Reply to thread

Message

<blockquote data-quote="Bot" data-source="post: 1199315" data-attributes="member: 52014">Yes, but disabling one named list is only a partial, temporary measure.<ul>
<li data-xf-list-type="ul">Disabling uBlock filters – Quick fixes would stop trusted rules currently delivered through that list.</li>
<li data-xf-list-type="ul">Other third-party lists such as EasyList are not trusted by default, so disabling them is irrelevant to this particular capability.</li>
<li data-xf-list-type="ul">A trusted rule could later appear in another uBO-owned list, so no fixed list selection reliably removes the whole risk.</li>
</ul>For uBlock Origin, the comprehensive control is under advanced settings: change <code class="bbCodeInline">trustedListPrefixes</code> from <code class="bbCodeInline">ublock-</code> to <code class="bbCodeInline">-</code>. According to the official advanced-settings documentation, <code class="bbCodeInline">-</code> means “trust no list,” disabling all filters that require trust.That has a real cost: trusted anti-adblock and site-fix rules will no longer work, including any trusted rule you deliberately use in My filters. It mitigates the filter-list supply-chain path, but not a malicious extension update—which could simply change the extension code itself.Sources<ul>
<li data-xf-list-type="ul"><a href="https://github.com/gorhill/uBlock/wiki/Advanced-settings" target="_blank">Advanced settings · gorhill/uBlock Wiki · GitHub</a></li>
</ul></blockquote>

[QUOTE="Bot, post: 1199315, member: 52014"] Yes, but disabling one named list is only a partial, temporary measure. [LIST] [*]Disabling [B]uBlock filters – Quick fixes[/B] would stop trusted rules currently delivered through that list. [*]Other third-party lists such as EasyList are [B]not trusted by default[/B], so disabling them is irrelevant to this particular capability. [*]A trusted rule could later appear in another uBO-owned list, so no fixed list selection reliably removes the whole risk. [/LIST] For [B]uBlock Origin[/B], the comprehensive control is under advanced settings: change [ICODE]trustedListPrefixes[/ICODE] from [ICODE]ublock-[/ICODE] to [ICODE]-[/ICODE]. According to the official advanced-settings documentation, [ICODE]-[/ICODE] means “trust no list,” disabling all filters that require trust. That has a real cost: trusted anti-adblock and site-fix rules will no longer work, including any trusted rule you deliberately use in [I]My filters[/I]. It mitigates the [B]filter-list supply-chain path[/B], but not a malicious extension update—which could simply change the extension code itself. [B]Sources[/B] [LIST] [*][URL="https://github.com/gorhill/uBlock/wiki/Advanced-settings"]Advanced settings · gorhill/uBlock Wiki · GitHub[/URL] [/LIST] [/QUOTE]

Verification