CDRM-Extension/src/inject.js

1144 lines
46 KiB
JavaScript
Raw Normal View History

2025-06-01 12:40:24 -04:00
let widevineDeviceInfo = null;
let playreadyDeviceInfo = null;
let originalChallenge = null;
2025-06-16 00:24:53 -04:00
let serviceCertFound = false;
let drmType = "NONE";
let psshFound = false;
let foundWidevinePssh = null;
let foundPlayreadyPssh = null;
let drmDecided = null;
2025-06-09 12:01:39 -04:00
let drmOverride = "DISABLED";
let interceptType = "DISABLED";
2025-06-16 00:24:53 -04:00
let remoteCDM = null;
let generateRequestCalled = false;
let remoteListenerMounted = false;
let injectionSuccess = false;
2025-06-16 01:21:17 -04:00
let foundChallengeInBody = false;
2025-06-16 00:24:53 -04:00
let licenseResponseCounter = 0;
2025-06-29 12:07:18 -04:00
let keysRetrieved = false;
2025-06-01 17:38:07 -04:00
const DRM_SIGNATURES = {
WIDEVINE: "CAES",
PLAYREADY: "PD94",
SERVICE_CERT: "CAUS",
WIDEVINE_INIT: "CAQ=",
};
const EXTENSION_PREFIX = "[CDRM EXTENSION]";
const PREFIX_COLOR = "black";
const PREFIX_BACKGROUND_COLOR = "yellow";
const logWithPrefix = (...args) => {
const style = `color: ${PREFIX_COLOR}; background: ${PREFIX_BACKGROUND_COLOR}; font-weight: bold; padding: 2px 4px; border-radius: 2px;`;
if (typeof args[0] === "string") {
// If the first arg is a string, prepend the prefix
console.log(`%c${EXTENSION_PREFIX}%c ${args[0]}`, style, "", ...args.slice(1));
} else {
// If not, just log the prefix and the rest
console.log(`%c${EXTENSION_PREFIX}`, style, ...args);
}
};
2025-06-09 12:01:39 -04:00
// Post message to content.js to get DRM override
2025-06-01 17:38:07 -04:00
window.postMessage({ type: "__GET_DRM_OVERRIDE__" }, "*");
2025-06-09 12:01:39 -04:00
// Add listener for DRM override messages
window.addEventListener("message", function (event) {
if (event.source !== window) return;
2025-06-01 17:38:07 -04:00
if (event.data.type === "__DRM_OVERRIDE__") {
drmOverride = event.data.drmOverride || "DISABLED";
logWithPrefix("DRM Override set to:", drmOverride);
2025-06-01 17:38:07 -04:00
}
});
2025-06-01 12:40:24 -04:00
2025-06-09 12:01:39 -04:00
// Post message to content.js to get injection type
2025-06-01 12:40:24 -04:00
window.postMessage({ type: "__GET_INJECTION_TYPE__" }, "*");
2025-06-09 12:01:39 -04:00
// Add listener for injection type messages
window.addEventListener("message", function (event) {
if (event.source !== window) return;
2025-06-01 12:40:24 -04:00
if (event.data.type === "__INJECTION_TYPE__") {
interceptType = event.data.injectionType || "DISABLED";
logWithPrefix("Injection type set to:", interceptType);
}
2025-06-01 12:40:24 -04:00
});
2025-06-09 12:01:39 -04:00
// Post message to get CDM devices
2025-06-01 12:40:24 -04:00
window.postMessage({ type: "__GET_CDM_DEVICES__" }, "*");
2025-06-09 12:01:39 -04:00
// Add listener for CDM device messages
window.addEventListener("message", function (event) {
if (event.source !== window) return;
2025-06-01 12:40:24 -04:00
if (event.data.type === "__CDM_DEVICES__") {
const { widevine_device, playready_device } = event.data;
2025-06-01 12:40:24 -04:00
logWithPrefix("Received device info:", widevine_device, playready_device);
2025-06-01 12:40:24 -04:00
widevineDeviceInfo = widevine_device;
playreadyDeviceInfo = playready_device;
}
2025-06-01 12:40:24 -04:00
});
function safeHeaderShellEscape(str) {
return str
.replace(/\\/g, "\\\\")
.replace(/"/g, '\\"')
.replace(/\$/g, "\\$") // escape shell expansion
.replace(/`/g, "\\`")
.replace(/\n/g, ""); // strip newlines
}
function headersToFlags(headersObj) {
return Object.entries(headersObj)
.map(
([key, val]) =>
'--add-headers "' +
safeHeaderShellEscape(key) +
": " +
safeHeaderShellEscape(val) +
'"'
)
.join(" ");
}
function handleManifestDetection(url, headersObj, contentType, source) {
window.postMessage({ type: "__MANIFEST_URL__", data: url }, "*");
logWithPrefix(`[Manifest][${source}]`, url, contentType);
const headerFlags = headersToFlags(headersObj);
window.postMessage(
{
type: "__MANIFEST_HEADERS__",
url,
headers: headerFlags,
},
"*"
);
}
// Intercep network to find manifest
function injectManifestInterceptor() {
// Execute the interceptor code directly instead of injecting a script
(function () {
function isProbablyManifest(text = "", contentType = "") {
const lowerCT = contentType?.toLowerCase() ?? "";
const sample = text.slice(0, 2000);
const isHLSMime = lowerCT.includes("mpegurl");
const isDASHMime = lowerCT.includes("dash+xml");
const isSmoothMime = lowerCT.includes("sstr+xml");
const isHLSKeyword = sample.includes("#EXTM3U") || sample.includes("#EXT-X-STREAM-INF");
const isDASHKeyword = sample.includes("<MPD") || sample.includes("<AdaptationSet");
const isSmoothKeyword = sample.includes("<SmoothStreamingMedia");
const isJsonManifest = sample.includes('"playlist"') && sample.includes('"segments"');
return (
isHLSMime ||
isDASHMime ||
isSmoothMime ||
isHLSKeyword ||
isDASHKeyword ||
isSmoothKeyword ||
isJsonManifest
);
}
const originalFetch = window.fetch;
window.fetch = async function (input, init) {
const response = await originalFetch.apply(this, arguments);
try {
const clone = response.clone();
const contentType = clone.headers.get("content-type") || "";
const text = await clone.text();
const url = typeof input === "string" ? input : input.url;
if (isProbablyManifest(text, contentType)) {
const headersObj = {};
clone.headers.forEach((value, key) => {
headersObj[key] = value;
});
handleManifestDetection(url, headersObj, contentType, "fetch");
}
} catch (e) {}
return response;
};
const originalXHROpen = XMLHttpRequest.prototype.open;
const originalXHRSend = XMLHttpRequest.prototype.send;
XMLHttpRequest.prototype.open = function (method, url) {
this.__url = url;
return originalXHROpen.apply(this, arguments);
};
XMLHttpRequest.prototype.send = function (body) {
this.addEventListener("load", function () {
try {
const contentType = this.getResponseHeader("content-type") || "";
const text = this.responseText;
if (isProbablyManifest(text, contentType)) {
const xhrHeaders = {};
const rawHeaders = this.getAllResponseHeaders().trim().split(/\r?\n/);
rawHeaders.forEach((line) => {
const parts = line.split(": ");
if (parts.length === 2) {
xhrHeaders[parts[0]] = parts[1];
}
});
handleManifestDetection(this.__url, xhrHeaders, contentType, "xhr");
}
} catch (e) {}
});
return originalXHRSend.apply(this, arguments);
};
})();
}
injectManifestInterceptor();
2025-06-01 12:40:24 -04:00
class RemoteCDMBase {
constructor({ host, secret, device_name, security_level }) {
2025-06-01 12:40:24 -04:00
this.host = host;
this.secret = secret;
this.device_name = device_name;
this.security_level = security_level;
2025-06-01 12:40:24 -04:00
this.session_id = null;
this.challenge = null;
2025-06-09 12:01:39 -04:00
this.keys = null;
2025-06-01 12:40:24 -04:00
}
openSession(path) {
const url = `${this.host}${path}/open`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("GET", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-16 00:24:53 -04:00
xhr.send();
const jsonData = JSON.parse(xhr.responseText);
if (jsonData.data?.session_id) {
2025-06-09 12:01:39 -04:00
this.session_id = jsonData.data.session_id;
logWithPrefix("Session opened:", this.session_id);
2025-06-09 12:01:39 -04:00
} else {
console.error("Failed to open session:", jsonData.message);
throw new Error("Failed to open session");
2025-06-01 12:40:24 -04:00
}
}
getChallenge(path, body) {
const url = `${this.host}${path}/get_license_challenge`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("POST", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-16 00:24:53 -04:00
xhr.send(JSON.stringify(body));
const jsonData = JSON.parse(xhr.responseText);
if (jsonData.data?.challenge) {
2025-06-15 18:25:54 -04:00
this.challenge = btoa(jsonData.data.challenge);
logWithPrefix("Challenge received:", this.challenge);
} else if (jsonData.data?.challenge_b64) {
this.challenge = jsonData.data.challenge_b64;
logWithPrefix("Challenge received:", this.challenge);
2025-06-09 12:01:39 -04:00
} else {
console.error("Failed to get challenge:", jsonData.message);
throw new Error("Failed to get challenge");
2025-06-01 12:40:24 -04:00
}
}
parseLicense(path, body) {
const url = `${this.host}${path}/parse_license`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("POST", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-16 00:24:53 -04:00
xhr.send(JSON.stringify(body));
const jsonData = JSON.parse(xhr.responseText);
if (jsonData.status === 200 || jsonData.message?.includes("parsed and loaded")) {
logWithPrefix("License response parsed successfully");
2025-06-09 12:01:39 -04:00
return true;
} else {
console.error("Failed to parse license response:", jsonData.message);
throw new Error("Failed to parse license response");
2025-06-01 12:40:24 -04:00
}
}
getKeys(path, body, extraPath = "") {
const url = `${this.host}${path}/get_keys${extraPath}`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("POST", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-16 00:24:53 -04:00
xhr.send(JSON.stringify(body));
const jsonData = JSON.parse(xhr.responseText);
if (jsonData.data?.keys) {
2025-06-09 12:01:39 -04:00
this.keys = jsonData.data.keys;
logWithPrefix("Keys received:", this.keys);
2025-06-09 12:01:39 -04:00
} else {
console.error("Failed to get keys:", jsonData.message);
throw new Error("Failed to get keys");
2025-06-09 12:01:39 -04:00
}
}
2025-06-01 12:40:24 -04:00
closeSession(path) {
const url = `${this.host}${path}/close/${this.session_id}`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("GET", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-16 00:24:53 -04:00
xhr.send();
const jsonData = JSON.parse(xhr.responseText);
if (jsonData) {
logWithPrefix("Session closed successfully");
2025-06-09 12:01:39 -04:00
} else {
console.error("Failed to close session:", jsonData.message);
throw new Error("Failed to close session");
2025-06-01 12:40:24 -04:00
}
}
}
// PlayReady Remote CDM Class
class remotePlayReadyCDM extends RemoteCDMBase {
constructor(security_level, host, secret, device_name) {
super({ host, secret, device_name, security_level });
}
openSession() {
super.openSession(`/remotecdm/playready/${this.device_name}`);
}
getChallenge(init_data) {
super.getChallenge(`/remotecdm/playready/${this.device_name}`, {
session_id: this.session_id,
init_data: init_data,
});
}
parseLicense(license_message) {
return super.parseLicense(`/remotecdm/playready/${this.device_name}`, {
session_id: this.session_id,
license_message: license_message,
});
}
getKeys() {
super.getKeys(`/remotecdm/playready/${this.device_name}`, {
session_id: this.session_id,
});
}
closeSession() {
super.closeSession(`/remotecdm/playready/${this.device_name}`);
}
}
2025-06-09 12:01:39 -04:00
// Widevine Remote CDM Class
class remoteWidevineCDM extends RemoteCDMBase {
constructor(device_type, system_id, security_level, host, secret, device_name) {
super({ host, secret, device_name, security_level });
this.device_type = device_type;
this.system_id = system_id;
}
2025-06-01 12:40:24 -04:00
openSession() {
super.openSession(`/remotecdm/widevine/${this.device_name}`);
2025-06-01 12:40:24 -04:00
}
2025-06-16 00:24:53 -04:00
setServiceCertificate(certificate) {
2025-06-01 12:40:24 -04:00
const url = `${this.host}/remotecdm/widevine/${this.device_name}/set_service_certificate`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("POST", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-01 12:40:24 -04:00
const body = {
session_id: this.session_id,
certificate: certificate ?? null,
};
2025-06-16 00:24:53 -04:00
xhr.send(JSON.stringify(body));
const jsonData = JSON.parse(xhr.responseText);
if (jsonData.status === 200) {
logWithPrefix("Service certificate set successfully");
2025-06-09 12:01:39 -04:00
} else {
console.error("Failed to set service certificate:", jsonData.message);
throw new Error("Failed to set service certificate");
2025-06-01 12:40:24 -04:00
}
}
getChallenge(init_data, license_type = "STREAMING") {
2025-06-01 12:40:24 -04:00
const url = `${this.host}/remotecdm/widevine/${this.device_name}/get_license_challenge/${license_type}`;
2025-06-16 00:24:53 -04:00
const xhr = new XMLHttpRequest();
xhr.open("POST", url, false);
xhr.setRequestHeader("Content-Type", "application/json");
2025-06-01 12:40:24 -04:00
const body = {
session_id: this.session_id,
init_data: init_data,
privacy_mode: serviceCertFound,
2025-06-01 12:40:24 -04:00
};
2025-06-16 00:24:53 -04:00
xhr.send(JSON.stringify(body));
const jsonData = JSON.parse(xhr.responseText);
if (jsonData.data?.challenge_b64) {
2025-06-09 12:01:39 -04:00
this.challenge = jsonData.data.challenge_b64;
logWithPrefix("Widevine challenge received:", this.challenge);
2025-06-09 12:01:39 -04:00
} else {
console.error("Failed to get Widevine challenge:", jsonData.message);
throw new Error("Failed to get Widevine challenge");
2025-06-01 12:40:24 -04:00
}
}
2025-06-16 00:24:53 -04:00
parseLicense(license_message) {
return super.parseLicense(`/remotecdm/widevine/${this.device_name}`, {
2025-06-01 12:40:24 -04:00
session_id: this.session_id,
license_message: license_message,
});
2025-06-01 12:40:24 -04:00
}
2025-06-16 00:24:53 -04:00
getKeys() {
super.getKeys(
`/remotecdm/widevine/${this.device_name}`,
{
session_id: this.session_id,
},
"/ALL"
);
2025-06-09 12:01:39 -04:00
}
2025-06-01 12:40:24 -04:00
2025-06-16 00:24:53 -04:00
closeSession() {
super.closeSession(`/remotecdm/widevine/${this.device_name}`);
2025-06-01 12:40:24 -04:00
}
}
2025-06-09 12:01:39 -04:00
// Utility functions
function hexStrToU8(hexString) {
return Uint8Array.from(hexString.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));
}
2025-06-01 12:40:24 -04:00
function u8ToHexStr(bytes) {
return bytes.reduce((str, byte) => str + byte.toString(16).padStart(2, "0"), "");
}
2025-06-01 12:40:24 -04:00
function b64ToHexStr(b64) {
return [...atob(b64)].map((c) => c.charCodeAt(0).toString(16).padStart(2, "0")).join``;
}
2025-06-01 12:40:24 -04:00
function jsonContainsValue(obj, prefix = DRM_SIGNATURES.WIDEVINE) {
2025-06-19 22:42:40 -04:00
if (typeof obj === "string") return obj.startsWith(prefix);
if (Array.isArray(obj)) return obj.some((val) => jsonContainsValue(val, prefix));
2025-06-01 12:40:24 -04:00
if (typeof obj === "object" && obj !== null) {
return Object.values(obj).some((val) => jsonContainsValue(val, prefix));
2025-06-01 12:40:24 -04:00
}
return false;
}
2025-06-29 12:07:18 -04:00
function jsonReplaceValue(obj, newValue) {
2025-06-01 12:40:24 -04:00
if (typeof obj === "string") {
return obj.startsWith(DRM_SIGNATURES.WIDEVINE) || obj.startsWith(DRM_SIGNATURES.PLAYREADY)
? newValue
: obj;
2025-06-01 12:40:24 -04:00
}
if (Array.isArray(obj)) {
return obj.map((item) => jsonReplaceValue(item, newValue));
2025-06-01 12:40:24 -04:00
}
if (typeof obj === "object" && obj !== null) {
const newObj = {};
for (const key in obj) {
if (Object.hasOwn(obj, key)) {
2025-06-29 12:07:18 -04:00
newObj[key] = jsonReplaceValue(obj[key], newValue);
2025-06-01 12:40:24 -04:00
}
}
return newObj;
}
return obj;
}
function isJson(str) {
2025-06-01 12:40:24 -04:00
try {
JSON.parse(str);
return true;
} catch (e) {
return false;
}
}
2025-06-01 12:40:24 -04:00
function getWidevinePssh(buffer) {
const hex = u8ToHexStr(new Uint8Array(buffer));
const match = hex.match(/000000(..)?70737368.*/);
if (!match) return null;
const boxHex = match[0];
const bytes = hexStrToU8(boxHex);
return window.btoa(String.fromCharCode(...bytes));
}
function getPlayReadyPssh(buffer) {
const u8 = new Uint8Array(buffer);
const systemId = "9a04f07998404286ab92e65be0885f95";
const hex = u8ToHexStr(u8);
const index = hex.indexOf(systemId);
if (index === -1) return null;
const psshBoxStart = hex.lastIndexOf("70737368", index);
if (psshBoxStart === -1) return null;
const lenStart = psshBoxStart - 8;
const boxLen = parseInt(hex.substr(lenStart, 8), 16) * 2;
const psshHex = hex.substr(lenStart, boxLen);
const psshBytes = hexStrToU8(psshHex);
return window.btoa(String.fromCharCode(...psshBytes));
}
function getClearkey(response) {
let obj = JSON.parse(new TextDecoder("utf-8").decode(response));
return obj["keys"].map((o) => ({
key_id: b64ToHexStr(o["kid"].replace(/-/g, "+").replace(/_/g, "/")),
key: b64ToHexStr(o["k"].replace(/-/g, "+").replace(/_/g, "/")),
}));
2025-06-01 12:40:24 -04:00
}
function base64ToUint8Array(base64) {
2025-06-09 12:01:39 -04:00
const binaryStr = atob(base64);
2025-06-01 12:40:24 -04:00
const len = binaryStr.length;
const bytes = new Uint8Array(len);
for (let i = 0; i < len; i++) {
bytes[i] = binaryStr.charCodeAt(i);
}
return bytes;
}
function arrayBufferToBase64(uint8array) {
let binary = "";
const len = uint8array.length;
2025-06-01 12:40:24 -04:00
for (let i = 0; i < len; i++) {
binary += String.fromCharCode(uint8array[i]);
}
2025-06-01 12:40:24 -04:00
return window.btoa(binary);
2025-06-16 00:24:53 -04:00
}
function bufferToBase64(buffer) {
const uint8 = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer);
return window.btoa(String.fromCharCode(...uint8));
}
// DRM type detection
function isWidevine(base64str) {
return base64str.startsWith(DRM_SIGNATURES.WIDEVINE);
}
function isPlayReady(base64str) {
return base64str.startsWith(DRM_SIGNATURES.PLAYREADY);
}
function isServiceCertificate(base64str) {
return base64str.startsWith(DRM_SIGNATURES.SERVICE_CERT);
}
function postDRMTypeAndPssh(type, pssh) {
window.postMessage({ type: "__DRM_TYPE__", data: type }, "*");
window.postMessage({ type: "__PSSH_DATA__", data: pssh }, "*");
}
function ensureRemoteCDM(type, deviceInfo, pssh) {
if (!remoteCDM) {
if (type === "Widevine") {
const { device_type, system_id, security_level, host, secret, device_name } =
deviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(pssh);
} else if (type === "PlayReady") {
const { security_level, host, secret, device_name } = deviceInfo;
remoteCDM = new remotePlayReadyCDM(security_level, host, secret, device_name);
remoteCDM.openSession();
remoteCDM.getChallenge(pssh);
}
}
}
2025-06-16 01:21:17 -04:00
// Challenge generator interceptor
2025-06-16 00:24:53 -04:00
const originalGenerateRequest = MediaKeySession.prototype.generateRequest;
MediaKeySession.prototype.generateRequest = function (initDataType, initData) {
2025-06-29 02:50:36 -04:00
const session = this;
let playReadyPssh = getPlayReadyPssh(initData);
if (playReadyPssh) {
logWithPrefix("[DRM Detected] PlayReady");
2025-06-29 02:50:36 -04:00
foundPlayreadyPssh = playReadyPssh;
logWithPrefix("[PlayReady PSSH found] " + playReadyPssh);
2025-06-29 02:50:36 -04:00
}
let wideVinePssh = getWidevinePssh(initData);
2025-06-29 02:50:36 -04:00
if (wideVinePssh) {
// Widevine code
logWithPrefix("[DRM Detected] Widevine");
2025-06-29 02:50:36 -04:00
foundWidevinePssh = wideVinePssh;
logWithPrefix("[Widevine PSSH found] " + wideVinePssh);
2025-06-29 02:50:36 -04:00
}
// Challenge message interceptor
if (!remoteListenerMounted) {
remoteListenerMounted = true;
session.addEventListener("message", function messageInterceptor(event) {
event.stopImmediatePropagation();
const base64challenge = bufferToBase64(event.message);
if (
base64challenge === DRM_SIGNATURES.WIDEVINE_INIT &&
interceptType !== "DISABLED" &&
!serviceCertFound
) {
const { device_type, system_id, security_level, host, secret, device_name } =
widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
2025-06-29 02:50:36 -04:00
remoteCDM.openSession();
}
if (
!injectionSuccess &&
base64challenge !== DRM_SIGNATURES.WIDEVINE_INIT &&
interceptType !== "DISABLED"
) {
2025-06-29 02:50:36 -04:00
if (interceptType === "EME") {
injectionSuccess = true;
2025-06-16 00:24:53 -04:00
}
2025-06-29 02:50:36 -04:00
if (!originalChallenge) {
originalChallenge = base64challenge;
}
if (originalChallenge.startsWith(DRM_SIGNATURES.WIDEVINE)) {
postDRMTypeAndPssh("Widevine", foundWidevinePssh);
if (interceptType === "EME") {
ensureRemoteCDM("Widevine", widevineDeviceInfo, foundWidevinePssh);
}
}
if (!originalChallenge.startsWith(DRM_SIGNATURES.WIDEVINE)) {
2025-06-29 02:50:36 -04:00
const buffer = event.message;
const decoder = new TextDecoder("utf-16");
2025-06-29 02:50:36 -04:00
const decodedText = decoder.decode(buffer);
const match = decodedText.match(
/<Challenge encoding="base64encoded">([^<]+)<\/Challenge>/
);
2025-06-29 02:50:36 -04:00
if (match) {
postDRMTypeAndPssh("PlayReady", foundPlayreadyPssh);
2025-06-29 02:50:36 -04:00
originalChallenge = match[1];
if (interceptType === "EME") {
ensureRemoteCDM("PlayReady", playreadyDeviceInfo, foundPlayreadyPssh);
2025-06-29 02:50:36 -04:00
}
}
}
2025-06-29 02:50:36 -04:00
if (interceptType === "EME" && remoteCDM) {
const uint8challenge = base64ToUint8Array(remoteCDM.challenge);
const challengeBuffer = uint8challenge.buffer;
const syntheticEvent = new MessageEvent("message", {
data: event.data,
origin: event.origin,
lastEventId: event.lastEventId,
source: event.source,
ports: event.ports,
2025-06-29 02:50:36 -04:00
});
Object.defineProperty(syntheticEvent, "message", {
get: () => challengeBuffer,
2025-06-29 02:50:36 -04:00
});
logWithPrefix("Intercepted EME Challenge and injected custom one.");
2025-06-29 02:50:36 -04:00
session.dispatchEvent(syntheticEvent);
2025-06-16 00:24:53 -04:00
}
2025-06-29 02:50:36 -04:00
}
});
logWithPrefix("Message interceptor mounted.");
2025-06-16 01:21:17 -04:00
}
return originalGenerateRequest.call(session, initDataType, initData);
2025-06-16 01:21:17 -04:00
};
2025-06-16 00:24:53 -04:00
// Message update interceptors
const originalUpdate = MediaKeySession.prototype.update;
MediaKeySession.prototype.update = function (response) {
const base64Response = bufferToBase64(response);
if (
base64Response.startsWith(DRM_SIGNATURES.SERVICE_CERT) &&
foundWidevinePssh &&
remoteCDM &&
!serviceCertFound
) {
2025-06-16 00:24:53 -04:00
remoteCDM.setServiceCertificate(base64Response);
2025-06-29 12:07:18 -04:00
if (interceptType === "EME" && !remoteCDM.challenge) {
remoteCDM.getChallenge(foundWidevinePssh);
}
window.postMessage({ type: "__DRM_TYPE__", data: "Widevine" }, "*");
window.postMessage({ type: "__PSSH_DATA__", data: foundWidevinePssh }, "*");
2025-06-29 12:07:18 -04:00
serviceCertFound = true;
2025-06-16 00:24:53 -04:00
}
if (
!base64Response.startsWith(DRM_SIGNATURES.SERVICE_CERT) &&
(foundWidevinePssh || foundPlayreadyPssh) &&
!keysRetrieved
) {
2025-06-16 01:59:26 -04:00
if (licenseResponseCounter === 1 || foundChallengeInBody) {
2025-06-16 00:24:53 -04:00
remoteCDM.parseLicense(base64Response);
remoteCDM.getKeys();
remoteCDM.closeSession();
2025-06-29 12:07:18 -04:00
keysRetrieved = true;
2025-06-16 00:24:53 -04:00
window.postMessage({ type: "__KEYS_DATA__", data: remoteCDM.keys }, "*");
}
licenseResponseCounter++;
}
const updatePromise = originalUpdate.call(this, response);
if (!foundPlayreadyPssh && !foundWidevinePssh) {
2025-06-16 00:24:53 -04:00
updatePromise
.then(() => {
let clearKeys = getClearkey(response);
if (clearKeys && clearKeys.length > 0) {
logWithPrefix("[CLEARKEY] ", clearKeys);
const drmType = {
type: "__DRM_TYPE__",
data: "ClearKey",
};
window.postMessage(drmType, "*");
const keysData = {
type: "__KEYS_DATA__",
data: clearKeys,
};
window.postMessage(keysData, "*");
2025-06-16 00:24:53 -04:00
}
})
.catch((e) => {
logWithPrefix("[CLEARKEY] Not found");
2025-06-16 00:24:53 -04:00
});
}
return updatePromise;
2025-06-16 01:21:17 -04:00
};
// fetch POST interceptor
(function () {
const originalFetch = window.fetch;
window.fetch = async function (resource, config = {}) {
const method = (config.method || "GET").toUpperCase();
if (method === "POST") {
let body = config.body;
if (body) {
if (body instanceof ArrayBuffer || body instanceof Uint8Array) {
const buffer = body instanceof Uint8Array ? body : new Uint8Array(body);
const base64Body = window.btoa(String.fromCharCode(...buffer));
if (
(base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM ||
remoteCDM.challenge === null ||
base64Body !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
// Block the request
return;
}
if (
(base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
if (!remoteCDM) {
if (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
2025-06-29 12:07:18 -04:00
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
2025-06-29 12:07:18 -04:00
}
const injectedBody = base64ToUint8Array(remoteCDM.challenge);
config.body = injectedBody;
return originalFetch(resource, config);
2025-06-29 12:07:18 -04:00
}
}
if (typeof body === "string" && !isJson(body)) {
const base64EncodedBody = btoa(body);
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM ||
remoteCDM.challenge === null ||
base64EncodedBody !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
// Block the request
return;
}
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
if (!remoteCDM) {
if (base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
2025-06-29 12:07:18 -04:00
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
2025-06-29 12:07:18 -04:00
}
const injectedBody = atob(remoteCDM.challenge);
config.body = injectedBody;
return originalFetch(resource, config);
2025-06-29 12:07:18 -04:00
}
}
if (typeof body === "string" && isJson(body)) {
const jsonBody = JSON.parse(body);
2025-06-29 12:07:18 -04:00
if (
(jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM || remoteCDM.challenge === null) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
// Block the request
return;
}
if (
(jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
interceptType === "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
if (!remoteCDM) {
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
2025-06-29 12:07:18 -04:00
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
2025-06-29 12:07:18 -04:00
}
const injectedBody = jsonReplaceValue(jsonBody, remoteCDM.challenge);
config.body = JSON.stringify(injectedBody);
2025-06-29 12:07:18 -04:00
}
}
2025-06-19 22:42:40 -04:00
}
}
2025-06-16 01:21:17 -04:00
return originalFetch(resource, config);
};
2025-06-16 01:21:17 -04:00
})();
// XHR POST interceptor
(function () {
const originalOpen = XMLHttpRequest.prototype.open;
const originalSend = XMLHttpRequest.prototype.send;
XMLHttpRequest.prototype.open = function (method, url, async, user, password) {
this._method = method;
this._url = url;
return originalOpen.apply(this, arguments);
};
XMLHttpRequest.prototype.send = function (body) {
if (this._method && this._method.toUpperCase() === "POST") {
if (body) {
if (body instanceof ArrayBuffer || body instanceof Uint8Array) {
const buffer = body instanceof Uint8Array ? body : new Uint8Array(body);
const base64Body = window.btoa(String.fromCharCode(...buffer));
if (
(base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM ||
remoteCDM.challenge === null ||
base64Body !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
// Block the request
return;
}
if (
(base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
if (!remoteCDM) {
if (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = base64ToUint8Array(remoteCDM.challenge);
return originalSend.call(this, injectedBody);
}
}
if (typeof body === "string" && !isJson(body)) {
const base64EncodedBody = btoa(body);
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM ||
remoteCDM.challenge === null ||
base64EncodedBody !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
// Block the request
return;
}
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
if (!remoteCDM) {
if (base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = atob(remoteCDM.challenge);
return originalSend.call(this, injectedBody);
}
2025-06-16 01:59:26 -04:00
}
2025-06-29 12:07:18 -04:00
if (typeof body === "string" && isJson(body)) {
const jsonBody = JSON.parse(body);
2025-06-29 12:07:18 -04:00
if (
(jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM || remoteCDM.challenge === null) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
// Block the request
return;
}
2025-06-29 12:07:18 -04:00
if (
(jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
interceptType === "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
if (!remoteCDM) {
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
2025-06-29 12:07:18 -04:00
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
2025-06-29 12:07:18 -04:00
}
const injectedBody = jsonReplaceValue(jsonBody, remoteCDM.challenge);
return originalSend.call(this, JSON.stringify(injectedBody));
2025-06-29 12:07:18 -04:00
}
}
}
2025-06-16 01:21:17 -04:00
}
return originalSend.apply(this, arguments);
};
})();