@Jan Willy
Never-Consent isn't Ghostery's own detection engine — it wraps an open-source library originally created by Ghostery/Cliqz and now maintained by DuckDuckGo. But here is the problem, to make it work under Mv3 restrictions it uses an EVAL()-bridge to inject the script into every page into MAIN-WORLD (normally scripts run in ISOLATED-WORLD). When the open source DDG code which now causes to click on REJECT turns bad, you are running it with same rights as the javascript on that page
Edit 1: this former left handed 67 year old forced to write right handed has a different look at solving problems. I think I might found a way to use DDG consent mechanisme in a safe way, stay tuned
Edit 2: yes found away to implement without using EVAL bridge
@Jan Willy are you willing to test it after I tested it? (can you send me a PM, so we iron out this in private)?
Never-Consent isn't Ghostery's own detection engine — it wraps an open-source library originally created by Ghostery/Cliqz and now maintained by DuckDuckGo. But here is the problem, to make it work under Mv3 restrictions it uses an EVAL()-bridge to inject the script into every page into MAIN-WORLD (normally scripts run in ISOLATED-WORLD). When the open source DDG code which now causes to click on REJECT turns bad, you are running it with same rights as the javascript on that page
Edit 1: this former left handed 67 year old forced to write right handed has a different look at solving problems. I think I might found a way to use DDG consent mechanisme in a safe way, stay tuned
Edit 2: yes found away to implement without using EVAL bridge
@Jan Willy are you willing to test it after I tested it? (can you send me a PM, so we iron out this in private)?
Last edited:
to escape from the RESTRICTED WORLD to the MAIN WORLD. Currently I am not willing to use these practices, because using AdGuards innovative approach with large chunks it can be done within the RESTRICTED WORLD also. Never say never (uBO developer also refused to use scriptlets requiring trust but after AdGuard offered to trust imported filter list, the My Filters in UBO Mv2 now also has an option to allow scriptlets requiring trust, same with uBO-lite which should be a permission less Adblocker only using DNR, but now also supports cosmetic filters, procedural filters and scriptlets 