@rcnr/lockdown 1.1.1 → 1.3.0

package/dist/index.d.mts

@@ -4,7 +4,7 @@ interface Violation {
     timestamp: number;
 }
 /** All violation types the lockdown hook can detect. */
-type ViolationType = "fullscreen_exit" | "tab_switch" | "window_blur" | "paste_attempt" | "copy_attempt" | "cut_attempt" | "drop_attempt" | "devtools_attempt";
+type ViolationType = "fullscreen_exit" | "tab_switch" | "window_blur" | "paste_attempt" | "copy_attempt" | "cut_attempt" | "drop_attempt" | "devtools_attempt" | "extension_detected" | "voice_input" | "pip_detected";
 /** Violations that trigger instant auto-submit (cheating attempts). */
 declare const INSTANT_SUBMIT_VIOLATIONS: Set<ViolationType>;
 /** Configuration for the lockdown hook. */

package/dist/index.d.ts

@@ -4,7 +4,7 @@ interface Violation {
     timestamp: number;
 }
 /** All violation types the lockdown hook can detect. */
-type ViolationType = "fullscreen_exit" | "tab_switch" | "window_blur" | "paste_attempt" | "copy_attempt" | "cut_attempt" | "drop_attempt" | "devtools_attempt";
+type ViolationType = "fullscreen_exit" | "tab_switch" | "window_blur" | "paste_attempt" | "copy_attempt" | "cut_attempt" | "drop_attempt" | "devtools_attempt" | "extension_detected" | "voice_input" | "pip_detected";
 /** Violations that trigger instant auto-submit (cheating attempts). */
 declare const INSTANT_SUBMIT_VIOLATIONS: Set<ViolationType>;
 /** Configuration for the lockdown hook. */

package/dist/index.js

@@ -34,7 +34,10 @@ var INSTANT_SUBMIT_VIOLATIONS = /* @__PURE__ */ new Set([
   "copy_attempt",
   "cut_attempt",
   "drop_attempt",
-  "devtools_attempt"
+  "devtools_attempt",
+  "extension_detected",
+  "voice_input",
+  "pip_detected"
 ]);
 
 // src/useLockdown.ts
@@ -267,6 +270,10 @@ function useLockdown({
         e.preventDefault();
         return;
       }
+      if (modKey && (e.key.toLowerCase() === "f" || e.key.toLowerCase() === "h")) {
+        e.preventDefault();
+        return;
+      }
       if (e.altKey && e.key === "Tab") {
         e.preventDefault();
         return;
@@ -279,6 +286,19 @@ function useLockdown({
     function handleContextMenu(e) {
       e.preventDefault();
     }
+    function handleBeforeInput(e) {
+      const inputEvent = e;
+      const type = inputEvent.inputType;
+      if (type === "insertFromDictation" || type === "insertFromVoice" || // Some browsers report dictation as insertReplacementText
+      // but only flag it if it inserts a lot of text at once (>50 chars)
+      type === "insertReplacementText" && inputEvent.data && inputEvent.data.length > 50) {
+        e.preventDefault();
+        addViolation("voice_input");
+      }
+    }
+    function handlePipEnter() {
+      addViolation("pip_detected");
+    }
     function handleFocus() {
       if (countdownIntervalRef.current) {
         clearCountdown();
@@ -297,6 +317,8 @@ function useLockdown({
     document.addEventListener("dragover", handleDragOver);
     document.addEventListener("keydown", handleKeydown);
     document.addEventListener("contextmenu", handleContextMenu);
+    document.addEventListener("beforeinput", handleBeforeInput);
+    document.addEventListener("enterpictureinpicture", handlePipEnter, true);
     return () => {
       document.removeEventListener("fullscreenchange", handleFullscreenChange);
       document.removeEventListener("visibilitychange", handleVisibilityChange);
@@ -311,8 +333,108 @@ function useLockdown({
       document.removeEventListener("dragover", handleDragOver);
       document.removeEventListener("keydown", handleKeydown);
       document.removeEventListener("contextmenu", handleContextMenu);
+      document.removeEventListener("beforeinput", handleBeforeInput);
+      document.removeEventListener("enterpictureinpicture", handlePipEnter, true);
     };
   }, [enabled, addViolation, startCountdown, clearCountdown]);
+  (0, import_react.useEffect)(() => {
+    if (!enabled) return;
+    const EXTENSION_SIGNATURES = [
+      "grammarly",
+      "schoolai",
+      "quillbot",
+      "languagetool",
+      "ginger",
+      "writefull",
+      "wordtune",
+      "prowritingaid",
+      "hemingway",
+      "copyleaks",
+      "jenni",
+      "jasper",
+      "textblaze",
+      "compose-ai",
+      "hyperwrite",
+      "otter-ai",
+      "fireflies"
+    ];
+    function isExtensionElement(el) {
+      if (el.tagName === "IFRAME") {
+        const src = el.getAttribute("src") || "";
+        if (/^(chrome|moz)-extension:\/\//i.test(src)) return true;
+        if (!src || src.startsWith("blob:")) {
+          const id2 = el.id?.toLowerCase() || "";
+          const cls2 = typeof el.className === "string" ? el.className.toLowerCase() : "";
+          if (EXTENSION_SIGNATURES.some(
+            (sig) => id2.includes(sig) || cls2.includes(sig)
+          )) {
+            return true;
+          }
+        }
+      }
+      if (el.shadowRoot && !el.hasAttribute("data-rcnr")) {
+        return true;
+      }
+      const id = el.id?.toLowerCase() || "";
+      const cls = typeof el.className === "string" ? el.className.toLowerCase() : "";
+      for (const attr of el.getAttributeNames?.() || []) {
+        const attrLower = attr.toLowerCase();
+        if (EXTENSION_SIGNATURES.some((sig) => attrLower.includes(sig))) {
+          return true;
+        }
+      }
+      if (EXTENSION_SIGNATURES.some(
+        (sig) => id.includes(sig) || cls.includes(sig)
+      )) {
+        return true;
+      }
+      if (el.parentElement === document.body && !el.hasAttribute("data-rcnr")) {
+        const tag = el.tagName?.toLowerCase() || "";
+        if (tag === "div" || tag === "section" || tag === "aside") {
+          const style = window.getComputedStyle(el);
+          if ((style.position === "fixed" || style.position === "absolute") && parseInt(style.width, 10) > 200) {
+            const html = el.innerHTML?.toLowerCase() || "";
+            if (/chrome-extension:|moz-extension:/i.test(html)) {
+              return true;
+            }
+          }
+        }
+      }
+      return false;
+    }
+    const observer = new MutationObserver((mutations) => {
+      if (!hasEnteredFullscreenRef.current) return;
+      if (graceRef.current) return;
+      if (autoSubmittedRef.current) return;
+      for (const mutation of mutations) {
+        for (const node of mutation.addedNodes) {
+          if (node.nodeType !== Node.ELEMENT_NODE) continue;
+          if (isExtensionElement(node)) {
+            addViolation("extension_detected");
+            return;
+          }
+        }
+      }
+    });
+    observer.observe(document.documentElement, {
+      childList: true,
+      subtree: true
+    });
+    const scanTimer = requestAnimationFrame(() => {
+      if (!hasEnteredFullscreenRef.current) return;
+      const allElements = document.querySelectorAll("*");
+      for (const el of allElements) {
+        if (isExtensionElement(el)) {
+          addViolation("extension_detected");
+          break;
+        }
+      }
+    });
+    return () => {
+      observer.disconnect();
+      cancelAnimationFrame(scanTimer);
+    };
+  }, [enabled, addViolation]);
   (0, import_react.useEffect)(() => {
     if (!enabled) return;
     const interval = setInterval(() => {

package/dist/index.mjs

@@ -7,7 +7,10 @@ var INSTANT_SUBMIT_VIOLATIONS = /* @__PURE__ */ new Set([
   "copy_attempt",
   "cut_attempt",
   "drop_attempt",
-  "devtools_attempt"
+  "devtools_attempt",
+  "extension_detected",
+  "voice_input",
+  "pip_detected"
 ]);
 
 // src/useLockdown.ts
@@ -240,6 +243,10 @@ function useLockdown({
         e.preventDefault();
         return;
       }
+      if (modKey && (e.key.toLowerCase() === "f" || e.key.toLowerCase() === "h")) {
+        e.preventDefault();
+        return;
+      }
       if (e.altKey && e.key === "Tab") {
         e.preventDefault();
         return;
@@ -252,6 +259,19 @@ function useLockdown({
     function handleContextMenu(e) {
       e.preventDefault();
     }
+    function handleBeforeInput(e) {
+      const inputEvent = e;
+      const type = inputEvent.inputType;
+      if (type === "insertFromDictation" || type === "insertFromVoice" || // Some browsers report dictation as insertReplacementText
+      // but only flag it if it inserts a lot of text at once (>50 chars)
+      type === "insertReplacementText" && inputEvent.data && inputEvent.data.length > 50) {
+        e.preventDefault();
+        addViolation("voice_input");
+      }
+    }
+    function handlePipEnter() {
+      addViolation("pip_detected");
+    }
     function handleFocus() {
       if (countdownIntervalRef.current) {
         clearCountdown();
@@ -270,6 +290,8 @@ function useLockdown({
     document.addEventListener("dragover", handleDragOver);
     document.addEventListener("keydown", handleKeydown);
     document.addEventListener("contextmenu", handleContextMenu);
+    document.addEventListener("beforeinput", handleBeforeInput);
+    document.addEventListener("enterpictureinpicture", handlePipEnter, true);
     return () => {
       document.removeEventListener("fullscreenchange", handleFullscreenChange);
       document.removeEventListener("visibilitychange", handleVisibilityChange);
@@ -284,8 +306,108 @@ function useLockdown({
       document.removeEventListener("dragover", handleDragOver);
       document.removeEventListener("keydown", handleKeydown);
       document.removeEventListener("contextmenu", handleContextMenu);
+      document.removeEventListener("beforeinput", handleBeforeInput);
+      document.removeEventListener("enterpictureinpicture", handlePipEnter, true);
     };
   }, [enabled, addViolation, startCountdown, clearCountdown]);
+  useEffect(() => {
+    if (!enabled) return;
+    const EXTENSION_SIGNATURES = [
+      "grammarly",
+      "schoolai",
+      "quillbot",
+      "languagetool",
+      "ginger",
+      "writefull",
+      "wordtune",
+      "prowritingaid",
+      "hemingway",
+      "copyleaks",
+      "jenni",
+      "jasper",
+      "textblaze",
+      "compose-ai",
+      "hyperwrite",
+      "otter-ai",
+      "fireflies"
+    ];
+    function isExtensionElement(el) {
+      if (el.tagName === "IFRAME") {
+        const src = el.getAttribute("src") || "";
+        if (/^(chrome|moz)-extension:\/\//i.test(src)) return true;
+        if (!src || src.startsWith("blob:")) {
+          const id2 = el.id?.toLowerCase() || "";
+          const cls2 = typeof el.className === "string" ? el.className.toLowerCase() : "";
+          if (EXTENSION_SIGNATURES.some(
+            (sig) => id2.includes(sig) || cls2.includes(sig)
+          )) {
+            return true;
+          }
+        }
+      }
+      if (el.shadowRoot && !el.hasAttribute("data-rcnr")) {
+        return true;
+      }
+      const id = el.id?.toLowerCase() || "";
+      const cls = typeof el.className === "string" ? el.className.toLowerCase() : "";
+      for (const attr of el.getAttributeNames?.() || []) {
+        const attrLower = attr.toLowerCase();
+        if (EXTENSION_SIGNATURES.some((sig) => attrLower.includes(sig))) {
+          return true;
+        }
+      }
+      if (EXTENSION_SIGNATURES.some(
+        (sig) => id.includes(sig) || cls.includes(sig)
+      )) {
+        return true;
+      }
+      if (el.parentElement === document.body && !el.hasAttribute("data-rcnr")) {
+        const tag = el.tagName?.toLowerCase() || "";
+        if (tag === "div" || tag === "section" || tag === "aside") {
+          const style = window.getComputedStyle(el);
+          if ((style.position === "fixed" || style.position === "absolute") && parseInt(style.width, 10) > 200) {
+            const html = el.innerHTML?.toLowerCase() || "";
+            if (/chrome-extension:|moz-extension:/i.test(html)) {
+              return true;
+            }
+          }
+        }
+      }
+      return false;
+    }
+    const observer = new MutationObserver((mutations) => {
+      if (!hasEnteredFullscreenRef.current) return;
+      if (graceRef.current) return;
+      if (autoSubmittedRef.current) return;
+      for (const mutation of mutations) {
+        for (const node of mutation.addedNodes) {
+          if (node.nodeType !== Node.ELEMENT_NODE) continue;
+          if (isExtensionElement(node)) {
+            addViolation("extension_detected");
+            return;
+          }
+        }
+      }
+    });
+    observer.observe(document.documentElement, {
+      childList: true,
+      subtree: true
+    });
+    const scanTimer = requestAnimationFrame(() => {
+      if (!hasEnteredFullscreenRef.current) return;
+      const allElements = document.querySelectorAll("*");
+      for (const el of allElements) {
+        if (isExtensionElement(el)) {
+          addViolation("extension_detected");
+          break;
+        }
+      }
+    });
+    return () => {
+      observer.disconnect();
+      cancelAnimationFrame(scanTimer);
+    };
+  }, [enabled, addViolation]);
   useEffect(() => {
     if (!enabled) return;
     const interval = setInterval(() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rcnr/lockdown",
-  "version": "1.1.1",
+  "version": "1.3.0",
   "description": "Shared fullscreen lockdown hook for RCNR student frontends",
   "main": "dist/index.js",
   "module": "dist/index.mjs",