GDPR13C

* SEO only allowed sites for user content areas. TOS enforcement.

NOTE(s):
* `google.com` is explicitly not included as domain is too broad for all services worldwide
* May alter this list

Post OpenUserJS#1508

Author: Martii

app.js

@@ -203,7 +203,7 @@ app.use(function (aReq, aRes, aNext) {
   aRes.oujsOptions.DNT = aReq.get('DNT') === '1' || aReq.get('DNT') === 'yes' ? true : false;
 
   // Middleware for GDPR Notice
-  aRes.oujsOptions.hideReminderGDPR = isSameOrigin(referer);
+  aRes.oujsOptions.hideReminderGDPR = isSameOrigin(referer).result;
 
   //
   if (

controllers/script.js

@@ -126,7 +126,7 @@ var getScriptPageTasks = function (aOptions) {
         aOptions.script.homepages.unshift({
           url: aElement.value,
           text: decode(aElement.value),
-          isSameOrigin: isSameOrigin(aElement.value)
+          isSameOrigin: isSameOrigin(aElement.value).result
         });
 
       }

libs/helpers.js

@@ -240,5 +240,8 @@ exports.isSameOrigin = function (aUrl) {
     }
   }
 
-  return sameOrigin;
+  return {
+    result: sameOrigin,
+    URL: url
+  };
 }

libs/htmlWhitelistFollow.json

@@ -0,0 +1,22 @@
+[
+ "copyright.gov",
+ "chromium.org",
+ "fsf.org",
+ "ghacks.net",
+ "github.com",
+ "gitlab.com",
+ "gnu.org",
+ "greasespot.net",
+ "greasyfork.org",
+ "opensource.org",
+ "mozilla.org",
+ "mozillazine.org",
+ "microsoft.com",
+ "oujs.org",
+ "sf.net",
+ "sourceforge.net",
+ "spdx.org",
+ "tampermonkey.net",
+ "userscripts-mirror.org",
+ "wikipedia.org"
+]

libs/markdown.js

@@ -17,6 +17,7 @@ var jsdom = require("jsdom");
 var { JSDOM } = jsdom;
 
 var htmlWhitelistPost = require('./htmlWhitelistPost.json');
+var htmlWhitelistFollow = require('./htmlWhitelistFollow.json');
 var renderer = new marked.Renderer();
 var blockRenderers = [
   'blockquote',
@@ -63,14 +64,32 @@ function externalPolicy(aTagName, aAttribs) {
     'preconnect',
     'prefetch'
   ];
+  var obj = null;
+  var dn = null;
+  var matches = null;
 
   switch (aTagName) {
     case 'a':
-      if (!isSameOrigin(aAttribs.href)) {
+      obj = isSameOrigin(aAttribs.href);
+      if (!obj.result) {
         attribRelAdd.push('external');
         attribRelAdd.push('noreferrer');
         attribRelAdd.push('noopener');
-//         attribRelAdd.push('nofollow'); // NOTE: Disabled for now
+
+        if (obj.URL) {
+          matches = obj.URL.hostname.match(/\.?(.*?\..*)$/);
+          if (matches) {
+            dn = matches[1];
+
+            if (htmlWhitelistFollow.indexOf(dn) === -1) {
+              attribRelAdd.push('nofollow');
+            }
+          } else {
+            attribRelAdd.push('nofollow');
+          }
+        } else {
+          attribRelAdd.push('nofollow');
+        }
 
         return {
           tagName: aTagName,

libs/modelParser.js

@@ -290,7 +290,7 @@ var parseScript = function (aScript) {
       script.support = [{
         url: supportURL,
         text: decode(supportURL),
-        isSameOrigin: isSameOrigin(supportURL)
+        isSameOrigin: isSameOrigin(supportURL).result
       }];
 
     }