disguises third-party network requests so they appear to be first-party network requests

Discussion in 'Feature Requests (Browser Extensions)' started by David3432432424, Aug 11, 2017.

  1. David3432432424

    David3432432424 Member

    Joined:
    May 25, 2017
    Messages:
    246
    My apologies if i have posted this in the wrong location, but i was not too sure where to post.

    Ok the URL below describes in more detail but in a nut shell this company and i bet others do the same as they disguise third-party network requests so they appear to be first-party network requests. This allows ad services used by website publishers to place cookies and serve ads that would otherwise by blocked by the browser's same-origin security model.

    My question is and i guess this is for all adguard products if someone does this will your adguard blocker block the content?

    https://www.theregister.co.uk/2017/08/11/ad_blocker_bypass_code/

    I am more concerned about malware flingers abusing this more than adverts bypassing adguard, but just wondered if you had anything in place to counteract or detect/block this?

    If not it might explain how some adverts get around your fliters even though the adverts should be blocked.

    Thanks
     
  2. David3432432424

    David3432432424 Member

    Joined:
    May 25, 2017
    Messages:
    246
    Raymond Hill who maintains Ublock Origin updated his uBO-Extra add-on software to prevent Instart Logic's code from bypassing uBlock Origin, so it looks like this could become a bigger issue, if we could knock it on the head early it could stop a bunch of adverts/malware getting through which should not get through.

    https://github.com/gorhill/uBO-Extra

    This is Raymonds notes on github about Instant Logics technology, please note the part in red which summarizes this perfectly.


    On this link is a list of sites which use Instant Logics technology:

    https://github.com/gorhill/uBO-Extra/wiki/Sites-on-which-uBO-Extra-is-useful
     
  3. David3432432424

    David3432432424 Member

    Joined:
    May 25, 2017
    Messages:
    246
  4. avatar

    avatar Administrator Staff Member Administrator

    Joined:
    Oct 26, 2010
    Messages:
    12,795
    There is no problem with blocking InstartLogic in AG for Windows/Mac/Android as they can modify the page content and simply get rid of or modify the IL code.

    What for the browser extension, it is more complicated but still possible.
     
  5. Boo Berry

    Boo Berry Moderator + Beta Tester Moderator

    Joined:
    May 30, 2012
    Messages:
    3,003
    Would love to see this.