TL;DR

when we inject our hooking code to https://wx.qq.com , we should keep the environment as clean as possible.

there has javascript code in wx.qq.com, which will check the run environment to see if had been modified: for example, the checksum of the whole angularjs object.

when we inject some code to https://wx.qq.com , we should keep the environment as clean as possible. because if a user account is reported using an unofficial client, the system might add some extra limitation to this account, for example, this account can not "say hi" to other strangers. (as the following screen shot, I think it's purpose is to prevent spamming other users by robot)

TODO

• disable API_webwxreport: "/cgi-bin/mmwebwx-bin/webwxstatreport"

See

1. 揭秘“微信群控” - 微信安全中心