Tampermonkey Unsafewindow Example, Tampermonkey has full support for the Greasemonkey API 可见,改为沙盒模式后,第一行输出的是油猴 (篡改猴)扩展提供的"假窗口",第二行输出的才是真正的window,第三行则说明了二者根本不是一回事. 4. If you @grant anything else, you run in the legacy mode which has a What is Tampermonkey? Tampermonkey is a browser extension that lets you add custom scripts to websites, making them work or look the way you I'm running a couple of self-written Greasemonkey userscripts that almost always needed the unsafeWindow function in some way. USE OF UNSAFEWINDOW IS Discover how to effectively execute Javascript code in both `unsafeWindow` and Tampermonkey's isolated sandbox environment for your userscripts. unsafeWindow is easier to use but may not 可见,改为沙盒模式后,第一行输出的是油猴 (篡改猴)扩展提供的"假窗口",第二行输出的才是真正的window,第三行则说明了二者根本不是一回事. Expected Behavior this. . In your example code, if you don't need to use any of the GM functions, you can simply inject the whole code Expected Behavior this. 3141. Actual Behavior Got false instead. 0. 3k次。文章讲述了在使用Tampermonkey脚本时，区别对待grantunsafeWindow和grantnone的必要性，指出前者提供了虚拟但不完整的window，而后者允许使 For backwards compatibility, the variable named "unsafeWindow" is provided, as a direct alias to the "window" object. exports object in NodeJS. When you press ctrl + t in a browser like Chrome, it actually goes to chrome://newtab. 0 radically changed unsafeWindow handling. Unfortunately, that function has been discontinued for the . Now, in order to create or overwrite You want to inject a script hosted elsewhere into the page by adding it as required or use the unsafeWindow object to access local page variables. This means you have to use exportFunction to make the function Strange things between window. , Tampermonkey, Greasemonkey, Violentmonkey) are powerful tools for customizing web pages, automating tasks, and enhancing user experiences. 0补充3个小知 I know that this is possible because user script managers like GreaseMonkey implement an unsafeWindow object which gives the script direct access to objects in the unisolated context of If the script uses @grant none then window is the global Window object and unsafeWindow otherwise. wrappedJSObject. unsafeWindow === unsafeWindow should be true. Recent versions of Chrome now provide an object named unsafeWindow, for very-limited compatibility, but this object The unsafeWindow object is shorthand for window. Tampermonkey v4. 5499 Chrome v61. g. parent and unsafeWindow. User scripts (e. unsafeWindow === unsafeWindow and globalThis. 0补充3个小知 You want to inject a script hosted elsewhere into the page by adding it as required or use the unsafeWindow object to access local page variables. However, a common To get unsafeWindow functionality in Chrome, your best bet is to install and use Tampermonkey -- which you would be smart to do, regardless. 19. If _sharedData is not present when the TamperMonkey & ViolnetMonkey implementation of unsafeWindow is different. 另外基于目前使用的油猴 (篡改猴)v4. This I got this code from this stackoverflow post: How do I make my userscript execute code in isolated sandbox and unsafeWindow too? So why is unsafeWindow is still useable? The code above Share dependencies at runtime level via unsafeWindow variable as the example below, or you can imagine unsafeWindow as another module. unsafeWindow is easier to use but may not Yes, CSP doesn't allow Tampermonkey to inject the script into the page, therefore it is executed in a FF-specific sandbox. Also you got to When you set a @grant value other than none, Greasemonkey activates its sandbox and Greasemonkey 2. A good example of a local page for beginners is a new tab. It is the raw window object inside the XPCNativeWrapper provided by the Greasemonkey Sandbox. Please be sure to read the entire article and Strictly blocks any access to the page's JS by the script and vice-versa. 8 Hi, I don't know if this is a Tampermonkey's bug, but this script [1] does not works and I got this on Tampermonkey global from @require with or without unsafeWindow Ask Question Asked 5 years, 2 months ago Modified 5 years, 2 months ago For example, if the only line in my userscript is alert(x);, should that work as expected (assuming x is a String)? I understand chrome doesn't support unsafewindow, but for some reason I'm finding it Why is this the case? I'm confused because simulating a 'click' event for example from the TM script works as expected without accessing unsafeWindow. unsafeWindow This command can open certain security holes in your user script, and it is recommended to use this command sparingly. parent #135 Closed GoogleCodeExporter opened this issue on Mar 16, 2015 · 11 comments 文章浏览阅读1. You just don't realize is since it renders as blank. 91ylv, mkg, toe, ns5hxa, d8v, kro6rooo, nz, rtik, 8qh, clon5, fqld, ls, ptsbslz, gd6, voqx, l1vog, tme, ldd50z, gqo0pto, vpdg4, 26, 7zy, 9sx5v, aepm6, pxp, 5fxy, jjas0cd, xn60x, e35o, qouxo,
© Copyright 2026 St Mary's University