anyt idea how to do that?

the easiest way to bypass this cross same origin error is
just run the chrome browser in disable web security by this args --disable-web-security

or the other way is:

we've to do some modification in browser's extension worker.js

pass the iframe selector in executeBrowserScript
parse the iframe selector from raw javascript code
use that selector to get the iframe tag
after the we can get the frameId of that iframe by await sendCommand(tabId, "DOM.querySelector.....)
then use that frameId to specifically to execute code in the iframe's document chrome.scripting.executeScript({ target: { tabId: tabId, frameIds: [frameId] },

to locate element in iframe, we need to define a sepecial constant named IFRAMESELCTOR

      const res_from_browser = recaptcha_webview?.executeBrowserScript(`
        const IFRAMESELCTOR = "querySelector('iframe[title^="recaptcha challenge"]')"
        const table = document.querySelector("#rc-imageselect-target > table")
        return table ? table.outerHTML : null;
      `);

this is more like a pseudo code:

 async function evalInTab(tabId, code, awaitPromise, evalId) {
  const frames = await chrome.webNavigation.getAllFrames({ tabId });
  console.log("Frames seen by extension:", frames);
  // for running code inside the iframe doc
  // check if the code have `IFRAMESELCTOR` defined
  const iframeInfo = extractIframeInfo(code);
  if (iframeInfo) {
    const iframeSelector = iframeInfo.selector;
    if (iframeSelector) {
      log(`Executing in given iframe of selector: ${iframeSelector}, selector type: ${iframeInfo.method}`);
      // attach debugger
      if (!attachedTabs.has(tabId)) {
        await debuggerAttach(tabId);
        attachedTabs.add(tabId);
        await chrome.storage.session.set({ attached: [...attachedTabs] });
        log(`Debugger attached to tab ${tabId} for iframe evaluation`);
      }

      // get the frameid to run the raw js inside it!!
      let frameId;
      try {
        await sendCommand(tabId, "Page.enable", {});
        await sendCommand(tabId, "DOM.enable", {});
        const { root } = await sendCommand(tabId, "DOM.getDocument", { depth: -1 });
        const { nodeId } = await sendCommand(tabId, "DOM.querySelector", {
          nodeId: root.nodeId,
          selector: iframeSelector,
        });
        if (!nodeId) {
          throw new Error(`Iframe with selector "${iframeSelector}" not found.`);
        }
        const { node } = await sendCommand(tabId, "DOM.describeNode", { nodeId });
        if (!node || !node.frameId) {
          throw new Error("Could not retrieve frameId for the specified element.");
        }
        // get all frames from tab, and match the correct frame!
        console.log(`frameid: ${node.frameId}`)
        const frames = await chrome.webNavigation.getAllFrames({ tabId });
        // const match = frames.find(f => f.url.includes("recaptcha/enterprise/bframe"));
        const match = frames.find(f => f.url.includes("recaptcha/api2/anchor"));
        console.log(`numerical matched frameid: ${match.frameId}`)
        frameId = match.frameId;

      } catch (err) {
        log("Error finding frame:", err);
        try { await debuggerDetach(tabId); } catch (_) {}
        attachedTabs.delete(tabId);
        throw err;
      }

      // rewrite code so it uses `document` (iframe context) instead of iframe.contentDocument/iframeDoc
      const rewritten = rewriteCodeForIframe(code);
      log(`Rewritten code iframe: ${rewritten}`);

      // Now, execute the rewritten code inside the found frame.
      try {
        const results = await chrome.scripting.executeScript({
          target: { tabId: tabId, frameIds: [frameId] },
          world: "ISOLATED",
          func: (userScript, shouldAwait) => {
            // run user code safely by creating a Function rather than eval (still executes arbitrary code)
            return (async () => {
              const fn = new Function(userScript);
              const result = fn();
              if (shouldAwait && result instanceof Promise) {
                return await result;
              }
              return result;
            })();
          },
          args: [rewritten, !!awaitPromise], // pass the original, full code string
        });

        if (!results || results.length === 0) {
          throw new Error("Script execution in frame produced no result.");
        }
        return results[0].result;
      } catch (err) {
        log(`Error executing script in frame ${frameId}:`, err);
        throw err;
      }
    }
  }

cc: @louis030195

option to bypass SOP in executeBrowserScript #304

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

option to bypass SOP in `executeBrowserScript` #304