Function getCspTrustedTypesInfo

Picviewer CE+/dist.user.js:12678–12729

()

    }

    async function getCspTrustedTypesInfo() {
        const combinedPolicies = new Set();
        let combinedAllowDuplicates = false;
        let combinedTtDirectiveFound = false;

        const meta = document.querySelector('meta[http-equiv="Content-Security-Policy"]');
        if (meta) {
            const metaResult = parseTrustedTypes(meta.content);
            metaResult.names.forEach(name => combinedPolicies.add(name));
            if (metaResult.allowDuplicates) {
                combinedAllowDuplicates = true;
            }
            if (metaResult.ttDirectiveFound) {
                combinedTtDirectiveFound = true;
            }
        }

        return new Promise((resolve) => {
            GM_xmlhttpRequest({
                method: "HEAD",
                url: window.location.href,
                onload: function(response) {
                    const cspHeader = response.responseHeaders.split('\r\n')
                    .filter(h => h.toLowerCase().startsWith('content-security-policy:'))
                    .map(h => h.substring(26).trim())
                    .join('; ');

                    const headerResult = parseTrustedTypes(cspHeader);
                    headerResult.names.forEach(name => combinedPolicies.add(name));
                    if (headerResult.allowDuplicates) {
                        combinedAllowDuplicates = true;
                    }
                    if (headerResult.ttDirectiveFound) {
                        combinedTtDirectiveFound = true;
                    }

                    resolve({
                        names: combinedPolicies,
                        allowDuplicates: combinedAllowDuplicates,
                        ttDirectiveFound: combinedTtDirectiveFound
                    });
                },
                onerror: function(error) {
                    resolve({
                        names: combinedPolicies,
                        allowDuplicates: combinedAllowDuplicates,
                        ttDirectiveFound: combinedTtDirectiveFound
                    });
                }
            });
        });
    }

    function isTrustedTypesEnforced() {
        try {