WhatsApp will soon disallow 'unsafe-inline' and 'unsafe-eval' about venom

[9cb14c1ec0]

We could just drop the Content-Security-Policy header with puppeteer. Did you try that? My code already does this if a version is specified. No matter how much WhatsApp wants to stop script injection, they can't because they have to depend on the browser itself. We control the browser.

[ghayman]

Oh! Nice idea - I am somewhat new to Puppeteer - I did not think of that!

[9cb14c1ec0]

venom/src/controllers/browser.ts

Lines 60 to 70 in 17aae02

	await waPage.setRequestInterception(true);
	waPage.on('request', async (req) => {
	if (req.url() === 'https://web.whatsapp.com/') {
	let url = cach_url + options.webVersion + '.html';
	await req.respond({
	status: 200,
	contentType: 'text/html',
	body: await (await fetch(url)).text()
	});
	} else {

[ghayman]

browser.ts - line 54

    await waPage.setUserAgent(useragentOverride);

    // Seems like Puppeteer already thought of this
    await waPage.setBypassCSP(true);

    waPage.setDefaultTimeout(60000);

[9cb14c1ec0]

Are you going to open a pull request, or should I?

[9cb14c1ec0]

Opened #2658

I am running into this problem on pretty much all versions of whatsapp now.