Compare commits

..

No commits in common. "867294f7f60135ae89d896bb01d809243dc3908b" and "9e071365e372dda6424041f37eff597be50819cb" have entirely different histories.

View File

@ -537,11 +537,12 @@ function postDRMTypeAndPssh(type, pssh) {
window.postMessage({ type: "__PSSH_DATA__", data: pssh }, "*"); window.postMessage({ type: "__PSSH_DATA__", data: pssh }, "*");
} }
function createAndOpenRemoteCDM(type, deviceInfo, pssh) { function ensureRemoteCDM(type, deviceInfo, pssh) {
let cdm; if (!remoteCDM) {
if (type === "Widevine") { if (type === "Widevine") {
const { device_type, system_id, security_level, host, secret, device_name } = deviceInfo; const { device_type, system_id, security_level, host, secret, device_name } =
cdm = new remoteWidevineCDM( deviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type, device_type,
system_id, system_id,
security_level, security_level,
@ -549,20 +550,14 @@ function createAndOpenRemoteCDM(type, deviceInfo, pssh) {
secret, secret,
device_name device_name
); );
cdm.openSession(); remoteCDM.openSession();
cdm.getChallenge(pssh); remoteCDM.getChallenge(pssh);
} else if (type === "PlayReady") { } else if (type === "PlayReady") {
const { security_level, host, secret, device_name } = deviceInfo; const { security_level, host, secret, device_name } = deviceInfo;
cdm = new remotePlayReadyCDM(security_level, host, secret, device_name); remoteCDM = new remotePlayReadyCDM(security_level, host, secret, device_name);
cdm.openSession(); remoteCDM.openSession();
cdm.getChallenge(pssh); remoteCDM.getChallenge(pssh);
} }
return cdm;
}
function ensureRemoteCDM(type, deviceInfo, pssh) {
if (!remoteCDM) {
remoteCDM = createAndOpenRemoteCDM(type, deviceInfo, pssh);
} }
} }
@ -594,11 +589,17 @@ MediaKeySession.prototype.generateRequest = function (initDataType, initData) {
interceptType !== "DISABLED" && interceptType !== "DISABLED" &&
!serviceCertFound !serviceCertFound
) { ) {
remoteCDM = createAndOpenRemoteCDM( const { device_type, system_id, security_level, host, secret, device_name } =
"Widevine", widevineDeviceInfo;
widevineDeviceInfo, remoteCDM = new remoteWidevineCDM(
foundWidevinePssh device_type,
system_id,
security_level,
host,
secret,
device_name
); );
remoteCDM.openSession();
} }
if ( if (
!injectionSuccess && !injectionSuccess &&
@ -714,81 +715,6 @@ MediaKeySession.prototype.update = function (response) {
return updatePromise; return updatePromise;
}; };
// Helpers
function detectDRMChallenge(body) {
// Handles ArrayBuffer, Uint8Array, string, and JSON string
// Returns: { type: "Widevine"|"PlayReady"|null, base64: string|null, bodyType: "buffer"|"string"|"json"|null }
if (body instanceof ArrayBuffer || body instanceof Uint8Array) {
const buffer = body instanceof Uint8Array ? body : new Uint8Array(body);
const base64Body = window.btoa(String.fromCharCode(...buffer));
if (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE)) {
return { type: "Widevine", base64: base64Body, bodyType: "buffer" };
}
if (base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) {
return { type: "PlayReady", base64: base64Body, bodyType: "buffer" };
}
} else if (typeof body === "string" && !isJson(body)) {
const base64EncodedBody = btoa(body);
if (base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE)) {
return { type: "Widevine", base64: base64EncodedBody, bodyType: "string" };
}
if (base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) {
return { type: "PlayReady", base64: base64EncodedBody, bodyType: "string" };
}
} else if (typeof body === "string" && isJson(body)) {
const jsonBody = JSON.parse(body);
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE)) {
return { type: "Widevine", base64: null, bodyType: "json" };
}
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) {
return { type: "PlayReady", base64: null, bodyType: "json" };
}
}
return { type: null, base64: null, bodyType: null };
}
function handleLicenseMode({
drmInfo,
body,
setBody, // function to set the new body (for fetch: (b) => config.body = b, for XHR: (b) => originalSend.call(this, b))
urlOrResource,
getWidevinePssh,
getPlayreadyPssh,
widevineDeviceInfo,
playreadyDeviceInfo,
}) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: urlOrResource }, "*");
// Create remoteCDM if needed
if (!remoteCDM) {
if (drmInfo.type === "Widevine") {
remoteCDM = createAndOpenRemoteCDM("Widevine", widevineDeviceInfo, getWidevinePssh());
}
if (drmInfo.type === "PlayReady") {
remoteCDM = createAndOpenRemoteCDM(
"PlayReady",
playreadyDeviceInfo,
getPlayreadyPssh()
);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(getWidevinePssh());
}
// Inject the new challenge into the request body
if (drmInfo.bodyType === "json") {
const jsonBody = JSON.parse(body);
const injectedBody = jsonReplaceValue(jsonBody, remoteCDM.challenge);
setBody(JSON.stringify(injectedBody));
} else if (drmInfo.bodyType === "buffer") {
setBody(base64ToUint8Array(remoteCDM.challenge));
} else {
setBody(atob(remoteCDM.challenge));
}
}
// fetch POST interceptor // fetch POST interceptor
(function () { (function () {
const originalFetch = window.fetch; const originalFetch = window.fetch;
@ -799,14 +725,144 @@ function handleLicenseMode({
if (method === "POST") { if (method === "POST") {
let body = config.body; let body = config.body;
if (body) { if (body) {
const drmInfo = detectDRMChallenge(body); if (body instanceof ArrayBuffer || body instanceof Uint8Array) {
const buffer = body instanceof Uint8Array ? body : new Uint8Array(body);
// EME mode: block the request if a DRM challenge is detected const base64Body = window.btoa(String.fromCharCode(...buffer));
if ( if (
drmInfo.type && (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM || (!remoteCDM ||
remoteCDM.challenge === null || remoteCDM.challenge === null ||
drmInfo.base64 !== remoteCDM.challenge) && base64Body !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
// Block the request
return;
}
if (
(base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
if (!remoteCDM) {
if (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = base64ToUint8Array(remoteCDM.challenge);
config.body = injectedBody;
return originalFetch(resource, config);
}
}
if (typeof body === "string" && !isJson(body)) {
const base64EncodedBody = btoa(body);
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM ||
remoteCDM.challenge === null ||
base64EncodedBody !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
// Block the request
return;
}
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
if (!remoteCDM) {
if (base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = atob(remoteCDM.challenge);
config.body = injectedBody;
return originalFetch(resource, config);
}
}
if (typeof body === "string" && isJson(body)) {
const jsonBody = JSON.parse(body);
if (
(jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM || remoteCDM.challenge === null) &&
interceptType === "EME" interceptType === "EME"
) { ) {
foundChallengeInBody = true; foundChallengeInBody = true;
@ -815,21 +871,54 @@ function handleLicenseMode({
return; return;
} }
// LICENSE mode: replace the challenge in the request if (
if (drmInfo.type && interceptType === "LICENSE" && !foundChallengeInBody) { (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
handleLicenseMode({ jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
drmInfo, interceptType === "LICENSE" &&
body, !foundChallengeInBody
setBody: (b) => { ) {
config.body = b; foundChallengeInBody = true;
}, window.postMessage({ type: "__LICENSE_URL__", data: resource }, "*");
urlOrResource: resource, if (!remoteCDM) {
getWidevinePssh: () => foundWidevinePssh, if (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE)) {
getPlayreadyPssh: () => foundPlayreadyPssh, const {
widevineDeviceInfo, device_type,
playreadyDeviceInfo, system_id,
}); security_level,
return originalFetch(resource, config); host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = jsonReplaceValue(jsonBody, remoteCDM.challenge);
config.body = JSON.stringify(injectedBody);
}
} }
} }
} }
@ -852,14 +941,144 @@ function handleLicenseMode({
XMLHttpRequest.prototype.send = function (body) { XMLHttpRequest.prototype.send = function (body) {
if (this._method && this._method.toUpperCase() === "POST") { if (this._method && this._method.toUpperCase() === "POST") {
if (body) { if (body) {
const drmInfo = detectDRMChallenge(body); if (body instanceof ArrayBuffer || body instanceof Uint8Array) {
const buffer = body instanceof Uint8Array ? body : new Uint8Array(body);
// EME mode: block the request if a DRM challenge is detected const base64Body = window.btoa(String.fromCharCode(...buffer));
if ( if (
drmInfo.type && (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM || (!remoteCDM ||
remoteCDM.challenge === null || remoteCDM.challenge === null ||
drmInfo.base64 !== remoteCDM.challenge) && base64Body !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
// Block the request
return;
}
if (
(base64Body.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
if (!remoteCDM) {
if (base64Body.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64Body.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = base64ToUint8Array(remoteCDM.challenge);
return originalSend.call(this, injectedBody);
}
}
if (typeof body === "string" && !isJson(body)) {
const base64EncodedBody = btoa(body);
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM ||
remoteCDM.challenge === null ||
base64EncodedBody !== remoteCDM.challenge) &&
interceptType === "EME"
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
// Block the request
return;
}
if (
(base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE) ||
base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) &&
interceptType == "LICENSE" &&
!foundChallengeInBody
) {
foundChallengeInBody = true;
window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
if (!remoteCDM) {
if (base64EncodedBody.startsWith(DRM_SIGNATURES.WIDEVINE)) {
const {
device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (base64EncodedBody.startsWith(DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = atob(remoteCDM.challenge);
return originalSend.call(this, injectedBody);
}
}
if (typeof body === "string" && isJson(body)) {
const jsonBody = JSON.parse(body);
if (
(jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
(!remoteCDM || remoteCDM.challenge === null) &&
interceptType === "EME" interceptType === "EME"
) { ) {
foundChallengeInBody = true; foundChallengeInBody = true;
@ -868,18 +1087,54 @@ function handleLicenseMode({
return; return;
} }
// LICENSE mode: replace the challenge in the request if (
if (drmInfo.type && interceptType === "LICENSE" && !foundChallengeInBody) { (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE) ||
return handleLicenseMode({ jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) &&
drmInfo, interceptType === "LICENSE" &&
body, !foundChallengeInBody
setBody: (b) => originalSend.call(this, b), ) {
urlOrResource: this._url, foundChallengeInBody = true;
getWidevinePssh: () => foundWidevinePssh, window.postMessage({ type: "__LICENSE_URL__", data: this._url }, "*");
getPlayreadyPssh: () => foundPlayreadyPssh, if (!remoteCDM) {
widevineDeviceInfo, if (jsonContainsValue(jsonBody, DRM_SIGNATURES.WIDEVINE)) {
playreadyDeviceInfo, const {
}); device_type,
system_id,
security_level,
host,
secret,
device_name,
} = widevineDeviceInfo;
remoteCDM = new remoteWidevineCDM(
device_type,
system_id,
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundWidevinePssh);
}
if (jsonContainsValue(jsonBody, DRM_SIGNATURES.PLAYREADY)) {
const { security_level, host, secret, device_name } =
playreadyDeviceInfo;
remoteCDM = new remotePlayReadyCDM(
security_level,
host,
secret,
device_name
);
remoteCDM.openSession();
remoteCDM.getChallenge(foundPlayreadyPssh);
}
}
if (remoteCDM && remoteCDM.challenge === null) {
remoteCDM.getChallenge(foundWidevinePssh);
}
const injectedBody = jsonReplaceValue(jsonBody, remoteCDM.challenge);
return originalSend.call(this, JSON.stringify(injectedBody));
}
} }
} }
} }