1

I am developing an IE extension which works on sites opened in Internet Explorer. It is designed to work the same way as a chrome extension. I am trying to implement the Background function of chrome extension using c++ and the content script by injecting JS into the current web page. The content script, I am trying to load via IHTMLWindow2 execScript on Document load event. Now that I need to inject JS files directly I tried the following.

Had the JS file under a folder inside the Project destination and tried to inject using physical path. 

std::wstring filePath(_T("d:/xx/xxx/x/x/Content/myFile.js"));
scriptText = scriptText+ filePath + endScript;
VARIANT vrt = {0};
HRESULT hrexec = ifWnd->execScript(SysAllocString(scriptText.c_str()),L"javascript", &vrt);

The scriptText has some javascript code to create script element with type and src attributes. The filePath holds the physical path towards the js file.[Also tried relative path but it was a no go]

The above was not working correctly in IE9 due to mixed content issue, upon which I researched to figure out that IE9 expects the js file to be retrieved from a server rather than local physical path. The console throws me the below exception.

SEC7111: HTTPS security is compromised by file:<filepath>
SCRIPT16388: Operation aborted

I am pretty much not sure is there any round about for injecting Javascript to the current DOM from the physical path. Please help me on this.

Also let me know is there any other possibility of injecting the JS file from the current working directory into the DOM.

manuell
  • 7,528
  • 5
  • 31
  • 58
Naddy
  • 21
  • 7
  • the `execScript` method I know, is the COM method from the `IHTMLWindow2` interface, and that method takes a string containing some JavaScript, not a JavaScript file name. – manuell Mar 05 '14 at 14:17
  • mauell, I m trying to do the same, writing a script containing javascript. 'scriptText' would contain javascript content such as creating a head element and creating a script element and i m appending the src for the script element in the 'filePath' and the later script in 'endScript'. – Naddy Mar 07 '14 at 06:29
  • Let me know if you managed to solve your problem with my answer. – manuell Mar 10 '14 at 08:47
  • But what i actually wanted is to insert a file rather than using the script directly – Naddy Mar 10 '14 at 08:55
  • What you **wanted** is one thing, and what IE will let you do is another. Don't forget to notify me if, some day, you find a way of bypassing security restrictions. Anyway, I don't understand why you don't just read the file yourself and inject it as I explained in my answer. – manuell Mar 10 '14 at 09:23
  • So, did you inject the whole file with my method? – manuell Mar 18 '14 at 15:34
  • I hosted my script on a server and i retrieved from it. Thank you for your response. – Naddy Mar 26 '14 at 07:16

1 Answers1

0

You don't have to inject a <SCRIPT> tag in the DOM.

If your js file contains:

var strHello = "Hello";
function SayHello() { alert( strHello ); }

you may just read the file into memory, construct a BSTR string with it, and pass that string to IHTMLWindow2::execScript.

Later, another call to execScript with the string SayHello(); will popup the alert box. The code you injected is still here.

manuell
  • 7,528
  • 5
  • 31
  • 58
  • My scripting lines extend to 100 lines :) I feel having all those script lines written inside execScript would not look good. So I'm using a file to hold the scripts and then inject using – Naddy Mar 07 '14 at 12:18
  • 1
    There is NO PROBLEM in passing to `execScript` a `BSTR` containing hundreds of lines of code. I do it with more than 1K lines. Anyway, internally, the JS files are read and their content ends up injected in a similar way... Try it, it will solve your problem. – manuell Mar 07 '14 at 12:31
  • But what i actually wanted is to insert a file rather than using the script directly – Naddy Mar 10 '14 at 08:56