ensure data isn't undefined before csp fallback #140

quoid · Jun 15, 2021 · 392f769 · 392f769
1 parent 1090a55
commit 392f769
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/extension/Userscripts Extension/UserscriptsSafari.js b/extension/Userscripts Extension/UserscriptsSafari.js
@@ -128,7 +128,9 @@ function cspFallback(e) {
     // since it's fair to assume injection was blocked for extension's content script
     if (e.effectiveDirective === "script-src") {
         // get all "auto" code
-        if (Object.keys(data.js.auto).length != 0 && cspFallbackAttempted < 1) {
+        // other extensions can trigger a security policy violation event
+        // make sure data var is not undefined before attempting fallback
+        if (data && Object.keys(data.js.auto).length != 0 && cspFallbackAttempted < 1) {
             let n = {"js": {"auto": {}}};
             n.js.auto = data.js.auto;
             parseCode(n, true);