Add new scriptlet — 'trusted-replace-script-text'

To replace (like trusted-replace-* scriptlet) or prevent any script that is loaded via HTMLScriptElement.prototype.src (In Firefox, it is displayed as blob:<domain>/<uuid>), I think that mocking settering any primitive value as value of a property is required.

AdguardTeam/AdguardFilters#209985

Could you please provide very simple example what exactly this scriptlet should do?

It looks like trusted-replace-node-text

So for example, if there is a script like this:

(() => {
    const scriptContent = '(() => { console.log("Foo bar"); })();';
    const blob = new Blob([scriptContent], { type: 'application/javascript' });
    const blobUrl = URL.createObjectURL(blob);
    const scriptElement = document.createElement('script');

    scriptElement.src = blobUrl;

    document.head.appendChild(scriptElement);
    scriptElement.onload = () => {
        URL.revokeObjectURL(blobUrl);
    };
})();

This line:

 scriptElement.src = blobUrl; // <-- Here, it should be able to replace content of the "src", right?

You would like a scriptlet which could replace content of src property.
Do I understand correctly?

Yes.

I think the key should be trusted-replace-script-src rather than -text, since the latter could be confused with trusted-replace-node-text, which replaces node.innerText.

Navigation Menu

Repository navigation

Add new scriptlet — 'trusted-replace-script-text' #516

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Add new scriptlet — 'trusted-replace-script-text' #516

Description

Activity

AdamWr commented on Jun 10, 2026

piquark6046 commented on Jun 10, 2026

AdamWr commented on Jun 10, 2026

piquark6046 commented on Oct 26, 2026

mu-hun commented on Oct 26, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions