Add export global module

src/captured-globals.js

@@ -0,0 +1,16 @@
+// Capture prototype to prevent overloading
+function captureGlobals (object) {
+    const newGlobal = object
+    for (const key in object) {
+        const value = object[key]
+        newGlobal[key] = value
+    }
+    for (const key in object.prototype) {
+        const value = object.prototype[key]
+        newGlobal.prototype[key] = value
+    }
+    return newGlobal
+}
+
+export const Set = captureGlobals(globalThis.Set)
+export const Reflect = captureGlobals(globalThis.Reflect)

src/features/runtime-checks.js

@@ -3,6 +3,7 @@
 import ContentFeature from '../content-feature.js'
 import { DDGProxy, getStackTraceOrigins, getStack, matchHostname, injectGlobalStyles, createStyleElement, postDebugMessage, taintSymbol, hasTaintedMethod } from '../utils.js'
 import { wrapScriptCodeOverload } from './runtime-checks/script-overload.js'
+import { Reflect } from '../captured-globals.js'
 
 let stackDomains = []
 let matchAllStackDomains = false
@@ -490,7 +491,7 @@ export default class RuntimeChecks extends ContentFeature {
         // This shouldn't happen, but if it does we don't want to break the page
         try {
             // @ts-expect-error TS node return here
-            customElements.define('ddg-runtime-checks', DDGRuntimeChecks)
+            globalThis.customElements.define('ddg-runtime-checks', DDGRuntimeChecks)
         } catch {}
     }
 

src/utils.js

@@ -1,12 +1,11 @@
 /* global cloneInto, exportFunction, mozProxies */
+import { Set } from './captured-globals.js'
+
 // Only use globalThis for testing this breaks window.wrappedJSObject code in Firefox
 // eslint-disable-next-line no-global-assign
 let globalObj = typeof window === 'undefined' ? globalThis : window
 let Error = globalObj.Error
 let messageSecret
-const CapturedSet = globalObj.Set
-// Capture prototype to prevent overloading
-const createSet = () => hasMozProxies ? new Set() : new CapturedSet()
 
 export const taintSymbol = Symbol('taint')
 
@@ -171,7 +170,7 @@ export function matchHostname (hostname, exceptionDomain) {
 
 const lineTest = /(\()?(https?:[^)]+):[0-9]+:[0-9]+(\))?/
 export function getStackTraceUrls (stack) {
-    const urls = createSet()
+    const urls = new Set()
     try {
         const errorLines = stack.split('\n')
         // Should cater for Chrome and Firefox stacks, we only care about https? resources.
@@ -189,7 +188,7 @@ export function getStackTraceUrls (stack) {
 
 export function getStackTraceOrigins (stack) {
     const urls = getStackTraceUrls(stack)
-    const origins = createSet()
+    const origins = new Set()
     for (const url of urls) {
         origins.add(url.hostname)
     }

tsconfig.json

@@ -18,8 +18,9 @@
     "integration-test",
     "inject",
     "packages",
-    "playwright.config.js"
-, "script-overload-snapshots"  ],
+    "playwright.config.js",
+    "script-overload-snapshots"
+  ],
   "exclude": [
     "snapshots/script-overload-snapshots",
     "integration-test/pages",