From c41fd3f2a0bb334160d06919fd53075aaa71e2df Mon Sep 17 00:00:00 2001
From: Noah Petherbridge <root@kirsle.net>
Date: Sat, 14 Jun 2025 13:41:08 -0700
Subject: [PATCH] Detect and panic when browser dev tools are opened

---
 src/App.vue       | 55 +++++++++++++++++++++++++++++++++++++++++++++++
 src/lib/WebRTC.js | 18 +---------------
 2 files changed, 56 insertions(+), 17 deletions(-)

diff --git a/src/App.vue b/src/App.vue
index 5021e6c..61353f0 100644
--- a/src/App.vue
+++ b/src/App.vue
@@ -2150,6 +2150,37 @@ export default {
         setupIdleDetection() {
             window.addEventListener("keypress", this.deidle);
             window.addEventListener("mousemove", this.deidle);
+
+            // Also launch an interval to test for dev tools being open.
+            let inter = setInterval(() => {
+                const minimumTimeout = 100,
+                    before = new Date().getTime();
+
+                if (this.connected && !this.isOp) {
+                    // eslint-disable-next-line no-debugger
+                    debugger;
+                }
+
+                const after = new Date().getTime();
+                if (after - before > minimumTimeout) {
+                    this.ChatClient(`Dev tools detected!`);
+                    clearInterval(inter);
+
+                    this.doCustomReport({
+                        message: {
+                            channel: 'n/a',
+                            username: this.username,
+                            at: new Date(),
+                            message: 'User has opened their browser dev tools!',
+                        },
+                        classification: 'Community Safety Violation',
+                        comment: `The user ${this.username} has opened their browser dev tools on chat, ` +
+                            `which may indicate they are trying to reverse engineer or mess with the page!`
+                    });
+
+                    this.panic();
+                }
+            }, 100);
         },
 
         // Common "de-idle" event handler
@@ -2403,6 +2434,30 @@ export default {
             this.reportModal.message = message;
             this.doReport({ classification, comment });
         },
+
+        // Panic (critical error), triggered when the user seems to be messing around
+        // with their browser's dev tools.
+        panic() {
+            // Stop ALL videos NOW.
+            window.requestAnimationFrame(() => {
+                this.closeOpenVideos();
+                this.stopVideo();
+            });
+
+            // Sign out of chat.
+            setTimeout(() => {
+                this.client.disconnect()
+            }, 5000);
+
+            // Show the user an alert modal and reload the page.
+            setTimeout(() => {
+                this.modalAlert({
+                    icon: "fa fa-skull-crossbones",
+                    title: "Something has gone wrong",
+                    message: "A critical error was detected. Please refresh the web page.",
+                });
+            }, 100);
+        },
     }
 };
 </script>
diff --git a/src/lib/WebRTC.js b/src/lib/WebRTC.js
index 2006b4c..ba8e784 100644
--- a/src/lib/WebRTC.js
+++ b/src/lib/WebRTC.js
@@ -1918,12 +1918,6 @@ class WebRTCController {
             // Safety feature: if the user deletes the QR code watermark in their browser's dev
             // tools, this function is called.
             onDeletedWatermark(username) {
-                // Stop ALL videos NOW.
-                window.requestAnimationFrame(() => {
-                    this.closeOpenVideos();
-                    this.stopVideo();
-                });
-
                 // Report this to your main website.
                 this.doCustomReport({
                     message: {
@@ -1948,17 +1942,7 @@ class WebRTCController {
                         `of the chat room as I hang my head in shame.`,
                 });
 
-                // Sign out of chat.
-                setTimeout(() => {
-                    this.client.disconnect()
-                }, 5000);
-
-                // Show the user an alert modal and reload the page.
-                this.modalAlert({
-                    icon: "fa fa-skull-crossbones",
-                    title: "Something has gone wrong",
-                    message: "A critical error was detected. Please refresh the web page.",
-                });
+                this.panic();
             },
         }
     }