From ab2f078ca6e8aa694ccfecdf6d6107a2be90bd02 Mon Sep 17 00:00:00 2001
From: hackademix
Date: Fri, 20 Mar 2020 22:20:28 +0100
Subject: More aggressive blocking for data: refresh attempts (thanks
 insertscript).

---
 src/content/content.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src')

diff --git a/src/content/content.js b/src/content/content.js
index 43827a2..29330b7 100644
--- a/src/content/content.js
+++ b/src/content/content.js
@@ -118,8 +118,8 @@ notifyPage();
 addEventListener("DOMContentLoaded", e => {
   if (ns.canScript) return;
   for (let m of document.querySelectorAll("meta[http-equiv=refresh]")) {
-    if (/^[^,;]*[,;]url[^\w=]*=\s*data:/.test(m.getAttribute("content"))) {
-      let url = m.getAttribute("content").replace(/.*?(?=data:)/, "");
+    if (/^[^,;]*[,;]\W*url[^=]*=[^!#$%&'()*+,/:;=?@[\]\w.,~-]*data:/i.test(m.getAttribute("content"))) {
+      let url = m.getAttribute("content").replace(/.*?(?=data:)/i, "");
       log(`Blocking refresh to ${url}`);
       window.stop();
     }
-- 
cgit v1.2.3