abort-current-inline-script

This snippet aborts the execution of an inline script when a property is either read or written.
Parameters
Name
Description
Mandatory
api
The API function or property name to anchor on. It can also be the path to that property.
​
If the property is a direct child of window, this parameter will be the property name. If you want to access a sub property, though, this parameter becomes a chain of properties separated by dots.
Yes
search
If specified, only scripts containing the given string are prevented from executing. 
​
If the string begins and ends with a slash (/), the text in between is treated as a regular expression.
No
Filter examples
The following table lists examples that use the abort-current-inline-script filter:
Filter
Result
abort-current-inline-script setDefaultTheme

The code that calls/writes the setDefaultTheme global function throws an exception.
abort-current-inline-script document.head.appendChild
The code that calls/writes the appendChild function throws an exception. 

This function is a property of head, which is a property of the document global object. 

Be cautious when using this approach; it blocks any code that appends an element to head.
abort-current-inline-script Object.prototype.networkListener 
The code that reads/writes the networkListener property throws an exception. 
​
This example shows that you can attach the filter to prototype properties.
abort-current-inline-script btoa BOOTLOADER_LOADED
The code that calls/writes the btoa global function throws an exception. 

This filter would only work inside inline scripts whose text content contains the BOOTLOADER_LOADED string.
abort-current-inline-script document.createElement /ru-n4p|ua-n4p|загрузка.../
The code that calls/writes the createElement function of document throws an exception. 

This filter would only work inside inline scripts whose text content matches the /ru-n4p|ua-n4p|загрузка.../{regex}.
Tradeoffs
Keep the following tradeoffs in mind when you use the abort-current-inline-scriptfilter:
The snippet is executed after all of a page's inline scripts. As a result, you should only attach properties read inside of a callback, which can be executed after the script.
You can only attach this snippet to global properties, or properties of the window object.

Name	Description	Mandatory
api	The API function or property name to anchor on. It can also be the path to that property. If the property is a direct child of `window`, this parameter will be the property name. If you want to access a sub property, though, this parameter becomes a chain of properties separated by dots.	Yes
search	If specified, only scripts containing the given string are prevented from executing. If the string begins and ends with a slash (`/`), the text in between is treated as a regular expression.	No

Filter	Result
`abort-current-inline-script setDefaultTheme`	The code that calls/writes the `setDefaultTheme` global function throws an exception.
`abort-current-inline-script` `document.head.appendChild`	The code that calls/writes the `appendChild` function throws an exception. This function is a property of `head`, which is a property of the `document` global object. Be cautious when using this approach; it blocks any code that appends an element to `head`.
`abort-current-inline-script` `Object.prototype.networkListener`	The code that reads/writes the `networkListener` property throws an exception. This example shows that you can attach the filter to `prototype` properties.
`abort-current-inline-script` `btoa` `BOOTLOADER_LOADED`	The code that calls/writes the `btoa` global function throws an exception. This filter would only work inside inline scripts whose text content contains the `BOOTLOADER_LOADED` string.
`abort-current-inline-script` `document.createElement` `/ru-n4p\|ua-n4p\|загрузка.../`	The code that calls/writes the `createElement` function of `document` throws an exception. This filter would only work inside inline scripts whose text content matches the `/ru-n4p\|ua-n4p\|загрузка.../{regex}`.

Last modified 3mo ago