Hao0321/claude-skill-social-post

"account_key": "expected-account",   "post_key": "platform-post-id",   "post_permalink": "https://www.instagram.com/p/example",

"post_key": "platform-post-id",   "post_permalink": "https://www.instagram.com/p/example",   "observed_url": "https://www.instagram.com/p/example",

"post_permalink": "https://www.instagram.com/p/example",

"observed_url": "https://www.instagram.com/p/example",

{       "platform_comment_id": "visible-stable-id",       "comment_permalink": "https://www.instagram.com/p/example/c/id",

"platform_comment_id": "visible-stable-id",       "comment_permalink": "https://www.instagram.com/p/example/c/id",       "observed_parent_post_permalink": "https://www.instagram.com/p/example",

"comment_permalink": "https://www.instagram.com/p/example/c/id",

"observed_parent_post_permalink": "https://www.instagram.com/p/example",

"plan_digest": "sha256-of-fresh-locator-plan",   "preparation_id": "sha256-of-preparation-core",   "observed_url": "https://www.instagram.com/p/example",

"preparation_id": "sha256-of-preparation-core",   "observed_url": "https://www.instagram.com/p/example",   "observed_at": "2026-08-28T12:00:15+00:00",

"observed_url": "https://www.instagram.com/p/example",

"comment_fingerprint": "fingerprint-id",   "reply_hash": "sha256-from-action",   "observed_url": "https://www.instagram.com/p/example",

"reply_hash": "sha256-from-action",   "observed_url": "https://www.instagram.com/p/example",   "observed_at": "2026-08-28T12:00:30+00:00",

"observed_url": "https://www.instagram.com/p/example",

closed inventory 固定涵蓋所有 `scripts/comment_chrome_*.mjs`、`scripts/comment_js_architecture_*.mjs`、`scripts/comment_fixture_browser_e2e.mjs` 與 `scripts/comment_adapter_fixtures/fixture-runtime.js`；新增符合 glob 的模組會自動被發現，但在加入 reviewed exact manifes

"comment_fingerprint": "fingerprint-id",   "reply_hash": "sha256-from-action",   "observed_url": "https://www.instagram.com/p/example",

"reply_hash": "sha256-from-action",   "observed_url": "https://www.instagram.com/p/example",   "observed_at": "2026-08-28T12:05:00+00:00",

"observed_url": "https://www.instagram.com/p/example",

"account_key": "expected-account",   "post_key": "platform-post-id",   "post_permalink": "https://platform.example/post/id",

"post_key": "platform-post-id",   "post_permalink": "https://platform.example/post/id",   "observed_parent_post_permalink": "https://platform.example/post/id",

"post_permalink": "https://platform.example/post/id",

"observed_parent_post_permalink": "https://platform.example/post/id",

[Credential-related source omitted]

Default address: http://127.0.0.1:8766. Python 3.10+ is required; the runtime uses

are blocked. Any concurrent activation requires rebasing and fresh review. To revert, propose the preserved original/prior text for the same scope and review/activate it normally; never delete evidence or bypass approval by replacing

To revert, propose the preserved original/prior text for the same scope and review/activate it normally; never delete evidence or bypass approval by replacing the pointer. Back up the whole private data directory, not just its active pointe

review/activate it normally; never delete evidence or bypass approval by replacing

- For You 每次請求結合追蹤帳號的近期貼文，以及 Phoenix／SimClusters 找到的非追蹤帳號貼文，再過濾、排序與重排。它不是一篇貼文固定擁有的「全站流量分數」。[官方架構](https://github.com/xai-org/x-algorithm/blob/3aa0fa336c4a20e4149b6151629b6050897bb8a5/README.md#overview)

- Phoenix 預測**該讀者**對各種動作的可能性，包括喜歡、回覆、轉發、引用、分享、點擊、停留、追蹤，以及不感興趣、靜音、封鎖、檢舉。排名器以權重組合這些預測；權重不是實際互動次數的兌換率。不可說「一則回覆抵 N 個讚」或依公開預設權重計算某篇的真實分數。[官方說明](https://github.com/xai-org/x-algorithm/blob/3aa0fa336c4a20e4149b6151629b6050897bb8a5/README.md#scorin

- 排序還有作者多樣性、非追蹤內容折減、新作者調整與 VMRanker 重排；可見性、已看過、重複、封鎖／靜音、部分對話分支等過濾也會影響出現機會。來源點擊或單一貼文格式不足以保證觸及。[官方說明](https://github.com/xai-org/x-algorithm/blob/3aa0fa336c4a20e4149b6151629b6050897bb8a5/README.md#filtering)

- `home-mixer/params/param.rs` 的數字是公開時的主要預設，線上實驗與設定可變；9 月 18 日更新了可見性標籤的透明資訊。部分防濫用規則與提示詞未公開，因此不能聲稱已掌握完整線上演算法。[設定邊界](https://github.com/xai-org/x-algorithm/blob/3aa0fa336c4a20e4149b6151629b6050897bb8a5/README.md#experiments-and-configuration)

- 一般貼文上限通常為 280，Premium 長文可到 25,000；以當前官方說明及實際 composer 計數為準，不硬寫中文、emoji、網址各算幾字。[X 貼文類型](https://help.x.com/en/using-x/types-of-posts)

#!/usr/bin/env python3

data-account-key="fixture-account"       data-post-key="fixture-facebook-post"       data-post-permalink="https://fixture.invalid/facebook/posts/fixture-facebook-post"

data-post-key="fixture-facebook-post"       data-post-permalink="https://fixture.invalid/facebook/posts/fixture-facebook-post"       data-observed-at="2026-08-28T10:00:00+08:00"

data-post-permalink="https://fixture.invalid/facebook/posts/fixture-facebook-post"

data-fixture-node-id="facebook-comment-node-001"              data-author-key="viewer-facebook"              data-parent-post-permalink="https://www.facebook.com/fixture/posts/fixture-facebook-post"

data-author-key="viewer-facebook"              data-parent-post-permalink="https://www.facebook.com/fixture/posts/fixture-facebook-post"              data-is-own="false">

data-parent-post-permalink="https://www.facebook.com/fixture/posts/fixture-facebook-post"

data-is-own="false">       <a data-fb-comment-permalink          href="https://fixture.invalid/facebook/posts/fixture-facebook-post?comment_id=fb-comment-001">2 小時</a>

<a data-fb-comment-permalink          href="https://fixture.invalid/facebook/posts/fixture-facebook-post?comment_id=fb-comment-001">2 小時</a>       <strong data-fb-author data-fixture-node-id="facebook-author-node-001">Facebook Fixture Viewe

href="https://fixture.invalid/facebook/posts/fixture-facebook-post?comment_id=fb-comment-001">2 小時</a>

data-fixture-node-id="facebook-comment-node-decoy"              data-author-key="viewer-facebook-decoy"              data-parent-post-permalink="https://www.facebook.com/fixture/posts/fixture-facebook-post"

data-author-key="viewer-facebook-decoy"              data-parent-post-permalink="https://www.facebook.com/fixture/posts/fixture-facebook-post"              data-is-own="false">

data-parent-post-permalink="https://www.facebook.com/fixture/posts/fixture-facebook-post"

Executable file

data-account-key="fixture-account"       data-post-key="fixture-instagram-post"       data-post-permalink="https://fixture.invalid/instagram/p/fixture-instagram-post"

data-post-key="fixture-instagram-post"       data-post-permalink="https://fixture.invalid/instagram/p/fixture-instagram-post"       data-observed-at="2026-08-28T10:00:00+08:00"

data-post-permalink="https://fixture.invalid/instagram/p/fixture-instagram-post"

data-fixture-node-id="instagram-comment-node-001"           data-author-key="viewer-instagram"           data-parent-post-permalink="https://www.instagram.com/p/fixture-instagram-post"

data-author-key="viewer-instagram"           data-parent-post-permalink="https://www.instagram.com/p/fixture-instagram-post"           data-is-own="false">

data-parent-post-permalink="https://www.instagram.com/p/fixture-instagram-post"

data-is-own="false">         <a data-ig-comment-permalink            href="https://fixture.invalid/instagram/p/fixture-instagram-post/c/ig-comment-001">3 小時</a>

<a data-ig-comment-permalink            href="https://fixture.invalid/instagram/p/fixture-instagram-post/c/ig-comment-001">3 小時</a>         <span data-ig-author data-fixture-node-id="instagram-author-node-001">Instagram Fixture Viewer</span

href="https://fixture.invalid/instagram/p/fixture-instagram-post/c/ig-comment-001">3 小時</a>

data-fixture-node-id="instagram-comment-node-decoy"           data-author-key="viewer-instagram-decoy"           data-parent-post-permalink="https://www.instagram.com/p/fixture-instagram-post"

data-author-key="viewer-instagram-decoy"           data-parent-post-permalink="https://www.instagram.com/p/fixture-instagram-post"           data-is-own="false">

data-parent-post-permalink="https://www.instagram.com/p/fixture-instagram-post"

data-account-key="fixture-account"       data-post-key="fixture-threads-post"       data-post-permalink="https://fixture.invalid/threads/post/fixture-threads-post"

data-post-key="fixture-threads-post"       data-post-permalink="https://fixture.invalid/threads/post/fixture-threads-post"       data-observed-at="2026-08-28T10:00:00+08:00"

data-post-permalink="https://fixture.invalid/threads/post/fixture-threads-post"

data-fixture-node-id="threads-reply-node-001"              data-author-key="viewer-threads"              data-parent-post-permalink="https://www.threads.com/@fixture/post/fixture-threads-post"

data-author-key="viewer-threads"              data-parent-post-permalink="https://www.threads.com/@fixture/post/fixture-threads-post"              data-is-own="false">

data-parent-post-permalink="https://www.threads.com/@fixture/post/fixture-threads-post"

data-is-own="false">       <a data-threads-comment-permalink          href="https://fixture.invalid/threads/post/fixture-threads-post/reply/threads-reply-001">4 小時</a>

<a data-threads-comment-permalink          href="https://fixture.invalid/threads/post/fixture-threads-post/reply/threads-reply-001">4 小時</a>       <span data-threads-author data-fixture-node-id="threads-author-node-001">Threads Fixture View

href="https://fixture.invalid/threads/post/fixture-threads-post/reply/threads-reply-001">4 小時</a>

data-fixture-node-id="threads-reply-node-decoy"              data-author-key="viewer-threads-decoy"              data-parent-post-permalink="https://www.threads.com/@fixture/post/fixture-threads-post"

data-author-key="viewer-threads-decoy"              data-parent-post-permalink="https://www.threads.com/@fixture/post/fixture-threads-post"              data-is-own="false">

data-parent-post-permalink="https://www.threads.com/@fixture/post/fixture-threads-post"

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

}:             request_id = raw.get("scan_request_id")             request = requests.get(request_id) if isinstance(request_id, str) else None

request_id = raw.get("scan_request_id")             request = requests.get(request_id) if isinstance(request_id, str) else None             if request is None:

request = requests.get(request_id) if isinstance(request_id, str) else None

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

Executable file

Executable file

} = {}) {   const page = {     url: "http://127.0.0.1:8765/instagram.html",

const page = {     url: "http://127.0.0.1:8765/instagram.html",     crossRealmEvaluate,

url: "http://127.0.0.1:8765/instagram.html",

attributes: {           "data-id": "comment-a", "data-own": "false",           "data-parent-post": "https://www.instagram.com/p/post-a",

"data-id": "comment-a", "data-own": "false",           "data-parent-post": "https://www.instagram.com/p/post-a",         },

"data-parent-post": "https://www.instagram.com/p/post-a",

author: { visible: true, text: "viewer-a" },       body: { visible: true, text: "這一集會反擊嗎？" },       "parent-post": { visible: true, attributes: { href: "https://www.instagram.com/p/post-a" } },

body: { visible: true, text: "這一集會反擊嗎？" },       "parent-post": { visible: true, attributes: { href: "https://www.instagram.com/p/post-a" } },       "reply-exhaustion-state": {

"parent-post": { visible: true, attributes: { href: "https://www.instagram.com/p/post-a" } },

comment_key: "instagram:account-a:post-a:comment-a",     },     post_permalink: "https://www.instagram.com/p/post-a",

},     post_permalink: "https://www.instagram.com/p/post-a",     comment_anchor: { platform_comment_id: "comment-a", comment_permalink: null },

post_permalink: "https://www.instagram.com/p/post-a",

Executable file

await mustReject(     () => createCommentChromeActuator().prepareReply(       new FakeTab({ ...fixture().page, url: "https://evil.example/post" }), action, plan, options,

() => createCommentChromeActuator().prepareReply(       new FakeTab({ ...fixture().page, url: "https://evil.example/post" }), action, plan, options,     ),

new FakeTab({ ...fixture().page, url: "https://evil.example/post" }), action, plan, options,

() => createCommentChromeActuator().prepareReply(       fixture().tab, action, plan,       { ...options, receiptObservedUrl: "https://user@www.instagram.com/p/post-a" },

fixture().tab, action, plan,       { ...options, receiptObservedUrl: "https://user@www.instagram.com/p/post-a" },     ),

{ ...options, receiptObservedUrl: "https://user@www.instagram.com/p/post-a" },

Executable file

Executable file

Executable file

Executable file

snapshotPlan.account.selector = "#mutated-account";     snapshotOptions.testOnly = false;     snapshotOptions.receiptObservedUrl = "https://evil.example/post";

snapshotOptions.testOnly = false;     snapshotOptions.receiptObservedUrl = "https://evil.example/post";   };

snapshotOptions.receiptObservedUrl = "https://evil.example/post";

page.nodes["parent-post"].attributes.href = "https://www.instagram.com/p/other";

Executable file

mutablePlan.submit.selector = ".mutated-submit";     mutableOptions.testOnly = false;     mutableOptions.receiptObservedUrl = "https://evil.example/post";

mutableOptions.testOnly = false;     mutableOptions.receiptObservedUrl = "https://evil.example/post";     page.url = approvedLiveUrl;

mutableOptions.receiptObservedUrl = "https://evil.example/post";

await Promise.resolve();       mutableOptions.testOnly = false;       mutableOptions.receiptObservedUrl = "https://evil.example/post";

mutableOptions.testOnly = false;       mutableOptions.receiptObservedUrl = "https://evil.example/post";       page.url = action.post_permalink;

mutableOptions.receiptObservedUrl = "https://evil.example/post";

{       suffix: "url",       mutate: (page) => { page.url = "https://evil.example/post"; },

suffix: "url",       mutate: (page) => { page.url = "https://evil.example/post"; },       error: /testOnly URL mapping is restricted to loopback hosts/,

mutate: (page) => { page.url = "https://evil.example/post"; },

Executable file

Executable file

Executable file

Executable file

import { mkdtemp, readFile, rm } from "node:fs/promises";

Executable file

Executable file

|| fields.some((field) => typeof expected[field] !== "string" || !expected[field])       || !["facebook.com", "www.facebook.com", "m.facebook.com"].includes(expected.host)       || expected.origin !== `https://${expected.host}`

|| !["facebook.com", "www.facebook.com", "m.facebook.com"].includes(expected.host)       || expected.origin !== `https://${expected.host}`       || !/^\/[A-Za-z0-9.]+\/posts\/[A-Za-z0-9]+$/u.test(expected.postPath)

|| expected.origin !== `https://${expected.host}`

|| ["origin", "host", "postPath", "commentId", "account", "parentDisplay"]         .some((field) => typeof expected[field] !== "string" || !expected[field])       || expected.origin !== `https://${expected.host}`

.some((field) => typeof expected[field] !== "string" || !expected[field])       || expected.origin !== `https://${expected.host}`       || !["facebook.com", "www.facebook.com", "m.facebook.com"].includes(expected.host)

|| expected.origin !== `https://${expected.host}`

Executable file

const expected = Object.freeze({   origin: "https://www.facebook.com", host: "www.facebook.com",

origin: "https://www.facebook.com", host: "www.facebook.com",

const crossRealm = runInNewContext(`(${readFacebookNativeChildRow.toString()})(article, expected)`,

["duplicate tracking", `${nativePath}&__tn__=R&__tn__=R`],     ["conflicting tracking", `${nativePath}&__cft__[0]=first&__cft__[0]=second`],     ["HTTP", `http://www.facebook.com${nativePath}`],

["conflicting tracking", `${nativePath}&__cft__[0]=first&__cft__[0]=second`],     ["HTTP", `http://www.facebook.com${nativePath}`],     ["wrong host", `https://evil.example${nativePath}`],

["HTTP", `http://www.facebook.com${nativePath}`],

["wrong host", `https://evil.example${nativePath}`],

["credentials", `https://user@www.facebook.com${nativePath}`],

["port", `https://www.facebook.com:8443${nativePath}`],

...[       { host: "evil.example" }, { host: "www.facebook.com:8443" },       { origin: "http://www.facebook.com" }, { origin: "https://www.facebook.com/" },

{ host: "evil.example" }, { host: "www.facebook.com:8443" },       { origin: "http://www.facebook.com" }, { origin: "https://www.facebook.com/" },       { origin: "https://facebook.com" }, { postPath: "/example.owner/posts/invalid/key" },

{ origin: "http://www.facebook.com" }, { origin: "https://www.facebook.com/" },

{ origin: "https://facebook.com" }, { postPath: "/example.owner/posts/invalid/key" },

const raw = runInNewContext(`(${callback.toString()})(element, input)`, { element: this.nodes[0], input, URL });

Executable file

Executable file

const target = Object.freeze({   platform: "facebook", account_key: "example.owner", post_key: "pfbidExample123",   post_permalink: "https://www.facebook.com/example.owner/posts/pfbidExample123",

platform: "facebook", account_key: "example.owner", post_key: "pfbidExample123",   post_permalink: "https://www.facebook.com/example.owner/posts/pfbidExample123",   platform_comment_id: "123", comment_permalink:

post_permalink: "https://www.facebook.com/example.owner/posts/pfbidExample123",

platform_comment_id: "123", comment_permalink:     "https://www.facebook.com/example.owner/posts/pfbidExample123?comment_id=123", });

"https://www.facebook.com/example.owner/posts/pfbidExample123?comment_id=123",

const crossRealm = runInNewContext(`(${readFacebookNativeRow.toString()})(article, expected)`,

(f) => { f.anchor.attrs.href = `${native.postPath}?comment_id=123&reply_id=456`; },     (f) => { f.anchor.attrs.href = `${native.postPath}?unrelated=123`; },     (f) => { f.anchor.attrs.href = `https://evil.example${native.postPath}?comment

(f) => { f.anchor.attrs.href = `${native.postPath}?unrelated=123`; },     (f) => { f.anchor.attrs.href = `https://evil.example${native.postPath}?comment_id=123`; },   ]) {

(f) => { f.anchor.attrs.href = `https://evil.example${native.postPath}?comment_id=123`; },

{ platform: "instagram" }, { account_key: "bad/name" }, { platform_comment_id: "abc" },     { post_key: "OtherPost" }, { post_permalink: `${target.post_permalink}?extra=1` },     { post_permalink: "https://www.facebook.com/story.php?story_f

{ post_key: "OtherPost" }, { post_permalink: `${target.post_permalink}?extra=1` },     { post_permalink: "https://www.facebook.com/story.php?story_fbid=123&id=456" },     { comment_permalink: `${target.comment_permalink}&comment_id=123` },

{ post_permalink: "https://www.facebook.com/story.php?story_fbid=123&id=456" },

parserCalls += 1;     const result = callback(this.nodes[0], argument);     if (this.fixture.driftAfterRead) this.fixture.url = "https://www.facebook.com/other.owner/posts/other?comment_id=123";

const result = callback(this.nodes[0], argument);     if (this.fixture.driftAfterRead) this.fixture.url = "https://www.facebook.com/other.owner/posts/other?comment_id=123";     return result;

if (this.fixture.driftAfterRead) this.fixture.url = "https://www.facebook.com/other.owner/posts/other?comment_id=123";

fixture.probes += 1;     return {       goto: async (url) => { assert.equal(url, "https://www.facebook.com/me/"); },

return {       goto: async (url) => { assert.equal(url, "https://www.facebook.com/me/"); },       url: async () => {

goto: async (url) => { assert.equal(url, "https://www.facebook.com/me/"); },

url: async () => {         if (fixture.driftAfterProbe === fixture.probes) fixture.url = "https://www.facebook.com/other.owner/posts/other?comment_id=123";         return "https://www.facebook.com/example.owner";

if (fixture.driftAfterProbe === fixture.probes) fixture.url = "https://www.facebook.com/other.owner/posts/other?comment_id=123";

return "https://www.facebook.com/example.owner";

assert.equal(good.fixture.closed, 2);   for (const options of [     { url: "https://www.facebook.com/other.owner/posts/other?comment_id=123" },

for (const options of [     { url: "https://www.facebook.com/other.owner/posts/other?comment_id=123" },     { driftAfterRead: true }, { driftAfterProbe: 2 },

{ url: "https://www.facebook.com/other.owner/posts/other?comment_id=123" },

Executable file

const probe = await browser.tabs.new();   try {     await probe.goto("https://www.facebook.com/me/");

try {     await probe.goto("https://www.facebook.com/me/");     let current;

await probe.goto("https://www.facebook.com/me/");

Executable file

const results = platforms.map((platform, index) => ({     platform,     page_url: `http://127.0.0.1:8765/${platform}.html`,

platform,     page_url: `http://127.0.0.1:8765/${platform}.html`,     scanned_comment_count: 2,

page_url: `http://127.0.0.1:8765/${platform}.html`,

["request coverage missing", (value) => { value.request_log = value.request_log.filter((row) => row.path !== "/threads.html"); }],     ["unreviewed request success", (value) => { value.request_log.push({ method: "GET", path: "/unknown", sta

["unreviewed request success", (value) => { value.request_log.push({ method: "GET", path: "/unknown", status: 200 }); }],     ["remote result URL", (value) => { value.results[0].page_url = "https://www.facebook.com/fixture"; }],   ]) {

["remote result URL", (value) => { value.results[0].page_url = "https://www.facebook.com/fixture"; }],

return {     platform,     page_url: `http://127.0.0.1:8765/${platform}.html`,

platform,     page_url: `http://127.0.0.1:8765/${platform}.html`,     scan: { test_only: true },

page_url: `http://127.0.0.1:8765/${platform}.html`,

assert.equal(Object.isFrozen(platforms), true);   assert.deepEqual(platforms, ["facebook", "instagram", "threads"]);   assert.equal(requireLoopbackBaseUrl("http://localhost:8765/"), "http://localhost:8765");

assert.deepEqual(platforms, ["facebook", "instagram", "threads"]);   assert.equal(requireLoopbackBaseUrl("http://localhost:8765/"), "http://localhost:8765");   assert.throws(() => requireLoopbackBaseUrl("https://127.0.0.1:8765"), /plain loo

assert.equal(requireLoopbackBaseUrl("http://localhost:8765/"), "http://localhost:8765");

assert.throws(() => requireLoopbackBaseUrl("https://127.0.0.1:8765"), /plain loopback/);

assert.throws(() => requireLoopbackBaseUrl("http://example.com"), /plain loopback/);

assert.throws(() => requireLoopbackBaseUrl("http://user:pass@localhost:8765"), /plain loopback/);

assert.throws(() => requireLoopbackBaseUrl("http://localhost:8765/?mode=1"), /plain loopback/);

assert.throws(() => requireLoopbackBaseUrl("http://localhost:8765/#fragment"), /plain loopback/);

assert.throws(() => validateExactFixtureBatch([clean[1], clean[0], clean[2]]), /exact fixed/);   assert.throws(() => validateExactFixtureBatch([     { ...clean[0], page_url: "https://www.facebook.com/fixture" }, clean[1], clean[2],

assert.throws(() => validateExactFixtureBatch([     { ...clean[0], page_url: "https://www.facebook.com/fixture" }, clean[1], clean[2],   ]), /plain loopback/);

{ ...clean[0], page_url: "https://www.facebook.com/fixture" }, clean[1], clean[2],

Executable file

let pathname = null;     try {       const parsed = new URL(request.url || "", "http://127.0.0.1");

try {       const parsed = new URL(request.url || "", "http://127.0.0.1");       pathname = parsed.pathname;

const parsed = new URL(request.url || "", "http://127.0.0.1");

status = 400;     }     requests.push(Object.freeze({ method, path: pathname, status }));

}     requests.push(Object.freeze({ method, path: pathname, status }));     if (!response.writableEnded) {

requests.push(Object.freeze({ method, path: pathname, status }));

}   return Object.freeze({     baseUrl: `http://127.0.0.1:${address.port}`,

return Object.freeze({     baseUrl: `http://127.0.0.1:${address.port}`,     requests,

baseUrl: `http://127.0.0.1:${address.port}`,     requests,     routes,

export function requireCanonicalServerCoverage(serverEvidence) {   const successful = new Set(     serverEvidence.requests.filter((row) => row.status === 200).map((row) => row.path),

const successful = new Set(     serverEvidence.requests.filter((row) => row.status === 200).map((row) => row.path),   );

serverEvidence.requests.filter((row) => row.status === 200).map((row) => row.path),

}   assert.equal(     serverEvidence.requests.some((row) => row.status === 200 && !serverEvidence.routes.has(row.path)),

assert.equal(     serverEvidence.requests.some((row) => row.status === 200 && !serverEvidence.routes.has(row.path)),     false,

serverEvidence.requests.some((row) => row.status === 200 && !serverEvidence.routes.has(row.path)),

Executable file

Executable file

Executable file

facebook: {     platform: "facebook", account_key: "creator", post_key: "fb-post",     post_permalink: "https://www.facebook.com/example/posts/123",

platform: "facebook", account_key: "creator", post_key: "fb-post",     post_permalink: "https://www.facebook.com/example/posts/123",   },

post_permalink: "https://www.facebook.com/example/posts/123",

instagram: {     platform: "instagram", account_key: "creator", post_key: "ig-post",     post_permalink: "https://www.instagram.com/reel/ABC123",

platform: "instagram", account_key: "creator", post_key: "ig-post",     post_permalink: "https://www.instagram.com/reel/ABC123",   },

post_permalink: "https://www.instagram.com/reel/ABC123",

threads: {     platform: "threads", account_key: "creator", post_key: "th-post",     post_permalink: "https://www.threads.com/@example/post/ABC123",

platform: "threads", account_key: "creator", post_key: "th-post",     post_permalink: "https://www.threads.com/@example/post/ABC123",   },

post_permalink: "https://www.threads.com/@example/post/ABC123",

[     "wrong host",     { ...TARGETS.instagram, post_permalink: "https://evil.example/reel/ABC123" },

"wrong host",     { ...TARGETS.instagram, post_permalink: "https://evil.example/reel/ABC123" },     /trusted HTTPS host/u,

{ ...TARGETS.instagram, post_permalink: "https://evil.example/reel/ABC123" },

[     "unsupported IG path",     { ...TARGETS.instagram, post_permalink: "https://www.instagram.com/example" },

"unsupported IG path",     { ...TARGETS.instagram, post_permalink: "https://www.instagram.com/example" },     /supported post permalink/u,

{ ...TARGETS.instagram, post_permalink: "https://www.instagram.com/example" },

[     "HTTP",     { ...TARGETS.threads, post_permalink: "http://www.threads.com/@example/post/ABC123" },

"HTTP",     { ...TARGETS.threads, post_permalink: "http://www.threads.com/@example/post/ABC123" },     /trusted HTTPS host/u,

{ ...TARGETS.threads, post_permalink: "http://www.threads.com/@example/post/ABC123" },

for (const kind of ["p", "reel", "reels", "tv"]) {   const post_permalink = `https://www.instagram.com/${kind}/ABC123/`;

const post_permalink = `https://www.instagram.com/${kind}/ABC123/`;

); } assert.equal(sameInstagramPostUrl("https://www.instagram.com/p/OTHER", TARGETS.instagram.post_permalink), false);

} assert.equal(sameInstagramPostUrl("https://www.instagram.com/p/OTHER", TARGETS.instagram.post_permalink), false); assert.equal(sameInstagramPostUrl("https://instagram.com/p/ABC123", TARGETS.instagram.post_permalink), false);

assert.equal(sameInstagramPostUrl("https://www.instagram.com/p/OTHER", TARGETS.instagram.post_permalink), false);

assert.equal(sameInstagramPostUrl("https://instagram.com/p/ABC123", TARGETS.instagram.post_permalink), false);

assert.equal(sameInstagramPostUrl("https://www.instagram.com/p/ABC123?igsh=other", TARGETS.instagram.post_permalink), false);

for (const path of ["/p/p/ABC123", "/p/ABC123/c/123", "/p/ABC123/../OTHER", "/p/ABC123%2FOTHER"]) {   assert.throws(() => instagramUrlIdentity(`https://www.instagram.com${path}`)); }

assert.throws(() => instagramUrlIdentity(`https://www.instagram.com${path}`));

for (const query of ["comment_id=123", "replyId=123", "x=1&x=1", "x=1&X=2"]) {   assert.throws(() => sameInstagramPostUrl(     `https://www.instagram.com/p/ABC123?${query}`, `https://www.instagram.com/reels/ABC123?${query}`,

assert.throws(() => sameInstagramPostUrl(     `https://www.instagram.com/p/ABC123?${query}`, `https://www.instagram.com/reels/ABC123?${query}`,   ));

`https://www.instagram.com/p/ABC123?${query}`, `https://www.instagram.com/reels/ABC123?${query}`,

assert.equal(isTrustedChromeHostAttestation(stableObservation), false, "pure document diagnostics never mint host authority"); for (const [mutate, pattern] of [   [(f) => { f.urls[1] = "https://www.facebook.com/example/posts/OTHER"; }, /URL

for (const [mutate, pattern] of [   [(f) => { f.urls[1] = "https://www.facebook.com/example/posts/OTHER"; }, /URL changed/u],   [(f) => { f.snapshot = "iframe [anonymous]"; }, /main-frame-only/u],

[(f) => { f.urls[1] = "https://www.facebook.com/example/posts/OTHER"; }, /URL changed/u],

[(f) => { f.snapshot = "iframe [anonymous]"; }, /main-frame-only/u],   [(f) => { delete f.view.performance; }, /no readonly performance time origin/u],   [(f) => { f.view.location.origin = "https://another.example"; }, /document origin diff

[(f) => { delete f.view.performance; }, /no readonly performance time origin/u],   [(f) => { f.view.location.origin = "https://another.example"; }, /document origin differs/u],   [(f) => { f.element.isConnected = false; }, /connected top-le

[(f) => { f.view.location.origin = "https://another.example"; }, /document origin differs/u],

Executable file

Executable file

Executable file

["wrong native mention", { nativePrefix: "@another_reader " }, /form or draft changed/u],   ["selection timeout after native prefix", { selectionThrows: true }, /ambiguous source selection/u],   ["target URL drift", { onSelect: (value) => {

["selection timeout after native prefix", { selectionThrows: true }, /ambiguous source selection/u],   ["target URL drift", { onSelect: (value) => { value.url = "https://www.instagram.com/p/abc/c/456"; } }, /differs from expected URL/u],   

["target URL drift", { onSelect: (value) => { value.url = "https://www.instagram.com/p/abc/c/456"; } }, /differs from expected URL/u],

const api = runInNewContext(`${orchestration}\n({ prepareLiveCanaryReply, submitLiveReplyAndFinish, commitLiveReinspection })`, environment);

Executable file

Executable file

Executable file

Executable file

Executable file

await assert.rejects(inspectNative(changingTabId), /Instagram/u);   const changingUrl = nativeInstagramFixture({ afterNativeRead: (read, fixture) => {     if (read === 3) fixture.url = "https://www.instagram.com/p/abc/c/999";

const changingUrl = nativeInstagramFixture({ afterNativeRead: (read, fixture) => {     if (read === 3) fixture.url = "https://www.instagram.com/p/abc/c/999";   } });

if (read === 3) fixture.url = "https://www.instagram.com/p/abc/c/999";

Executable file

}; } export const instagram = action("instagram", "https://www.instagram.com/p/abc",

} export const instagram = action("instagram", "https://www.instagram.com/p/abc",   "https://www.instagram.com/p/abc/c/123", "123");

export const instagram = action("instagram", "https://www.instagram.com/p/abc",

"https://www.instagram.com/p/abc/c/123", "123");

const value = runInNewContext(`(${callback.toString()})(...args)`, {

const value = runInNewContext(`(${callback.toString()})(...args)`, {         args, document: this.document,         location: { origin: "https://www.instagram.com" },

args, document: this.document,         location: { origin: "https://www.instagram.com" },       });

location: { origin: "https://www.instagram.com" },

Executable file

assert.deepEqual(observed, {     comment: {       platform_comment_id: "123", comment_permalink: "https://www.instagram.com/p/abc/c/123",

comment: {       platform_comment_id: "123", comment_permalink: "https://www.instagram.com/p/abc/c/123",       observed_parent_post_permalink: "https://www.instagram.com/p/abc",

platform_comment_id: "123", comment_permalink: "https://www.instagram.com/p/abc/c/123",

observed_parent_post_permalink: "https://www.instagram.com/p/abc",

const aliasedParent = nativeInstagramFixture();   const fromAlias = await readLiveTargetComment(aliasedParent.tab, {     ...nativeTarget(aliasedParent), post_permalink: "https://www.instagram.com/reels/abc/",

const fromAlias = await readLiveTargetComment(aliasedParent.tab, {     ...nativeTarget(aliasedParent), post_permalink: "https://www.instagram.com/reels/abc/",   });

...nativeTarget(aliasedParent), post_permalink: "https://www.instagram.com/reels/abc/",

});   assert.equal(fromAlias.comment.observed_parent_post_permalink, "https://www.instagram.com/p/abc");   assert.deepEqual(fromAlias.documentBinding, expectedUiBinding(aliasedParent));

assert.equal(fromAlias.comment.observed_parent_post_permalink, "https://www.instagram.com/p/abc");

{ platform: "facebook" }, { account_key: "another_account" }, { account_key: "invalid/account" },     { post_key: "other" }, { platform_comment_id: "999" },     { post_permalink: "https://www.instagram.com/p/other" },

{ post_key: "other" }, { platform_comment_id: "999" },     { post_permalink: "https://www.instagram.com/p/other" },     { comment_permalink: "https://www.instagram.com/p/abc/c/999" },

{ post_permalink: "https://www.instagram.com/p/other" },

{ comment_permalink: "https://www.instagram.com/p/abc/c/999" },

{ comment_permalink: "https://instagram.com/p/abc/c/123" },

{ comment_permalink: "https://www.instagram.com/p/abc/c/123?extra=1" },

assert.equal(fixture.crossRealmNativeReads, 5, "three private preflight reads and two positive reads stay cross-realm");   assert.equal(positive.verifiedNewReply, true);   assert.equal(positive.replyPermalink, "https://www.instagram.com/p/a

assert.equal(positive.verifiedNewReply, true);   assert.equal(positive.replyPermalink, "https://www.instagram.com/p/abc/c/123/r/502/");   assert.equal(positive.positive_only, true);

assert.equal(positive.replyPermalink, "https://www.instagram.com/p/abc/c/123/r/502/");

Executable file

const threads = action("threads", "https://www.threads.com/@example/post/abc",

"https://www.threads.com/@reader/post/c1", "c1");

const facebook = action("facebook", "https://www.facebook.com/example/posts/abc",

"https://www.facebook.com/example/posts/abc?comment_id=123", "123");

assert.equal(liveReplyUrl(instagram), instagram.comment_anchor.comment_permalink); for (const kind of ["p", "reel", "reels", "tv"]) {   const aliased = { ...instagram, post_permalink: `https://www.instagram.com/${kind}/abc/` };

for (const kind of ["p", "reel", "reels", "tv"]) {   const aliased = { ...instagram, post_permalink: `https://www.instagram.com/${kind}/abc/` };   assert.equal(liveReplyUrl(aliased), instagram.comment_anchor.comment_permalink);

const aliased = { ...instagram, post_permalink: `https://www.instagram.com/${kind}/abc/` };

} for (const url of [   "https://www.instagram.com/p/wrong/c/123", "https://www.instagram.com/p/abc/c/other",

for (const url of [   "https://www.instagram.com/p/wrong/c/123", "https://www.instagram.com/p/abc/c/other",   "https://www.instagram.com/p/abc/c/123/c/other", "https://www.instagram.com/p/abc/c/123%2Fother",

"https://www.instagram.com/p/wrong/c/123", "https://www.instagram.com/p/abc/c/other",

"https://www.instagram.com/p/abc/c/123/c/other", "https://www.instagram.com/p/abc/c/123%2Fother",

"https://www.instagram.com/p/abc/c/123?comment_id=other", "https://www.instagram.com/p/abc/c/123?x=1&x=1",

"https://www.instagram.com/p/abc/c/123?x=1", "https://instagram.com/p/abc/c/123",

"https://user@www.instagram.com/p/abc/c/123", "https://www.instagram.com:444/p/abc/c/123",

"https://www.instagram.com/p/abc/c/other/../123", "https://www.instagram.com/p/abc",

assert.equal(liveReplyUrl({ ...facebook, comment_anchor: { platform_comment_id: "123" } }), facebook.comment_anchor.comment_permalink); for (const url of [   "https://evil.example/@reader/post/c1", "http://www.threads.com/@reader/post/c1",

for (const url of [   "https://evil.example/@reader/post/c1", "http://www.threads.com/@reader/post/c1",   "https://www.threads.com:444/@reader/post/c1", "https://user@www.threads.com/@reader/post/c1",

"https://evil.example/@reader/post/c1", "http://www.threads.com/@reader/post/c1",

"https://www.threads.com:444/@reader/post/c1", "https://user@www.threads.com/@reader/post/c1",

"https://www.threads.com/@reader/post/other", "https://www.threads.com/@reader/post/c1?fake=1",

"https://www.threads.com/@reader", "https://threads.net/@reader/post/c1",

Executable file

Executable file

run_id: `${platform}-lifecycle-run`,     target_anchor: `${platform}-identity-1`,     parent_anchor: `https://fixture.invalid/${platform}/post`,

target_anchor: `${platform}-identity-1`,     parent_anchor: `https://fixture.invalid/${platform}/post`,     reply_text: LIFECYCLE_REPLY,

parent_anchor: `https://fixture.invalid/${platform}/post`,

parent.sample.page.nodes[parent.sample.first.key].attributes[     parent.sample.plan.parentPost.attribute   ] = "https://fixture.invalid/instagram/other-post";

parent.sample.plan.parentPost.attribute   ] = "https://fixture.invalid/instagram/other-post";   await assert.rejects(

] = "https://fixture.invalid/instagram/other-post";

Executable file

Executable file

Executable file

attributes: {       [plan.commentId.attribute]: identity,       [plan.parentPost.attribute]: `https://fixture.invalid/${platform}/post`,

[plan.commentId.attribute]: identity,       [plan.parentPost.attribute]: `https://fixture.invalid/${platform}/post`,       [plan.nodeFrameMapping.nodeIdAttribute]: `${key}-node`,

[plan.parentPost.attribute]: `https://fixture.invalid/${platform}/post`,

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

const api = runInNewContext(`${executableSource}\n({ getSourceOwnedChromeBrowser, recoverSourceOwnedChromeBrowser })`, {

for (const listing of [[], [{ id: "anonymous-tab" }], runInNewContext("[]")]) {

const foreignError = runInNewContext("new Error(message)", { message: `Browser is not available: ${id}` });

Executable file

Executable file

Executable file

[plan.commentId.attribute]: id,       [plan.author.attribute]: "viewer-account",       [plan.parentPost.attribute]: "https://www.instagram.com/p/trusted-post",

[plan.author.attribute]: "viewer-account",       [plan.parentPost.attribute]: "https://www.instagram.com/p/trusted-post",       [plan.isOwn.attribute]: "false",

[plan.parentPost.attribute]: "https://www.instagram.com/p/trusted-post",

function fixtureFor(plan, options = {}) {   const postUrl = "https://www.instagram.com/p/trusted-post";

const postUrl = "https://www.instagram.com/p/trusted-post";

const page = {     url: "http://127.0.0.1:8765/instagram.html",     selectors: {},

url: "http://127.0.0.1:8765/instagram.html",

return {     platform: "facebook", account_key: "ACCOUNT_A", post_key: "POST_A",     post_permalink: `https://www.facebook.com/${path}${query ? `?${query}` : ""}`,

platform: "facebook", account_key: "ACCOUNT_A", post_key: "POST_A",     post_permalink: `https://www.facebook.com/${path}${query ? `?${query}` : ""}`,   };

post_permalink: `https://www.facebook.com/${path}${query ? `?${query}` : ""}`,

`${indent}- article "${author}的留言":`,     `${indent}  - link "${author}":`,     `${indent}    - /url: https://www.facebook.com/${author}`,

`${indent}  - link "${author}":`,     `${indent}    - /url: https://www.facebook.com/${author}`,     `${indent}  - link "1分鐘":`,

`${indent}    - /url: https://www.facebook.com/${author}`,

for (const path of ["story.php", "permalink.php"]) {     const target = facebookSnapshotTarget(path);     const base = `https://www.facebook.com/${path}`;

const target = facebookSnapshotTarget(path);     const base = `https://www.facebook.com/${path}`;     const originalRoot = target.post_permalink;

const base = `https://www.facebook.com/${path}`;

const mapped = `${originalRoot}&comment_id=COMMENT_A`;     const foreign = `${base}?story_fbid=POST_B&id=ACCOUNT_A&comment_id=COMMENT_B`;     assertFacebookSnapshotRejects(target, [`https://www.facebook.com/UNMAPPED_A`], 1);

const foreign = `${base}?story_fbid=POST_B&id=ACCOUNT_A&comment_id=COMMENT_B`;     assertFacebookSnapshotRejects(target, [`https://www.facebook.com/UNMAPPED_A`], 1);     assertFacebookSnapshotRejects(target, [mapped, foreign], 2, `${path}: 

assertFacebookSnapshotRejects(target, [`https://www.facebook.com/UNMAPPED_A`], 1);

() => parseFacebookSnapshot(         facebookSnapshot(target, 2, [facebookSnapshotArticle(           "https://www.facebook.com/UNMAPPED_A", { nested },

facebookSnapshot(target, 2, [facebookSnapshotArticle(           "https://www.facebook.com/UNMAPPED_A", { nested },         )]), target,

"https://www.facebook.com/UNMAPPED_A", { nested },

Executable file

Executable file

Executable file

Executable file

const observeSource = between("async function observeLiveTargetComment(", "export function createCommentChromeActuator("); const recoverySource = between("function liveRecoveryRequest(", "export function isPythonLedgerClaimSubmit("); const 

const recoverySource = between("function liveRecoveryRequest(", "export function isPythonLedgerClaimSubmit("); const targetUrl = "https://www.facebook.com/story.php?story_fbid=POST_A&id=ACCOUNT_A&comment_id=COMMENT_A"; const otherUrl = targ

const targetUrl = "https://www.facebook.com/story.php?story_fbid=POST_A&id=ACCOUNT_A&comment_id=COMMENT_A";

const api = runInNewContext(`${runtimeSource}\n${helperSource}\n${observeSource}\n({ withSourceOwnedTargetIntakeTab, observeLiveTargetComment })`, current.environment, { timeout: 1000 });

for (const url of [otherUrl, targetUrl.replace("www.facebook.com", "m.facebook.com"),     targetUrl.replace("story_fbid=POST_A&id=ACCOUNT_A", "id=ACCOUNT_A&story_fbid=POST_A"),     `${targetUrl}&extra=1`, `${targetUrl}#reply`, "https://user

targetUrl.replace("story_fbid=POST_A&id=ACCOUNT_A", "id=ACCOUNT_A&story_fbid=POST_A"),     `${targetUrl}&extra=1`, `${targetUrl}#reply`, "https://user@www.facebook.com/", "https://www.facebook.com:8443/"]) {     const current = fixture({ li

`${targetUrl}&extra=1`, `${targetUrl}#reply`, "https://user@www.facebook.com/", "https://www.facebook.com:8443/"]) {

async function testCallerCannotProvideTabOrBrowserAuthority() {   const raw = { platform: "facebook", account_key: "ACCOUNT_A", post_key: "POST_A",     post_permalink: "https://www.facebook.com/story.php?story_fbid=POST_A&id=ACCOUNT_A",

const raw = { platform: "facebook", account_key: "ACCOUNT_A", post_key: "POST_A",     post_permalink: "https://www.facebook.com/story.php?story_fbid=POST_A&id=ACCOUNT_A",     session_id: "anonymous-session", ttl_minutes: 5, platform_comment

post_permalink: "https://www.facebook.com/story.php?story_fbid=POST_A&id=ACCOUNT_A",

function recoveryFixture({ fresh = false, reads = ["positive"], ...options } = {}) {   const current = fixture({ cua: true,     targetUrl: "https://www.threads.com/@example.reader/post/Comment456", ...options });

const current = fixture({ cua: true,     targetUrl: "https://www.threads.com/@example.reader/post/Comment456", ...options });   const state = { observations: 0, waits: 0, rotations: 0, commits: [], writes: [], reads: [...reads] };

targetUrl: "https://www.threads.com/@example.reader/post/Comment456", ...options });

const api = runInNewContext(`${runtimeSource}\n${helperSource}\n${recoverySource}\n({ recoverLiveApprovedReply, reconcileLiveUncertainReply })`, {

Executable file

Executable file

["wrong target", (f) => { f.focus.anchor.attrs.href = "/@example.reader/post/OtherComment"; }],     ["native target query", (f) => { f.focus.anchor.attrs.href += "?tracking=1"; }],     ["foreign target host", (f) => { f.focus.anchor.attrs.h

["native target query", (f) => { f.focus.anchor.attrs.href += "?tracking=1"; }],     ["foreign target host", (f) => { f.focus.anchor.attrs.href = `https://foreign.example${expected.targetPath}`; }],     ["hidden target anchor", (f) => { f.f

["foreign target host", (f) => { f.focus.anchor.attrs.href = `https://foreign.example${expected.targetPath}`; }],

Executable file

Executable file

assert.equal(preexisting.clicks, 0);   const drift = sourceFixture({ onEvaluate: (name, fixture) => {     if (name === "readThreadsNativeColumn") fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";

const drift = sourceFixture({ onEvaluate: (name, fixture) => {     if (name === "readThreadsNativeColumn") fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";   } });

if (name === "readThreadsNativeColumn") fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";

async function testFinalBoundSurfaceDriftRejections() {   for (const [name, change, message] of [     ["URL drift", (f) => { f.url = "https://www.threads.com/@another.reader/post/OtherComment"; }, /target URL changed/u],

for (const [name, change, message] of [     ["URL drift", (f) => { f.url = "https://www.threads.com/@another.reader/post/OtherComment"; }, /target URL changed/u],     ["account drift", (f) => { f.account.attrs.href = "/@another.owner"; }, /

["URL drift", (f) => { f.url = "https://www.threads.com/@another.reader/post/OtherComment"; }, /target URL changed/u],

["wrong whole reply body", (f) => f.childFocus.content.replaceChildren("Unapproved reply text"), /approved text and immediate parent/u],     ["child URL drift", (f) => { f.onEvaluate = (callback, state) => {       if (state.scene === "child

["child URL drift", (f) => { f.onEvaluate = (callback, state) => {       if (state.scene === "child" && callback === "readThreadsNativeColumn") state.url = "https://www.threads.com/@another.owner/post/WrongURL";     }; }, /URL changed/u],

if (state.scene === "child" && callback === "readThreadsNativeColumn") state.url = "https://www.threads.com/@another.owner/post/WrongURL";

finalDrift.onEvaluate = (callback, state) => {     if (callback === "discoverThreadsOwnChildLinks" && ++state.discoveryReads === 2) {       state.url = "https://www.threads.com/@another.owner/post/WrongURL";

if (callback === "discoverThreadsOwnChildLinks" && ++state.discoveryReads === 2) {       state.url = "https://www.threads.com/@another.owner/post/WrongURL";     }

state.url = "https://www.threads.com/@another.owner/post/WrongURL";

["wrong full body", (t) => t.parent.childFocus.content.replaceChildren("Not the approved reply"), /approved text and immediate parent/u],     ["child URL drift", (t) => { t.onChildEvaluate = (name, state) => {       if (name === "readThread

["child URL drift", (t) => { t.onChildEvaluate = (name, state) => {       if (name === "readThreadsNativeColumn") state.url = "https://www.threads.com/@another.owner/post/WrongURL";     }; }, /URL changed/u],

if (name === "readThreadsNativeColumn") state.url = "https://www.threads.com/@another.owner/post/WrongURL";

}; }, /extensionInstanceId changed/u],     ["parent URL drift while child inspected", (t) => { t.onChildEvaluate = (name) => {       if (name === "readThreadsNativeColumn") t.parent.url = "https://www.threads.com/@another.owner/post/WrongUR

["parent URL drift while child inspected", (t) => { t.onChildEvaluate = (name) => {       if (name === "readThreadsNativeColumn") t.parent.url = "https://www.threads.com/@another.owner/post/WrongURL";     }; }, /URL differs|URL changed/u],

if (name === "readThreadsNativeColumn") t.parent.url = "https://www.threads.com/@another.owner/post/WrongURL";

}; }, /verified parent/u],     ["final parent URL drift", (t) => { t.parent.onEvaluate = (name, state) => {       if (name === "discoverThreadsOwnChildLinks" && ++state.discoveryReads === 2) state.url = "https://www.threads.com/@another.own

["final parent URL drift", (t) => { t.parent.onEvaluate = (name, state) => {       if (name === "discoverThreadsOwnChildLinks" && ++state.discoveryReads === 2) state.url = "https://www.threads.com/@another.owner/post/WrongURL";     }; }, /U

if (name === "discoverThreadsOwnChildLinks" && ++state.discoveryReads === 2) state.url = "https://www.threads.com/@another.owner/post/WrongURL";

Executable file

account: "example.owner", author: "example.reader", host: "www.threads.com",   postId: "Root123", commentId: "Comment456",   postUrl: "https://www.threads.com/@example.owner/post/Root123",

postId: "Root123", commentId: "Comment456",   postUrl: "https://www.threads.com/@example.owner/post/Root123",   commentUrl: "https://www.threads.com/@example.reader/post/Comment456",

postUrl: "https://www.threads.com/@example.owner/post/Root123",

commentUrl: "https://www.threads.com/@example.reader/post/Comment456",

return runInNewContext(`(${callback.toString()})(root, expected)`, { root: fixture.root, expected: input, URL });

const fixture = sourceFixture();   const childPath = `/@${expected.account}/post/OwnReply789`;   const childUrl = `https://${expected.host}${childPath}`;

const childPath = `/@${expected.account}/post/OwnReply789`;   const childUrl = `https://${expected.host}${childPath}`;   fixture.zero.focus.reply.append("1");

const childUrl = `https://${expected.host}${childPath}`;

Executable file

const value = runInNewContext(`(${callback.toString()})(element, input)`, {

Executable file

Executable file

Executable file

const target = Object.freeze({   platform: "threads", account_key: "example.owner", post_key: "Root123",   post_permalink: "https://www.threads.com/@example.owner/post/Root123",

platform: "threads", account_key: "example.owner", post_key: "Root123",   post_permalink: "https://www.threads.com/@example.owner/post/Root123",   platform_comment_id: "Comment456",

post_permalink: "https://www.threads.com/@example.owner/post/Root123",

platform_comment_id: "Comment456",   comment_permalink: "https://www.threads.com/@example.reader/post/Comment456", });

comment_permalink: "https://www.threads.com/@example.reader/post/Comment456",

const crossRealm = runInNewContext(`(${readThreadsNativeColumn.toString()})(root, expected)`,

["query on native target", (f) => { f.focus.anchor.attrs.href += "?tracking=1"; }],     ["query on native parent", (f) => { f.parent.anchor.attrs.href += "?tracking=1"; }],     ["external native target", (f) => { f.focus.anchor.attrs.href =

["query on native parent", (f) => { f.parent.anchor.attrs.href += "?tracking=1"; }],     ["external native target", (f) => { f.focus.anchor.attrs.href = `https://evil.example${native.targetPath}`; }],     ["missing target time", (f) => { f.

["external native target", (f) => { f.focus.anchor.attrs.href = `https://evil.example${native.targetPath}`; }],

post_key: native.commentId, post_permalink: native.commentUrl,     platform_comment_id: "OwnReply789",     comment_permalink: "https://www.threads.com/@example.owner/post/OwnReply789",

platform_comment_id: "OwnReply789",     comment_permalink: "https://www.threads.com/@example.owner/post/OwnReply789",   });

comment_permalink: "https://www.threads.com/@example.owner/post/OwnReply789",

if (this.nodes[0] === this.fixture.account) {       this.fixture.accountChecks += 1;       if (this.fixture.driftAfterAccountCheck === this.fixture.accountChecks) this.fixture.url = "https://www.threads.com/@another.reader/post/OtherComment

this.fixture.accountChecks += 1;       if (this.fixture.driftAfterAccountCheck === this.fixture.accountChecks) this.fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";     }

if (this.fixture.driftAfterAccountCheck === this.fixture.accountChecks) this.fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";

parserCalls += 1;     const result = callback(this.nodes[0], argument);     if (this.fixture.driftAfterRead) this.fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";

const result = callback(this.nodes[0], argument);     if (this.fixture.driftAfterRead) this.fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";     return result;

if (this.fixture.driftAfterRead) this.fixture.url = "https://www.threads.com/@another.reader/post/OtherComment";

assert.equal(good.fixture.accountChecks, 2, "active account is checked before and after the DOM read");   for (const options of [     { url: "https://www.threads.com/@another.reader/post/OtherComment" },

for (const options of [     { url: "https://www.threads.com/@another.reader/post/OtherComment" },     { driftAfterRead: true }, { driftAfterAccountCheck: 2 },

{ url: "https://www.threads.com/@another.reader/post/OtherComment" },

Executable file

Executable file

#!/usr/bin/env python3

Executable file

function isolatedCase(options = {}) {   const events = [];   const targetUrl = "https://www.threads.com/@example.reader/post/Comment456";

const events = [];   const targetUrl = "https://www.threads.com/@example.reader/post/Comment456";   const action = { action_id: "test-action", intent_id: "test-intent", session_id: "test-session",

const targetUrl = "https://www.threads.com/@example.reader/post/Comment456";

if (state.clicks !== 1 || state.clickThrows) fail("native result remains unknown");       return { verifiedNewReply: true, observedUrl: targetUrl, exactOwnCount: 1, ownReplyCount: 1,         totalReplies: 1, replyPermalink: "https://www.thr

return { verifiedNewReply: true, observedUrl: targetUrl, exactOwnCount: 1, ownReplyCount: 1,         totalReplies: 1, replyPermalink: "https://www.threads.com/@example.owner/post/OwnReply789" };     },

totalReplies: 1, replyPermalink: "https://www.threads.com/@example.owner/post/OwnReply789" };

const api = runInNewContext(`${orchestration}\n({ prepareLiveCanaryReply, submitLiveReplyAndFinish${selectedApi} })`, environment);

["missing transport", { cua: false }, /supported source-bound submit transport/u],   ["unsupported CUA platform", { platform: "facebook" }, /only for native Threads\/Instagram/u],   ["wrong CUA target", { url: "https://www.threads.com/@anot

["unsupported CUA platform", { platform: "facebook" }, /only for native Threads\/Instagram/u],   ["wrong CUA target", { url: "https://www.threads.com/@another.reader/post/Other456" }, /target URL changed/u], ]) {

["wrong CUA target", { url: "https://www.threads.com/@another.reader/post/Other456" }, /target URL changed/u],

for (const [name, options] of [   ["postclaim draft drift", { onClaim: (state) => { state.text = "Changed by someone else"; } }],   ["postclaim target drift", { onClaim: (state) => { state.url = "https://www.threads.com/@another.reader/post

["postclaim draft drift", { onClaim: (state) => { state.text = "Changed by someone else"; } }],   ["postclaim target drift", { onClaim: (state) => { state.url = "https://www.threads.com/@another.reader/post/Other456"; } }],   ["final lease 

["postclaim target drift", { onClaim: (state) => { state.url = "https://www.threads.com/@another.reader/post/Other456"; } }],

["final lease draft drift", { onLease: (state, events) => { if (events.includes("claim")) state.text = "Changed during lease I/O"; } }],   ["final lease target drift", { onLease: (state, events) => { if (events.includes("claim")) state.url 

["final lease target drift", { onLease: (state, events) => { if (events.includes("claim")) state.url = "https://www.threads.com/@another.reader/post/Other456"; } }],

if (read === "unknown") throw new Error("native nested parent not verified");       return { verifiedNewReply: true, exactOwnCount: 1, ownReplyCount: read === "invalid-count" ? 0 : 1,         totalReplies: 1, observedUrl: "https://www.threa

return { verifiedNewReply: true, exactOwnCount: 1, ownReplyCount: read === "invalid-count" ? 0 : 1,         totalReplies: 1, observedUrl: "https://www.threads.com/@example.reader/post/Comment456" };     },

totalReplies: 1, observedUrl: "https://www.threads.com/@example.reader/post/Comment456" };

const api = runInNewContext(`${recoverySource}\n({ recoverLiveApprovedReply, reconcileLiveUncertainReply })`, environment);

Executable file

const FACEBOOK_ME_URL = "https://www.facebook.com/me/";

if (value === FACEBOOK_ME_URL) return value;   const profile = `https://www.facebook.com/${account}`;

const profile = `https://www.facebook.com/${account}`;

if (value === profile || value === `${profile}/`       || (/^[0-9]+$/u.test(account)         && value === `https://www.facebook.com/profile.php?id=${account}`)) return value;

|| (/^[0-9]+$/u.test(account)         && value === `https://www.facebook.com/profile.php?id=${account}`)) return value;   fail("Facebook /me profile differs from the approved account");

&& value === `https://www.facebook.com/profile.php?id=${account}`)) return value;

Executable file

const cases = []; const freshModule = () => testedRuntime; const target = "https://www.threads.com/@example/post/Example1";

const freshModule = () => testedRuntime; const target = "https://www.threads.com/@example/post/Example1"; const facebook = "https://www.facebook.com/example/posts/example1?comment_id=123";

const target = "https://www.threads.com/@example/post/Example1";

const facebook = "https://www.facebook.com/example/posts/example1?comment_id=123";

const instagram = "https://www.instagram.com/p/Example1/c/123/r/456/";

for (const invalid of [   undefined, "about:blank", "http://www.threads.com/@example/post/Example1",

undefined, "about:blank", "http://www.threads.com/@example/post/Example1",

"https://example.com/@example/post/Example1", "https://www.facebook.com/me",

"https://www.facebook.com/", "https://www.instagram.com/example/",

"https://www.threads.com/@example/post/Example1#other",

"https://username@www.threads.com/@example/post/Example1",

"https://www.threads.com:444/@example/post/Example1",

"https://www.threads.com/@example/post/../post/Example1",

"https://www.threads.com/@example/post/Example1?a=1&a=2",

const facebookMe = "https://www.facebook.com/me/";

const approvedProfile = "https://www.facebook.com/example.owner/";

for (const [account, redirect] of [   ["example.owner", "https://www.facebook.com/example.owner"],

["example.owner", "https://www.facebook.com/example.owner"],

["123456789", "https://www.facebook.com/profile.php?id=123456789"],

["123456789", "https://www.facebook.com/123456789/"],

for (const redirect of [   "https://www.facebook.com/another.owner/",

"https://www.facebook.com/another.owner/",

"https://www.facebook.com/example.owner/?tracking=1",

"https://www.facebook.com/example.owner/#bio",

"https://www.facebook.com/example.owner//",

"https://m.facebook.com/example.owner/",

"https://www.facebook.com.evil.test/example.owner/",

"https://www.facebook.com:443/example.owner/",

"https://www.facebook.com/%65xample.owner/",

"https://www.facebook.com/login/",

"https://www.facebook.com/checkpoint/",

"https://www.facebook.com/profile.php?id=123456789",

for (const account of [undefined, "", " example.owner", "../example.owner", "example.owner?x=1", "https://www.facebook.com/example.owner", "me", "login", "checkpoint", {}, () => {}]) {

entry.url = entry.url.endsWith("/") ? approvedProfile.slice(0, -1) : approvedProfile;     };     if (defect === "wrong-profile-after-read") fixture.hooks.count = () => { fixture.browser.tabs.find((row) => row.id === "probe-example").url = "

};     if (defect === "wrong-profile-after-read") fixture.hooks.count = () => { fixture.browser.tabs.find((row) => row.id === "probe-example").url = "https://www.facebook.com/another.owner/"; };     await assert.rejects(fixture.module.verif

if (defect === "wrong-profile-after-read") fixture.hooks.count = () => { fixture.browser.tabs.find((row) => row.id === "probe-example").url = "https://www.facebook.com/another.owner/"; };

#!/usr/bin/env python3

Executable file

decoyId: "fb-comment-decoy",     viewer: "viewer-facebook", body: "這個測試太精彩了🔥", reply: "謝謝你來看這個測試！",     receiptUrl: "https://www.facebook.com/fixture/posts/fixture-facebook-post",

viewer: "viewer-facebook", body: "這個測試太精彩了🔥", reply: "謝謝你來看這個測試！",     receiptUrl: "https://www.facebook.com/fixture/posts/fixture-facebook-post",     target: "[data-fb-comment-id]", idAttribute: "data-fb-comment-id",

receiptUrl: "https://www.facebook.com/fixture/posts/fixture-facebook-post",

decoyId: "ig-comment-decoy",     viewer: "viewer-instagram", body: "女主角下一集會反擊嗎？", reply: "下一集就會揭曉。",     receiptUrl: "https://www.instagram.com/p/fixture-instagram-post",

viewer: "viewer-instagram", body: "女主角下一集會反擊嗎？", reply: "下一集就會揭曉。",     receiptUrl: "https://www.instagram.com/p/fixture-instagram-post",     target: "[data-ig-comment-id]", idAttribute: "data-ig-comment-id",

receiptUrl: "https://www.instagram.com/p/fixture-instagram-post",

decoyId: "threads-reply-decoy",     viewer: "viewer-threads", body: "有下一集記得通知我！", reply: "有更新我會公開發出來！",     receiptUrl: "https://www.threads.com/@fixture/post/fixture-threads-post",

viewer: "viewer-threads", body: "有下一集記得通知我！", reply: "有更新我會公開發出來！",     receiptUrl: "https://www.threads.com/@fixture/post/fixture-threads-post",     target: "[data-threads-reply-id]", idAttribute: "data-threads-reply-id",

receiptUrl: "https://www.threads.com/@fixture/post/fixture-threads-post",

for (const candidatePlatform of FIXTURE_PLATFORM_ORDER) {     const candidate = values(       candidatePlatform, "http://127.0.0.1:8765", `adapter-contract-${candidatePlatform}`,

const candidate = values(       candidatePlatform, "http://127.0.0.1:8765", `adapter-contract-${candidatePlatform}`,     );

candidatePlatform, "http://127.0.0.1:8765", `adapter-contract-${candidatePlatform}`,

}   const platform = "instagram";   const setup = values(platform, "http://127.0.0.1:8765", "readiness-test");

const platform = "instagram";   const setup = values(platform, "http://127.0.0.1:8765", "readiness-test");   const valid = readinessFake(platform, setup);

const setup = values(platform, "http://127.0.0.1:8765", "readiness-test");

);   const remoteRedirect = readinessFake(platform, setup, {     observedUrl: "https://www.instagram.com/p/untrusted",

const remoteRedirect = readinessFake(platform, setup, {     observedUrl: "https://www.instagram.com/p/untrusted",   });

observedUrl: "https://www.instagram.com/p/untrusted",

async function runFixtureBrowserE2E(tab, platform, {   baseUrl = "http://127.0.0.1:8765", navigate = true, runNonce = "manual",

baseUrl = "http://127.0.0.1:8765", navigate = true, runNonce = "manual",

#!/usr/bin/env python3

#!/usr/bin/env python3

Executable file

Executable file

#!/usr/bin/env node

Executable file

Executable file

Executable file

Executable file

const value = requiredString(raw, `${platform} snapshot URL`);   const origin = {     facebook: "https://www.facebook.com",

const origin = {     facebook: "https://www.facebook.com",     instagram: "https://www.instagram.com",

facebook: "https://www.facebook.com",

instagram: "https://www.instagram.com",

threads: "https://www.threads.com",

const isOwn = ownByProfileUrl("facebook", target.account_key, authorLinkMatch?.[1]);     const nestedOwnReply = /\n\s+- article /u.test(item.block)       && item.block.includes(`https://www.facebook.com/${target.account_key}`);

const nestedOwnReply = /\n\s+- article /u.test(item.block)       && item.block.includes(`https://www.facebook.com/${target.account_key}`);     const candidate = {

&& item.block.includes(`https://www.facebook.com/${target.account_key}`);

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

def check_live_origin_is_rejected() -> None:     try:         require_fixture_url("https://www.facebook.com/real-account/posts/1")

try:         require_fixture_url("https://www.facebook.com/real-account/posts/1")     except ValueError:

require_fixture_url("https://www.facebook.com/real-account/posts/1")

#!/usr/bin/env python3

#!/usr/bin/env python3

[Credential-related source omitted]

payload["comments"][0]["observed_at"] = now_iso(-10)             elif case == "post":                 payload["observed_url"] = "https://www.facebook.com/test/posts/other-post"

elif case == "post":                 payload["observed_url"] = "https://www.facebook.com/test/posts/other-post"             elif case == "missing-expansion":

payload["observed_url"] = "https://www.facebook.com/test/posts/other-post"

author = second.get("author_key") or second.get("author_display") or "fixture_author"         second["comment_permalink"] = (             f"https://www.threads.com/@{author}/post/{second['platform_comment_id']}"

second["comment_permalink"] = (             f"https://www.threads.com/@{author}/post/{second['platform_comment_id']}"         )

f"https://www.threads.com/@{author}/post/{second['platform_comment_id']}"

#!/usr/bin/env python3

raise AssertionError("invalid preflight mutated the ledger")         wrong_post = preflight_for(action, adapter)         wrong_post["observed_url"] = "https://www.facebook.com/test/posts/other-post"

wrong_post = preflight_for(action, adapter)         wrong_post["observed_url"] = "https://www.facebook.com/test/posts/other-post"         rebind_preparation(wrong_post)

wrong_post["observed_url"] = "https://www.facebook.com/test/posts/other-post"

)         for label, bad_url in (             ("credentials", "https://user@www.facebook.com/test/posts/post-facebook"),

for label, bad_url in (             ("credentials", "https://user@www.facebook.com/test/posts/post-facebook"),             ("non-default port", "https://www.facebook.com:444/test/posts/post-facebook"),

("credentials", "https://user@www.facebook.com/test/posts/post-facebook"),

("non-default port", "https://www.facebook.com:444/test/posts/post-facebook"),

("alternate host", "https://m.facebook.com/test/posts/post-facebook"),

#!/usr/bin/env python3

PLATFORM_URLS = {     "facebook": "https://www.facebook.com/test/posts/post-facebook",

"facebook": "https://www.facebook.com/test/posts/post-facebook",

"instagram": "https://www.instagram.com/p/post-instagram",

"threads": "https://www.threads.com/@test/post/post-threads",

author = comment.get("author_key") or comment.get("author_display") or "fixture_author"         comment_permalink = (             f"https://www.threads.com/@{author}/post/{comment['platform_comment_id']}"

comment_permalink = (             f"https://www.threads.com/@{author}/post/{comment['platform_comment_id']}"         )

f"https://www.threads.com/@{author}/post/{comment['platform_comment_id']}"

[Credential-related source omitted]

#!/usr/bin/env python3

#!/usr/bin/env python3

[Credential-related source omitted]

#!/usr/bin/env python3

#!/usr/bin/env python3

("raw_fingerprint", "f" * 64),             ("post_key", "changed-post"),             ("post_permalink", "https://www.threads.com/@test/post/changed-post"),

("post_key", "changed-post"),             ("post_permalink", "https://www.threads.com/@test/post/changed-post"),             ("observed_parent_post_permalink", "https://www.threads.com/@test/post/wrong-parent"),

("post_permalink", "https://www.threads.com/@test/post/changed-post"),

("observed_parent_post_permalink", "https://www.threads.com/@test/post/wrong-parent"),

("comment_permalink", "https://www.threads.com/@other/post/changed-comment"),

#!/usr/bin/env python3

PLATFORM_URLS = {     "facebook": "https://www.facebook.com/test/posts/post-facebook",

"facebook": "https://www.facebook.com/test/posts/post-facebook",

"instagram": "https://www.instagram.com/p/post-instagram",

"threads": "https://www.threads.com/@test/post/post-threads",

} WRONG_COMMENT_URLS = {     "facebook": "https://www.facebook.com/test/posts/other-post?comment_id=foreign",

WRONG_COMMENT_URLS = {     "facebook": "https://www.facebook.com/test/posts/other-post?comment_id=foreign",     "instagram": "https://www.instagram.com/p/other-post/c/foreign",

"facebook": "https://www.facebook.com/test/posts/other-post?comment_id=foreign",

"instagram": "https://www.instagram.com/p/other-post/c/foreign",

"threads": "https://www.threads.com/@test/post/other-post?reply=foreign",

author = comment.get("author_key") or comment.get("author_display") or "fixture_author"         comment_permalink = (             f"https://www.threads.com/@{author}/post/{comment['platform_comment_id']}"

comment_permalink = (             f"https://www.threads.com/@{author}/post/{comment['platform_comment_id']}"         )

f"https://www.threads.com/@{author}/post/{comment['platform_comment_id']}"

#!/usr/bin/env python3

anchor = self.comment["comment_permalink"]         cases = (             "https://www.threads.com/@other/post/arbitrary-reply",

cases = (             "https://www.threads.com/@other/post/arbitrary-reply",             "https://www.threads.com/@test/post/other-parent",

"https://www.threads.com/@other/post/arbitrary-reply",

"https://www.threads.com/@test/post/other-parent",

anchor.replace("www.threads.com", "evil.example"),             anchor.replace("https://", "http://"),             anchor.replace("https://", "https://user@"),

anchor.replace("https://", "http://"),             anchor.replace("https://", "https://user@"),             anchor.replace("www.threads.com", "www.threads.com:444"),

anchor.replace("https://", "https://user@"),

def test_exact_reply_requires_stored_original_parent(self) -> None:         for stage in self.stages:             for parent in (None, "https://www.threads.com/@other/post/wrong-parent"):

for stage in self.stages:             for parent in (None, "https://www.threads.com/@other/post/wrong-parent"):                 comment = dict(self.comment, observed_parent_post_permalink=parent)

for parent in (None, "https://www.threads.com/@other/post/wrong-parent"):

def test_receipt_cannot_supply_a_new_reply_anchor(self) -> None:         forged = "https://www.threads.com/@external/post/not-in-ledger"

forged = "https://www.threads.com/@external/post/not-in-ledger"

anchor.replace("www.instagram.com", "instagram.com"),             anchor.replace("www.instagram.com", "evil.example"),             anchor.replace("https://", "http://"), anchor.replace("https://", "https://user@"),

anchor.replace("www.instagram.com", "evil.example"),             anchor.replace("https://", "http://"), anchor.replace("https://", "https://user@"),             anchor.replace("www.instagram.com", "www.instagram.com:444"),

anchor.replace("https://", "http://"), anchor.replace("https://", "https://user@"),

#!/usr/bin/env python3

return {             "platform": "threads", "account_key": "creator_test", "post_key": "Root_Test-1",             "post_permalink": "https://www.threads.com/@root_creator/post/Root_Test-1/",

"platform": "threads", "account_key": "creator_test", "post_key": "Root_Test-1",             "post_permalink": "https://www.threads.com/@root_creator/post/Root_Test-1/",             "target": {"platform_comment_id": "Reply_Test-2",

"post_permalink": "https://www.threads.com/@root_creator/post/Root_Test-1/",

"target": {"platform_comment_id": "Reply_Test-2",                        "comment_permalink": "https://www.threads.com/@viewer_test/post/Reply_Test-2/"},         }

"comment_permalink": "https://www.threads.com/@viewer_test/post/Reply_Test-2/"},

return {         "platform": "instagram", "account_key": "creator-test", "post_key": "ExampleShortcode",         "post_permalink": "https://www.instagram.com/reels/ExampleShortcode/",

"platform": "instagram", "account_key": "creator-test", "post_key": "ExampleShortcode",         "post_permalink": "https://www.instagram.com/reels/ExampleShortcode/",         "target": {"platform_comment_id": "123456789",

"post_permalink": "https://www.instagram.com/reels/ExampleShortcode/",

"target": {"platform_comment_id": "123456789",                    "comment_permalink": "https://www.instagram.com/p/ExampleShortcode/c/123456789/"},     }

"comment_permalink": "https://www.instagram.com/p/ExampleShortcode/c/123456789/"},

("test_only", True), ("observation_scope", "whole_post"),         ("account_verified", False), ("post_verified", False), ("target_verified", "true"),         ("observed_url", "https://www.instagram.com/p/ExampleShortcode/c/987654321"),

("account_verified", False), ("post_verified", False), ("target_verified", "true"),         ("observed_url", "https://www.instagram.com/p/ExampleShortcode/c/987654321"),         ("session_id", "other-session"), ("whole_post_complete", True)

("observed_url", "https://www.instagram.com/p/ExampleShortcode/c/987654321"),

_reject(lambda: normalize_browser_target_observation(bad, POLICY, request), "evidence " + key)     for key, value in (("schema_version", True), ("kind", "physical_document_epoch"), ("tab_id", ""),                        ("observed_url", "ht

for key, value in (("schema_version", True), ("kind", "physical_document_epoch"), ("tab_id", ""),                        ("observed_url", "https://www.instagram.com/p/Other/c/123456789"),                        ("target_digest", "0" * 64)):

("observed_url", "https://www.instagram.com/p/Other/c/123456789"),

target.replace("www.threads.com", "evil.example"),                 target.replace("www.threads.com", "www.threads.com:444"),                 target.replace("https://", "http://"), target.replace("https://", "https://user@")):

target.replace("www.threads.com", "www.threads.com:444"),                 target.replace("https://", "http://"), target.replace("https://", "https://user@")):         invalid_scopes.append({**scope, "target": {**scope["target"], "comment_pe

target.replace("https://", "http://"), target.replace("https://", "https://user@")):

def _threads_observation_rejections(request: dict, receipt: dict) -> None:     cases = (         ("observed_parent_post_permalink", "https://www.threads.com/@root_creator/post/OtherRoot"),

cases = (         ("observed_parent_post_permalink", "https://www.threads.com/@root_creator/post/OtherRoot"),         ("observed_parent_post_permalink", request["target"]["comment_permalink"]),

("observed_parent_post_permalink", "https://www.threads.com/@root_creator/post/OtherRoot"),

("observed_parent_post_permalink", request["post_permalink"].replace("www.threads.com", "www.threads.net")),         ("platform_comment_id", "OtherReply"),         ("comment_permalink", "https://www.threads.com/@viewer_test/post/OtherReply"

("platform_comment_id", "OtherReply"),         ("comment_permalink", "https://www.threads.com/@viewer_test/post/OtherReply"),     )

("comment_permalink", "https://www.threads.com/@viewer_test/post/OtherReply"),

#!/usr/bin/env python3

#!/usr/bin/env python3

[Credential-related source omitted]

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

permalink = "https://example.com/post/permalink?comment=stable"

#!/usr/bin/env python3

"account_key": "creator-test",         "post_key": post_key or f"post-{suffix}",         "post_permalink": f"https://example.com/post/{suffix}",

"post_key": post_key or f"post-{suffix}",         "post_permalink": f"https://example.com/post/{suffix}",         "platform_comment_id": f"comment-{suffix}" if strong else None,

"post_permalink": f"https://example.com/post/{suffix}",

#!/usr/bin/env python3

if self.verification_error:             raise RuntimeError("isolated verification failure")         self.requests.append(copy.deepcopy(request))

raise RuntimeError("isolated verification failure")         self.requests.append(copy.deepcopy(request))         if self.replay_first and self.first_response is not None:

self.requests.append(copy.deepcopy(request))

#!/usr/bin/env python3

#!/usr/bin/env python3

Executable file

#!/usr/bin/env python3

#!/usr/bin/env python3

[Credential-related source omitted]

#!/usr/bin/env python3

Executable file

Executable file

import copy import hashlib import http.client

import hashlib import http.client import json

import http.client

self.assertFalse(check(text)["delivery_ready"])         variants = [text.rsplit("\n\n", 1)[0], text + "\n\n多一段", text + "。",                     text.replace("測試", "測試！"), text + " https://example.org", text + "\U0001f600",

variants = [text.rsplit("\n\n", 1)[0], text + "\n\n多一段", text + "。",                     text.replace("測試", "測試！"), text + " https://example.org", text + "\U0001f600",                     text.replace("花兩天", "1. 花兩天"), text.replace("完成測試", 

text.replace("測試", "測試！"), text + " https://example.org", text + "\U0001f600",

thread = threading.Thread(target=server.serve_forever, daemon=True)         thread.start()         connection = http.client.HTTPConnection("127.0.0.1", server.server_port, timeout=5)

thread.start()         connection = http.client.HTTPConnection("127.0.0.1", server.server_port, timeout=5)         headers = {"Content-Type": "application/json", "Origin": server.origin,

connection = http.client.HTTPConnection("127.0.0.1", server.server_port, timeout=5)

Executable file

#!/usr/bin/env python3

Executable file

Executable file

Executable file

Executable file

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

Executable file

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

self.csrf = secrets.token_urlsafe(32)         super().__init__(("127.0.0.1", port), WorkbenchHandler)         self.origin = "http://127.0.0.1:" + str(self.server_port)

self.origin = "http://127.0.0.1:" + str(self.server_port)

Executable file

[{ ...modules, "api.js": "import './app.js';" + modules["api.js"] }, "cycle"],   [{ ...modules, "ui.js": "import './editor.js';" + modules["ui.js"] }, "layer"],   [{ ...modules, "app.js": "import 'https://invalid.example/remote.js';" + modu

[{ ...modules, "ui.js": "import './editor.js';" + modules["ui.js"] }, "layer"],   [{ ...modules, "app.js": "import 'https://invalid.example/remote.js';" + modules["app.js"] }, "external_or_dynamic_loader"],   [{ ...modules, "app.js": "impor

[{ ...modules, "app.js": "import 'https://invalid.example/remote.js';" + modules["app.js"] }, "external_or_dynamic_loader"],

Executable file

Executable file

Executable file

Executable file

Executable file

#!/usr/bin/env python3

import copy import http.client

import http.client

base["Content-Type"] = "application/json"         base.update(headers or {})         connection = http.client.HTTPConnection("127.0.0.1", self.server.server_port, timeout=3)

base.update(headers or {})         connection = http.client.HTTPConnection("127.0.0.1", self.server.server_port, timeout=3)         try:

connection = http.client.HTTPConnection("127.0.0.1", self.server.server_port, timeout=3)

def test_wrong_origin_host_and_fetch_metadata_denied(self):         for headers in ({"Origin": "https://attacker.invalid"}, {"Host": "attacker.invalid"},                         {"Sec-Fetch-Site": "cross-site"}, {"Sec-Fetch-Site": "same-sit

for headers in ({"Origin": "https://attacker.invalid"}, {"Host": "attacker.invalid"},                         {"Sec-Fetch-Site": "cross-site"}, {"Sec-Fetch-Site": "same-site"}):             with self.subTest(headers=headers):

Executable file

const timer = setTimeout(() => controller.abort(), 15000);   try {     const response = await fetch(path, {

try {     const response = await fetch(path, {       method: body === undefined ? "GET" : "POST",

const response = await fetch(path, {

Executable file

Executable file

<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64">

Executable file

Executable file

Executable file