Better Userscript support about vencord

[grant]

Hi Mister grant sorry for pinging you 🚎

Hi Ven, it's ok. I get about 1 ping every day because of my name. You are the first to apologize in advance. Have a good day!

[MeguminSama]

it would be trivial to have a gh action compile vencord and create a build artifact that can be used for the downloadURL

[Cynosphere]

Violentmonkey on Firefox currently has an issue where Object.defineProperty on window at @run-at document-start doesn't work, meaning webpack patching won't work.

Workarounds

[lol219]

Itls à good idea

[Vendicated]

Added in d26196d

Works fine except that Firefox ViolentMonkey bug cyn mentioned. Also runs into csp issues when trying to fetch external urls like github/unpkg

I am not sure how to fix these two issues

[Vendicated]

I don't think there's a way to fix the CSP issue without doing a big refactor to use a @grant which means window -> unsafeWindow and it just overcomplicates things. I solved the issue in the proper browser addon by making a background script but this is not possible in UserScripts. The best solution would probably to use an anti csp extension like this one (Disclaimer: I never used it and have no idea whether it works and is safe) unless someone else has a better idea / could contribute a solution.
In any case, CSP bypass isn't even that important, only minor features like petpets dynamic library import from cdn don't work so I think it's fine

[Vendicated]

Hi Mister grant sorry for pinging you 🚎

[kiriya-aoi]

For the purposes of having a version number that increments for auto-updating the userscript, could we use the commit number via e.g. git describe?

[Vendicated]

Doesn't its updating system use semver?

[Vendicated]

Updating should work now since it just uses the current timestamp as version. I don't think csp bypass is doable from userscript, so this issue is basically done now

[gBasil]

Aren't there several userscript APIs to circumvent CSP in some cases? GM_addElement, GM_getResourceURL, and GM_xmlhttpRequest.

[Vendicated]

please don't necro old resolved issue threads. this issue is more than a year old

yes, those would likely work for some use cases, but that would require us to write specialised UserScript code, which is out of scope, and would still not cover some other use cases. not to mention, tampermonkey already seems to have workarounds for csp issues with which multiple people reported success