4as / ChatGPT-DeMod

Tampermonkey/Greasemonkey script that hides the moderation results when communicating with ChatGPT.
GNU General Public License v2.0
382 stars 54 forks source link

Flagged and blocked on Kiwi Browser #55

Open maromalo opened 2 weeks ago

maromalo commented 2 weeks ago

Using 4.6 on android, the DeMod tab shows up as normal but messages are still flagged or hidden.

On Brave for Windows it works as intended so I'm assuming it's isolated to Kiwi Browser.

One error on console, although it shows up on Brave as well:

userscript.html?name=ChatGPT-DeMod.user.js&id=1f76e0e5-0147-43aa-8d19-35fd63abbfb2:721 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src-elem 'self' 'nonce-X' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com [...] wss://*.chatgpt.com/". Either the 'unsafe-inline' keyword, a hash ('sha256-IEu8xlZ9UcuqsJDkEtdNA6fzRuwrJjyZH9AmJxWJcxk='), or a nonce ('nonce-...') is required to enable inline execution.

Logs "DeMod interceptor is ready" on console but nothing else when messages are received and/or blocked.

4as commented 1 week ago

Browsers are moving to Manifest V3 and one of the things it changes is the improved security, which means better script injection prevention. This is why Safari is no longer supported, as with the latest version the Userscripts extension no longer works on ChatGPT. I suspect this is what might be happening here as well, especially since the error you included is the same exact error that shows up on Safari.