From e4a0ee9ac078b5f40d243845aef2db5dd2e0d403 Mon Sep 17 00:00:00 2001
From: Percs <83934299+Percslol@users.noreply.github.com>
Date: Fri, 1 Nov 2024 13:46:09 -0500
Subject: [PATCH] fix: purge credentialless

---
 src/client/dom/element.ts    |  1 +
 src/shared/rewriters/html.ts | 14 +-------------
 2 files changed, 2 insertions(+), 13 deletions(-)

diff --git a/src/client/dom/element.ts b/src/client/dom/element.ts
index 48c79a2..1b6c89e 100644
--- a/src/client/dom/element.ts
+++ b/src/client/dom/element.ts
@@ -25,6 +25,7 @@ export default function (client: ScramjetClient, self: typeof window) {
 		nonce: [self.HTMLElement],
 		integrity: [self.HTMLScriptElement, self.HTMLLinkElement],
 		csp: [self.HTMLIFrameElement],
+		credentialless: [self.HTMLIFrameElement],
 		src: [
 			self.HTMLImageElement,
 			self.HTMLMediaElement,
diff --git a/src/shared/rewriters/html.ts b/src/shared/rewriters/html.ts
index 735bef2..f27c655 100644
--- a/src/shared/rewriters/html.ts
+++ b/src/shared/rewriters/html.ts
@@ -149,6 +149,7 @@ export const htmlRules: {
 		nonce: "*",
 		integrity: ["script", "link"],
 		csp: ["iframe"],
+		credentialless: ["iframe"],
 	},
 	{
 		fn: (value: string, meta: URLMeta) => rewriteSrcset(value, meta),
@@ -216,19 +217,6 @@ function traverseParsedHtml(
 				}
 			}
 		}
-		/*
-		for (const [attr, value] of Object.entries(node.attribs)) {
-			if (attr.startsWith("on")) {
-				console.log(`${attr}: ${value}`);
-				node.attribs[`data-scramjet-${attr}`] = attr;
-				node.attribs[attr] = rewriteJs(
-					value as string,
-					`(inline ${attr} on element)`,
-					meta
-				);
-			}
-		}
-		*/
 	}
 
 	if (node.name === "style" && node.children[0] !== undefined)