金山毒霸和Chrome浏览器植入脚本导致网页报错

  1 (function(win, undefined) {
var SELECTORS = transformSelector;

function insertTemplate(callback) {
  getTemplate('views/price-alert-messager.html', function(template) {
    $(document.body).append(template).attr('data-ruyitao-price-mind-inserted', 1)
    callback && callback()
  })
}

function getItemTemplate(item) {
  var currentPrice = parseFloat(item.original_price) - parseFloat(item.reduction_price)
  var html = '<li class="' + SELECTORS('pamb-message') + '" data-id=' + item.id +'>'
  html += '<div class="' + SELECTORS('pamb-product-img') + '"><img src="' + item.small_image +'" /></div>'
  html += '<div class="' + SELECTORS('pamb-product-info') + '">'
  html += '<div class="' + SELECTORS('pamb-product-title') + '">' + item.title + '</div>'
  html += '<div class="' + SELECTORS('pamb-current-price-wrap') + '"><span>已经降到了</span>'
  html += '<span class="' + SELECTORS('pamb-current-price') + '">￥' + currentPrice.toFixed(2) + '</span></div>'
  html += '<div class="' + SELECTORS('pamb-price-reduction-wrap') + '">降了￥' + item.reduction_price + '</div></div></li>'
  return html
}

function bindEvents() {
  $('#' + SELECTORS('pamb-messages')).delegate('.' + SELECTORS('pamb-message') , 'click', function() {
    var itemId = $(this).attr('data-id')
    var url = 'http://ruyi.taobao.com/item/' + encodeURIComponent(itemId) + '?utm_medium=ext&utm_source=ruyi'
    openTab(url, true)
  })

  $('#' + SELECTORS('pamb-close')).click(function() {
    hide()
  })
}

function show() {
  var $wrapper = $('#' + SELECTORS('pamb-wrapper'))
  $wrapper.css('bottom', 0)
}

function hide() {
  var $wrapper = $('#' + SELECTORS('pamb-wrapper'))
  var outerHeight = $wrapper.outerHeight()
  $wrapper.css('bottom', -outerHeight + 'px')
}

function clearUnreadPriceMindMessages() {
  chrome.runtime.sendMessage({
    topic: 'clear_unread_price_mind_messages'
  })
}

function render(messages) {
  if (messages && messages.length > 0) {
    var templateInserted = $(document.body).attr('data-ruyitao-price-mind-inserted') == 1
    if (templateInserted) {
      callback()
    } else {
      insertTemplate(callback)
    }
  }

  function callback() {
    var html = ''
    var i = 0
    var len = messages.length
    len = len < 3 ? len : 3
    for (; i < len; i++) {
      html += getItemTemplate(messages[i])
    }

    $('#' + SELECTORS('pamb-messages')).html(html)
    !templateInserted && bindEvents()
    show()
    clearUnreadPriceMindMessages()
  }
}

function replaceTemplateSelectors(html) {
  return html.replace(/ruyitao-selector-prefix-([w_-]+)/g, function() {
    return transformSelector(arguments[1]);
  });
}

function getTemplate(pageName, callback) {
  var self = this;
  chrome.runtime.sendMessage({
    topic: "get_template",
    page: pageName
  }, function (res) {
    var template = replaceTemplateSelectors(res.template);
    sanitizeHTML(template, function(sanitizedTemplate) {
      callback(sanitizedTemplate);
    })
  });
}

function sanitizeHTML (htmlString, callback) {
  var rScript = /<script[sS]*?</scripts*>/g;
  var rOnEvent = /on[A-z]+s*=s*['"]?[^>"]+['"]?/g;
  var rHref = /hrefs*=s*['"]?s*javascript:/g;
  var result = htmlString.replace(rScript, '').replace(rOnEvent, ' ').replace(rHref, ' ');
  callback(result)
}

function openTab(url, select) {
  select = select || false;
  chrome.runtime.sendMessage({
    topic: 'tab_open',
    url: url,
    selected: select
  });
}

var _selectors = {};
var _selectors_seen = {};
function generateRandomString() {
  var rand_str = String.fromCharCode(Math.floor(Math.random() * 25 + 97)) +
    Math.floor(Math.random() * 134217728).toString(36);
  if ( typeof _selectors_seen[rand_str] != "undefined" ) {
    return generateRandomString();
  } else {
    _selectors_seen[rand_str] = true;
    return rand_str;
  }
}

function transformSelector(selector) {
  // return 'ruyitao-' + selector;
  if ( typeof _selectors[selector] != "undefined" ) {
    return _selectors[selector];
  }
  // @if firefox
  var prefix = 'ryt-';
  // @else
  var prefix = '';
  // @endif
  return _selectors[selector] = prefix + generateRandomString();
}

chrome.runtime.onMessage.addListener(function(req, sender) {
Uncaught TypeError: Cannot read property 'onMessage' of undefined
  switch (req.topic) {
  case 'show_price_mind_messages':
    render(req.messages)
    break;
  }
});
})(window);

　　近来做javascript开发，应该是做javascript平台维护，遇到很多莫名其妙的问题，脚本报错，刚开始以为是浏览器兼容性问题，后来试了很多方法，自身代码没问题，就是找不到原因，利用浏览器自带的调试工具，发现是软件在偷偷的干事情， 以上就是证据。

　　报错内容：Uncaught TypeError: Cannot read property 'onMessage' of undefined

　　类似的还有金山毒霸在网页中内嵌脚本，嵌入脚本都没关系，你不要导致别人的应用程序报错啊。因为毒霸植入的脚本导致ie浏览器下有兼容性问题而报错，对于开发和客户来说根本不知道是什么原因报错啊。找到原因之后，我亲自联系过毒霸开发人员交流，最后毒霸开发人员更新他们的内库后解决问题。通过此事还认识了一位c++高手，可惜他不懂网页，好几次问我javascript方面的东西，瞬间变成x牛了。

　　以下是毒霸内嵌脚本，留个记号： 

<script defer="" type="text/javascript">
    function getOffsetLeft(o)
    {
       var left=0;
       while (o!=null && o!=document.body)
       {
          left+=o.offsetLeft;
          o=o.offsetParent;
       }
       return left;
    }
      
    function getOffsetTop(o)
    {
       var top=0;
       while(o!=null && o!= document.body)
       {
          top+=o.offsetTop;
          o=o.offsetParent;
       }
       return top;
    }
     
    function GetUrlFromPos(x, y, dep, doc)
    {
       var xVarTemp = 0;
       var yVarTemp = 0;
       if (!doc) doc = document;
       if (!dep) dep = 1;
       if (dep == 4)
       {
            return "";
       }
       var ele = doc.elementFromPoint(x, y);
       if (ele)
       {
          if (ele.nodeName == "A") 
          {
            return ele.href;
          }
          if (ele.nodeName == "AREA")
          {
             return ele.href;
          }
          
          if (ele.nodeName == "IFRAME" || ele.nodeName == "FRAME")
          {
               xVarTemp = x - getOffsetLeft(ele) + doc.body.scrollLeft + document.documentElement.scrollLeft;
               yVarTemp = y - getOffsetTop(ele) + doc.body.scrollTop + document.documentElement.scrollTop;
               if (x == xVarTemp && yVarTemp == y)
               {
                    return "";
               }
               x = xVarTemp;
               y = yVarTemp;
               //alert(x + ' ' + getOffsetLeft(ele) + ' ' + doc.body.scrollLeft + document.documentElement.scrollLeft + ' ' + y + ' ' + getOffsetTop(ele) + ' ' + doc.body.scrollTop + document.documentElement.scrollTop)
               return GetUrlFromPos(x, y, dep+1, ele.contentDocument || ele.contentWindow.document);
          }
          else
          {
             var p = ele.parentElement;
             for (var i=0; i < 4; i++)
             {
                if (p && p.nodeName == "A") 
                {
                    return p.href;
                }
                if (p && p.nodeName == "AREA")
                {
                     return p.href;
                }
                if ((p && p.parentElement))
                {
                   p = p.parentElement;
                }
                else
                {
                   break;
                }
             }
          }
       }
       return "";
    }
</script>