Share one safeSelf() cache between the scriptlets in a frame.

Context: Each scriptlet has its own copy of safeSelf(). It saves the
functions that it finds when it first runs, and those were often already
the wrappers that earlier scriptlets had installed, not the browser's own
functions. So each hook called all earlier hooks again. With six hooks on
JSON.stringify (as on youtube.com), one JSON.stringify call from the page
became 2^6=64 native calls.

The extension gives each scriptlet its own copy of scriptletGlobals, so
the first scriptlet in a frame (and world) now keeps the cache on
globalThis, and the later scriptlets use it. The property is read-only,
and its key has the uBO version, so other versions do not share it. This
works for all injection paths (registered scripts and executeScript),
without changes in the extension.

refs ghostery/ghostery-extension#3672

Author: philipp-classen

build.ts

@@ -18,6 +18,19 @@ for (const scriptlet of scriptlets) {
   }
 }
 
+// uBO runs all scriptlets of a page in one scope, so they share one safeSelf() cache. Our scriptlets are separate functions, so they share it on globalThis.
+// Else each hook captures the earlier hooks as natives, and calls grow as 2^n. The uBO version is in the key, so other versions do not share it.
+const safeSelf = index.get('safe-self.fn').fn;
+const shareSafeSelf = `try {
+    const key = Symbol.for('safeSelf.${tagName}');
+    safeSelf.safe = globalThis[key];
+    if ( safeSelf.safe === undefined ) {
+        Object.defineProperty(globalThis, key, { value: safeSelf() });
+    }
+} catch {
+}
+`;
+
 console.log(`
 /*******************************************************************************
 
@@ -67,7 +80,7 @@ requiresTrust: ${scriptlet.requiresTrust || false},
 func: function (scriptletGlobals = {}, ...args) {
 ${deps.map((dep) => dep.toString()).join('\n')}
 ${scriptlet.fn.toString()};
-${scriptlet.fn.name}(...args);
+${deps.includes(safeSelf) ? shareSafeSelf : ''}${scriptlet.fn.name}(...args);
 },
 };
 `;