+ /**

+ * GNU LibreJS - A browser add-on to block nonfree nontrivial JavaScript.

+ *

+ * Copyright (C) 2018 Giorgio Maone <giorgio@maone.net>

+ *

+ * This file is part of GNU LibreJS.

+ *

+ * GNU LibreJS is free software: you can redistribute it and/or modify

+ * it under the terms of the GNU General Public License as published by

+ * the Free Software Foundation, either version 3 of the License, or

+ * (at your option) any later version.

+ *

+ * GNU LibreJS is distributed in the hope that it will be useful,

+ * but WITHOUT ANY WARRANTY; without even the implied warranty of

+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

+ * GNU General Public License for more details.

+ *

+ * You should have received a copy of the GNU General Public License

+ * along with GNU LibreJS.  If not, see <http://www.gnu.org/licenses/>.

+ */

+ 

+ /**

+   Singleton to handle external licenses, e.g. WebLabels

+ */

+ 

+ "use strict";

+ 

+ let licensesByURL = new Map();

+ {

+   let {licenses} = require("../license_definitions");

+   for (let l of Object.values(licenses).filter(l => l.canonicalUrl)) {

+     for (let url of l.canonicalUrl) {

+       licensesByURL.set(url, l);

+     }

+   }

+ }

+ 

+ var ExternalLicenses = {

+   async check(script) {

+     let {url, tabId, frameId} = script;

+     let scriptInfo = await browser.tabs.sendMessage(tabId, {

+       action: "checkLicensedScript",

+       url

+     }, {frameId});

+     if (!(scriptInfo && scriptInfo.licenseURLs.length)) {

+       return null;

+     }

+     scriptInfo.licenses = new Set();

+     scriptInfo.allFree = true;

+     scriptInfo.toString = function() {

+       let licenseIds = [...this.licenses].map(l => l.identifier).sort().join(", ");

+       return this.allFree ? `Free license${licenseIds.length > 1 ? "s" : ""} (${licenseIds})` : `Mixed free (${licenseIds}) and unknown licenses`;

+     }

+     

+     for (let u of scriptInfo.licenseURLs) {

+       if (licensesByURL.has(u)) {

+         scriptInfo.licenses.add(licensesByURL.get(u));

+       } else {

+         scriptInfo.allFree = false;

+         break;

+       }

+     }

+     return scriptInfo;

+   },

+   

+   /**

+   * moves / creates external license references before any script in the page

+   * if needed, to have them ready when the first script load is triggered

+   * Returns true if the document has been actually modified, false otherwise.

+   */

+   optimizeDocument(document) {

+     let link = document.querySelector(`link[rel="jslicense"], link[data-jslicense="1"], a[rel="jslicense"], a[data-jslicense="1"]`);

+     if (link) {

+       let move = () => !!document.head.insertBefore(link, document.head.firstChild);

+       if (link.parentNode === document.head) {

+         for (let node; node = link.previousElementSibling;) {

+           if (node.tagName.toUpperCase() === "SCRIPT") {

+             return move();

+           }

+         }

+       } else { // the reference is only in the body

+         if (link.tagName.toUpperCase() === "A") {

+           let newLink = document.createElement("link");

+           newLink.rel = "jslicense";

+           newLink.setAttribute("href", link.getAttribute("href"));

+           link = newLink;

+         }

+         return move();

+       }

+     }

+     return false;

+   }

+ };

+ 

+ 

+ module.exports = { ExternalLicenses };

+ cp -r ./content ./build_temp

+ /**

+ * GNU LibreJS - A browser add-on to block nonfree nontrivial JavaScript.

+ *

+ * Copyright (C) 2018 Giorgio Maone <giorgio@maone.net>

+ *

+ * This file is part of GNU LibreJS.

+ *

+ * GNU LibreJS is free software: you can redistribute it and/or modify

+ * it under the terms of the GNU General Public License as published by

+ * the Free Software Foundation, either version 3 of the License, or

+ * (at your option) any later version.

+ *

+ * GNU LibreJS is distributed in the hope that it will be useful,

+ * but WITHOUT ANY WARRANTY; without even the implied warranty of

+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

+ * GNU General Public License for more details.

+ *

+ * You should have received a copy of the GNU General Public License

+ * along with GNU LibreJS.  If not, see <http://www.gnu.org/licenses/>.

+ */

+ "use strict";

+ {

+   let licensedScripts = null;

+     

+   let fetchWebLabels = async (map = new Map()) => {

+     // see https://www.gnu.org/software/librejs/free-your-javascript.html#step3

+     

+     let link = document.querySelector(`link[rel="jslicense"], link[data-jslicense="1"], a[rel="jslicense"], a[data-jslicense="1"]`);

+     if (link) try {

+       let baseURL = link.href;

+       let response = await fetch(baseURL);

+       if (!response.ok) throw `${response.status} ${response.statusText}`;

+       let doc = new DOMParser().parseFromString(

+           await response.text(),

+           "text/html"

+       );

+       let base = doc.querySelector("base");

+       if (base) {

+         base.href = base.href;

+       } else {

+         doc.head.appendChild(doc.createElement("base")).href = baseURL;

+       }

+       let firstURL = parent => parent.querySelector("a").href;

+       let allURLs = parent => Array.map(parent.querySelectorAll("a"), a => a.href);

+       for (let row of doc.querySelectorAll("table#jslicense-labels1 tr")) {

+         let cols = row.querySelectorAll("td");

+         let scriptURL = firstURL(cols[0]);

+         let licenseURLs = allURLs(cols[1]);

+         let sourceURLs = cols[2] ? allURLs(cols[2]) : [];

+         map.set(scriptURL, {scriptURL, licenseURLs, sourceURLs});

+       }

+     } catch (e) {

+       console.error("Error fetching Web Labels at %o", link, e);

+     }

+     return map;

+   }

+   

+   let fetchLicenseInfo = async () => {

+     let map = new Map();

+     

+     // in the fetchXxx methods we add to a map whatever license(s)

+     // URLs and source code references we can find in various formats 

+     // (WebLabels is currently the only implementation), keyed by script URLs.

+     await Promise.all([

+     fetchWebLabels(map),

+     // fetchXmlSpdx(),

+     // fetchTxtSpdx(),

+     // ...

+     ]);

+     return map;

+   }

+   

+   let handlers = {

+     async checkLicensedScript(m) {

+       let {url} = m;

+       if (!licensedScripts) licensedScripts = await fetchLicenseInfo();

+       return licensedScripts.get(url);

+     }

+   }

+ 

+   browser.runtime.onMessage.addListener(async m => {

+     if (m.action in handlers) {

+       debug("Received message", m);

+       return await handlers[m.action](m);

+     }

+   });

+ }

+ var {ExternalLicenses} = require("./bg/ExternalLicenses");

+ async function createReport(initializer = null) {

+ 		if (!template.url && initializer.tabId) {

+ 			template.url = (await browser.tabs.get(initializer.tabId)).url;

+ 		}

+ 	

+ 	activityReports[tab.id] = await createReport(data);

+ async function updateReport(tabId, oldReport, updateUI = false){

+ 	let newReport = await createReport({url, tabId});

+ async function addReportEntry(tabId, scriptHashOrUrl, action) {

+ 			await createReport({tabId});

+ 	updateBadge(tabId, report);

+ 					let report = activityReports[tab.id] = await createReport({"url": tab.url, tabId: tab.id});

+ 	let report = activityReports[tabId] || (activityReports[tabId] = await createReport({tabId}));

+ 	let {url, tabId, frameId} = request;

+ 	if (!whitelisted) {

+ 		let scriptInfo = await ExternalLicenses.check({url, tabId, frameId});

+ 		if (scriptInfo) {

+ 			let verdict;

+ 			let msg = scriptInfo.toString();

+ 			if (scriptInfo.allFree) {

+ 				verdict = "accepted";

+ 			} else {

+ 				verdict = "blocked";

+ 				text = `/* ${msg} */`;

+ 			}

+ 			addReportEntry(tabId, url, {url, [verdict]: [url, msg]});

+ 			return text;

+ 		}

+ 	}

+ 		

+ 		// moves external licenses reference, if any, before any <SCRIPT> element

+ 		ExternalLicenses.optimizeDocument(html_doc); 

+ 		

+ 		activityReports[tabId] = await createReport({url, tabId});

+ 	return await edit_html(text, ListStore.urlItem(url), tabId, whitelisted);

+   },

+   "content_scripts": [

+     {

+       "run_at": "document_start",

+       "matches": ["<all_urls>"],

+       "match_about_blank": true,

+       "all_frames": true,

+       "js": [

+         "content/externalLicenseChecker.js"

+       ]

+     }

+   ]