Script Injection (injects) ​

Overview ​

injects allows injecting scripts into HTML pages at specific paths. It is designed for minimal adaptation of third-party apps. Requires lzcos 1.5.0+.

Matching Rules ​

• If paths is empty: match all paths
• If paths is not empty: any prefix match is enough
• If a matched path also matches any prefix in exclude, injection is skipped
• If prefix_domain is set: only match hosts whose prefix is <prefix>-
• injects entries run in order; scripts inside each entry also run in order

Script Sources ​

scripts[].src supports:

• builtin://name Built-in scripts from lzcinit
• file:///path Scripts from the app filesystem (usually under /lzcapp/pkg/content/)
• http(s)://... Remote scripts (recommended for debugging only)

Parameter Injection ​

scripts[].params is injected as a closure parameter. Access it via __LZC_INJECT_PARAMS__ inside the script.

Example (script side):

(() => {
  const params = __LZC_INJECT_PARAMS__ || {};
  const user = params.user || "";
  const password = params.password || "";
  if (user) {
    console.log("user:", user);
  }
})();

(() => {
  const params = __LZC_INJECT_PARAMS__ || {};
  const user = params.user || "";
  const password = params.password || "";
  if (user) {
    console.log("user:", user);
  }
})();

Usage Tips ​

• Strongly recommend limiting paths to login pages or specific routes
• Use exclude for API or static resource paths to avoid accidental injection
• Remote scripts should be used for debugging only; release builds should use builtin:// or file://
• If the page has strict CSP, injected scripts may not execute

Built-in Scripts ​

builtin://hello ​

Prints a debug message.

Params:

• message: output content, default hello world

builtin://simple-inject-password ​

Auto-fills username/password and optionally auto-submits. Recommended only for explicit login paths.

Params (params):

Example:

application:
  injects:
    - id: login-autofill
      paths:
        - /login
      scripts:
        - src: builtin://simple-inject-password
          params:
            user: "admin"
            password: "admin123"
            autoSubmit: true
            submitMode: "auto"
            userSelector: "#username"
            passwordSelector: "#password"
            submitKeywords: "login,signin,continue"

application:
  injects:
    - id: login-autofill
      paths:
        - /login
      scripts:
        - src: builtin://simple-inject-password
          params:
            user: "admin"
            password: "admin123"
            autoSubmit: true
            submitMode: "auto"
            userSelector: "#username"
            passwordSelector: "#password"
            submitKeywords: "login,signin,continue"