Reply to thread

Message

<blockquote data-quote="Lenny_Fox" data-source="post: 951098" data-attributes="member: 82776">IMPORTANT UPDATEI was reading on misuse of website data connections (e.g. third-party&nbsp; XMLHttprequest, Fetch, Websockets, etc) or hidden code in some data formats (remember the exploit which used the meta data of an image) and came across this post from Gorhill. Read his response &quot;The only way to prevent this is to block all first-party scripts or third-party network requests&quot;[ATTACH]259675[/ATTACH]Since blocking first-party scripts breaks all websites it is not an option for daily use, therefor it is better to change Kees1958 very easy medium mode setup from only blocking 3p-scripts and 3p-frames to blocking (all) 3p.This might cause some websites to break (third-party CSS and images are also blocked now), but it prevents pulling in sneaky third-party code from top level domains you normally don&#039;t visit.Suggested change, see picture below[ATTACH]259676[/ATTACH]</blockquote>

[QUOTE="Lenny_Fox, post: 951098, member: 82776"] IMPORTANT UPDATE I was reading on misuse of website data connections (e.g. third-party XMLHttprequest, Fetch, Websockets, etc) or hidden code in some data formats (remember the exploit which used the meta data of an image) and came across this post from Gorhill. Read his response "The only way to prevent this is to block all first-party scripts or third-party network requests" [ATTACH alt="1626341361100.png"]259675[/ATTACH] Since blocking first-party scripts breaks all websites it is not an option for daily use, therefor it is better to change Kees1958 very easy medium mode setup from only blocking 3p-scripts and 3p-frames to blocking (all) 3p. This might cause some websites to break (third-party CSS and images are also blocked now), but it prevents pulling in sneaky third-party code from top level domains you normally don't visit. Suggested change, see picture below [ATTACH alt="1626341556100.png"]259676[/ATTACH] [/QUOTE]

Verification