Skip to content

WIP: Mv3: Add tracker-bypass and IP Logger blocking - #983

Closed
NotAProton wants to merge 42 commits into
FastForwardTeam:manifest-v3from
NotAProton:tracker-block
Closed

WIP: Mv3: Add tracker-bypass and IP Logger blocking#983
NotAProton wants to merge 42 commits into
FastForwardTeam:manifest-v3from
NotAProton:tracker-block

Conversation

@NotAProton

@NotAProtonNotAProton commented May 5, 2023

Copy link
Copy Markdown
Member

Fixes (Links to issues fixed by this PR): None

Description: Use DeclarativeNetRequest instead of webRequest

Test links:

Checklist:

  • I made sure there are no unnecessary changes in the code*
  • Tested on Chromium- Chrome 112 Windows
  • Tested on Firefox

@github-actions

github-actionsBot commented May 5, 2023

Copy link
Copy Markdown

Download the artifacts for this pull request:

0xc60fand others added 8 commits May 5, 2023 17:57
Added 5 new bypasses and fixed some old errors
with the backend. Added new documentation to all the functions.
Smol change
Dependabot v3
CodeQl upgrade and dependabot
Dependabot movement pls work
I HATE DEVELOPER.CHROME.COM
I HATE DEVELOPER.CHROME.COM
I HATE DEVELOPER.CHROME.COM
I HATE DEVELOPER.CHROME.COM
resourceType: mainframe is NOT optional
Comment threadsrc/html/tracker-bypass.js Fixed
Comment threadsrc/html/tracker-bypass.js Fixed
trackerInfoElement.textContent = brws.i18n.getMessage('trackerBypassedError');
trackerInfoElement.classList.add('text-warn');
setTimeout(() => {
if (trackerUrl) window.location.replace(trackerUrl);

Check warning

Code scanning / CodeQL

Client-side cross-site scripting

Cross-site scripting vulnerability due to [user-provided value](1).
trackerInfoElement.textContent = brws.i18n.getMessage('trackerBypassedError');
trackerInfoElement.classList.add('text-warn');
setTimeout(() => {
if (trackerUrl) window.location.replace(trackerUrl);

Check warning

Code scanning / CodeQL

Client-side URL redirect

Untrusted URL redirection depends on a [user-provided value](1).
Davilarekand others added 5 commits May 19, 2023 22:19
Adf.ly was bought by linkvertise so all adfly links go to linkvertise now
Can't add intercelestial because they use soralink, which seems impossible to bypass
MV2 bypass is broken but this works
@NotAProtonNotAProton linked an issue Jul 21, 2023 that may be closed by this pull request
undeadjessand others added 2 commits July 26, 2023 19:12
pcgamestorrents
linegee
crackedappsstore
intercelestial (partial)
0xc60fand others added 16 commits July 26, 2023 17:34
New bypasses and fixes to backend: MV3
missing slash :P
i tried to use this site as an example and it was broken so i fixed it. it could break other stuff possibly but i don't think so
Bumps [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) to 0.5.0 and updates ancestor dependency [web-ext](https://github.com/mozilla/web-ext). These dependencies need to be updated together.
Updates `xml2js` from 0.4.23 to 0.5.0
- [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.5.0)
Updates `web-ext` from 7.6.0 to 7.6.2
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@7.6.0...7.6.2)
---
updated-dependencies:
- dependency-name: xml2js
dependency-type: indirect
- dependency-name: web-ext
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
…ot/npm_and_yarn/xml2js-and-web-ext-0.5.0
Bump xml2js and web-ext
@NotAProtonNotAProton linked an issue Sep 8, 2023 that may be closed by this pull request
1 task
@NotAProtonNotAProton removed a link to an issue Sep 8, 2023
1 task
@NotAProton
NotAProton marked this pull request as ready for review September 8, 2023 07:41
Comment threadsrc/html/popup.js
Comment on lines +40 to +46
).innerHTML = document
.querySelector("[data-message='optionsWhitelistDescription']")
.textContent.replace(
'subdomain.domain.tld',
'<code>subdomain.domain.tld</code>'
)
.replace('domain.tld', '<code>domain.tld</code>');

Check warning

Code scanning / CodeQL

DOM text reinterpreted as HTML

[DOM text](1) is reinterpreted as HTML without escaping meta-characters.
@NotAProton

NotAProton commented Sep 8, 2023

Copy link
Copy Markdown
MemberAuthor

-> #1101

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants

@NotAProton@1fexd@github-advanced-security@husseinlashin@Davilarek@undeadjess@AliahX