, either version 3 of the License, or
|
12 |
|
|
* (at your option) any later version.
|
13 |
|
|
*
|
14 |
|
|
* This program is distributed in the hope that it will be useful,
|
15 |
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
16 |
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
17 |
|
|
* GNU General Public License for more details.
|
18 |
|
|
*
|
19 |
|
|
* As additional permission under GNU GPL version 3 section 7, you
|
20 |
|
|
* may distribute forms of that code without the copy of the GNU
|
21 |
|
|
* GPL normally required by section 4, provided you include this
|
22 |
|
|
* license notice and, in case of non-source distribution, a URL
|
23 |
|
|
* through which recipients can access the Corresponding Source.
|
24 |
|
|
* If you modify file(s) with this exception, you may extend this
|
25 |
|
|
* exception to your version of the file(s), but you are not
|
26 |
|
|
* obligated to do so. If you do not wish to do so, delete this
|
27 |
|
|
* exception statement from your version.
|
28 |
|
|
*
|
29 |
|
|
* As a special exception to the GPL, any HTML file which merely
|
30 |
|
|
* makes function calls to this code, and for that purpose
|
31 |
|
|
* includes it by reference shall be deemed a separate work for
|
32 |
|
|
* copyright law purposes. If you modify this code, you may extend
|
33 |
|
|
* this exception to your version of the code, but you are not
|
34 |
|
|
* obligated to do so. If you do not wish to do so, delete this
|
35 |
|
|
* exception statement from your version.
|
36 |
|
|
*
|
37 |
|
|
* You should have received a copy of the GNU General Public License
|
38 |
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
39 |
|
|
*
|
40 |
|
|
* I, Wojtek Kosior, thereby promise not to sue for violation of this file's
|
41 |
372d24ea
|
Wojtek Kosior
|
* license. Although I request that you do not make use of this code in a
|
42 |
263d03d5
|
jahoti
|
* proprietary program, I am not going to enforce this in court.
|
43 |
cd5272ac
|
Wojtek Kosior
|
*/
|
44 |
|
|
|
45 |
7218849a
|
Wojtek Kosior
|
/* uint8_to_hex is a separate function used in cryptographic functions. */
|
46 |
|
|
const uint8_to_hex =
|
47 |
|
|
array => [...array].map(b => ("0" + b.toString(16)).slice(-2)).join("");
|
48 |
|
|
|
49 |
cd5272ac
|
Wojtek Kosior
|
/*
|
50 |
7218849a
|
Wojtek Kosior
|
* Asynchronously compute hex string representation of a sha256 digest of a
|
51 |
|
|
* UTF-8 string.
|
52 |
cd5272ac
|
Wojtek Kosior
|
*/
|
53 |
7218849a
|
Wojtek Kosior
|
async function sha256_async(string) {
|
54 |
|
|
const input_ab = new TextEncoder("utf-8").encode(string);
|
55 |
|
|
const digest_ab = await crypto.subtle.digest("SHA-256", input_ab);
|
56 |
|
|
return uint8_to_hex(new Uint8Array(digest_ab));
|
57 |
dcfc78b0
|
jahoti
|
}
|
58 |
7218849a
|
Wojtek Kosior
|
#EXPORT sha256_async
|
59 |
dcfc78b0
|
jahoti
|
|
60 |
7218849a
|
Wojtek Kosior
|
/*
|
61 |
|
|
* Generate a unique value that can be computed synchronously and is impossible
|
62 |
|
|
* to guess for a malicious website.
|
63 |
|
|
*/
|
64 |
e2d26bad
|
Wojtek Kosior
|
function gen_nonce(length=16)
|
65 |
dcfc78b0
|
jahoti
|
{
|
66 |
7218849a
|
Wojtek Kosior
|
const random_data = new Uint8Array(length);
|
67 |
|
|
crypto.getRandomValues(random_data);
|
68 |
|
|
return uint8_to_hex(random_data);
|
69 |
dcfc78b0
|
jahoti
|
}
|
70 |
b590eaa2
|
Wojtek Kosior
|
#EXPORT gen_nonce
|
71 |
dcfc78b0
|
jahoti
|
|
72 |
d09b7ee1
|
Wojtek Kosior
|
/* Check if some HTTP header might define CSP rules. */
|
73 |
44e89d8e
|
Wojtek Kosior
|
const csp_header_regex =
|
74 |
|
|
/^\s*(content-security-policy|x-webkit-csp|x-content-security-policy)/i;
|
75 |
b590eaa2
|
Wojtek Kosior
|
#EXPORT csp_header_regex
|
76 |
d09b7ee1
|
Wojtek Kosior
|
|
77 |
b7e2870f
|
Wojtek Kosior
|
/*
|
78 |
|
|
* Print item together with type, e.g.
|
79 |
|
|
* nice_name("s", "hello") → "hello (script)"
|
80 |
|
|
*/
|
81 |
b590eaa2
|
Wojtek Kosior
|
#EXPORT (prefix, name) => `${name} (${TYPE_NAME[prefix]})` AS nice_name
|
82 |
b7e2870f
|
Wojtek Kosior
|
|
83 |
53837634
|
Wojtek Kosior
|
/*
|
84 |
|
|
* Check if url corresponds to a browser's special page (or a directory index in
|
85 |
|
|
* case of `file://' protocol).
|
86 |
|
|
*/
|
87 |
9d825eaa
|
Wojtek Kosior
|
#IF MOZILLA
|
88 |
|
|
const priv_reg = /^moz-extension:\/\/|^about:|^file:\/\/[^?#]*\/([?#]|$)/;
|
89 |
|
|
#ELIF CHROMIUM
|
90 |
|
|
const priv_reg = /^chrome(-extension)?:\/\/|^about:|^file:\/\/[^?#]*\/([?#]|$)/;
|
91 |
|
|
#ENDIF
|
92 |
|
|
#EXPORT url => priv_reg.test(url) AS is_privileged_url
|