Obfuscated window atob calls - are they necessary ?

[ahmed-rafiullah]

https://github.com/uBlockOrigin/uBOL-home/blob/d8b92e3851eb5ebe70c429254cbad8594c1a1d24/chromium/rulesets/scripting/scriptlet/ublock-filters.trusted-replace-node-text.js#L372C14010-L372C14080

Hi i embed ubo-lite in an extension, CWS flagged it for containing "obfuscated code", this piece of code flags it

window.atob(\"PGRpdiBjbGFzcz0idGV4dC1kYW5nZXIgZm9udC13ZWln... (truncated for clarity)

This returns

<div class="text-danger font-weight-bold h5 mt-1">Captcha image failed to load.<br><a onclick="location.reload()" style="color:#6270da;cursor:pointer" class="text-decoratione-none">Please refresh the page. <i class="fa fa-refresh"></i></a></div>

Is there a reason this is done this way ? any issues if i replace call site, with the converted text instead of the ascii code.

[stephenhawk8054]

uBOL compiles all the scriptlets filters into the extensions. You need to find which exact filter is for that.

[stephenhawk8054]

It's from the zefoy.com filter (you can search for it in the repo). It's simply because the code is copied from the site's own code without any modifications, as the site used anti-adblock and refused to load their own necessary code.

[ahmed-rafiullah]

thank you @stephenhawk8054 for this, that helps a bunch!