Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Browsers
Web Extensions
uBlock, I exfiltrate: exploiting ad blockers with CSS
Message
<blockquote data-quote="ForgottenSeer 92963" data-source="post: 967499"><p>[USER=91306]@wat0114[/USER]</p><p></p><p>Thanks and in addition to Jan Willy's tip, you can stil enable cosmetic filtering for websites you visit a lot.</p><p></p><p>I also have added two rules in My Filters (which are good security practice rules to add anyway), note that the *## does not triggers uBlock's DOM inspector so this rule is processed even when you have enabled the "ignore generic cosmetic filters" option Filter lists.</p><p>[CODE]</p><p>! Remove any Content Security Policies set by filters on all websites (by setting a CSP exception with no values)</p><p>@@||*$csp</p><p></p><p>! Block the use of the much abused EVAL javascript command bij using uBO's no-eval scriptlet on all websites</p><p>*##+js(noeval)</p><p>[/CODE]</p><p></p><p>I have read a little more about it and my take is that when you stick to ublock's own filterlists in combination with AdGuard's filterlists, you essentially use only closed group maintainer lists, with near zero chance of misuse of abuse.</p></blockquote><p></p>
[QUOTE="ForgottenSeer 92963, post: 967499"] [USER=91306]@wat0114[/USER] Thanks and in addition to Jan Willy's tip, you can stil enable cosmetic filtering for websites you visit a lot. I also have added two rules in My Filters (which are good security practice rules to add anyway), note that the *## does not triggers uBlock's DOM inspector so this rule is processed even when you have enabled the "ignore generic cosmetic filters" option Filter lists. [CODE] ! Remove any Content Security Policies set by filters on all websites (by setting a CSP exception with no values) @@||*$csp ! Block the use of the much abused EVAL javascript command bij using uBO's no-eval scriptlet on all websites *##+js(noeval) [/CODE] I have read a little more about it and my take is that when you stick to ublock's own filterlists in combination with AdGuard's filterlists, you essentially use only closed group maintainer lists, with near zero chance of misuse of abuse. [/QUOTE]
Insert quotes…
Verification
Post reply
Top