{"id":104458,"date":"2022-06-21T03:36:39","date_gmt":"2022-06-21T01:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovan-instrumentarij-dlya-opredeleniya-dopolnenij-ustanovlennyh-v-chrome"},"modified":"2022-06-21T03:36:39","modified_gmt":"2022-06-21T01:36:39","slug":"opublikovan-instrumentarij-dlya-opredeleniya-dopolnenij-ustanovlennyh-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/opublikovan-instrumentarij-dlya-opredeleniya-dopolnenij-ustanovlennyh-v-chrome","title":{"rendered":"Byl zve\u0159ejn\u011bn n\u00e1stroj pro ur\u010den\u00ed dopl\u0148k\u016f nainstalovan\u00fdch v Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byl zve\u0159ejn\u011bn n\u00e1stroj s implementac\u00ed metody pro ur\u010den\u00ed roz\u0161\u00ed\u0159en\u00ed nainstalovan\u00fdch v prohl\u00ed\u017ee\u010di Chrome. Z\u00edskan\u00fd seznam roz\u0161\u00ed\u0159en\u00ed m\u016f\u017ee b\u00fdt pou\u017eit pro zv\u00fd\u0161en\u00ed p\u0159esnosti pasivn\u00ed identifikace konkr\u00e9tn\u00ed instance prohl\u00ed\u017ee\u010de, v kombinaci s jin\u00fdmi nep\u0159\u00edm\u00fdmi znaky, jako je rozli\u0161en\u00ed obrazovky, vlastnosti WebGL, seznamy nainstalovan\u00fdch plugin\u016f a p\u00edsem. Navrhovan\u00e1 implementace kontroluje v\u00edce ne\u017e 1000 roz\u0161\u00ed\u0159en\u00ed. Pro ov\u011b\u0159en\u00ed va\u0161eho syst\u00e9mu byla navr\u017eena online demonstrace. <\/p>\n

Ur\u010den\u00ed roz\u0161\u00ed\u0159en\u00ed se prov\u00e1d\u00ed anal\u00fdzou zdroj\u016f poskytovan\u00fdch roz\u0161\u00ed\u0159en\u00edmi, kter\u00e9 jsou dostupn\u00e9 pro extern\u00ed po\u017eadavky. Obvykle roz\u0161\u00ed\u0159en\u00ed zahrnuj\u00ed r\u016fzn\u00e9 p\u0159idru\u017een\u00e9 soubory, jako jsou obr\u00e1zky, kter\u00e9 jsou v manifestu roz\u0161\u00ed\u0159en\u00ed definov\u00e1ny vlastnost\u00ed web_accessible_resources. V prvn\u00ed verzi manifestu nebyl p\u0159\u00edstup k zdroj\u016fm omezen a jak\u00e1koli str\u00e1nka mohla na\u010d\u00edst poskytovan\u00e9 zdroje. Ve druh\u00e9 verzi manifestu byl p\u0159\u00edstup k podobn\u00fdm zdroj\u016fm ve v\u00fdchoz\u00edm nastaven\u00ed povolen pouze pro samotn\u00e9 roz\u0161\u00ed\u0159en\u00ed. Ve t\u0159et\u00ed verzi manifestu byla poskytnuta mo\u017enost ur\u010dit, kter\u00e9 zdroje mohou b\u00fdt p\u0159\u00edstupn\u00e9 jak\u00fdm roz\u0161\u00ed\u0159en\u00edm, dom\u00e9n\u00e1m a str\u00e1nk\u00e1m. <\/p>\n

Webov\u00e9 str\u00e1nky mohou \u017e\u00e1d\u00e1t o dod\u00e1van\u00e9 zdroje prost\u0159ednictv\u00edm metody fetch (nap\u0159\u00edklad «fetch(‘chrome-extension:\/\/okb….nd5\/test.png’)»), p\u0159i\u010dem\u017e vr\u00e1cen\u00ed hodnoty «false» v\u011bt\u0161inou znamen\u00e1, \u017ee roz\u0161\u00ed\u0159en\u00ed nen\u00ed nainstalov\u00e1no. Aby se zablokovalo zji\u0161t\u011bn\u00ed p\u0159\u00edtomnosti roz\u0161\u00ed\u0159en\u00ed na z\u00e1klad\u011b dostupnosti zdroj\u016f, n\u011bkter\u00e1 roz\u0161\u00ed\u0159en\u00ed generuj\u00ed ov\u011b\u0159ovac\u00ed token pot\u0159ebn\u00fd pro p\u0159\u00edstup k zdroji. Vol\u00e1n\u00ed fetch bez specifikace tokenu v\u017edy sel\u017ee. <\/p>\n

Jak se uk\u00e1zalo, ochranu p\u0159\u00edstupu k zdroj\u016fm roz\u0161\u00ed\u0159en\u00ed lze obej\u00edt hodnocen\u00edm doby trv\u00e1n\u00ed operace. I kdy\u017e fetch p\u0159i po\u017eadavku bez tokenu v\u017edy vrac\u00ed chybu, doba prov\u00e1d\u011bn\u00ed operace se li\u0161\u00ed v z\u00e1vislosti na p\u0159\u00edtomnosti nebo nep\u0159\u00edtomnosti roz\u0161\u00ed\u0159en\u00ed \u2014 pokud je roz\u0161\u00ed\u0159en\u00ed p\u0159\u00edtomno, vy\u017eaduje \u017e\u00e1dost v\u00edce \u010dasu ne\u017e v p\u0159\u00edpad\u011b, \u017ee roz\u0161\u00ed\u0159en\u00ed nen\u00ed nainstalov\u00e1no. Hodnocen\u00edm doby odezvy lze relativn\u011b p\u0159esn\u011b ur\u010dit p\u0159\u00edtomnost roz\u0161\u00ed\u0159en\u00ed. <\/p>\n

N\u011bkter\u00e1 roz\u0161\u00ed\u0159en\u00ed, kter\u00e1 neobsahuj\u00ed extern\u011b dostupn\u00e9 zdroje, lze ur\u010dit podle dal\u0161\u00edch vlastnost\u00ed. Nap\u0159\u00edklad roz\u0161\u00ed\u0159en\u00ed MetaMask lze identifikovat hodnocen\u00edm vlastnosti window.ethereum (pokud roz\u0161\u00ed\u0159en\u00ed nen\u00ed nainstalov\u00e1no, «typeof window.ethereum» vr\u00e1t\u00ed hodnotu «undefined»).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 WebGL, \u0441\u043f\u0438\u0441\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0431\u043e\u043b\u0435\u0435 1000 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0432\u043e\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 online-\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044f. \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104458","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Byl zve\u0159ejn\u011bn n\u00e1stroj pro ur\u010dov\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00ed nainstalovan\u00fdch v Chrome | ProHoster","description":"Byl zve\u0159ejn\u011bn n\u00e1stroj k realizaci metody ur\u010dov\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00ed nainstalovan\u00fdch v prohl\u00ed\u017ee\u010di Chrome.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/opublikovan-instrumentarij-dlya-opredeleniya-dopolnenij-ustanovlennyh-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 Chrome | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/opublikovan-instrumentarij-dlya-opredeleniya-dopolnenij-ustanovlennyh-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-21T01:36:39+00:00","article:modified_time":"2022-06-21T01:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104458","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-21 01:37:40","updated":"2022-09-27 20:05:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104458","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104458"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104458\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104458"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104458"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104458"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}