We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 617adab commit aed218dCopy full SHA for aed218d
1 file changed
CCW-Code-Injection-Risk-Warning.user.js
@@ -2,7 +2,7 @@
2
// @name CCW-Code-Injection-Risk-Warning
3
// @description CCW代码注入风险警告,让你的账号更安全。
4
// @author bddjr
5
-// @version 20260523-1242
+// @version 20260606-2307
6
// @match https://www.ccw.site/*
7
// @match https://learn.ccw.site/*
8
// @match https://m.ccw.site/*
@@ -21,7 +21,10 @@ if (location.hostname == 'm.ccw.site') {
21
// 基于新标签页访问 svg 网址的代码注入攻击
22
// 脚本无法防御该攻击,因为攻击者的代码先执行。
23
// 参考 https://github.com/bddjr/CCW-Code-Injection-Risk-Warning/issues/3
24
- if (document.contentType == 'image/svg+xml') {
+ if (
25
+ location.pathname != '/user_projects_assets/e8095c8b2efbc421b974bf9ec3dd5844.svg' &&
26
+ document.contentType == 'image/svg+xml'
27
+ ) {
28
try {
29
window.stop()
30
} catch (e) { }
0 commit comments