A new release of uBlock Origin 1.39, the unwanted content blocker, is available to block ads, malicious elements, motion tracking code, JavaScript miners, and other interfering elements. The uBlock Origin add-on is a high performance and memory efficient add-on that allows you not only to get rid of annoying elements, but also to reduce resource consumption and speed up page loading.
Major changes:
- A button has been added to the pop-up panel to send notifications about problems while working with the site when using uBlock Origin. The button allows you to more quickly bring information about problems to accompanying lists with filters.
- A Support panel has been added to the configurator to make it easier to send technical information about the uBlock Origin configuration to developers for troubleshooting.
- In browsers based on the Chromium engine, an issue with cosmetic filters breaking on many sites when the "Experimental Web Platform features" mode is enabled in chrome://flags has been resolved.
- Added support for CSS pseudo-classes.
- Fixed an issue with ad blocking bypass on Twitch.
- Fixed security issues:
- Ability to bypass restrictions on the use of dangerous CSS (such as background:url()) in cosmetic filters designed to replace content on a page.
- Allows background requests to be sent through cosmetic filters using Firefox's image-set() CSS substitution, despite disallowing the use of url() class functions in rules to block user information leakage if malicious rules are placed in filter lists.
- There was the possibility of substituting a URL with JavaScript code or redirecting to other pages through the manipulation of query string parameters. For example, when clicking on the links "https://subscribe.adblockplus.org/?location=javascript:alert(1)&title=EasyList" and "https://subscribe.adblockplus.org/?location=dashboard.html%23about .html&title=EasyList" shows the uBlock Origin service page with a link that, when clicked, will execute JavaScript code or open another page.
Source: opennet.ru