eval in page context

2026-09-26 21:21:53 +08:00 · 2024-05-12 20:30:19 +08:00
parent f881ad6ce2
commit 7e1e9e2c79
16 changed files with 322 additions and 159 deletions
@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <title>Title</title>
+    <script src="./src/crypto-js.min.js"></script>
+</head>
+<script>
+    window.addEventListener('message', async function (event) {
+        try {
+            console.log("sandbox event", event)
+            if (!event.data[0]) {
+                throw new Error('格式化方法有问题');
+            }
+            const func = new Function('obj', event.data[0]);
+            event.source.window.postMessage(eval(event.data), event.origin);
+        } catch (e) {
+            console.error(e);
+            event.source.window.postMessage(eval(event.data), event.origin);
+        }
+
+    });
+</script>
+</html>