Viewing Program

Program Data

Program thumbnail for "{props.program.title}"

Title	Reviving API
ID	6135380616855552
Created	7 months ago, 1715817527777
Updated	7 months ago, 1715824706405
Code	<!DOCTYPE html> <!-- Goal: Use the python worker thread, which due to the nature of worker threads does not have a csp (content security policy), to allow us to regain access to the API. FAQ: # Is this legal? Well, it's not illegal yet =P There is no previledged access over the API, all requests have to go through an external service that grabs the response and sends it back to us, which means that it can't preform any actions that require a login. Just the same as the API was back in the day. ## Current issue: It seems the CSP of the window is inherted Meaning that when we iframe it and use code that would work in the python section, it just doesn't work here at all. RIP --> <html> <head> <meta charset="utf-8"> <title>Reviving API</title> </head> <body> <!-- my sanity --> <script></script> <!-- main.py --> <script id="main.py" type="application/text"> # # This is our main.py file which we will use # to run javascript inside the worker thread. # print("Python running") from js import eval eval("console.log('Running js from python from wasm from sandbox from html sandbox =P')") injector = """ debugger fetch("https://corsproxy.io") """ eval(injector) </script> <!-- create python sandbox iframe --> <script type> // Don't complain about my code in theory potentially // calling functions before I write them =P // Nobody's computer is fast enough to cause issues there. // I did it this way so the code is written in the order // it is executed. // Create iframe var iframe = document.createElement('iframe') iframe.src = 'https://www.kasandbox.org/computer-programming/exec/python'; iframe.width = '100px'; iframe.height = '100px'; document.body.appendChild(iframe); // Save reference to python sandbox pythonSandbox = window[0]; // ## Technical note: // Because the python sandbox is under the same // domain (kasandbox.org) as this sandbox, // the browser gives us fill contorl over this // page. Uncomment the following line to show this. // pythonSandbox.onload = function() {eval("alert(pythonSandbox.location.href)")} // (we need to use onload otherwise it'll say about:blank) // We replace the worker object with a wrapper that logs the worker instance. pythonSandbox.OriginalWorker = pythonSandbox.Worker; window.workers = []; function TrackedWorker(...args) { worker = new pythonSandbox.OriginalWorker(...args); window.workers.push(worker); window.sendWorkerCode(worker); return worker; } pythonSandbox.Worker = TrackedWorker; // Once we have a reference to the worker, we'll send it the files window.sendWorkerCode = function(worker) { mainpy = document.getElementById("main.py").textContent; pythonFiles = { "files": [ { "code": mainpy, "filename": "main.py", "language": "python" } ] } // console.log(worker) worker.postMessage(pythonFiles) } </script> </body> </html>
Folds
Fork	false
Key	ag5zfmtoYW4tYWNhZGVteXIXCxIKU2NyYXRjaHBhZBiAgOvxiYPzCgw
Votes	1
Spin-Offs	0
Type	WEBPAGE
Width	400
Height	400
User Flagged	false
Origin Scratchpad	null
Hidden From Hotlist	false
Restricted Posting	true
By Child	false
Author Nick	KPPM Workflow Account
Author Name	KPPM
Author ID	kaid_4531886152410793423958741
Author Profile Access	COACH

Archive Data

Added	7 months ago, 1715824735384
Updated	7 months ago, 1715824735384
Source Deleted	unknown