${title}

${message}

`; // Remove existing toast const existing = document.getElementById('wisecool-block-toast'); if (existing) existing.remove(); document.body.appendChild(toast); // Auto remove after 4 seconds setTimeout(function() { toast.style.opacity = '0'; toast.style.transition = 'opacity 0.3s ease'; setTimeout(function() { toast.remove(); }, 300); }, 4000); } // === VIDEO-SPECIFIC WATERMARK (more visible during playback) === setupVideoWatermark() { // Check moderator status dynamically if (typeof window !== 'undefined' && window.WISECOOL_MEETING_MODERATOR === true) { CaptureProtectionState.isMeetingModerator = true; } if (CaptureProtectionState.isSuperAdmin || CaptureProtectionState.isMeetingModerator) return; const self = this; const userId = CaptureProtectionState.userWatermarkId || 'user'; // Watch for video elements and add watermarks const addVideoWatermark = function(video) { // Only watermark protected content (recorded courses, live-session replays, // library media). Live "Meet" calls are NOT protected content — the meeting // route is intentionally excluded from PROTECTED_PAGE_PATTERNS, so we must // not stamp every participant tile with a "user" label. Re-check per element // (path-aware) because this observer persists across SPA navigation. if (!isProtectedPage()) return; if (video.dataset.watermarked) return; video.dataset.watermarked = 'true'; const container = video.parentElement; if (!container) return; // Ensure container has relative positioning if (getComputedStyle(container).position === 'static') { container.style.position = 'relative'; } // Create video watermark overlay const overlay = document.createElement('div'); overlay.className = 'wisecool-video-watermark'; overlay.style.cssText = ` position: absolute; top: 0; left: 0; width: 100%; height: 100%; pointer-events: none; z-index: 10; display: flex; align-items: center; justify-content: center; overflow: hidden; `; // Create rotating watermark text (visible but not obtrusive) const watermarkText = `${userId}`; overlay.innerHTML = `

${watermarkText}

WC·${new Date().toISOString().split('T')[0]}

`; container.appendChild(overlay); devLog('[Wisecool] Video watermark added'); }; // Monitor for new video elements const observer = new MutationObserver(function(mutations) { document.querySelectorAll('video').forEach(addVideoWatermark); }); observer.observe(document.body, { childList: true, subtree: true }); // Initial check document.querySelectorAll('video').forEach(addVideoWatermark); } // === SPA NAVIGATION MONITOR === setupNavigationMonitor() { const self = this; let lastPath = window.location.pathname; // Check periodically for path changes (SPA navigation) setInterval(function() { if (window.location.pathname !== lastPath) { lastPath = window.location.pathname; CaptureProtectionState.isOnProtectedPage = isProtectedPage(); // Add/remove watermark based on new page if (CaptureProtectionState.isOnProtectedPage) { self.createInvisibleWatermark(); } else { const watermark = document.getElementById('wisecool-invisible-watermark'); if (watermark) watermark.remove(); } devLog('[Wisecool] Page changed, protected: ' + CaptureProtectionState.isOnProtectedPage); } }, 1000); } // === SILENT LOG TO BACKEND === logAttempt(eventType, severity, extra = {}) { const logData = { event_type: eventType, severity: severity, user_id: CaptureProtectionState.userWatermarkId, timestamp: new Date().toISOString(), page_url: window.location.pathname, is_protected_page: CaptureProtectionState.isOnProtectedPage, device_type: SECURITY_CONFIG.IS_MOBILE ? 'mobile' : 'desktop', is_ios: SECURITY_CONFIG.IS_IOS, ...extra }; devLog('[Wisecool] Event logged:', logData); // Send to backend silently using dedicated capture-log endpoint try { const apiUrl = window.WISECOOL_SECURITY_CONFIG?.API_URL || ''; if (apiUrl && severity !== 'info') { fetch(apiUrl + '/security/capture-log/', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(logData), credentials: 'include' }).catch(function() {}); } } catch (e) {} // Analytics if (typeof window.gtag === 'function') { window.gtag('event', 'content_protection', { event_category: 'Security', event_label: eventType }); } } } // Initialize Content Capture Protection const captureProtection = new ContentCaptureProtectionManager(); window.WISECOOL_CAPTURE_PROTECTION = captureProtection; // === MOBILE PROTECTION MANAGER === // Handles mobile-specific threats: screenshots, screen recording, content copying class MobileProtectionManager { constructor() { this.screenshotAttempts = 0; this.lastVisibilityChange = 0; this.visibilityChangePattern = []; this.isContentBlurred = false; this.locale = getLocale(); this.messages = getMessages(); if (SECURITY_CONFIG.IS_MOBILE || SECURITY_CONFIG.IS_IOS) { this.initialize(); } } initialize() { this.setupScreenshotDetection(); this.setupScreenRecordingDetection(); this.setupBackgroundBlur(); this.setupTouchProtection(); this.setupIOSSpecificProtection(); devLog('%c[Wisecool] Mobile Protection Active', 'color: #8b5cf6; font-weight: bold;'); devLog('%cDevice: ' + (SECURITY_CONFIG.IS_IOS ? 'iOS' : 'Android/Mobile'), 'color: #6b7280;'); } // === SCREENSHOT DETECTION === // Detect screenshots via visibility change patterns setupScreenshotDetection() { const self = this; // iOS screenshot causes a very quick visibility change (hidden->visible in <500ms) // Normal app switches take longer document.addEventListener('visibilitychange', function() { const now = Date.now(); const timeSinceLastChange = now - self.lastVisibilityChange; // Track pattern of visibility changes self.visibilityChangePattern.push({ hidden: document.hidden, timestamp: now, duration: timeSinceLastChange }); // Keep only last 10 changes if (self.visibilityChangePattern.length > 10) { self.visibilityChangePattern.shift(); } // Detect screenshot pattern: quick hidden->visible cycle // Only trigger on protected pages (handlePossibleScreenshot also checks) if (!document.hidden && timeSinceLastChange < 800 && timeSinceLastChange > 50 && isProtectedPage()) { // This looks like a screenshot (very quick visibility flip) self.handlePossibleScreenshot('visibility_pattern'); } self.lastVisibilityChange = now; }); // iOS: Detect screenshot via resize event (iOS dims screen briefly) if (SECURITY_CONFIG.IS_IOS) { let lastWidth = window.innerWidth; let lastHeight = window.innerHeight; window.addEventListener('resize', function() { const widthChange = Math.abs(window.innerWidth - lastWidth); const heightChange = Math.abs(window.innerHeight - lastHeight); // iOS screenshot causes a brief resize event // Only check on protected pages if (widthChange === 0 && heightChange === 0 && isProtectedPage()) { // No actual resize, but resize event fired = possible screenshot self.handlePossibleScreenshot('resize_anomaly'); } lastWidth = window.innerWidth; lastHeight = window.innerHeight; }); } // Detect via blur/focus rapid succession let blurTime = 0; window.addEventListener('blur', function() { blurTime = Date.now(); }); window.addEventListener('focus', function() { const focusDuration = Date.now() - blurTime; // Very quick blur->focus (< 1 second) on protected page = suspicious // Check at runtime for SPA navigation support if (focusDuration > 0 && focusDuration < 1000 && isProtectedPage()) { self.handlePossibleScreenshot('blur_focus_pattern'); } }); } handlePossibleScreenshot(method) { // Only handle if on protected page if (!isProtectedPage()) return; // Avoid spam - only trigger once per 3 seconds const now = Date.now(); if (now - (this.lastScreenshotAlert || 0) < 3000) return; this.lastScreenshotAlert = now; this.screenshotAttempts++; // Log the attempt captureProtection.logAttempt('screenshot_detected_' + method, 'warning', { attempt_count: this.screenshotAttempts, device: SECURITY_CONFIG.IS_IOS ? 'ios' : 'android' }); // Show warning after multiple attempts if (this.screenshotAttempts >= 2) { this.showScreenshotWarning(); } // Temporarily blur content this.blurContentTemporarily(1500); devLog('%c[Wisecool] Screenshot detected via: ' + method, 'color: #f59e0b;'); } showScreenshotWarning() { const messages = this.messages; const isRTL = this.locale === 'ar'; // Create non-intrusive toast const toast = document.createElement('div'); toast.id = 'wisecool-screenshot-toast'; toast.style.cssText = ` position: fixed; bottom: 80px; left: 50%; transform: translateX(-50%); background: linear-gradient(135deg, #fef3c7, #fde68a); color: #92400e; padding: 12px 20px; border-radius: 12px; z-index: 9999999; box-shadow: 0 4px 20px rgba(0,0,0,0.15); text-align: center; max-width: 85vw; font-size: 14px; direction: ${isRTL ? 'rtl' : 'ltr'}; animation: slideUp 0.3s ease; `; toast.innerHTML = `

📸 ${messages.screenshotTitle.replace('📸 ', '')}

${messages.screenshotSubtext}

`; // Remove existing const existing = document.getElementById('wisecool-screenshot-toast'); if (existing) existing.remove(); document.body.appendChild(toast); // Auto remove after 3 seconds setTimeout(function() { toast.style.opacity = '0'; toast.style.transition = 'opacity 0.3s ease'; setTimeout(function() { toast.remove(); }, 300); }, 3000); } // === SCREEN RECORDING DETECTION === setupScreenRecordingDetection() { const self = this; // Check if screen is being recorded via navigator API if (navigator.mediaDevices) { // Periodically check for active screen capture setInterval(function() { if (navigator.mediaDevices.getDisplayMedia) { // Check if there's an active media stream capturing screen self.checkForScreenCapture(); } }, 5000); } // Detect screen recording via performance timing anomalies // Screen recording software causes consistent frame drops let frameCount = 0; let lastFrameTime = performance.now(); let slowFrames = 0; const checkFrameRate = function() { const now = performance.now(); const delta = now - lastFrameTime; frameCount++; // Normal frame should be ~16ms (60fps) or ~33ms (30fps) // Screen recording often causes consistent 50ms+ frames if (delta > 50) { slowFrames++; } // Check every 60 frames (roughly 1 second) if (frameCount >= 60) { // If more than 30% of frames are slow, might be recording // Check at runtime for SPA navigation support if (slowFrames / frameCount > 0.3 && isProtectedPage()) { self.handlePossibleRecording('frame_rate_anomaly'); } frameCount = 0; slowFrames = 0; } lastFrameTime = now; requestAnimationFrame(checkFrameRate); }; // Always run frame check - it checks isProtectedPage() at runtime requestAnimationFrame(checkFrameRate); } checkForScreenCapture() { // Check for Picture-in-Picture which might indicate recording if (document.pictureInPictureElement) { this.handlePossibleRecording('pip_detected'); } } handlePossibleRecording(method) { // Avoid spam const now = Date.now(); if (now - (this.lastRecordingAlert || 0) < 10000) return; this.lastRecordingAlert = now; captureProtection.logAttempt('recording_suspected_' + method, 'warning'); // Don't show aggressive warnings for frame rate detection (can have false positives) if (method !== 'frame_rate_anomaly') { this.showRecordingWarning(); } devLog('%c[Wisecool] Recording suspected via: ' + method, 'color: #dc2626;'); } showRecordingWarning() { const messages = this.messages; captureProtection.showBlockedMessage('screen_record'); } // === BACKGROUND BLUR === // Blur content when app goes to background (prevents app switcher screenshots) setupBackgroundBlur() { const self = this; // Going fullscreen on a tablet or phone fires visibilitychange (and on // some Android WebViews, pagehide) during the transition. That was read // as "app went to background", so opening a PDF fullscreen painted the // "Contenu protégé" overlay over the document the student had just // opened — and the matching unblur event never arrived, so it stayed. const inFullscreen = function() { return !!(document.fullscreenElement || document.webkitFullscreenElement || document.mozFullScreenElement || document.msFullscreenElement); }; // A transition is not instantaneous: ignore visibility noise around it. let fullscreenSettlingUntil = 0; const noteFullscreenChange = function() { fullscreenSettlingUntil = Date.now() + 1500; // Whatever happened, a visible fullscreen document must never stay // behind the shield. self.unblurContent(); }; ['fullscreenchange', 'webkitfullscreenchange', 'mozfullscreenchange', 'MSFullscreenChange'] .forEach(function(evt) { document.addEventListener(evt, noteFullscreenChange); }); const isFullscreenNoise = function() { return inFullscreen() || Date.now() < fullscreenSettlingUntil; }; document.addEventListener('visibilitychange', function() { // Check at runtime if we're on a protected page (SPA navigation support) if (!isProtectedPage()) return; if (CaptureProtectionState.isSuperAdmin) return; if (document.hidden) { if (isFullscreenNoise()) return; // App going to background - blur content self.blurContent(); } else { // App coming to foreground - unblur after small delay // Delay prevents content being visible in app switcher setTimeout(function() { self.unblurContent(); }, 300); } }); // Also handle page hide (more reliable on some browsers) window.addEventListener('pagehide', function() { // Check at runtime if (isProtectedPage() && !isFullscreenNoise()) { self.blurContent(); } }); window.addEventListener('pageshow', function() { setTimeout(function() { self.unblurContent(); }, 300); }); } blurContent() { if (this.isContentBlurred) return; this.isContentBlurred = true; // Create blur overlay const overlay = document.createElement('div'); overlay.id = 'wisecool-mobile-blur'; overlay.style.cssText = ` position: fixed; top: 0; left: 0; width: 100%; height: 100%; /* Opaque, NOT backdrop-filter: a fixed inset-0 element with backdrop-filter is the pattern that crashes iOS Safari on iPad, and this overlay covers the whole screen. An opaque panel hides the content from the app switcher just as well. */ background: #ffffff; z-index: 9999998; display: flex; align-items: center; justify-content: center; `; overlay.innerHTML = `

🔒

Contenu protégé

`; document.body.appendChild(overlay); // Safety net. Every path that removes this overlay depends on an event // arriving (visibilitychange, pageshow, fullscreenchange). Mobile // browsers drop those often enough that a stuck shield is a real // outcome — and a protection overlay that never lifts is a denial of // service on our own content. If the document is visible, it clears. if (this.blurSafetyTimer) clearTimeout(this.blurSafetyTimer); const self = this; this.blurSafetyTimer = setTimeout(function() { if (!document.hidden) self.unblurContent(); }, 4000); } unblurContent() { this.isContentBlurred = false; const overlay = document.getElementById('wisecool-mobile-blur'); if (overlay) { overlay.style.opacity = '0'; overlay.style.transition = 'opacity 0.2s ease'; setTimeout(function() { overlay.remove(); }, 200); } } blurContentTemporarily(duration) { this.blurContent(); const self = this; setTimeout(function() { self.unblurContent(); }, duration); } // === TOUCH PROTECTION === // Smart protection that allows highlighting features while blocking copying setupTouchProtection() { const self = this; // NOTE: Don't return early - we set up listeners that check at runtime // This allows protection to work when navigating via SPA // SMART CONTEXT MENU BLOCKING: // - Block browser context menu (Copy, Share, etc.) // - BUT allow custom highlight menus and text selection for highlighting document.addEventListener('contextmenu', function(e) { // Check at runtime if we're on a protected page if (!isProtectedPage()) return; if (CaptureProtectionState.isSuperAdmin) return; const target = e.target; // ALLOW context menu on elements that support highlighting // These elements have custom highlight functionality if (target.closest && ( target.closest('.latex-content') || // LaTeX reader - has highlighting target.closest('.highlight-menu') || // Highlight color picker target.closest('[data-allow-selection]') || // Explicitly allowed elements target.closest('.course-latex-content') || // Course content with highlighting target.closest('.math-content') // Math content )) { // Allow the selection but we'll block copy via copy event return true; } // Block context menu on other protected content (PDFs, videos, etc.) if (target.closest && ( target.closest('.protected-content') || target.closest('.pdf-viewer-content') || target.closest('video') || target.closest('img.protected') )) { e.preventDefault(); return false; } }, { passive: false }); // DO NOT block selectstart - this breaks highlighting feature // Instead, we block COPYING via the copy event (already handled in ContentCaptureProtectionManager) // Intercept copy events to block actual copying while allowing selection document.addEventListener('copy', function(e) { // Check at runtime if we're on a protected page if (!isProtectedPage()) return; if (CaptureProtectionState.isSuperAdmin) return; const selection = window.getSelection(); if (!selection || !selection.anchorNode) return; const container = selection.anchorNode.parentElement; // Check if copying from protected content if (container && container.closest && ( container.closest('.latex-content') || container.closest('.protected-content') || container.closest('.course-content') )) { // Allow copy if there's an active highlight menu (user is highlighting, not copying) if (document.querySelector('.highlight-menu')) { return true; // Allow - user is using highlight feature } // Block the copy and replace with watermarked text e.preventDefault(); const watermark = '\n[Contenu protégé par Wisecool - ' + (CaptureProtectionState.userWatermarkId || 'user') + ']'; e.clipboardData.setData('text/plain', selection.toString().substring(0, 50) + '...' + watermark); // Log the attempt captureProtection.logAttempt('copy_blocked_mobile', 'warning'); // Show subtle warning self.showCopyBlockedToast(); return false; } }, true); } showCopyBlockedToast() { const existing = document.getElementById('wisecool-copy-toast'); if (existing) return; // Don't spam const toast = document.createElement('div'); toast.id = 'wisecool-copy-toast'; toast.style.cssText = ` position: fixed; bottom: 100px; left: 50%; transform: translateX(-50%); background: #1e293b; color: white; padding: 10px 16px; border-radius: 8px; z-index: 9999999; font-size: 13px; box-shadow: 0 4px 12px rgba(0,0,0,0.2); `; toast.textContent = '📋 Utilisez le surligneur pour marquer le texte'; document.body.appendChild(toast); setTimeout(function() { toast.style.opacity = '0'; toast.style.transition = 'opacity 0.3s'; setTimeout(function() { toast.remove(); }, 300); }, 2500); } // === iOS SPECIFIC PROTECTION === setupIOSSpecificProtection() { if (!SECURITY_CONFIG.IS_IOS) return; // SMART iOS protection: // - ALLOW selection on content with highlighting features (latex-content, course-latex-content) // - BLOCK selection on strictly protected content (PDFs, videos, images) // - Hide the iOS "Copy/Lookup/Share" callout but allow selection for highlighting const style = document.createElement('style'); style.textContent = ` /* ALLOW selection on content with highlighting feature */ .latex-content, .course-latex-content, .math-content, [data-allow-selection] { -webkit-user-select: text !important; user-select: text !important; /* Hide iOS callout menu (Copy/Lookup/Share) - our highlight menu will appear instead */ -webkit-touch-callout: none !important; } /* BLOCK selection completely on strictly protected content */ .pdf-viewer-content, .protected-content:not(.latex-content), video, img.protected, [data-no-selection] { -webkit-touch-callout: none !important; -webkit-user-select: none !important; user-select: none !important; } /* Ensure highlight menu is always visible */ .highlight-menu { -webkit-touch-callout: default !important; -webkit-user-select: auto !important; } `; document.head.appendChild(style); // Detect iOS screenshot gesture (power + volume) // This is detected via the gyroscope/accelerometer if available if (window.DeviceMotionEvent) { let lastMotion = 0; window.addEventListener('devicemotion', function(e) { if (!e.acceleration) return; const totalAccel = Math.abs(e.acceleration.x || 0) + Math.abs(e.acceleration.y || 0) + Math.abs(e.acceleration.z || 0); // Sudden device movement while on protected page might indicate button press // Check at runtime for SPA navigation support if (totalAccel > 30 && isProtectedPage()) { const now = Date.now(); if (now - lastMotion > 2000) { // Could be screenshot button combination captureProtection.logAttempt('ios_button_press_detected', 'info'); lastMotion = now; } } }, { passive: true }); } } } // Initialize Mobile Protection (only on mobile devices) let mobileProtection = null; if (SECURITY_CONFIG.IS_MOBILE || SECURITY_CONFIG.IS_IOS) { mobileProtection = new MobileProtectionManager(); window.WISECOOL_MOBILE_PROTECTION = mobileProtection; } // === SMART TOLERANCE SECURITY MANAGER === class SmartToleranceSecurityManager { constructor() { this.devToolsOpen = false; this.lastWindowOuterWidth = window.outerWidth; this.lastWindowOuterHeight = window.outerHeight; this.initialize(); } initialize() { this.displaySecurityNotice(); this.initializeProtection(); this.startBehaviorTracking(); this.startEnhancedMonitoring(); this.setupContentProtection(); devLog('%c[Wisecool Security] Smart tolerance system active', 'color: #059669; font-weight: bold;'); devLog('%cThresholds: Warning=' + SECURITY_CONFIG.WARNING_THRESHOLD + ', Restrict=' + SECURITY_CONFIG.RESTRICT_THRESHOLD + ', Terminate=' + SECURITY_CONFIG.TERMINATE_THRESHOLD, 'color: #6b7280;'); } displaySecurityNotice() { devLog('%c🛡️ WISECOOL SMART SECURITY', 'color: #1f2937; font-size: 16px; font-weight: bold;'); devLog('%c ✨ Système de tolérance intelligente', 'color: #374151; font-size: 13px;'); devLog('%c 🤝 Protection respectueuse des utilisateurs', 'color: #374151; font-size: 13px;'); devLog('%c ⏱️ Période de grâce de 30 secondes', 'color: #374151; font-size: 13px;'); devLog('%c 🧠 Analyse comportementale avancée', 'color: #374151; font-size: 13px;'); devLog('%c 💡 Conseil: Fermez rapidement les outils pour éviter les restrictions', 'color: #6b7280; font-size: 11px;'); } // === ENHANCED DEVTOOLS DETECTION === detectDevToolsMultiMethod() { let detected = false; // MOBILE PROTECTION: Use different detection strategy // Mobile threats are: screenshots, screen recording, copying // NOT: DevTools (doesn't exist on mobile browsers) if (SECURITY_CONFIG.IS_IOS || SECURITY_CONFIG.IS_MOBILE) { // On mobile, we don't detect DevTools (doesn't exist) // Instead, mobile protection is handled by: // 1. MobileProtectionManager (screenshot/recording detection) // 2. Content protection (copy/paste blocking) // 3. Watermarking return false; } // === DESKTOP DETECTION METHODS === // Method 1: Window size detection (most reliable on desktop) const sizeThreshold = SECURITY_CONFIG.SIZE_THRESHOLD; const widthDiff = window.outerWidth - window.innerWidth; const heightDiff = window.outerHeight - window.innerHeight; if (widthDiff > sizeThreshold || heightDiff > sizeThreshold) { detected = true; } // Method 2: Console detection trick let devtools = false; const element = new Image(); Object.defineProperty(element, 'id', { get: function() { devtools = true; return 'detect'; } }); console.log('%c', element); if (devtools) { detected = true; } // Method 3: Debugger timing const start = performance.now(); // eslint-disable-next-line no-debugger debugger; const end = performance.now(); if (end - start > SECURITY_CONFIG.PERFORMANCE_THRESHOLD) { detected = true; } return detected; } // === SMART VIOLATION MANAGEMENT === reportSecurityEvent(eventType, details, severity) { if (severity === undefined) severity = 'medium'; const currentTime = Date.now(); // Prevent spam if (currentTime - SecurityState.lastViolationTime < 2000) { return; } // Smart filtering and intent analysis const intentResult = this.analyzeUserIntent(eventType, currentTime); if (intentResult.isAccidental) { SecurityState.accidentalCount++; SecurityState.userBehavior.quickCloses++; devLog('%c[Wisecool Security] 🤝 Accidental detection - No penalty', 'color: #059669;'); return; } SecurityState.violationCount++; SecurityState.lastViolationType = eventType; SecurityState.lastViolationTime = currentTime; if (intentResult.isIntentional) { SecurityState.intentionalCount++; SecurityState.userBehavior.inspectionAttempts++; } const securityEvent = { type: eventType, details: details, severity: severity, timestamp: currentTime, sessionDuration: currentTime - SecurityState.sessionStartTime, intent: intentResult.intent, isAccidental: intentResult.isAccidental, isIntentional: intentResult.isIntentional, userBehavior: JSON.parse(JSON.stringify(SecurityState.userBehavior)) }; SecurityState.detectionLog.push(securityEvent); this.reportToAnalytics(securityEvent); devWarn('[Wisecool Security] Event: ' + eventType + ' (' + intentResult.intent + ') - Total: ' + SecurityState.violationCount + '/' + SECURITY_CONFIG.TERMINATE_THRESHOLD); // Smart response based on violation count and intent this.handleSmartResponse(intentResult); } analyzeUserIntent(eventType, currentTime) { const result = { intent: 'unknown', isAccidental: false, isIntentional: false, confidence: 0 }; // Check if DevTools was opened and closed quickly (likely accidental) if (eventType === 'DEVTOOLS_DETECTED' && SecurityState.devToolsOpenTime > 0) { const openDuration = currentTime - SecurityState.devToolsOpenTime; if (openDuration < SECURITY_CONFIG.ACCIDENTAL_THRESHOLD) { result.intent = 'accidental'; result.isAccidental = true; result.confidence = 0.9; SecurityState.intentAnalysis.accidentalOpening++; return result; } } // Check for patterns of quick recovery if (SecurityState.userBehavior.quickCloses > SecurityState.userBehavior.inspectionAttempts) { result.intent = 'learning'; result.confidence = 0.7; return result; } // Check for active inspection patterns if (eventType === 'KEYBOARD_ACCESS' || eventType === 'CONTEXT_MENU') { result.intent = 'intentional'; result.isIntentional = true; result.confidence = 0.8; SecurityState.intentAnalysis.activeInspection++; return result; } // Default to unknown with medium confidence result.intent = 'unknown'; result.confidence = 0.5; return result; } // === SMART RESPONSE SYSTEM === handleSmartResponse(intentResult) { const count = SecurityState.violationCount; if (count >= SECURITY_CONFIG.TERMINATE_THRESHOLD && !SecurityState.terminated) { this.executeSmartTermination(); } else if (count >= SECURITY_CONFIG.RESTRICT_THRESHOLD && !SecurityState.accessRestricted) { this.enableContentRestriction(); } else if (count >= SECURITY_CONFIG.WARNING_THRESHOLD && SecurityState.gracePeriodsUsed < 3) { this.showGracePeriodWarning(intentResult); } else if (count === 1) { this.showFriendlyGuidance(); } } showFriendlyGuidance() { this.createToastNotification({ type: 'guidance', title: '💡 Conseil Wisecool', message: 'Outils de développement détectés. Pour une expérience optimale, fermez-les rapidement.', duration: 5000, actions: [ { text: '✅ Compris', action: function() { const toast = document.getElementById('wisecool-toast'); if (toast) toast.remove(); } } ] }); } showGracePeriodWarning(intentResult) { SecurityState.gracePeriodsUsed++; this.createSecurityModal({ type: 'grace_period', title: '⏱️ Période de Grâce - 30 Secondes', icon: '🤝', message: '

⏱️

Outils de développement détectés

Vous avez 30 secondes pour fermer les outils de développement.

🎯 Actions recommandées:

Fermez immédiatement les outils de développement
Continuez votre utilisation normale
Évitez les raccourcis de développement

⏰ TEMPS RESTANT: 30 secondes

Fermeture rapide = Pas de pénalité ✨

', actions: [ { text: '🚀 Continuer normalement', style: 'primary', action: function() { this.removeSecurityModal(); SecurityState.intentAnalysis.quickRecovery++; }.bind(this) } ] }); // Grace period countdown SecurityState.currentGracePeriod = { startTime: Date.now(), duration: SECURITY_CONFIG.GRACE_PERIOD_DURATION, active: true }; let countdown = 30; const countdownInterval = setInterval(function() { countdown--; const element = document.getElementById('grace-countdown'); if (element) element.textContent = countdown; if (countdown <= 0 || !SecurityState.currentGracePeriod.active) { clearInterval(countdownInterval); if (SecurityState.currentGracePeriod.active) { this.enableContentProtection(); } } }.bind(this), 1000); } enableContentProtection() { if (SecurityState.contentBlurred) return; SecurityState.contentBlurred = true; this.createContentOverlay({ type: 'blur', title: '🛡️ Contenu Protégé', message: 'Le contenu est temporairement masqué. Fermez les outils de développement pour continuer.', persistent: false }); // Apply blur effect document.body.style.filter = 'blur(10px)'; document.body.style.pointerEvents = 'none'; devLog('%c[Wisecool Security] 🛡️ Content protection enabled', 'color: #f59e0b;'); } enableContentRestriction() { if (SecurityState.accessRestricted) return; SecurityState.accessRestricted = true; this.createSecurityModal({ type: 'restriction', title: '🚫 Accès Restreint', icon: '⚠️', message: '

🚫

Accès Restreint Activé

Trop de violations détectées. L\'accès au contenu est maintenant limité.

🔒 Restrictions actives:

Contenu partiellement masqué
Fonctionnalités limitées
Session surveillée en continu

Violations: ' + SecurityState.violationCount + ' | Intentionnelles: ' + SecurityState.intentionalCount + '

', actions: [ { text: '🔄 Actualiser la page', style: 'primary', action: function() { window.location.reload(); } } ] }); // Apply restrictions this.applyContentRestrictions(); devLog('%c[Wisecool Security] 🚫 Content restrictions enabled', 'color: #dc2626;'); } executeSmartTermination() { SecurityState.terminated = true; const incidentId = 'WS-' + Date.now().toString(36).toUpperCase(); // Only log in development, keep errors silent in production if (!IS_PRODUCTION) { console.error('[Wisecool Security] Smart termination executed'); console.error('Incident ID:', incidentId); console.error('Behavior Analysis:', SecurityState.userBehavior); console.error('Intent Analysis:', SecurityState.intentAnalysis); } this.createSecurityModal({ type: 'termination', title: '🔚 Session Terminée', icon: '🛑', message: '

🔚

Session Fermée

Violations répétées détectées malgré les avertissements.

📊 Résumé:

Total violations:	' + SecurityState.violationCount + '
Intentionnelles:	' + SecurityState.intentionalCount + '
Accidentelles:	' + SecurityState.accidentalCount + '
Périodes de grâce:	' + SecurityState.gracePeriodsUsed + '

ID Incident: ' + incidentId + '

', actions: [ { text: '🔄 Nouvelle session', style: 'primary', action: function() { window.location.reload(); } } ] }); // Gentle termination after delay setTimeout(function() { this.executeGentleTermination(); }.bind(this), 10000); } executeGentleTermination() { try { window.location.replace('about:blank'); } catch(e) {} } // === ENHANCED CONTENT PROTECTION METHODS === applyContentRestrictions() { // Full blur document.body.style.filter = 'blur(5px)'; // ACTUALLY DISABLE ALL INTERACTIONS document.body.style.pointerEvents = 'none'; document.body.style.userSelect = 'none'; // Disable all form elements const formElements = document.querySelectorAll('input, button, textarea, select, a, form'); formElements.forEach(function(el) { el.disabled = true; el.style.pointerEvents = 'none'; el.tabIndex = -1; }); // Disable sensitive elements const sensitiveElements = document.querySelectorAll('video, audio, iframe, object, embed'); sensitiveElements.forEach(function(el) { el.style.pointerEvents = 'none'; el.style.opacity = '0.3'; }); // Create blocking overlay this.createBlockingOverlay(); // Add watermark this.addWatermark(); } createBlockingOverlay() { const overlay = document.createElement('div'); overlay.id = 'security-blocking-overlay'; overlay.style.cssText = 'position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0,0,0,0.3); z-index: 2147483644; pointer-events: auto; cursor: not-allowed;'; // Prevent any clicks from reaching the page overlay.addEventListener('click', function(e) { e.preventDefault(); e.stopPropagation(); return false; }, true); overlay.addEventListener('keydown', function(e) { e.preventDefault(); e.stopPropagation(); return false; }, true); document.body.appendChild(overlay); } addWatermark() { const watermark = document.createElement('div'); watermark.id = 'security-watermark'; watermark.innerHTML = 'WISECOOL - ACCÈS RESTREINT'; watermark.style.cssText = 'position: fixed; top: 50%; left: 50%; transform: translate(-50%, -50%) rotate(-45deg); font-size: 48px; font-weight: bold; color: rgba(220, 38, 38, 0.3); pointer-events: none; z-index: 9999; user-select: none;'; document.body.appendChild(watermark); } // === UI COMPONENTS WITH MAXIMUM Z-INDEX === createToastNotification(config) { const existing = document.getElementById('wisecool-toast'); if (existing) existing.remove(); const toast = document.createElement('div'); toast.id = 'wisecool-toast'; let actionsHtml = ''; for (let i = 0; i < config.actions.length; i++) { actionsHtml += ''; } // Simple, reliable positioning toast.style.cssText = 'position: fixed !important; top: 20px !important; right: 20px !important; left: auto !important; bottom: auto !important; background: linear-gradient(135deg, #fef3c7 0%, #fde68a 100%) !important; color: #92400e !important; padding: 20px !important; border-radius: 12px !important; box-shadow: 0 10px 40px rgba(0,0,0,0.2), 0 0 0 1px rgba(245,158,11,0.3) !important; border-left: 5px solid #f59e0b !important; z-index: 2147483647 !important; max-width: 380px !important; min-width: 300px !important; font-family: system-ui, -apple-system, sans-serif !important; animation: wisecoolSlideIn 0.4s ease-out !important;'; toast.innerHTML = '' + '

' + '💡' + '

' + '' + config.title + '' + '

' + config.message + '

' + '

' + actionsHtml + '

' + '

'; for (let j = 0; j < config.actions.length; j++) { window['toastAction' + j] = config.actions[j].action; } // Append to documentElement for highest priority document.documentElement.appendChild(toast); if (config.duration) { setTimeout(function() { const toastEl = document.getElementById('wisecool-toast'); if (toastEl) { toastEl.style.animation = 'wisecoolSlideIn 0.3s ease-in reverse'; setTimeout(function() { toastEl.remove(); }, 300); } }, config.duration); } } createContentOverlay(config) { const overlay = document.createElement('div'); overlay.id = 'content-overlay'; // Proper viewport centering overlay.style.cssText = 'position: fixed !important; top: 0 !important; left: 0 !important; right: 0 !important; bottom: 0 !important; width: 100vw !important; height: 100vh !important; z-index: 2147483646 !important; display: flex !important; align-items: center !important; justify-content: center !important; background: rgba(0,0,0,0.7) !important; margin: 0 !important; padding: 20px !important; box-sizing: border-box !important;'; overlay.innerHTML = '

🛡️

' + config.title + '

' + config.message + '

'; document.documentElement.appendChild(overlay); } createSecurityModal(config) { const existing = document.getElementById('wisecool-security-modal'); if (existing) existing.remove(); const modal = document.createElement('div'); modal.id = 'wisecool-security-modal'; const themes = { grace_period: { bg: '#fef3c7', border: '#f59e0b', text: '#92400e' }, restriction: { bg: '#fee2e2', border: '#dc2626', text: '#7f1d1d' }, termination: { bg: '#111827', border: '#dc2626', text: '#f9fafb' } }; const theme = themes[config.type] || themes.grace_period; let actionsHtml = ''; for (let i = 0; i < config.actions.length; i++) { const buttonStyle = config.actions[i].style === 'primary' ? 'background: #3b82f6; color: white;' : 'background: #6b7280; color: white;'; actionsHtml += ''; } // Proper centering with viewport units and important flags modal.style.cssText = 'position: fixed !important; top: 0 !important; left: 0 !important; right: 0 !important; bottom: 0 !important; width: 100vw !important; height: 100vh !important; background: rgba(0,0,0,0.85) !important; display: flex !important; align-items: center !important; justify-content: center !important; z-index: 2147483647 !important; font-family: system-ui, -apple-system, sans-serif !important; margin: 0 !important; padding: 0 !important; box-sizing: border-box !important;'; modal.innerHTML = '

' + config.icon + '

' + config.title + '

' + config.message + '

' + actionsHtml + '

'; for (let j = 0; j < config.actions.length; j++) { window['securityAction' + j] = config.actions[j].action; } // Append to documentElement for highest priority document.documentElement.appendChild(modal); // Force reflow and ensure visibility requestAnimationFrame(function() { modal.style.setProperty('display', 'flex', 'important'); modal.style.setProperty('visibility', 'visible', 'important'); modal.style.setProperty('opacity', '1', 'important'); }); } removeSecurityModal() { const existing = document.getElementById('wisecool-security-modal'); if (existing) existing.remove(); } reportToAnalytics(event) { if (!SECURITY_CONFIG.ANALYTICS_ENABLED) return; try { if (typeof window.gtag === 'function') { window.gtag('event', 'smart_security_detection', { event_category: 'SmartSecurity', event_label: event.type, custom_parameter_1: event.intent, custom_parameter_2: event.isAccidental ? 'accidental' : 'intentional', value: SecurityState.violationCount }); } } catch (e) { // Silent fail } } // === PROTECTION LAYERS === initializeProtection() { var self = this; // Keyboard protection document.addEventListener('keydown', function(e) { const blocked = [ e.key === 'F12', e.key === 'I' && e.ctrlKey && e.shiftKey, e.key === 'J' && e.ctrlKey && e.shiftKey, e.key === 'C' && e.ctrlKey && e.shiftKey, e.key === 'U' && e.ctrlKey ]; if (blocked.some(function(b) { return b; })) { e.preventDefault(); e.stopImmediatePropagation(); self.reportSecurityEvent('KEYBOARD_ACCESS', e.key, 'high'); return false; } }, true); // Context menu protection document.addEventListener('contextmenu', function(e) { e.preventDefault(); self.reportSecurityEvent('CONTEXT_MENU', 'Right-click', 'medium'); return false; }, true); } setupContentProtection() { // Monitor DevTools open/close this.lastWindowSize = { width: window.innerWidth, height: window.innerHeight, outerWidth: window.outerWidth, outerHeight: window.outerHeight }; // iOS SCREENSHOT TOLERANCE: Track visibility changes // Screenshots on iOS cause brief visibility changes - we use this to pause detection document.addEventListener('visibilitychange', function() { SecurityState.lastVisibilityChange = Date.now(); devLog('[Wisecool Security] Visibility changed - screenshot cooldown active'); }); // Also track blur/focus for iOS screenshot detection window.addEventListener('blur', function() { SecurityState.lastVisibilityChange = Date.now(); }); window.addEventListener('focus', function() { SecurityState.lastVisibilityChange = Date.now(); }); } // === BEHAVIOR TRACKING === startBehaviorTracking() { document.addEventListener('mousemove', function() { SecurityState.userBehavior.mouseEvents++; }); document.addEventListener('click', function() { SecurityState.userBehavior.clickEvents++; SecurityState.intentAnalysis.contentInteraction++; // Track last user interaction for mobile false positive prevention SecurityState.lastUserInteraction = Date.now(); }); document.addEventListener('scroll', function() { SecurityState.userBehavior.scrollEvents++; // Scroll also counts as interaction on mobile (can trigger UI changes) SecurityState.lastUserInteraction = Date.now(); }); // Touch events for mobile - these often trigger browser UI changes document.addEventListener('touchstart', function() { SecurityState.lastUserInteraction = Date.now(); }, { passive: true }); document.addEventListener('touchend', function() { SecurityState.lastUserInteraction = Date.now(); }, { passive: true }); document.addEventListener('keypress', function(e) { if (!e.ctrlKey && !e.altKey && !e.metaKey) { SecurityState.userBehavior.keyboardEvents++; } }); } // === ENHANCED MONITORING (FIXED) === startEnhancedMonitoring() { var self = this; // MAIN DEVTOOLS DETECTION LOOP setInterval(function() { if (!SecurityState.terminated) { const isOpen = self.detectDevToolsMultiMethod(); if (isOpen && !self.devToolsOpen) { // DevTools just opened self.devToolsOpen = true; SecurityState.devToolsOpenTime = Date.now(); devWarn('[Wisecool Security] DevTools opened detected!'); self.reportSecurityEvent('DEVTOOLS_DETECTED', 'DevTools opened', 'high'); } else if (!isOpen && self.devToolsOpen) { // DevTools just closed self.devToolsOpen = false; SecurityState.devToolsCloseTime = Date.now(); const openDuration = SecurityState.devToolsCloseTime - SecurityState.devToolsOpenTime; if (openDuration < SECURITY_CONFIG.ACCIDENTAL_THRESHOLD) { SecurityState.userBehavior.quickCloses++; devLog('%c[Wisecool Security] ✨ Quick close detected - Good behavior!', 'color: #059669;'); } SecurityState.devToolsOpenTime = 0; // Remove content blur if active if (SecurityState.contentBlurred) { document.body.style.filter = 'none'; document.body.style.pointerEvents = 'auto'; SecurityState.contentBlurred = false; const overlay = document.getElementById('content-overlay'); if (overlay) overlay.remove(); } // End grace period if (SecurityState.currentGracePeriod && SecurityState.currentGracePeriod.active) { SecurityState.currentGracePeriod.active = false; self.removeSecurityModal(); } } } }, SECURITY_CONFIG.MONITOR_INTERVAL); } } // === INITIALIZE SMART TOLERANCE SECURITY === // All protections enabled on ALL pages (including auth pages) let securityManager = null; if (DEVTOOLS_PROTECTION_ACTIVE) { securityManager = new SmartToleranceSecurityManager(); devLog('%c[Wisecool] DevTools Protection Active', 'color: #059669;'); } // Make available for debugging if (SECURITY_CONFIG.IS_LOCALHOST) { window.WISECOOL_SECURITY = { state: SecurityState, config: SECURITY_CONFIG, manager: securityManager, test: function() { securityManager.reportSecurityEvent('MANUAL_TEST', 'Manual test', 'medium'); }, reset: function() { SecurityState.violationCount = 0; SecurityState.terminated = false; SecurityState.accessRestricted = false; SecurityState.contentBlurred = false; document.body.style.filter = ''; document.body.style.pointerEvents = ''; securityManager.removeSecurityModal(); const blockingOverlay = document.getElementById('security-blocking-overlay'); if (blockingOverlay) blockingOverlay.remove(); devLog('Security state reset'); } }; } })();

Signés par des références

Signés par des références