PerformanceMark leak in Chromium-based browsers

polcak / jsrestrictor

JavaScript Restrictor web extension

GNU General Public License v3.0

253 stars 30 forks source link

Closed polcak closed 3 years ago

polcak commented 4 years ago

m = performance.mark('a');
m.startTime;

While m is undefined in Firefox, Chromium-based browsers return the mark. 0.3.1 allows reading the timestamp without wrapping.

[x] Revert fc25314e3c68c052794739b82220f95c0c1ee61f, however, the code does not belong to HRT but to PT2.
[x] Decide if other PT2 wrapping make sense
[ ] Test the new implementation against #25
[x] This probably deserves a new bugfix version

polcak commented 4 years ago

a8d2f5e (and cherry-picked 1d2662b) is inspired by fc25314. performance.getEntries*() wrapping removed. 0.3.2 contains the bugfix.

Current code does not work on pages with CSP in Firefox and suffers from #25 but it should work a little bit better.