Block Iframes, JavaScript, Redirections

[Prorootect]

Extensions to 'Block Iframes Redirections' thread for you.

On Chrome Web Store, you have some remarkable extensions to block iframes, redirections!

'Page Blocker' offered by Chermaine Cheang, Version: 1.0.2 Updated: August 25, 2017 Size: 47.18KiB
- blocks New Tab page or new window - so no more redirection by New Tab page or new window:

Page Blocker

To find this extension on web store, type in search window: pageblocker the words together.
- When this extension is turned on, it will block the opening of new tabs or new windows, especially those that are not intended by the user, and those that led to unwanted advertisements - and malicious redirections.
Click on the icon to turn ON or OFF, icon are green - or red, easy!

ContentBlockHelper offered by far.whochan.com japanese developers, Version: 10.2.0 Updated: May 5, 2016 Size: 449KiB

ContentBlockHelper

In extension Preferences tab, make sure: sub-frames on block everything, and Auto-redirect on block linked contents.
-My most important extension, including ScriptSafe...

ScriptSafe offered by andryou.com andryou - nerdy insight into life website, Version: 1.0.9.1 Updated: January 26, 2017 Size: 723KiB

ScriptSafe

In General Settings, notch (among other things) SCRIPT, IFRAME, FRAME, Data URLs and under Behavior settings Respect Same-Domain make Disabled - here we are to block domain scripts...
"-actually speeds up browsing because it blocks a lot of unwanted content from being downloaded
-remove <SCRIPT>, <OBJECT>, <EMBED>, <IFRAME>, <FRAME>, <APPLET>, <AUDIO>, <VIDEO>, <NOSCRIPT>, and <IMG> elements, as well as webbugs".

Policy Control - JavaScript and Flash blocker offered
by rynu.smith - Version: 0.3.1 Updated: November 5, 2017 Size: 18.61KiB

Policy Control - JavaScript and Flash blocker

Tick: 'Policy Control is enabled' case, then you have the 'Sub Document (iframes and frames)' block possibility (among other things)...
"Block third-party or all resources of style, script, image, font, xmlhttprequest types
This is an alternative to "NoScript Security Suite" extension to provide filtering rules for different types of resources"...

Fix Url Links Redirect offered by tech4computer - Version: 0.171 Updated: April 9, 2014 Size: 34.74KiB

Fix Url Links Redirect

- removes the URL link redirect and takes you direct to destination. Remove the middle man and tracking. Second feature is remove link Referrer.

1. Work on All redirect links (except ones in ‘disable’ list) - notch this case!
2. OR work Only on specific links/sites that you added to its ‘enable’ list.

User comment: 'Still the only true redirect remover/cleaner for Chrome (and working great in v61, so if it's not working for you there must be some extension conflict or other problem).
You know it's working when the icon appears in color after a page you navigate to is the result of a fixing. In other words, this redirect remover fixes a link on the fly while you navigate to the link (instead of scanning and fixing the whole page first). A+'

'Remove Google Redirect in Google Results' offered by hq6 - Version: 0.0.1 Updated: January 2, 2016 Size: 4.67KiB

Remove Google Redirect in Google Results

'Disables the JS function that adds redirect to Google Search Results.
When we perform a Google search for someone else and find something useful, we often want to right-click the link directly in the search results and copy the link. Unfortunately, the link we will actually get is a huge URL with a Google prefix, rather than the original URL.
Google uses this for redirect for tracking, which may be reasonable, but makes it very inconvenient to copy out links.
This add-on disables the Javascript function that Google uses to create the redirect link, leaving the user with fresh, crisp links.
Note that the implication of this technique is that it will only work on Google sites where the redirect link is generated client-side.'

User comment: 'Thank you for the great work. I love it. It might be even better if it could remove the redirection in Google Images search.'

Undirect - offered by xwipeoutx - Version: 1.3.0 Updated: June 14, 2017 Size: 15.97KiB
'Removes this tracking and redirection from google search results'.

Undirect

User comment: 'Works - both in when displays the search results and when you open then links !'

----------------------------

- among other extensions that work against these issues..

 

[Prorootect]

"- among other extensions that work against these issues.." - ALL these extensions I've tested, all are good!

- like ScriptBlock, Script Blocker For Chrome, Remove Google Redirection ...

'Remove Google Redirection' - offered by kodango.com - Version: 1.1.0 Updated: July 9, 2014 Size: 15.8KiB

Remove Google Redirection

Prohibit click-tracking, and prevent url redirection when clicks on the result links in Google search page.

-------------

 

[Prorootect]

ContentBlockHelper extension blocks all redirections!

- if, in the General - Preferences page, you push the Auto Redirect slider to the right, on the position: Block linked contents.

Link on Chrome Web Store: ContentBlockHelper

ContentBlockHelper offered by far.whochan.com Japanese developers, Version: 10.2.0 Updated: May 5, 2016 Size: 449KiB

Must have extension, if you have survival instinct.

TEST redirection page on outgoing.prod.mozaws.net: Redirecting to http://www.sict-ng.com/

-very safe test, NO such host on sict-ng.com, so NOT installing third-party add-ons

 

[Prorootect]

Firefox 'must have' add-ons to block iframes, redirections:

'NoScript Security Suite' by Giorgio Maone : NoScript Security Suite – Add-ons for Firefox
The best security you can get in a web browser!
Allow active content to run only from sites you trust, and protect yourself against XSS and Clickjacking attacks.
It allows JavaScript, Java and other executable content to run only from trusted domains of your choice, e.g. your home-banking site, guarding your "trust boundaries" against cross-site scripting attacks (XSS), cross-zone DNS rebinding / CSRF attacks (router hacking), and Clickjacking attempts, thanks to its unique ClearClick technology. It also implements the DoNotTrack tracking opt-out proposal by default...
(mmm too complicated for me... I don't use it for now, but maybe would try again soon... )

'RequestPolicy Continued' by Martin Kimmerle : RequestPolicy Continued – Add-ons for Firefox
Be in control of which cross-site requests are allowed. Improve the privacy of your browsing by not letting other sites know your browsing habits. Secure yourself from Cross-Site Request Forgery (CSRF) and other attacks.

Policeman by futpib : Policeman – Add-ons for Firefox
Policeman gives you precise control over what web requests are allowed. Create rules based on domain name and type of resource being requested. It can also be used to improve privacy or block cross-site scripts.

... and then to block redirects, big choice:

'Redirect Control' by hjgwmvya : Redirect Control – Add-ons for Firefox
This add-on enables the user to allow or deny redirects from web pages.

'Skip Redirect' by Sebastian Blask : Skip Redirect – Add-ons for Firefox
Some web pages use intermediary pages before redirecting to a final page. This add-on tries to extract the final url from the intermediary url and goes there straight away if successful.

'Redirect Bypasser' by Moises Lima : Redirect Bypasser – Add-ons for Firefox
Avoid redirects and has direct access to the sites you want to visit.

'Redirect Remover' by BetterBrowser : Redirect Remover – Add-ons for Firefox
Removes Redirects like http://redirectremover.mozdev.org/?www.mozilla.org from Links and Images.

... and some other...then to block JavaScripts (On-Off switch):

QuickJS by eiji.anonremail : QuickJS – Add-ons for Firefox
Enable/Disable JavaScript with Toolbar button.
This is a lightweight alternative to NoScript.
No configuration, just a button for the global Java Script permission (also found under Options > Content > Enable Java Script).
It will affect the parsing for all tabs and all domains.
- I use it now.

If someone has some add-ons to add, go ahead without a hindrance...

PS. Redirect TEST - new example: Style Chooser REDIRECT to 'MalwareTips 6102' style: Browsers and Extensions

 

[Prorootect]

Redirect TEST - another example with 'xfToken' in the address: Style Chooser REDIRECT to 'MalwareTips 6102' style: Browsers and Extensions

- what it's this xfToken, I don't know.

 

[Prorootect]

I found, that on XenForo.com forums - xfToken URL parameter - is for the Style Chooser, to work for signed in users:
XF 1.4 - Style change through a link/button

- found with XenForo.com internal search feature: Search results for query: xftoken

 

[Prorootect]

Little 'redirect' test 'to know how your favorite browser behaves, with your beloved extensions...):

'i woult rather use firefox': Chrome Web Browser

- and I have done: 'i would rather use malwaretips.com': Chrome Web Browser

- have you 'download Chrome' proposition (= NO redirect, so OK.), or rather your preferred destination(= redirect..), please?

 

[Prorootect]

Here you have "Third-Party redirection test" from ndossougbe.github.io: title

Page NOT redirected ("Success! The navigation was blocked"):

"Third-Party redirection test.
The browser should block the redirections and prompt to allow bypassing the intervention

That requires the redirection to be targeting a third party origin. Clone this repository and host it somewhere for the demo to work

TODO: Make it with a python/node script or android app that would spawn servers on different ports

Success! The navigation was blocked _______ Success! The navigation was blocked "


My tests:
SeaMonkey, K-Meleon 75 Pro, (with all anti-scripts on Allow) block this redirection, so you see the above page,
Slimjet Version 10.0.13.0 (based on Chromium 50.0.2661.75), Iron Version 49.0.2600.0 (Chromium forks) (with all anti-scripts on Block) block this redirection, but with anti-scripts on Allow - don't block... redirect to page about Guinness,
CENT browser Version 1.8.9.28 portable (Chromium fork) (with all anti-scripts on Block) block this redirection, but with anti-scripts on Allow - don't block... redirect to xn--domain.net/ ... ah uh
Opera 36 (with all anti-scripts on Block) block this redirection, but with anti-scripts on Allow - don't block...redir. to Guinness p.
New Moon (with RequestPolicy Continued on Enable blocking) block, but with R.P. C. Disable blocking - don't block...Guinness p.
Firefox 52.5.0, Basilick (= Nightly) (with QuickJS on Block) block this redirection... but with QuickJS on Allow - don't block... redirects to ASCII compatible xn--domain.com ...

- so at your tests, please...

PS. Look too on topic:
Chrome will soon prevent irritating, unwanted website redirects in v64 & 65 : Google - Chrome will soon prevent irritating, unwanted website redirects in v64 & 65

 

[HarborFront]

I have a question on ContentBlockHelper

Examples.

When I visited Gizmodo.com, uBlock Origin shows amazon-adsystem.com is blocked and ContentBlockHelper also shows the same which means they concur.

However, chartbeat.com, googletagservices.com etc are blocked by uBlock Origin (by default) but NOT block by ContentBlockHelper. So which is correct?

Even in MT forums, google-analytics.com is blocked by uBlock Origin but NOT block by ContentBlockHelper........

Thanks

 

[Prorootect]

I have a question on ContentBlockHelper

Examples.

When I visited Gizmodo.com, uBlock Origin shows amazon-adsystem.com is blocked and ContentBlockHelper also shows the same which means they concur.

However, chartbeat.com, googletagservices.com etc are blocked by uBlock Origin (by default) but NOT block by ContentBlockHelper. So which is correct?

Even in MT forums, google-analytics.com is blocked by uBlock Origin but NOT block by ContentBlockHelper........

Thanks

Hi HarborFront,

That's to you, to block all you consider bad.
- to block your bad link, click on green icon in ContentBlockHelper window to make it red. You're able to unblock in any time with same manner...
- the first time you block, this will be blocked automatically forever, until then if you unblock, that's all the philosophy!
It's learning mode always, for you and ContentBlockHelper, but he'll "ask" you to do this less and less over time.

Eg. on MalwareTips, I block google-analytics.com, gstatic.com (it's my taste for now ..), and allow: malwaretips.com, gravatar.com, googleapis.com. Total it has 46 items, links approx. - look on the icon.

On Gismodo.com home page, ContentBlockHelper has 60 items:
- dont Blocked by me (if you're not sure, consult "ZenMate Web Firewall" first, what to block!):
google-analytics.com
googletagservices.com
indewww.com
ads.*
adsrvr.org
amazon-adsystem.com
skimresources.com
imrworldwide.com
chartbeat.com
quantserve.com
facebook.net
krxd.net
scorecardresearch.com
samba.tv
pubads.*
gstatic.com (my choice for now...)
roosterfirework.com

- yeah forever, for every website, thanks to ContentBlockHelper!

.. and it works with ScriptSafe together, in each of my chromium forks (Opera too)... (but now have problem with 10.4 version, you see).


EDIT for my precedent post:
My Cent browser version 1.8.9.28 it's Chromium 49.0.2623.102

 

[HarborFront]

Hi HarborFront,

That's to you, to block all you consider bad.
- to block your bad link, click on green icon in ContentBlockHelper window to make it red. You're able to unblock in any time with same manner...
- the first time you block, this will be blocked automatically forever, until then if you unblock, that's all the philosophy!
It's learning mode always, for you and ContentBlockHelper, but he'll "ask" you to do this less and less over time.

Eg. on MalwareTips, I block google-analytics.com, gstatic.com (it's my taste for now ..), and allow: malwaretips.com, gravatar.com, googleapis.com. Total it has 46 items, links approx. - look on the icon.

On Gismodo.com home page, ContentBlockHelper has 60 items:
- dont Blocked by me (if you're not sure, consult "ZenMate Web Firewall" first, what to block!):
google-analytics.com
googletagservices.com
indewww.com
ads.*
adsrvr.org
amazon-adsystem.com
skimresources.com
imrworldwide.com
chartbeat.com
quantserve.com
facebook.net
krxd.net
scorecardresearch.com
samba.tv
pubads.*
gstatic.com (my choice for now...)
roosterfirework.com

- yeah forever, for every website, thanks to ContentBlockHelper!

.. and it works with ScriptSafe together, in each of my chromium forks (Opera too)... (but now have problem with 10.4 version, you see).

You consult Zenmate as your reference but I use uBlock Origin as my reference

Actually, ContentBlockHelper is blocking but some are not the same as uBlock Origin. That's the problem!

As compared to uBlock Origin there are many which ContentBlockHelper is NOT blocking......and I need to block them to make both concurs? The question is if one blocks and the other don't then which is the correct action?

These blockers are not 100% blocking the same things and that result in the differences

 

[HarborFront]

I was trying out just now with ContentBlockHelper and Fix URL LInks Redirect on some movie sites but they perform poorly

Movie sites are notorious for redirects

 

[Prorootect]

I was trying out just now with ContentBlockHelper and Fix URL LInks Redirect on some movie sites but they perform poorly

Movie sites are notorious for redirects

I wrote in precedent post: :That's to you, to block all you consider bad."

You are the content master of ContentBlockHelper, ScriptSafe... You're the one who has to block what you think is bad.
Once blocked, it would be blocked forever, for all websites (and you can unlock at any time, no problem).

Could you copy/paste here your links of movie sites with redirects, for our testing, please?

 

[Tsiehshi]

uBlock Origin blocks more as it uses more filters by default as opposed to EasyList only. Just compare the filters pages from both.

 

[Prorootect]

uBlock Origin blocks more as it uses more filters by default as opposed to EasyList only. Just compare the filters pages from both.

Tsiehshi, I'm very familiar with ContentBlockHelper, have big confiance on it, it's easy, no brainer, that's why I prefer it.

I know uMatrix and uBlock Origin well, and I have a great respect for Gorhill, very good developer.
But these two extensions take too long time to take care of them with the different new websites I have browsing, so I have removed these two extensions, and use now my ContentBlockHelper and ScriptSafe - true combo-fix, which I consider are easy, must-have for all security conscious users.

And with its new 10.4.0 version, get rid of your all other adblock extensions (yes!) - cause new ContentBlockHelper block all pop-ups and ads etc redirections. - very cool.

If you don't know what to block and what to allow, you can take proud advice from judgments of ZenMate Web Firewall (no-brainer reference) - or uBlock Origin like our friend HarborFront.

PS.
"Script Blocker for Chrome" is good too, this one... not so strong, no-brainer too.

 

[HarborFront]

I wrote in precedent post: :That's to you, to block all you consider bad."

You are the content master of ContentBlockHelper, ScriptSafe... You're the one who has to block what you think is bad.
Once blocked, it would be blocked forever, for all websites (and you can unlock at any time, no problem).

Could you copy/paste here your links of movie sites with redirects, for our testing, please?

All you have to do is to search

"watch Justice League movie online free" or "watch Thor : Ragnarok 2017 movie online free" without quotes

and you can find the movie sites. They are all about the same sites hosting free online movies

Make sure you turn off all the other adblockers

 

[Tsiehshi]

All you have to do is to search

"watch Justice League movie online free" or "watch Thor : Ragnarok 2017 movie online free" without quotes

and you can find the movie sites. They are all about the same sites hosting free online movies

You got that right.

 

[Prorootect]

All you have to do is to search

"watch Justice League movie online free" or "watch Thor : Ragnarok 2017 movie online free" without quotes

and you can find the movie sites. They are all about the same sites hosting free online movies

Make sure you turn off all the other adblockers

Thanks, because I never watch the movies online free! haha

I'll give you the news after my lunch time, so watch this, rather..

 

[Prorootect]

I confirm, that ContentBlockHelper block third-party redirects - if you have pushed your "Auto Redirect" slider to the right.

Look on this test from Post #8 of this topic you're now: Block Iframes Redirections

"Third-Party redirection test" from ndossougbe.github.io: title

Result for this test, which redirect to xn--domain.com - I get this page (hopefully):
"Moved Permanently
The document has moved here."

- then I'm able to delete this tab with. I'm safe.

- so you don't need other redirect blockers anymore...

 

[Prorootect]

Have you noticed, that the developers of this coming from sky tool, manage your settings on the cloud?

Some of my settings have lightened version: Audio, Video, Ping, Popup window and Request on background sliders are set at the left on minimum, and Auto Redirect slider - on Block linked contents position.
And 3 latest UI Protection cases I see unnotched.
In my all Chromium browsers.
- BUT on Opera 36 my settings are not moved, all is good!

Hmm what to think about? Maybe developers are looking to find a solution for this wonderful tool to work on chromium forks?

You Tsiehshi, you have found the recipe, so maybe it's time you could help them, please?

PS.
- so the test above get about Guinness page ... BUT if I change the Auto Redirect slider to max to the right, then test is done as described on the above post - test blocked on Moved Permanently page.
I return to my precedent 'max on right' slider positions for Popup window and Auto Redirect.
I want to have them in this position, even if I have to change them every time after the developers' divine intervention.
Ok Ok, cloud intervention... or I have some virus maybe?......

What do you think about this divine intervention, and to help them, please