new pattern

Block "smuggled_hex_string_map_iso_zip" variant.
RootUp · Dec 8, 2024 · 0ed7a70 · 0ed7a70
1 parent f9595af
commit 0ed7a70
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/SmuggleShield/content.js b/SmuggleShield/content.js
@@ -5,6 +5,10 @@ class HTMLSmugglingBlocker {
       { pattern: /atob\s*\([^)]+\).*new\s+uint8array/is, weight: 3 },
       { pattern: /atob\s*\(\s*['"]([A-Za-z0-9+/=]{100,})['"].*\)/i, weight: 3 },
       { pattern: /new\s+blob\s*\(\s*\[\s*(?:data|atob\s*\()/i, weight: 3 },
+      { pattern: /let\s+arrayBuffer\s*=\s*\['0x[0-9a-f]{2}'(?:\s*,\s*'0x[0-9a-f]{2}')+\]/i, weight: 4 },
+      { pattern: /\["edoCrahCmorf"(?:\s*\[\s*"split"\s*\]\s*\(\s*""\s*\)\s*\[\s*"reverse"\s*\]\s*\(\s*\)\s*\[\s*"join"\s*\]\s*\(\s*""\s*\))/i, weight: 4 },
+      { pattern: /setTimeout\s*\(\s*\[.*?\]\.map\s*\(\s*.*?=>.*?(?:fromCharCode|edoCrahCmorf).*?\/\s*\d+\s*\)/is, weight: 4 },
+      { pattern: /String\s*\[\s*(?:"edoCrahCmorf"|['"][^'"]+['"]\.split\(['"]['"]\)\.reverse\(\)\.join\(['"]['"]\))\s*\]/i, weight: 3 },
       { pattern: /url\.createobjecturl\s*\(\s*(?:my)?blob\s*\)/i, weight: 3 },
       { pattern: /location(?:\s*\[\s*["']href["']\s*\])?\s*=\s*url/i, weight: 3 },
       { pattern: /url\.revokeobjecturl\s*\(\s*url\s*\)/i, weight: 2 },