Beta Config (Sep 19 2010)

[sidki3003]

After this update Proxomitron will also inspect files for JS content, which come as text/css.

Code:

[Patterns]
Name = "Top JS Mark: Start     10.10.09 (multi) [sd] (d.r)"
Active = TRUE
Multi = TRUE
URL = "^$TST(keyword=*.(a_js|a_jssigns).*)"
Limit = 4
Match = "(^\s|ø|þ||»¿|¿)$TST(mHtml=0*)$STOP()(<!--|)\1"
Replace = "\1\þ\þ\ø"

Name = "Top Sniff: JS & VBS Content     10.10.09 [sd] (d.2 l.3)"
Active = TRUE
URL = "($TST(hCT=*html)|$TYPE(css)|$TYPE(oth))$TST(uHost=*)(^$TST(keyword=*.(a_js|a_jssigns|i_level:[12]).*))"
Limit = 5500
Match = "þþø$STOP()$TST(mHtml=0*)($TST(comment=1)[^\r\n]+\s(<!--[^\r\n]+\s)+|)"
        "(; ;+( /\**\*/)+)+ ("
        "//|((\( |)function(\s[^( ]+|)|(un|)escape|eval|if) \("
        "|var\s|sub\s|try {|new[ ](Object|Function) \("
        "|(document|window|self).[a-z]"
        "|[a-z_$][a-z0-9_.]+ (\= ("
        "($AVQ("*) ;|(^")(new[ ][^ \r\n;]+|[#*:*] ;|[a-z_$][a-z0-9_.$]+ [;{[(]))"
        "|\[+ {(^?++{1,70}: " <)(??)\5$SET(script=s-js)|[[{(]"
        ")"
        "|\([{[]+"(?)\5$SET(script=s-js)"
        ")"
        ")"
        ""
        "&"
        "($TST(hOrigRef=\4)|)($IHDR(Content-Type:( ) \6)|)$SET(0=Killed \9)"
        "("
        "($TST(\6=image/*)$SET(9=image)|$TST(flag=*.cont_typ_b:[12].*)$SET(9=blocking flag))"
        "($TST(volat=*.log:[12]c.*)$ADDLST(Log-Rare,WEB JS_Sniff \0 \t\u Ref: \4 CT: \6)|)"
        "|"
        "$TST(flag=*.adurl:1.*)(^$TST(keyword=*.(a_ads|a_js|a_adjs).*))"
        "$URL((*(:)\3)+{1}//("
        ""
        "($LST(AdHosts-J))\8$SET(1=\7\r\n\r\n)$SET(9=AdHj \8)"
        "|(^$TST(flag=*.adhost:[#*:0].*))($LST(AdHosts))\8(^[a-z0-9])$SET(9=AdH \8)"
        "|([^/]++.|)($LST(AdDomains))\8(^[a-z0-9])$SET(9=AdD \8)"
        "|[^/?]+("
        "(^$TST(flag=*.adpath:[#*:0].*))*[/._?&;=-]($LST(AdPaths))\8(^[a-z0-9])$SET(9=AdP \8)"
        "|(^$TST(keyword=*.a_track_s.*))"
        "*[/.=_-]($LST(AdPaths-J)(^[a-z0-9]))\8$SET(1=\7\r\n\r\n)$SET(9=AdPj \8)"
        ")"
        ""
        "))"
        ")"
        ""
        "|"
        "(^$TST(mHtml=*ajax)|$TST(volat=*.post:1.*))$SET(0=Refetch)"
        "((^$TST(\5=*))|$TST(\5=??)"
        "$TST(volat=*.log:2*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Sniff s-js \t\u Ref: \4 CT: \6)PrxFail$TST()"
        ")($TST(uProt=\5&https:)$TST(keyword=*.i_ssl_h:[12].*)$SET(3=http://https-px-.)|$SET(3=\5//))"
        "($OHDR(Referer:( ) \#)|)"
        "$SET(9=$GET(uHost)$GET(uPort)\p\q)"
        "$ADDLST(Mem-ScriptSrc,$WESC(\9)(^?))$SET(8=\3\9?prx-sniff:javascript&prx-ref:\@)"
        "$SET(1="
        "<!--\r\n"
        "(function () {\r\n"
        "  var bUrl = "\8";\r\n"
        "  if (document.write && window.prxO && prxO.oiLoaded == 1)\r\n"
        "    document.write("<script type=\\"text/javascript\\" src=\\"" + bUrl + "\\"></script>");\r\n"
        "  else {\r\n"
        "    if (!window.PrxAppendJs)\r\n"
        "      window.PrxAppendJs = function (aUrl) {\r\n"
        "        var scr = document.getElementsByTagName("script"),\r\n"
        "        xns = document.documentElement.namespaceURI,\r\n"
        "        tag = xns ? document.createElementNS(xns, "script") : document.createElement("script");\r\n"
        "        tag.type = "text/javascript"; tag.src = aUrl;\r\n"
        "        scr = scr[scr.length - 1]; scr.parentNode.appendChild(tag);\r\n"
        "      }\r\n"
        "    PrxAppendJs(bUrl);\r\n"
        "    window.prxO && prxO.oInt && prxO.oInt.inFooter(4, "Late JS", "$ESC(\0 - \2 - \6)", 1);\r\n"
        "  }\r\n"
        "}) ();\r\n\r\n"
        ")"
        ""
        "&"
        "($TST(uFile=;+([^,;=]+)\2*)|$SET(a=\q)($TST(a=(\2[&;]*|\2))|$SET(2=/)))"
        "($TST(volat=*.log:2*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Sniff \0 \t\u Ref: \4 CT: \6)|)"
Replace = "// <br><br> PROX: SCRIPT REPLACED BY JS SNIFFER \(\0\). <br><br>\r\n\r\n"
          "\1"
          "if (window.prxO && prxO.oNce) {\r\n"
          "  if (!prxO.oNce.ncJsKills) prxO.oNce.ncJsKills = [];\r\n"
          "  prxO.oNce.ncJsKills.push(["Sniffer", "   $ESC(\0 - \2 - \6)"])\r\n"
          "}\r\n"
          "//-->$SET(a=)\k"

Name = "Top JS: Mark End     10.10.09 [sd] (d.r)"
Active = TRUE
URL = "^$TST(keyword=*.(a_js|a_jssigns).*)"
Limit = 3
Match = "þþø$STOP()"