Re: New website - back to the old unicorn!

[TEC]

Hi Stefan,

This seems very suspicious for one reason. I cannot see "Canvas"
anywhere in the entire codebase of the website, or any loaded 
resources.
So I have no idea where on earth the JS you're finding has come 
from -
I'm guessing it's improperly injected by a extension. FWIW I also 
run
Decentraleyes in Firefox and fail to see your issue.

--
Timothy

Stefan Nobis <stefan-ml@snobis.de> writes:

> Hi.
>
> Thanks for your great work and the wonderful new page!
>
> A minor detail: I use the plugin "Decentraleyes" and with this
> activated there is quite a bit JavaScript garbage at the end of 
> the
> page (below the "Created by" footer). The part below the footer 
> is
> this:
>
> #+begin_src js
> { const iframes = 
> window.top.document.querySelectorAll("iframe[sandbox]"); for 
> (var i = 0; i < iframes.length; i++) { if 
> (iframes[i].contentWindow) { if 
> (iframes[i].contentWindow.CanvasRenderingContext2D) { 
> iframes[i].contentWindow.CanvasRenderingContext2D.prototype.getImageData 
> = CanvasRenderingContext2D.prototype.getImageData; } if 
> (iframes[i].contentWindow.HTMLCanvasElement) { 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toBlob = 
> HTMLCanvasElement.prototype.toBlob; 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toDataURL = 
> HTMLCanvasElement.prototype.toDataURL; } } } }{ const iframes = 
> window.top.document.querySelectorAll("iframe[sandbox]"); for 
> (var i = 0; i < iframes.length; i++) { if 
> (iframes[i].contentWindow) { if 
> (iframes[i].contentWindow.CanvasRenderingContext2D) { 
> iframes[i].contentWindow.CanvasRenderingContext2D.prototype.getImageData 
> = CanvasRenderingContext2D.prototype.getImageData; } if 
> (iframes[i].contentWindow.HTMLCanvasElement) { 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toBlob = 
> HTMLCanvasElement.prototype.toBlob; 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toDataURL = 
> HTMLCanvasElement.prototype.toDataURL; } } } }{ const iframes = 
> window.top.document.querySelectorAll("iframe[sandbox]"); for 
> (var i = 0; i < iframes.length; i++) { if 
> (iframes[i].contentWindow) { if 
> (iframes[i].contentWindow.CanvasRenderingContext2D) { 
> iframes[i].contentWindow.CanvasRenderingContext2D.prototype.getImageData 
> = CanvasRenderingContext2D.prototype.getImageData; } if 
> (iframes[i].contentWindow.HTMLCanvasElement) { 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toBlob = 
> HTMLCanvasElement.prototype.toBlob; 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toDataURL = 
> HTMLCanvasElement.prototype.toDataURL; } } } }{ const iframes = 
> window.top.document.querySelectorAll("iframe[sandbox]"); for 
> (var i = 0; i < iframes.length; i++) { if 
> (iframes[i].contentWindow) { if 
> (iframes[i].contentWindow.CanvasRenderingContext2D) { 
> iframes[i].contentWindow.CanvasRenderingContext2D.prototype.getImageData 
> = CanvasRenderingContext2D.prototype.getImageData; } if 
> (iframes[i].contentWindow.HTMLCanvasElement) { 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toBlob = 
> HTMLCanvasElement.prototype.toBlob; 
> iframes[i].contentWindow.HTMLCanvasElement.prototype.toDataURL = 
> HTMLCanvasElement.prototype.toDataURL; } } } }
> #+end_src
>
> When I deactivate Decentraleyes and reload the page, the above 
> code
> snippet vanishes. This glitch is present both on the official 
> page and
> on https://orgmode.tecosaur.com. It seems, there is some weird
> interaction with some script from a CDN (maybe loaded partially 
> due to
> constraints from the plugin) or something like that.