10_2_extended_resources.patch

diff --git a/src/js/redirect-engine.js b/src/js/redirect-engine.js
index 3f607cfe..fca01197 100644
--- a/src/js/redirect-engine.js
+++ b/src/js/redirect-engine.js
@@ -180,6 +180,9 @@ const typeToMimeMap = new Map([
     [ 'xmlhttprequest', 'text/plain' ],
 ]);
 
+nano.insert_redirect_declaration(redirectableResources);
+nano.insert_mime_declaration(extToMimeMap);
+
 const validMimes = new Set(extToMimeMap.values());
 
 const mimeFromName = function(name) {
diff --git a/src/js/scriptlet-filtering.js b/src/js/scriptlet-filtering.js
index 9575047d..e58e0df9 100644
--- a/src/js/scriptlet-filtering.js
+++ b/src/js/scriptlet-filtering.js
@@ -229,7 +229,7 @@
             }
             content =
                 'try {\n' +
-                    content + '\n' +
+                    content.replace('{{nano}}', '') + '\n' +
                 '} catch ( e ) { }';
             scriptletCache.add(rawToken, content);
         }
@@ -307,6 +307,14 @@
             return;
         }
 
+        var nanoInjectArgs = parsed.suffix.slice(4, -1);
+        if (
+            !nano.cf.is_privileged &&
+            nanoInjectArgs.startsWith(nano.privileged_assets_previx)
+        ) {
+            return;
+        }
+
         // https://github.com/gorhill/uBlock/issues/3375
         //   Ignore instances of exception filter with negated hostnames,
         //   because there is no way to create an exception to an exception.