Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Browsers
Web Extensions
[Updated 29/12/2018] Browser extension comparison: Malwares and Phishings
Message
<blockquote data-quote="Windows_Security" data-source="post: 789135" data-attributes="member: 50782"><p>In 2017 when I was trying to get the grips on using uBlock 0rigin sniplets in My Filters (trying to block Eval and some other stuff in scripts) I had found a few websites on MDL which were breached. I had also installed a few other extensions (e.g. to see all outbound connections) and Netcraft extension. On 2 out of 3 websites which I used for testing Netcraft warned and Google XSS auditor remained silent.</p><p></p><p>When I could not get it working I decided to use block javascript for all HTTP://* (still allowing HTTPS) and manually whitelist some high level domains I might surf to ([*.]NL, [*.]BE, [*.]EU, [*]COM, [*.]NET, [*.]ORG, [*.]UK, etc.). I kept Netcraft for some time until its silence made me uninstall it (possibly redundant due to reduced attack surface for scripts).</p></blockquote><p></p>
[QUOTE="Windows_Security, post: 789135, member: 50782"] In 2017 when I was trying to get the grips on using uBlock 0rigin sniplets in My Filters (trying to block Eval and some other stuff in scripts) I had found a few websites on MDL which were breached. I had also installed a few other extensions (e.g. to see all outbound connections) and Netcraft extension. On 2 out of 3 websites which I used for testing Netcraft warned and Google XSS auditor remained silent. When I could not get it working I decided to use block javascript for all HTTP://* (still allowing HTTPS) and manually whitelist some high level domains I might surf to ([*.]NL, [*.]BE, [*.]EU, [*]COM, [*.]NET, [*.]ORG, [*.]UK, etc.). I kept Netcraft for some time until its silence made me uninstall it (possibly redundant due to reduced attack surface for scripts). [/QUOTE]
Insert quotes…
Verification
Post reply
Top
