I just wanted to share one of the tricks I did to scrape data to a website. Scraping can also be done by implementing a Chrome Extension. Since chrome extension hooks into website as inline script it is very hard to deal with.
This can be mitigated by having a robust Content Security Policy for inline scripts however, most websites doesn't have CSP policy implemented. Just enable nonce to token for your own scripts and block all other scripts not using those tokens or nonce.
I just wanted to share one of the tricks I did to scrape data to a website. Scraping can also be done by implementing a Chrome Extension. Since chrome extension hooks into website as inline script it is very hard to deal with.
This can be mitigated by having a robust Content Security Policy for inline scripts however, most websites doesn't have CSP policy implemented. Just enable nonce to token for your own scripts and block all other scripts not using those tokens or nonce.