This file is indexed.

/usr/share/webext/browserpass/otp.js is in webext-browserpass 2.0.11+dfsg-2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
var otpInput = document.getElementById("otp");
var otpLabel = document.getElementById("label");
var otpCopy = document.getElementById("copy");
var otpDismiss = document.getElementById("dismiss");

window.addEventListener("message", receiveMessage, false);
function receiveMessage(event) {
  otpInput.value = event.data.digits;
  otpInput.setAttribute("size", event.data.digits.length);
  otpLabel.innerText = (event.data.label || "OTP") + ":";
  var message = {
    action: "resize",
    payload: {
      width: document.body.scrollWidth,
      height: document.body.scrollHeight
    }
  };
  window.parent.postMessage(message, "*");
}

window.onload = function() {
  window.parent.postMessage({ action: "load" }, "*");
};

document.body.onclick = function() {
  otpInput.select();
};

otpCopy.onclick = function() {
  otpInput.select();
  document.execCommand("copy");
};

otpDismiss.onclick = function() {
  chrome.runtime.sendMessage({ action: "dismissOTP" });
  window.parent.postMessage({ action: "dismiss" }, "*");
};