Skip to content

RGH is injecting code into websites other than Github. #7336

@Pandustry-Dev

Description

@Pandustry-Dev

Description

https://techcommunity.microsoft.com/t5/outlook/got-weird-internal-publishing-page-instead-of-login/m-p/3902338/highlight/false#M17590

This was my reply to someone having outlook login issues after doing a google search for a portion of the injected code appearing in my Userstyle CSS scripts as I installed them:

"This appears to be caused by the firefox addon Refined-Github. Turn off the permission "Access your data for all websites" on the permissions tab and it should fix it. For me it was inserting extra code to userstyle CSS scripts from userstyle.world and some already install userstyles in FireMonkey. I realized looking at you post what the "RGH" CSS handle was for Refined-GitHub."

How to replicate the issue + URL

Enable the "Access your data for all websites" permission.
Install a userscript from userscript.world into FireMonkey or apparently try to log into outlook.com and the follow code appears (note, this has been formatting via prettyprint):

:where(.user-mention:not(.commit-author)[data-hovercard-type="user"]):not(
.rgh-seen--26062470120
) {
animation: 1ms rgh-selector-observer;
}

:where(
.js-issue-row [data-hovercard-type="user"],
.notification-thread-subscription [data-hovercard-type="user"]
):not(.rgh-seen--26062499911) {
animation: 1ms rgh-selector-observer;
}

:where(
.js-hovercard-content
.Popover-message
div.d-flex.mt-3.overflow-hidden
> div.d-flex,
.js-hovercard-content
.Popover-message
div.d-flex.mt-3
> div.overflow-hidden.ml-3
):not(.rgh-seen-722523370) {
animation: 1ms rgh-selector-observer;
}

:where(
[itemprop="homeLocation"] svg.octicon-location,
[aria-label="User location"] svg.octicon-location
):not(.rgh-seen-668154795) {
animation: 1ms rgh-selector-observer;
}

:where(a[href*="?tab=repositories"]:is([href^="/"], [href^="https://userstyles.world/"]):not([href*="&type="], .issues-reset-query),a[href*="/repositories"]:is([href^="/orgs/"], [href^="https://userstyles.world/orgs/"]):not([href*="&type="], .issues-reset-query)):not(.rgh-seen--393030416)
{
animation: 1ms rgh-selector-observer;
}

:where(
.BorderGrid--spacious .f4.my-3,
.js-commits-list-item pre,
.js-commit-group pre,
.release-header,
.Box-row .mb-1 a,
#pull-requests a.Link--primary,
[id^="check_suite"] a.Link--primary,
.js-socket-channel[data-url*="/header_partial"] h3,
.js-wiki-sidebar-toggle-display a,
#wiki-wrapper .gh-header-title,
#user-repositories-list [itemprop="description"],
.js-hovercard-content > .Popover-message .Link--primary,
.search-title a,
.notification-thread-subscription [id^="subscription_link_"]
):not(.rgh-seen-27766609435) {
animation: 1ms rgh-selector-observer;
}

:where(
a:is(
[href*="/issues"],
[href*="/pulls"],
[href*="/projects"],
[href*="/labels/"]
):not([href*="sort%3A"], .issues-reset-query)
):not(.rgh-seen--1282261975) {
animation: 1ms rgh-selector-observer;
}

:where([data-hydro-view*="pull-request-hovercard-hover"] ~ .d-flex.mt-2):not(
.rgh-seen--1968497660
) {
animation: 1ms rgh-selector-observer;
}

:where(.comment-body a[href]:not(.rgh-linkified-code)):not(
.rgh-seen-26849672246
) {
animation: 1ms rgh-selector-observer;
}

Extension version

24.4.9

Browser(s) used

Firefox 127.0a1 (2024-04-20) (64-bit)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions