mjsalerno / StopLeak

Stops third party requests that accidentally or intentionally leak Personally Identifiable Information (PII).
Other
3 stars 0 forks source link

Hooking Javascript Websockets #4

Open pacampbell opened 8 years ago

pacampbell commented 8 years ago

Seems like it may be possible to hook a websocket, though some Javascript wizardry.

A post on stackoverflow talks about the possibility of doing so, via replacing the constructor by having the extension inject a content script. Our new implementation needs to then conform to the websocket interface.

Since websockets are plaintext this should be another easy place to examine traffic and search for PII to third party referrers.