官方版

Build Cookie Scanning Extension

Below is the code for the Fiddler Privacy Scanner add-on.

  1.  using System;
  2.     using System.Collections;
  3.     using System.Globalization;
  4.     using System.Collections.Generic;
  5.     using System.Windows.Forms;
  6.     using System.Text;
  7.     using Fiddler;
  8.     using System.IO;
  9.     using System.Diagnostics;
  10.     using Microsoft.Win32;
  11.     using System.Reflection;
  12.     using System.Text.RegularExpressions;
  14.     [assembly: Fiddler.RequiredVersion("2.3.9.0")]
  15.     [assembly: AssemblyVersion("1.0.1.0")]
  16.     [assembly: AssemblyTitle("PrivacyScanner")]
  17.     [assembly: AssemblyDescription("Scans for Cookies and P3P")]
  18.     [assembly: AssemblyCompany("Eric Lawrence")]
  19.     [assembly: AssemblyProduct("PrivacyScanner")]
  21.     public class TagCookies : IAutoTamper2
  22.     {
  23.         private bool bEnabled = false;
  24.         private bool bEnforceP3PValidity = false;
  25.         private bool bCreatedColumn = false;
  26.         private System.Windows.Forms.MenuItem miEnabled;
  27.         private System.Windows.Forms.MenuItem miEnforceP3PValidity;
  28.         private System.Windows.Forms.MenuItem mnuCookieTag;
  30.         public void OnLoad()
  31.         {
  32.             /*
  33.      * NB: You might not get called here until ~after~ one of the AutoTamper methods was called.
  34.      * This is okay for us, because we created our mnuContentBlock in the constructor and its simply not
  35.      * visible anywhere until this method is called and we merge it onto the Fiddler Main menu.
  36.      */
  37.             FiddlerApplication.UI.mnuMain.MenuItems.Add(mnuCookieTag);
  38.         }
  40.         public void OnBeforeUnload() {  /*noop*/   }
  42.         private void InitializeMenu()
  43.         {
  44.             this.miEnabled = new System.Windows.Forms.MenuItem("&Enabled");
  45.             this.miEnforceP3PValidity = new System.Windows.Forms.MenuItem("&Rename P3P header if invalid");
  47.             this.miEnabled.Index = 0;
  48.             this.miEnforceP3PValidity.Index = 1;
  50.             this.mnuCookieTag = new System.Windows.Forms.MenuItem();
  51.             this.mnuCookieTag.MenuItems.AddRange(new System.Windows.Forms.MenuItem[] { this.miEnabled, this.miEnforceP3PValidity });
  52.             this.mnuCookieTag.Text = "Privacy";
  54.             this.miEnabled.Click += new System.EventHandler(this.miEnabled_Click);
  55.             this.miEnabled.Checked = bEnabled;
  57.             this.miEnforceP3PValidity.Click += new System.EventHandler(this.miEnforceP3PValidity_Click);
  58.             this.miEnforceP3PValidity.Checked = bEnforceP3PValidity;
  59.         }
  61.         public void miEnabled_Click(object sender, EventArgs e)
  62.         {
  63.             miEnabled.Checked = !miEnabled.Checked;
  64.             bEnabled = miEnabled.Checked;
  65.             this.miEnforceP3PValidity.Enabled = bEnabled;
  66.             if (bEnabled) { EnsureColumn(); }
  67.             FiddlerApplication.Prefs.SetBoolPref("extensions.tagcookies.enabled", bEnabled);
  68.         }
  70.         public void miEnforceP3PValidity_Click(object sender, EventArgs e)
  71.         {
  72.             miEnforceP3PValidity.Checked = !miEnforceP3PValidity.Checked;
  73.             bEnforceP3PValidity = miEnforceP3PValidity.Checked;
  74.             FiddlerApplication.Prefs.SetBoolPref("extensions.tagcookies.EnforceP3PValidity", bEnforceP3PValidity);
  75.         }
  77.         private void EnsureColumn()
  78.         {
  79.             if (bCreatedColumn) return;
  81.             FiddlerApplication.UI.lvSessions.AddBoundColumn("Privacy Info", 1, 120, "X-Privacy");
  83.             bCreatedColumn = true;
  84.         }
  86.         public TagCookies()
  87.         {
  88.             this.bEnabled = FiddlerApplication.Prefs.GetBoolPref("extensions.tagcookies.enabled", false);
  89.             this.bEnforceP3PValidity = FiddlerApplication.Prefs.GetBoolPref("extensions.tagcookies.EnforceP3PValidity", true);
  90.             InitializeMenu();
  92.             if (bEnabled) { EnsureColumn(); } else { this.miEnforceP3PValidity.Enabled = false; }
  93.         }
  95.         private void SetP3PStateFromHeader(string sValue, ref P3PState oP3PState)
  96.         {
  97.             if (string.IsNullOrEmpty(sValue))
  98.             {
  99.                 return;
  100.             }
  102.             string sUnsatCat = String.Empty;
  103.             string sUnsatPurpose = String.Empty;
  104.             sValue = sValue.Replace('\'', '"');
  106.             string sCP = null;
  108.             Regex r = new Regex("CP\\s?=\\s?[\"]?(?<TokenValue>[^\";]*)");
  109.             Match m = r.Match(sValue);
  110.             if (m.Success && (null != m.Groups["TokenValue"]))
  111.             {
  112.                 sCP = m.Groups["TokenValue"].Value;
  113.             }
  115.             if (String.IsNullOrEmpty(sCP))
  116.             {
  117.                 return;
  118.             }
  120.             // Okay, we've got a compact policy token.
  122.             oP3PState = P3PState.P3POk;
  123.             string[] sTokens = sCP.Split(new char[] { ' ' }, StringSplitOptions.RemoveEmptyEntries);
  125.             foreach (string sToken in sTokens)
  126.             {
  127.                 // Reject clearly invalid tokens...
  128.                 if ((sToken.Length < 3) || (sToken.Length > 4))
  129.                 {
  130.                     oP3PState = P3PState.P3PMalformed;
  131.                     return;
  132.                 }
  134.                 if (",PHY,ONL,GOV,FIN,".IndexOf("," + sToken + ",", StringComparison.OrdinalIgnoreCase) > -1)
  135.                 {
  136.                     sUnsatCat += (sToken + " ");
  137.                     continue;
  138.                 }
  140.                 if (",SAM,OTR,UNR,PUB,IVA,IVD,CON,TEL,OTP,".IndexOf("," + sToken + ",", StringComparison.OrdinalIgnoreCase) > -1)
  141.                 {
  142.                     sUnsatPurpose += (sToken + " ");
  143.                     continue;
  144.                 }
  146.                 // TODO: Look up the token in the complete collection and check validity
  147.             }
  149.             // If a cookie contains an unsatisfactory purpose and an unsatisfactory category, mark it
  150.             // https://msdn.microsoft.com/en-us/library/ie/ms537343(v=vs.85).aspx#unsatisfactory_cookies
  151.             if ((sUnsatCat.Length > 0) && (sUnsatPurpose.Length > 0))
  152.             {
  153.                 if (oP3PState == P3PState.P3POk)
  154.                 {
  155.                     oP3PState = P3PState.P3PUnsatisfactory;
  156.                 }
  157.             }
  158.         }
  160.         private enum P3PState
  161.         {
  162.             NoCookies,
  163.             NoP3PAndSetsCookies,
  164.             P3POk,
  165.             P3PUnsatisfactory,
  166.             P3PMalformed
  167.         }
  169.         public void OnPeekAtResponseHeaders(Session oSession) 
  170.         {
  171.             if (!bEnabled) return;
  173.             P3PState oP3PState = P3PState.NoCookies;
  175.             if (!oSession.oResponse.headers.Exists("Set-Cookie"))
  176.             {
  177.                 return;
  178.             }
  180.             oP3PState = P3PState.NoP3PAndSetsCookies;
  182.             if (oSession.oResponse.headers.Exists("P3P"))
  183.             {
  184.                 SetP3PStateFromHeader(oSession.oResponse.headers["P3P"], ref oP3PState);
  185.             }
  187.             switch (oP3PState)
  188.             {
  189.                 case P3PState.P3POk:
  190.                     oSession["ui-backcolor"] = "#ACDC85";
  191.                     oSession["X-Privacy"] = "Sets cookies & P3P";
  192.                     break;
  194.                 case P3PState.NoP3PAndSetsCookies:
  195.                     oSession["ui-backcolor"] = "#FAFDA4";
  196.                     oSession["X-Privacy"] = "Sets cookies without P3P";
  197.                     break;
  199.                 case P3PState.P3PUnsatisfactory:
  200.                     oSession["ui-backcolor"] = "#EC921A";
  201.                     oSession["X-Privacy"] = "Sets cookies; P3P unsatisfactory for 3rd-party use";
  202.                     break;
  204.                 case P3PState.P3PMalformed:
  205.                     oSession["ui-backcolor"] = "#E90A05";
  206.                     if (bEnforceP3PValidity)
  207.                     {
  208.                         oSession.oResponse.headers["MALFORMED-P3P"] = oSession.oResponse.headers["P3P"];
  209.                         oSession["X-Privacy"] = "MALFORMED P3P: " + oSession.oResponse.headers["P3P"];
  210.                         oSession.oResponse.headers.Remove("P3P");
  211.                     }
  212.                     break;
  213.             }
  214.         }
  215.         public void AutoTamperRequestBefore(Session oSession) { }
  216.         public void AutoTamperRequestAfter(Session oSession){ /*noop*/ }
  217.         public void AutoTamperResponseAfter(Session oSession) {/*noop*/}
  218.         public void AutoTamperResponseBefore(Session oSession) { /*noop*/ }
  219.         public void OnBeforeReturningError(Session oSession) {/*noop*/}
  220.     }

谷歌翻译版

建立Cookie扫描扩展

以下是Fiddler Privacy Scanner加载项的代码。

  1.  using System;
  2.     using System.Collections;
  3.     using System.Globalization;
  4.     using System.Collections.Generic;
  5.     using System.Windows.Forms;
  6.     using System.Text;
  7.     using Fiddler;
  8.     using System.IO;
  9.     using System.Diagnostics;
  10.     using Microsoft.Win32;
  11.     using System.Reflection;
  12.     using System.Text.RegularExpressions;
  14.     [assembly: Fiddler.RequiredVersion("2.3.9.0")]
  15.     [assembly: AssemblyVersion("1.0.1.0")]
  16.     [assembly: AssemblyTitle("PrivacyScanner")]
  17.     [assembly: AssemblyDescription("Scans for Cookies and P3P")]
  18.     [assembly: AssemblyCompany("Eric Lawrence")]
  19.     [assembly: AssemblyProduct("PrivacyScanner")]
  21.     public class TagCookies : IAutoTamper2
  22.     {
  23.         private bool bEnabled = false;
  24.         private bool bEnforceP3PValidity = false;
  25.         private bool bCreatedColumn = false;
  26.         private System.Windows.Forms.MenuItem miEnabled;
  27.         private System.Windows.Forms.MenuItem miEnforceP3PValidity;
  28.         private System.Windows.Forms.MenuItem mnuCookieTag;
  30.         public void OnLoad()
  31.         {
  32.             /*
  33.      * NB: You might not get called here until ~after~ one of the AutoTamper methods was called.
  34.      * This is okay for us, because we created our mnuContentBlock in the constructor and its simply not
  35.      * visible anywhere until this method is called and we merge it onto the Fiddler Main menu.
  36.      */
  37.             FiddlerApplication.UI.mnuMain.MenuItems.Add(mnuCookieTag);
  38.         }
  40.         public void OnBeforeUnload() {  /*noop*/   }
  42.         private void InitializeMenu()
  43.         {
  44.             this.miEnabled = new System.Windows.Forms.MenuItem("&Enabled");
  45.             this.miEnforceP3PValidity = new System.Windows.Forms.MenuItem("&Rename P3P header if invalid");
  47.             this.miEnabled.Index = 0;
  48.             this.miEnforceP3PValidity.Index = 1;
  50.             this.mnuCookieTag = new System.Windows.Forms.MenuItem();
  51.             this.mnuCookieTag.MenuItems.AddRange(new System.Windows.Forms.MenuItem[] { this.miEnabled, this.miEnforceP3PValidity });
  52.             this.mnuCookieTag.Text = "Privacy";
  54.             this.miEnabled.Click += new System.EventHandler(this.miEnabled_Click);
  55.             this.miEnabled.Checked = bEnabled;
  57.             this.miEnforceP3PValidity.Click += new System.EventHandler(this.miEnforceP3PValidity_Click);
  58.             this.miEnforceP3PValidity.Checked = bEnforceP3PValidity;
  59.         }
  61.         public void miEnabled_Click(object sender, EventArgs e)
  62.         {
  63.             miEnabled.Checked = !miEnabled.Checked;
  64.             bEnabled = miEnabled.Checked;
  65.             this.miEnforceP3PValidity.Enabled = bEnabled;
  66.             if (bEnabled) { EnsureColumn(); }
  67.             FiddlerApplication.Prefs.SetBoolPref("extensions.tagcookies.enabled", bEnabled);
  68.         }
  70.         public void miEnforceP3PValidity_Click(object sender, EventArgs e)
  71.         {
  72.             miEnforceP3PValidity.Checked = !miEnforceP3PValidity.Checked;
  73.             bEnforceP3PValidity = miEnforceP3PValidity.Checked;
  74.             FiddlerApplication.Prefs.SetBoolPref("extensions.tagcookies.EnforceP3PValidity", bEnforceP3PValidity);
  75.         }
  77.         private void EnsureColumn()
  78.         {
  79.             if (bCreatedColumn) return;
  81.             FiddlerApplication.UI.lvSessions.AddBoundColumn("Privacy Info", 1, 120, "X-Privacy");
  83.             bCreatedColumn = true;
  84.         }
  86.         public TagCookies()
  87.         {
  88.             this.bEnabled = FiddlerApplication.Prefs.GetBoolPref("extensions.tagcookies.enabled", false);
  89.             this.bEnforceP3PValidity = FiddlerApplication.Prefs.GetBoolPref("extensions.tagcookies.EnforceP3PValidity", true);
  90.             InitializeMenu();
  92.             if (bEnabled) { EnsureColumn(); } else { this.miEnforceP3PValidity.Enabled = false; }
  93.         }
  95.         private void SetP3PStateFromHeader(string sValue, ref P3PState oP3PState)
  96.         {
  97.             if (string.IsNullOrEmpty(sValue))
  98.             {
  99.                 return;
  100.             }
  102.             string sUnsatCat = String.Empty;
  103.             string sUnsatPurpose = String.Empty;
  104.             sValue = sValue.Replace('\'', '"');
  106.             string sCP = null;
  108.             Regex r = new Regex("CP\\s?=\\s?[\"]?(?<TokenValue>[^\";]*)");
  109.             Match m = r.Match(sValue);
  110.             if (m.Success && (null != m.Groups["TokenValue"]))
  111.             {
  112.                 sCP = m.Groups["TokenValue"].Value;
  113.             }
  115.             if (String.IsNullOrEmpty(sCP))
  116.             {
  117.                 return;
  118.             }
  120.             // Okay, we've got a compact policy token.
  122.             oP3PState = P3PState.P3POk;
  123.             string[] sTokens = sCP.Split(new char[] { ' ' }, StringSplitOptions.RemoveEmptyEntries);
  125.             foreach (string sToken in sTokens)
  126.             {
  127.                 // Reject clearly invalid tokens...
  128.                 if ((sToken.Length < 3) || (sToken.Length > 4))
  129.                 {
  130.                     oP3PState = P3PState.P3PMalformed;
  131.                     return;
  132.                 }
  134.                 if (",PHY,ONL,GOV,FIN,".IndexOf("," + sToken + ",", StringComparison.OrdinalIgnoreCase) > -1)
  135.                 {
  136.                     sUnsatCat += (sToken + " ");
  137.                     continue;
  138.                 }
  140.                 if (",SAM,OTR,UNR,PUB,IVA,IVD,CON,TEL,OTP,".IndexOf("," + sToken + ",", StringComparison.OrdinalIgnoreCase) > -1)
  141.                 {
  142.                     sUnsatPurpose += (sToken + " ");
  143.                     continue;
  144.                 }
  146.                 // TODO: Look up the token in the complete collection and check validity
  147.             }
  149.             // If a cookie contains an unsatisfactory purpose and an unsatisfactory category, mark it
  150.             // https://msdn.microsoft.com/en-us/library/ie/ms537343(v=vs.85).aspx#unsatisfactory_cookies
  151.             if ((sUnsatCat.Length > 0) && (sUnsatPurpose.Length > 0))
  152.             {
  153.                 if (oP3PState == P3PState.P3POk)
  154.                 {
  155.                     oP3PState = P3PState.P3PUnsatisfactory;
  156.                 }
  157.             }
  158.         }
  160.         private enum P3PState
  161.         {
  162.             NoCookies,
  163.             NoP3PAndSetsCookies,
  164.             P3POk,
  165.             P3PUnsatisfactory,
  166.             P3PMalformed
  167.         }
  169.         public void OnPeekAtResponseHeaders(Session oSession) 
  170.         {
  171.             if (!bEnabled) return;
  173.             P3PState oP3PState = P3PState.NoCookies;
  175.             if (!oSession.oResponse.headers.Exists("Set-Cookie"))
  176.             {
  177.                 return;
  178.             }
  180.             oP3PState = P3PState.NoP3PAndSetsCookies;
  182.             if (oSession.oResponse.headers.Exists("P3P"))
  183.             {
  184.                 SetP3PStateFromHeader(oSession.oResponse.headers["P3P"], ref oP3PState);
  185.             }
  187.             switch (oP3PState)
  188.             {
  189.                 case P3PState.P3POk:
  190.                     oSession["ui-backcolor"] = "#ACDC85";
  191.                     oSession["X-Privacy"] = "Sets cookies & P3P";
  192.                     break;
  194.                 case P3PState.NoP3PAndSetsCookies:
  195.                     oSession["ui-backcolor"] = "#FAFDA4";
  196.                     oSession["X-Privacy"] = "Sets cookies without P3P";
  197.                     break;
  199.                 case P3PState.P3PUnsatisfactory:
  200.                     oSession["ui-backcolor"] = "#EC921A";
  201.                     oSession["X-Privacy"] = "Sets cookies; P3P unsatisfactory for 3rd-party use";
  202.                     break;
  204.                 case P3PState.P3PMalformed:
  205.                     oSession["ui-backcolor"] = "#E90A05";
  206.                     if (bEnforceP3PValidity)
  207.                     {
  208.                         oSession.oResponse.headers["MALFORMED-P3P"] = oSession.oResponse.headers["P3P"];
  209.                         oSession["X-Privacy"] = "MALFORMED P3P: " + oSession.oResponse.headers["P3P"];
  210.                         oSession.oResponse.headers.Remove("P3P");
  211.                     }
  212.                     break;
  213.             }
  214.         }
  215.         public void AutoTamperRequestBefore(Session oSession) { }
  216.         public void AutoTamperRequestAfter(Session oSession){ /*noop*/ }
  217.         public void AutoTamperResponseAfter(Session oSession) {/*noop*/}
  218.         public void AutoTamperResponseBefore(Session oSession) { /*noop*/ }
  219.         public void OnBeforeReturningError(Session oSession) {/*noop*/}
  220.     }