New Update JShelter - JavaScript Restrictor

[SpiderWeb]

JavaScript Restrictor​

JS Restrictor is an anti-malware Web browser extension to mitigate potential threats from JavaScript, including fingerprinting, tracking, and data collection. JShelter is a browser extension to give back control over what your browser is doing. A JavaScript-enabled web page can access much of the browser's functionality, with little control over this process available to the user: malicious websites can uniquely identify you through fingerprinting and use other tactics for tracking your activity. JShelter aims to improve the privacy and security of your web browsing.

Extension is available for Firefox, Chrome and Opera:

JShelter: Home

An anti-malware Web browser extension to mitigate potential threats from JavaScript, including fingerprinting, tracking, and data collection!

jshelter.org

 

[Kongo]

The UI is a little confusing. Which profile is activated when i chose "Default" and Profile 2 in the settings? Will it make profile two the default profile for all pages that I access?

General settings:


Domain specific settings:


I think when setting it to profile 2 in general settings for example, and setting it to default in domain specific settings, then profile 2 will be the default profile for every website you gonna visit. At least thats how I get it.

 

[ForgottenSeer 92963]

@SecureKongo

Could you post what the options are for Domain Specific settings.

What I can see is that it reduces the geo and time accuracy, provides a blank canvas fingerprint and pretends to act as a firewall for javascript and xmlhttprequest (and fetches and Ajax also hopefully). But there is no info on what sort of checks and balances this extension does when acting as a firewall.

 

[Kongo]

@SecureKongo

Could you post what the options are for Domain Specific settings.

What I can see is that it reduces the geo and time accuracy, provides a blank canvas fingerprint and pretends to act as a firewall for javascript and xmlhttprequest (and fetches and Ajax also hopefully). But there is no info on what sort of checks and balances this extension does when acting as a firewall.

Edited my post.

Here are more details about the protection layers: JShelter: Protection levels

I deleted it again as I just wanted to check out the settings. Not sure if it's trustworthy... I will take a deeper look at it later.

 

[oldschool]

But there is no info on what sort of checks and balances this extension does when acting as a firewall.

It's seems more for protection from fingerprinting than firewall for malware. Their home page is interesting but my initial impression upon installation is that the extension is the work of some students' science project.

Edit: drop-down UI is broken here on Edge. Issue #11
Edit #2: Removed extension since it appears to be useless junk.

 

[ForgottenSeer 92963]

Well, XMLHttprequest could be easily misused by downloading Javascript and executing it with Eval. So when they block these types of attacks, it would protect against obscufated third-party javascript execution.

You are right, it seems like a sponsored students project (but the nozzle and sozzle Micosoft javascript sanatizing studies started in the same way and led to major JIT-javascript compilation improvements)

 

[ForgottenSeer 92963]

Edited my post.

Here are more details about the protection layers: JShelter: Protection levels

I deleted it again as I just wanted to check out the settings. Not sure if it's trustworthy... I will take a deeper look at it later.

Thanks,

It seems trustworthy (considering the sponsor). I am now on travel, without private laptop, will certainly check this out when back.

Thanks for sharing.

 

[ForgottenSeer 69673]

It's seems more for protection from fingerprinting than firewall for malware. Their home page is interesting but my initial impression upon installation is that the extension is the work of some students' science project.

Edit: drop-down UI is broken here on Edge. Issue #11
Edit #2: Removed extension since it appears to be useless junk.

There is 3 installer files. One for Firefox, one for Chrome and one for Opera. Which one did you install for Edge?

 

[oldschool]

Which one did you install for Edge?

Chrome.

 

[SpiderWeb]

I don't think it's effective and I removed it from Firefox because it's slowing down page loads significantly. I honestly don't see it doing anything that uBO isn't already doing.

 

[ForgottenSeer 69673]

Does anyone know what this setting in Edge does?

 

[The_King]

The full list of protections of the levels is found on the project's GitHub page. Network Boundary Shield is enabled by default. It prevents web pages from using the browser "as a proxy between local network and the public Internet".

The protection encapsulates the WebRequest API, so it captures all outgoing requests including all elements created by JavaScript.

Closing words​

JavaScript Restrictor works in most modern web browsers. It improves user privacy by limiting access to certain browser APIs, which may be abused by sites for tracking and other forms of attacks. Check out the project's website to find out more about it.

JavaScript Restrictor: improve privacy by limiting web browser APIs - gHacks Tech News

JavaScript Restrictor is an open s0urce cross-browser extension designed to improved user privacy by limiting access to APIs of web browsers that websites may use when running JavaScript.

www.ghacks.net

 

[eonline]

JavaScript Restrictor: improve privacy by limiting web browser APIs - gHacks Tech News

JavaScript Restrictor is an open s0urce cross-browser extension designed to improved user privacy by limiting access to APIs of web browsers that websites may use when running JavaScript.

www.ghacks.net

and fills your browser with pop-ups, he forgot to mention that it is very annoying.

 

[Kongo]

and fills your browser with pop-ups, he forgot to mention that it is very annoying.

only if you set protection level to 3 (max)
At least for me.

 

[CyberDevil]

Am I the only one with the problem with the popup from the extensions tray? The window is the same narrow in both brave and vivaldi, it is impossible to use it.

 

[The_King]

only if you set protection level to 3 (max)
At least for me.

Yes, only at level 3 I get pop ups.

@CyberDevil no issues in FF.

Edit I have the same issue you have in MS Edge.

Seems to be doing something.

 

[Kongo]

Seems to be doing something.

Set to level 2 or 3?

 

[The_King]

Set to level 2 or 3?

Level 1 at the present moment with network boundary shield enabled.

 

[Kongo]

Level 1 at the present moment with network boundary shield enabled.

What did you do to trigger those blocks?

 

[The_King]

What did you do to trigger those blocks?

Not much just opened amazon.in was hit with those notifications.
It happen again on theverge website and blocked some CDN server.