How to trigger an ‘isTrusted=true’ click event using JavaScript?

Question

I'm trying to impersonate user clicks and mouse movements using a Chrome extension.

For example:
In my content script there is a button click.

document.querySelector("SOME_SELECTOR").click();

This line triggers a click event with the following property:

MouseEvent {isTrusted: false}

How to trigger a MouseEvent where the isTrusted property will be true?

Solution 1

You can inject trusted events using the debugger interface.

chrome.debugger.attach(target, "1.2", function() {
    chrome.debugger.sendCommand(target, "Input.dispatchMouseEvent", arguments)
})

https://developer.chrome.com/extensions/debugger

https://chromedevtools.github.io/devtools-protocol/1-2/Input

Solution 2

I'm not sure if this is possible, since it's a read-only property that signifies exactly what you're trying to fake, namely if the event originated from the end user or from a script. There used to be browser-based differences, (IE used to have all events as trusted) but I don't know if this is still the case.

https://developer.mozilla.org/en-US/docs/Web/API/Event

There may still be ways around this, as mentioned for firefox in this topic:Are events generated by Firefox extension 'trusted'?

But you'll have to have a look at the chrome documentation to check if they have similar methods of delegating an event back to the window, since it does mention extension events are/can become trusted in some cases.