Sleazy Fork

Only 2 external JS libraries are injected by the script if requested. Both from reputable sources.

addJQuery() {
    const s = document.createElement("script");
    s.src = "https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js";
    const targ =
      this.document.head || this.document.body || this.document.documentElement;
    targ.appendChild(s);
  }

https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js Loading jQuery into page if required, from a trusted source.

  addGoogleRecaptchaJS() {
    const script = this.document.createElement("script");
    script.src = "https://www.google.com/recaptcha/api.js";
    this.document.body.appendChild(script);
  }

https://www.google.com/recaptcha/api.js Loading Google's reCaptcha from Google.com itself.

Other mentions of *.js scripts are hardcoded strings that certain sites check for, so this was handled by hardcoded the string interpretation for the script to use to automate certain sites.

https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js is allowed. I've added https://www.google.com/recaptcha/api.js to the allowed list. There don't seem to be any other injections here.