Is 穿梭Transocks回国加速器 - 海外华人回国追剧听歌 safe?

// Generates a device fingerprint by drawing a fixed image on an invisible canvas
// and hashing the resulting PNG pixels. GPU and font-rendering differences
// cause the pixel output to vary across machines and OSes.
const computeCanvasFingerprint = () => new Promise((resolve, reject) => {
  const canvas = new OffscreenCanvas(200, 20);
  const ctx = canvas.getContext('2d');
  const testString = 'i9asdm..$#po((^@KbXrww!~cz';

  // Fixed drawing sequence — identical on every run on the same hardware
  ctx.textBaseline = 'alphabetic';
  ctx.font = "16px 'Arial'";
  ctx.rotate(0.05);
  ctx.fillStyle = '#f60';
  ctx.fillRect(125, 1, 62, 20);
  ctx.fillStyle = '#069';
  ctx.fillText(testString, 2, 15);
  ctx.fillStyle = 'rgba(102, 200, 0, 0.7)';
  ctx.fillText(testString, 4, 17);
  ctx.shadowBlur = 10;
  ctx.shadowColor = 'blue';
  ctx.fillRect(-20, 10, 234, 5);

  canvas.convertToBlob().then(blob => {
    const reader = new FileReader();
    reader.readAsDataURL(blob);
    reader.onloadend = () => {
      const base64png = reader.result.split(',')[1];
      const fingerprint = sha256(base64png); // 64-char hex string
      resolve(fingerprint);
    };
  }).catch(reject);
});

// On startup, assemble a payload that includes the canvas fingerprint as 'mac'
// and POST it to the server. This same fingerprint appears in every subsequent request.
const fetchLinks = async (domain) => {
  const payload = encryptPayload({
    target: 'links',
    device: 'chrome',
    mac: await computeCanvasFingerprint(),  // persistent device ID
    org: 'transocks_pro'
  }, isExtVersion = true);
  const response = await fetch(`${domain}/ext/gateway`, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify(payload)
  });
  // ...
};

      login(e, t) {
        var n, r;
        return Kt(this, void 0, void 0, (function*() {
          const i = navigator.userAgent,
            o = i.split("(")[1].split(")")[0],
            a = i.split(")")[2].split(" ")[1].split("/")[1],
            l = yield this.extFetch({
              email: e,
              password: t,
              autokick: 1,
              auth_type: "jwt",
              auth: "email",
              app_version: gt.version,
              model: o,
              os: a
            }, "login");
          return (null === (r = null === (n = l) || void 0 === n ? void 0 : n.token) || void 0 === r ? void 0 : r.access_token) && (document.cookie = `ABS_FOBWIFISS=${l.token.access_token}`), Ne.dispatch({
            type: ve,
            value: l
          }), this.getLines(), yield this.getLinks(!0), l
        }))
      }
      loginPhone(e, t, n) {
        var r, i;
        return Kt(this, void 0, void 0, (function*() {
          const o = navigator.userAgent,
            a = o.split("(")[1].split(")")[0],
            l = o.split(")")[2].split(" ")[1].split("/")[1],
            c = yield this.extFetch({
              phone: e,
              cc: t,
              password: n,
              autokick: 1,
              auth_type: "jwt",
              auth: "mobile",
              app_version: gt.version,
              model: a,
              os: l
            }, "login");
          return (null === (i = null === (r = c) || void 0 === r ? void 0 : r.token) || void 0 === i ? void 0 : i.access_token) && (document.cookie = `ABS_FOBWIFISS=${c.token.access_token}`), Ne.dispatch({
            type: ve,
            value: c
          }), this.getLines(), yield this.getLinks(!0), c
        }))
      }

      extFetch(e, t, n) {
        var r, i;
        return Kt(this, void 0, void 0, (function*() {
          const o = yield Se.asyncLocalGet([ve]), {
            language: a
          } = yield Se.asyncLocalGet([ke]), l = o.user_info, c = yield at();
          n && n();
          const s = {
            target: t,
            device: ft,
            mac: c,
            org: "transocks_pro",
            app_version: gt.version,
            language: a.language
          };
          e.langue || Object.assign(s, e), (null === (i = null === (r = l) || void 0 === r ? void 0 : r.token) || void 0 === i ? void 0 : i.access_token) && (s.access_token = l.token.access_token);
          const u = ct(s, null, !0),
            f = e.langue ? Object.assign(Object.assign({}, u), {
              langue: e.langue
            }) : u,
            d = yield zt("/ext/gateway", {
              method: "POST",
              body: f
            }, !1, !0, {
              retryOnFail: "login" === t
            });
          return Object.assign(Object.assign({}, d.data), {
            status: d.status,
            code: d.code
          })
        }))
      }

  function zt(e, t, n = !0, r = !1, i = {}) {
    var o, a, l, c;
    return Bt(this, void 0, void 0, (function*() {
      const s = yield at(), u = yield Ot();
      if ("GET" === t.method && n) {
        const t = `org=${ut}&mac=${s}&device=${ft}`; - 1 !== e.indexOf("?") ? e += `&${t}` : e += `?${t}`
      }
      const f = Object.assign({
          credentials: "include"
        }, t),
        d = (yield Se.asyncLocalGet([ve])).user_info;
      (null === (a = null === (o = d) || void 0 === o ? void 0 : o.token) || void 0 === a ? void 0 : a.token_type) && (null === (c = null === (l = d) || void 0 === l ? void 0 : l.token) || void 0 === c ? void 0 : c.access_token) && (f.headers = Object.assign({
        Authorization: `${d.token.token_type} ${d.token.access_token}`
      }, f.headers)), "POST" !== f.method && "PUT" !== f.method && "DELETE" !== f.method || (f.headers = Object.assign({
        Accept: "application/json",
        "Content-Type": "application/json; charset=utf-8"
      }, f.headers), n && (f.body = Object.assign({
        mac: s,
        device: ft,
        org: ut
      }, f.body)), f.body = JSON.stringify(f.body));
      const h = i.retryOnFail ? [...new Set([u, ht, ...pt])] : [u];
      let p;
      for (let t = 0; t < h.length; t++) {
        const n = h[t];
        try {
          const t = yield Tt(fetch(`${n}${e}`, f).then(Mt).then(e => Rt(e, f.method, r)));
          return n !== u && Se.localSet({
            domain: n
          }), t
        } catch (e) {
          if (p = e, !i.retryOnFail || (m = e) && "request timeout" !== m.message && m.status && !(m.status >= 500)) throw e
        }
      }
      var m;
      throw p
    }))
  }

    at = () => $e(void 0, void 0, void 0, (function*() {
      return new Promise((e, t) => {
        const n = new OffscreenCanvas(200, 20),
          r = n.getContext("2d"),
          i = "i9asdm..$#po((^@KbXrww!~cz";
        r.textBaseline = "top", r.font = "16px 'Arial'", r.textBaseline = "alphabetic", r.rotate(.05), r.fillStyle = "#f60", r.fillRect(125, 1, 62, 20), r.fillStyle = "#069", r.fillText(i, 2, 15), r.fillStyle = "rgba(102, 200, 0, 0.7)", r.fillText(i, 4, 17), r.shadowBlur = 10, r.shadowColor = "blue", r.fillRect(-20, 10, 234, 5), n.convertToBlob().then(t => {
          const n = new FileReader;
          n.readAsDataURL(t), n.onloadend = () => {
            const t = n.result.split(",")[1],
              r = Object(Qe.sha256)(t);
            e(r)
          }
        }).catch(e => {
          t(e)
        })
      })
    }));

  function ct(e, t, n = !1) {
    let r, i;
    t ? (i = vt, r = i + yt) : n && (i = vt, r = i + yt);
    const o = JSON.stringify(e),
      a = Math.floor(Date.now() / 1e3),
      l = a.toString().slice(-8),
      c = new Uint8Array(Qe.sha256.arrayBuffer(Ke(r + l))),
      s = new Uint8Array(Qe.sha256.arrayBuffer(Je(c, Ke(r + l)))).slice(0, 16),
      u = Ye(new We.a.ModeOfOperation.cbc(c, s).encrypt(Le.padding.pkcs7.pad(Ke(o))));
    let f = `encrypted=${u}&pub_key=${i}&t=${a}`;
    n && (f += `&version=${bt}`);
    const d = {
      encrypted: u,
      t: a,
      sign: Ye(Ge(Object(Fe.HmacSHA1)(f, r).toString()))
    };
    return n && (d.version = bt, d.pub_key = i), d
  }

  function st() {
    return !!navigator.userAgent.includes("Edg/")
  }
  const ut = "transocks_pro",
    ft = st() ? "edge" : "chrome",
    dt = st() ? `https://microsoftedge.microsoft.com/addons/detail/${chrome.runtime.id}` : `https://chrome.google.com/webstore/detail/${chrome.runtime.id}`,
    ht = "https://webapi.fobwifi.com",
    pt = ["https://b.kolavpn.xyz"],
    mt = "https://www.transocks.com.cn/",
    gt = chrome.runtime.getManifest(),
    vt = chrome.runtime.id,
    yt = "tZn7uJwcHjAJr4fQ3",
    bt = 1811,

  const Se = new Map;
  let ke;
  const Ae = () => we(void 0, void 0, void 0, (function*() {
    const e = chrome.runtime.getURL("offscreen.html");
    return (yield chrome.runtime.getContexts({
      contextTypes: ["OFFSCREEN_DOCUMENT"],
      documentUrls: [e]
    })).length > 0
  }));

  function xe(e) {
    return we(this, void 0, void 0, (function*() {
      yield function(e) {
        return we(this, void 0, void 0, (function*() {
          (yield Ae()) || (ke ? yield ke: (ke = chrome.offscreen.createDocument({
            url: e,
            reasons: ["DOM_PARSER"],
            justification: "Parse and send log data to Alibaba Cloud SLS via DOM-based SDK"
          }), yield ke))
        }))
      }("offscreen.html"), (yield Ae()) && (yield chrome.runtime.sendMessage({
        type: "SLS_SEND_LOG",
        target: "offscreen",
        data: e
      }))
    }))
  }

  function Ee(e) {
    var t;
    return we(this, void 0, void 0, (function*() {
      const n = function(e) {
          const {
            timestamp: t
          } = e, n = be(e, ["timestamp"]);
          return JSON.stringify(n)
        }(e),
        r = Date.now();
      Se.size > 50 && function() {
        const e = Date.now();
        for (const [t, n] of Se) e - n >= 6e4 && Se.delete(t)
      }();
      const i = Se.get(n);
      if (!(i && r - i < 6e4)) {
        Se.set(n, r);
        try {
          yield function() {
            var e;
            return we(this, void 0, void 0, (function*() {
              const t = (yield f.asyncLocalGet(["sls_sts_config"])).sls_sts_config;
              if (1e3 * (null === (e = t) || void 0 === e ? void 0 : e.ExpireAt) > Date.now()) return t;
              const n = yield me.extFetch({
                scope: "log_access"
              }, "sts");
              if (!n || !n.AccessKeyId) throw new Error("Failed to get STS config");
              const r = {
                AccessKeyId: n.AccessKeyId,
                AccessKeySecret: n.AccessKeySecret,
                SecurityToken: n.SecurityToken,
                ExpireAt: n.ExpireAt
              };
              return f.localSet({
                sls_sts_config: r
              }), r
            }))
          }();
          const n = yield f.asyncLocalGet([a]);
          yield xe(Object.assign({
            user_id: null === (t = n.user_info) || void 0 === t ? void 0 : t.transocks_id,
            app_version: $.version,
            device: navigator.userAgent
          }, e))
        } catch (e) {}
      }
    }))
  }

  function u(t, e) {
    const r = new window.XMLHttpRequest;
    r.open("POST", `${t}?APIVersion=0.6.0`, !0), r.send(e)
  }

  function h(t, e) {
    try {
      if (e.length >= 32768) return void u(t, e);
      (function(t, e) {
        return !(!navigator || !navigator.sendBeacon) && navigator.sendBeacon(`${t}?APIVersion=0.6.0`, e)
      })(t, e) || u(t, e)
    } catch (e) {
      window && window.console && "function" == typeof window.console.error && (console.error("Failed to log to ali log service because of this exception:\n" + e), console.error("Failed log data:", t))
    }
  }
  class d extends class {
    constructor(t) {
      var e, r, n;
      this.timer = null, this.time = 10, this.count = 10, this.arr = [], this.time = null != (e = t.time) ? e : 10, this.count = null != (r = t.count) ? r : 10, this.ccController = new o(null != (n = t.maxReqCount) ? n : 10), t.host.startsWith("http://") || t.host.startsWith("https://") ? this.url = t.host + "/logstores/" + t.logstore + "/track" : this.url = "https://" + t.project + "." + t.host + "/logstores/" + t.logstore + "/track", this.opt = t, t.installUnloadHook && "function" == typeof t.installUnloadHook && t.installUnloadHook(() => {
        this.sendImmediateInner()
      })
    }
    assemblePayload(t) {
      const e = {
        __logs__: t
      };
      return this.opt.tags && (e.__tags__ = this.opt.tags), this.opt.topic && (e.__topic__ = this.opt.topic), this.opt.source && (e.__source__ = this.opt.source), JSON.stringify(e)
    }
    platformSend() {
      if (this.opt.sendPayload && "function" == typeof this.opt.sendPayload) {
        const t = this.assemblePayload(this.arr);
        this.ccController.append(() => this.opt.sendPayload(this.url, t))
      }
    }
    transString(t) {
      let e = {};
      for (let r in t) "object" == typeof t[r] ? e[r] = JSON.stringify(t[r]) : e[r] = String(t[r]);
      return e
    }
    sendImmediateInner() {
      this.arr && this.arr.length > 0 && (this.platformSend(), null != this.timer && (clearTimeout(this.timer), this.timer = null), this.arr = [])
    }
    sendInner() {
      if (this.timer) this.arr.length >= this.count && (clearTimeout(this.timer), this.timer = null, this.sendImmediateInner());
      else {
        const t = this;
        this.arr.length >= this.count || this.time <= 0 ? this.sendImmediateInner() : this.timer = setTimeout((function() {
          t.sendImmediateInner()
        }), 1e3 * this.time)
      }
    }
    send(t) {
      const e = this.transString(t);
      this.arr.push(e), this.sendInner()
    }
    sendImmediate(t) {
      const e = this.transString(t);
      this.arr.push(e), this.sendImmediateInner()
    }
    sendBatchLogs(t) {
      const e = t.map(t => this.transString(t));
      this.arr.push(...e), this.sendInner()
    }
    sendBatchLogsImmediate(t) {
      const e = t.map(t => this.transString(t));
      this.arr.push(...e), this.sendImmediateInner()
    }
    overwriteTransString(t) {
      this.transString = t.transString
    }
    getOpt() {
      return this.opt
    }
  } {
    constructor(t) {
      super(Object.assign({}, t, {
        installUnloadHook: t => {
          window.addEventListener("beforeunload", () => {
            t()
          })
        },
        sendPayload: (t, e) => l(this, null, (function*() {
          h(t, e)
        }))
      }))
    }
    useStsPlugin(t) {
      this.getOpt().sendPayload = (e, r) => l(this, null, (function*() {
        yield function(t, e, r) {
          return l(this, null, (function*() {
            return new Promise(n => l(this, null, (function*() {
              try {
                t = t.slice(0, -6);
                const {
                  data: o,
                  header: s
                } = yield r.process(t, e), i = new window.XMLHttpRequest;
                i.open("POST", t, !0);
                for (let t in s) i.setRequestHeader(t, s[t]);
                i.onreadystatechange = () => {
                  4 === i.readyState && (200 === i.status || window && window.console && "function" == typeof window.console.error && (console.error("Failed to log to ali log service because of this exception:\n" + i.status), console.error("Failed logdata:", t)), n())
                }, i.send(o)
              } catch (e) {
                window && window.console && "function" == typeof window.console.error && (console.error("Failed to log to ali log service because of this exception:\n" + e), console.error("Failed log data:", t))
              }
            })))
          }))
        }(e, r, t)
      })), this.overwriteTransString(t)
    }
  }
  s = window, i = "SLS_Tracker", a = d, c ? c(() => {
    n(s, i, a)
  }) : n(s, i, a);
  const p = new d({
    host: "ap-northeast-1.log.aliyuncs.com",
    project: "transocks-client-3",
    logstore: "chrome"
  });
  chrome.runtime.onMessage.addListener((t, e, r) => {
    if ("offscreen" === t.target) {
      if ("SLS_SEND_LOG" === t.type) try {
        p.sendImmediate(t.data), r({
          success: !0
        })
      } catch (t) {
        r({
          success: !1,
          error: String(t)
        })
      }
      return !0
    }
  })