Block Iframes, JavaScript, Redirections

Discussion in 'Browsers and Extensions' started by Prorootect, Nov 9, 2017.

  1. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #1 Prorootect, Nov 9, 2017
    Last edited by a moderator: Dec 2, 2017
    Extensions to 'Block Iframes Redirections' thread for you.

    On Chrome Web Store, you have some remarkable extensions to block iframes, redirections!

    'Page Blocker' offered by Chermaine Cheang, Version: 1.0.2 Updated: August 25, 2017 Size: 47.18KiB
    - blocks New Tab page or new window - so no more redirection by New Tab page or new window:

    Page Blocker

    To find this extension on web store, type in search window: pageblocker the words together.
    - When this extension is turned on, it will block the opening of new tabs or new windows, especially those that are not intended by the user, and those that led to unwanted advertisements - and malicious redirections.
    Click on the icon to turn ON or OFF, icon are green - or red, easy!

    ContentBlockHelper offered by far.whochan.com japanese developers, Version: 10.2.0 Updated: May 5, 2016 Size: 449KiB

    ContentBlockHelper

    In extension Preferences tab, make sure: sub-frames on block everything, and Auto-redirect on block linked contents.
    -My most important extension, including ScriptSafe...

    ScriptSafe offered by andryou.com andryou - nerdy insight into life website, Version: 1.0.9.1 Updated: January 26, 2017 Size: 723KiB

    ScriptSafe

    In General Settings, notch (among other things) SCRIPT, IFRAME, FRAME, Data URLs and under Behavior settings Respect Same-Domain make Disabled - here we are to block domain scripts...
    "-actually speeds up browsing because it blocks a lot of unwanted content from being downloaded
    -remove <SCRIPT>, <OBJECT>, <EMBED>, <IFRAME>, <FRAME>, <APPLET>, <AUDIO>, <VIDEO>, <NOSCRIPT>, and <IMG> elements, as well as webbugs".

    Policy Control - JavaScript and Flash blocker offered
    by rynu.smith - Version: 0.3.1 Updated: November 5, 2017 Size: 18.61KiB

    Policy Control - JavaScript and Flash blocker

    Tick: 'Policy Control is enabled' case, then you have the 'Sub Document (iframes and frames)' block possibility (among other things)...
    "Block third-party or all resources of style, script, image, font, xmlhttprequest types
    This is an alternative to "NoScript Security Suite" extension to provide filtering rules for different types of resources"...

    Fix Url Links Redirect offered by tech4computer - Version: 0.171 Updated: April 9, 2014 Size: 34.74KiB

    Fix Url Links Redirect

    - removes the URL link redirect and takes you direct to destination. Remove the middle man and tracking. Second feature is remove link Referrer.

    1. Work on All redirect links (except ones in ‘disable’ list) - notch this case!
    2. OR work Only on specific links/sites that you added to its ‘enable’ list.
    User comment: 'Still the only true redirect remover/cleaner for Chrome (and working great in v61, so if it's not working for you there must be some extension conflict or other problem).
    You know it's working when the icon appears in color after a page you navigate to is the result of a fixing. In other words, this redirect remover fixes a link on the fly while you navigate to the link (instead of scanning and fixing the whole page first). A+'

    'Remove Google Redirect in Google Results' offered by hq6 - Version: 0.0.1 Updated: January 2, 2016 Size: 4.67KiB

    Remove Google Redirect in Google Results

    'Disables the JS function that adds redirect to Google Search Results.
    When we perform a Google search for someone else and find something useful, we often want to right-click the link directly in the search results and copy the link. Unfortunately, the link we will actually get is a huge URL with a Google prefix, rather than the original URL.
    Google uses this for redirect for tracking, which may be reasonable, but makes it very inconvenient to copy out links.
    This add-on disables the Javascript function that Google uses to create the redirect link, leaving the user with fresh, crisp links.
    Note that the implication of this technique is that it will only work on Google sites where the redirect link is generated client-side.'

    User comment: 'Thank you for the great work. I love it. It might be even better if it could remove the redirection in Google Images search.'

    Undirect - offered by xwipeoutx - Version: 1.3.0 Updated: June 14, 2017 Size: 15.97KiB
    'Removes this tracking and redirection from google search results'.

    Undirect

    User comment: 'Works - both in when displays the search results and when you open then links !'

    ----------------------------

    - among other extensions that work against these issues..
     
    AtlBo, given, Sunshine-boy and 9 others like this.
  2. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #2 Prorootect, Nov 9, 2017
    Last edited: Nov 9, 2017
    "- among other extensions that work against these issues.." - ALL these extensions I've tested, all are good!

    - like ScriptBlock, Script Blocker For Chrome, Remove Google Redirection ...

    'Remove Google Redirection' - offered by kodango.com - Version: 1.1.0 Updated: July 9, 2014 Size: 15.8KiB

    Remove Google Redirection

    Prohibit click-tracking, and prevent url redirection when clicks on the result links in Google search page.

    -------------
     
    given, Umbra, XhenEd and 3 others like this.
  3. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #3 Prorootect, Nov 10, 2017
    Last edited: Nov 10, 2017
    ContentBlockHelper extension blocks all redirections!

    - if, in the General - Preferences page, you push the Auto Redirect slider to the right, on the position: Block linked contents.

    Link on Chrome Web Store: ContentBlockHelper

    ContentBlockHelper offered by far.whochan.com Japanese developers, Version: 10.2.0 Updated: May 5, 2016 Size: 449KiB

    Must have extension, if you have survival instinct.

    TEST redirection page on outgoing.prod.mozaws.net: Redirecting to http://www.sict-ng.com/

    -very safe test, NO such host on sict-ng.com, so NOT installing third-party add-ons:)
     
    given, Umbra, XhenEd and 1 other person like this.
  4. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #4 Prorootect, Nov 11, 2017
    Last edited by a moderator: Dec 2, 2017
    Firefox 'must have' add-ons to block iframes, redirections:

    'NoScript Security Suite' by Giorgio Maone : NoScript Security Suite – Add-ons for Firefox
    The best security you can get in a web browser!
    Allow active content to run only from sites you trust, and protect yourself against XSS and Clickjacking attacks.
    It allows JavaScript, Java and other executable content to run only from trusted domains of your choice, e.g. your home-banking site, guarding your "trust boundaries" against cross-site scripting attacks (XSS), cross-zone DNS rebinding / CSRF attacks (router hacking), and Clickjacking attempts, thanks to its unique ClearClick technology. It also implements the DoNotTrack tracking opt-out proposal by default...
    (mmm too complicated for me... I don't use it for now, but maybe would try again soon... )

    'RequestPolicy Continued' by Martin Kimmerle : RequestPolicy Continued – Add-ons for Firefox
    Be in control of which cross-site requests are allowed. Improve the privacy of your browsing by not letting other sites know your browsing habits. Secure yourself from Cross-Site Request Forgery (CSRF) and other attacks.

    Policeman by futpib : Policeman – Add-ons for Firefox
    Policeman gives you precise control over what web requests are allowed. Create rules based on domain name and type of resource being requested. It can also be used to improve privacy or block cross-site scripts.

    ... and then to block redirects, big choice:

    'Redirect Control' by hjgwmvya : Redirect Control – Add-ons for Firefox
    This add-on enables the user to allow or deny redirects from web pages.

    'Skip Redirect' by Sebastian Blask : Skip Redirect – Add-ons for Firefox
    Some web pages use intermediary pages before redirecting to a final page. This add-on tries to extract the final url from the intermediary url and goes there straight away if successful.

    'Redirect Bypasser' by Moises Lima : Redirect Bypasser – Add-ons for Firefox
    Avoid redirects and has direct access to the sites you want to visit.

    'Redirect Remover' by BetterBrowser : Redirect Remover – Add-ons for Firefox
    Removes Redirects like http://redirectremover.mozdev.org/?www.mozilla.org from Links and Images.

    ... and some other...then to block JavaScripts (On-Off switch):

    QuickJS by eiji.anonremail : QuickJS – Add-ons for Firefox
    Enable/Disable JavaScript with Toolbar button.
    This is a lightweight alternative to NoScript.
    No configuration, just a button for the global Java Script permission (also found under Options > Content > Enable Java Script).
    It will affect the parsing for all tabs and all domains.
    - I use it now.

    If someone has some add-ons to add, go ahead without a hindrance...

    PS. Redirect TEST - new example: Style Chooser REDIRECT to 'MalwareTips 6102' style: Browsers and Extensions
     
    given, HarborFront, XhenEd and 2 others like this.
  5. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #5 Prorootect, Nov 13, 2017
    Last edited: Nov 13, 2017
    Redirect TEST - another example with 'xfToken' in the address: Style Chooser REDIRECT to 'MalwareTips 6102' style: Browsers and Extensions

    - what it's this xfToken, I don't know.
     
    given, XhenEd, Umbra and 1 other person like this.
  6. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #6 Prorootect, Nov 13, 2017
    Last edited: Nov 13, 2017
    given, harlan4096 and XhenEd like this.
  7. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    Little 'redirect' test 'to know how your favorite browser behaves, with your beloved extensions...):

    'i woult rather use firefox': Chrome Web Browser

    - and I have done: 'i would rather use malwaretips.com': Chrome Web Browser

    - have you 'download Chrome' proposition (= NO redirect, so OK.), or rather your preferred destination(= redirect..), please?
     
    given likes this.
  8. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #8 Prorootect, Nov 28, 2017
    Last edited: Nov 28, 2017
    Here you have "Third-Party redirection test" from ndossougbe.github.io: title

    Page NOT redirected ("Success! The navigation was blocked"):

    "Third-Party redirection test.

    The browser should block the redirections and prompt to allow bypassing the intervention

    That requires the redirection to be targeting a third party origin. Clone this repository and host it somewhere for the demo to work

    TODO: Make it with a python/node script or android app that would spawn servers on different ports

    Success! The navigation was blocked _______ Success! The navigation was blocked "


    My tests:
    SeaMonkey, K-Meleon 75 Pro, (with all anti-scripts on Allow) block this redirection, so you see the above page,
    Slimjet Version 10.0.13.0 (based on Chromium 50.0.2661.75), Iron Version 49.0.2600.0 (Chromium forks) (with all anti-scripts on Block) block this redirection, but with anti-scripts on Allow - don't block... redirect to page about Guinness,
    CENT browser Version 1.8.9.28 portable (Chromium fork) (with all anti-scripts on Block) block this redirection, but with anti-scripts on Allow - don't block... redirect to xn--domain.net/ ... ah uh
    Opera 36 (with all anti-scripts on Block) block this redirection, but with anti-scripts on Allow - don't block...redir. to Guinness p.
    New Moon (with RequestPolicy Continued on Enable blocking) block, but with R.P. C. Disable blocking - don't block...Guinness p.
    Firefox 52.5.0, Basilick (= Nightly) (with QuickJS on Block) block this redirection... but with QuickJS on Allow - don't block... redirects to ASCII compatible xn--domain.com ...

    - so at your tests, please...

    PS. Look too on topic:
    Chrome will soon prevent irritating, unwanted website redirects in v64 & 65 : Google - Chrome will soon prevent irritating, unwanted website redirects in v64 & 65
     
    given and harlan4096 like this.
  9. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,304
    5,767
    Far East
    #9 HarborFront, Nov 28, 2017
    Last edited: Nov 29, 2017
    I have a question on ContentBlockHelper

    Examples.

    When I visited Gizmodo.com, uBlock Origin shows amazon-adsystem.com is blocked and ContentBlockHelper also shows the same which means they concur.

    However, chartbeat.com, googletagservices.com etc are blocked by uBlock Origin (by default) but NOT block by ContentBlockHelper. So which is correct?

    Even in MT forums, google-analytics.com is blocked by uBlock Origin but NOT block by ContentBlockHelper........:rolleyes:

    Thanks
     
    given and Prorootect like this.
  10. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #10 Prorootect, Nov 29, 2017
    Last edited: Nov 29, 2017
    Hi HarborFront,

    That's to you, to block all you consider bad.
    - to block your bad link, click on green icon in ContentBlockHelper window to make it red. You're able to unblock in any time with same manner...
    - the first time you block, this will be blocked automatically forever, until then if you unblock, that's all the philosophy!
    It's learning mode always, for you and ContentBlockHelper, but he'll "ask" you to do this less and less over time.

    Eg. on MalwareTips, I block google-analytics.com, gstatic.com (it's my taste for now ..), and allow: malwaretips.com, gravatar.com, googleapis.com. Total it has 46 items, links approx. - look on the icon.

    On Gismodo.com home page, ContentBlockHelper has 60 items:
    - dont Blocked by me (if you're not sure, consult "ZenMate Web Firewall" first, what to block!):
    google-analytics.com
    googletagservices.com
    indewww.com
    ads.*
    adsrvr.org
    amazon-adsystem.com
    skimresources.com
    imrworldwide.com
    chartbeat.com
    quantserve.com
    facebook.net
    krxd.net
    scorecardresearch.com
    samba.tv
    pubads.*
    gstatic.com (my choice for now...)
    roosterfirework.com

    - yeah forever, for every website, thanks to ContentBlockHelper!

    .. and it works with ScriptSafe together, in each of my chromium forks (Opera too)... (but now have problem with 10.4 version, you see).


    EDIT for my precedent post:
    My Cent browser version 1.8.9.28 it's Chromium 49.0.2623.102
     
    given likes this.
  11. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,304
    5,767
    Far East
    #11 HarborFront, Nov 29, 2017
    Last edited: Nov 29, 2017
    You consult Zenmate as your reference but I use uBlock Origin as my reference

    Actually, ContentBlockHelper is blocking but some are not the same as uBlock Origin. That's the problem!

    As compared to uBlock Origin there are many which ContentBlockHelper is NOT blocking......and I need to block them to make both concurs? The question is if one blocks and the other don't then which is the correct action?

    These blockers are not 100% blocking the same things and that result in the differences
     
    given and Prorootect like this.
  12. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,304
    5,767
    Far East
    I was trying out just now with ContentBlockHelper and Fix URL LInks Redirect on some movie sites but they perform poorly

    Movie sites are notorious for redirects

    :rolleyes:
     
    given and Prorootect like this.
  13. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #13 Prorootect, Nov 30, 2017
    Last edited: Nov 30, 2017
    I wrote in precedent post: :That's to you, to block all you consider bad."

    You are the content master of ContentBlockHelper, ScriptSafe... You're the one who has to block what you think is bad.
    Once blocked, it would be blocked forever, for all websites (and you can unlock at any time, no problem).

    Could you copy/paste here your links of movie sites with redirects, for our testing, please?
     
    given likes this.
  14. Tsiehshi

    Tsiehshi Level 1

    Nov 11, 2017
    43
    118
    Somewhere
    #14 Tsiehshi, Nov 30, 2017
    Last edited: Nov 30, 2017
    uBlock Origin blocks more as it uses more filters by default as opposed to EasyList only. Just compare the filters pages from both.
     
    given and Prorootect like this.
  15. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #15 Prorootect, Nov 30, 2017
    Last edited: Nov 30, 2017
    Tsiehshi, I'm very familiar with ContentBlockHelper, have big confiance on it, it's easy, no brainer, that's why I prefer it.

    I know uMatrix and uBlock Origin well, and I have a great respect for Gorhill, very good developer.
    But these two extensions take too long time to take care of them with the different new websites I have browsing, so I have removed these two extensions, and use now my ContentBlockHelper and ScriptSafe - true combo-fix, which I consider are easy, must-have for all security conscious users.

    And with its new 10.4.0 version, get rid of your all other adblock extensions (yes!) - cause new ContentBlockHelper block all pop-ups and ads etc redirections. - very cool.

    If you don't know what to block and what to allow, you can take proud advice from judgments of ZenMate Web Firewall (no-brainer reference) - or uBlock Origin like our friend HarborFront.

    PS.
    "Script Blocker for Chrome" is good too, this one... not so strong, no-brainer too.
     
    given, harlan4096 and Tsiehshi like this.
  16. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,304
    5,767
    Far East
    All you have to do is to search

    "watch Justice League movie online free" or "watch Thor : Ragnarok 2017 movie online free" without quotes

    and you can find the movie sites. They are all about the same sites hosting free online movies

    Make sure you turn off all the other adblockers
     
    given, harlan4096, upnorth and 2 others like this.
  17. Tsiehshi

    Tsiehshi Level 1

    Nov 11, 2017
    43
    118
    Somewhere
    You got that right. :ROFLMAO:
     
    given, HarborFront and Prorootect like this.
  18. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #18 Prorootect, Nov 30, 2017
    Last edited: Nov 30, 2017
    Thanks, because I never watch the movies online free! haha

    I'll give you the news after my lunch time, so watch this, rather..:cool:
     
    given and HarborFront like this.
  19. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #19 Prorootect, Nov 30, 2017
    Last edited: Nov 30, 2017
    I confirm, that ContentBlockHelper block third-party redirects - if you have pushed your "Auto Redirect" slider to the right.

    Look on this test from Post #8 of this topic you're now: Block Iframes Redirections

    "Third-Party redirection test"
    from ndossougbe.github.io: title

    Result for this test, which redirect to xn--domain.com - I get this page (hopefully):
    "Moved Permanently
    The document has moved here."

    - then I'm able to delete this tab with. I'm safe.

    - so you don't need other redirect blockers anymore...
     
    given and Tsiehshi like this.
  20. Prorootect

    Prorootect Level 46

    Nov 5, 2011
    3,577
    3,842
    0wN3D by my cat!
    #20 Prorootect, Nov 30, 2017
    Last edited: Nov 30, 2017
    Have you noticed, that the developers of this coming from sky tool, manage your settings on the cloud?

    Some of my settings have lightened version: Audio, Video, Ping, Popup window and Request on background sliders are set at the left on minimum, and Auto Redirect slider - on Block linked contents position.
    And 3 latest UI Protection cases I see unnotched.
    In my all Chromium browsers.
    - BUT on Opera 36 my settings are not moved, all is good!

    Hmm what to think about? Maybe developers are looking to find a solution for this wonderful tool to work on chromium forks?

    You Tsiehshi, you have found the recipe, so maybe it's time you could help them, please?

    PS.
    - so the test above get about Guinness page ... BUT if I change the Auto Redirect slider to max to the right, then test is done as described on the above post - test blocked on Moved Permanently page.
    I return to my precedent 'max on right' slider positions for Popup window and Auto Redirect.
    I want to have them in this position, even if I have to change them every time after the developers' divine intervention.
    Ok Ok, cloud intervention... or I have some virus maybe?......

    What do you think about this divine intervention, and to help them, please
     
    given likes this.
Loading...
Similar Threads Forum Date
Poll behavior blocker to go with comodo firewall General Security Discussions Today at 8:42 AM
New Chrome and Firefox extensions block their removal to hijack browsers Browsers and Extensions Yesterday at 4:16 PM
Compare Protection DNS Threat-blocking comparison Compare Apps Tuesday at 3:47 AM