AdguardTeam / Scriptlets

AdGuard scriptlets library
GNU General Public License v3.0
152 stars 30 forks source link

Fix 'click2load.html' — redirect does not work correctly in the extension #428

Open AdamWr opened 6 months ago

AdamWr commented 6 months ago

It seems that click2load.html redirect doesn't work correctly in the extension. Related to - https://github.com/AdguardTeam/AdguardFilters/issues/179334

Steps to reproduce:

  1. Add this rule:
    embed$subdocument,redirect=click2load.html,important
  2. Go to - https://example.org/
  3. In browser console run:
    (() => {
    const video = '<iframe width="560" height="315" src="https://www.youtube.com/embed/Fy2rtb95QhY" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>';
    const createDiv = document.createElement("div");
    document.body.appendChild(createDiv);
    createDiv.innerHTML = video;
    })();
  4. Click on the button to load player

It looks like that script in click2load.html is blocked by Content Security Policy.

Screenshots ![image](https://github.com/AdguardTeam/Scriptlets/assets/29142494/b9d303f8-c0e1-4c75-98f8-e5867d7aba18) ![image](https://github.com/AdguardTeam/Scriptlets/assets/29142494/923c1ecb-9900-42bf-8c5b-598ef67a9f98)

This issue doesn't occur in AdGuard for Windows, so I'm not sure if it's extension or scriptlets issue.

ameshkov commented 6 months ago

Most likely this is an extension bug