Fix reload loop detector: move call after guard checks and synchronize WeakHashMap

- Move reloadLoopDetector.detectReloadLoop() after the userSetting and
  IGNORE_CMP_SUFFIX early-return guards in PopUpFoundMessageHandlerPlugin
  to prevent accumulating false state when autoconsent is disabled or for
  -top frame rules.
- Wrap WeakHashMap with Collections.synchronizedMap() in
  AutoconsentReloadLoopDetector to prevent ConcurrentModificationException
  from concurrent access across IO dispatcher and WebView JS bridge threads.

Author: cursoragent

autoconsent/autoconsent-impl/src/main/java/com/duckduckgo/autoconsent/impl/AutoconsentReloadLoopDetector.kt

@@ -24,6 +24,7 @@ import com.duckduckgo.autoconsent.impl.pixels.AutoconsentPixelManager
 import com.duckduckgo.di.scopes.AppScope
 import dagger.SingleInstanceIn
 import logcat.logcat
+import java.util.Collections
 import java.util.WeakHashMap
 import javax.inject.Inject
 
@@ -38,7 +39,7 @@ class AutoconsentReloadLoopDetector @Inject constructor(
         var reloadLoopDetected: Boolean = false,
     )
 
-    private val tabStates: MutableMap<WebView, TabState> = WeakHashMap()
+    private val tabStates: MutableMap<WebView, TabState> = Collections.synchronizedMap(WeakHashMap())
 
     fun updateUrl(webView: WebView, url: String) {
         val newUri = url.toUri()

autoconsent/autoconsent-impl/src/main/java/com/duckduckgo/autoconsent/impl/handlers/PopUpFoundMessageHandlerPlugin.kt

@@ -46,13 +46,13 @@ class PopUpFoundMessageHandlerPlugin @Inject constructor(
                 autoconsentPixelManager.fireDailyPixel(AutoConsentPixel.AUTOCONSENT_POPUP_FOUND_DAILY)
 
                 val message: PopUpFoundMessage = parseMessage(jsonString) ?: return
-                reloadLoopDetector.detectReloadLoop(webView, message.cmp)
 
                 // Opt-in flow below, if user setting is true, do nothing
                 if (repository.userSetting) return
                 // for complex multi-frame CMPs, trigger opt-in flow only on -frame rules
                 if (message.cmp.endsWith(IGNORE_CMP_SUFFIX, ignoreCase = true)) return
 
+                reloadLoopDetector.detectReloadLoop(webView, message.cmp)
                 autoconsentCallback.onFirstPopUpHandled()
             }
         } catch (e: Exception) {