{"id":100782,"date":"2021-07-16T22:22:59","date_gmt":"2021-07-16T20:23:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ublock-origin-privodyashhaya-k-krahu-ili-ischerpaniyu-resursov"},"modified":"2021-07-16T22:22:59","modified_gmt":"2021-07-16T20:23:00","slug":"uyazvimost-v-ublock-origin-privodyashhaya-k-krahu-ili-ischerpaniyu-resursov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ublock-origin-privodyashhaya-k-krahu-ili-ischerpaniyu-resursov","title":{"rendered":"uBlock Originis tuvastatud haavatavus, mis p\u00f5hjustab kokkuvarisemise v\u00f5i ressursi ammendamisse viiva probleemi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

uBlock Origin'i soovimatute sisu blokeerimise s\u00fcsteemis on tuvastatud haavatavus, mis v\u00f5imaldab kukkumist v\u00f5i m\u00e4lukaotust spetsiaalse kujundusega URL-iga navigeerimisel, kui see URL allub range blokeerimise filtritele. Haavatavus avaldub vaid probleemsesse URL-i otse minnes, n\u00e4iteks lingile klikkides. <\/p>\n

Haavatavus on k\u00f5rvaldatud uBlock Origin'i uuenduses 1.36.2. Samas probleemis on haavatud ka uMatrixi t\u00e4iendust, kuid selle arendamine on l\u00f5petatud ja uuendusi enam ei v\u00e4ljastata. UMatrixis puuduvad kaitse \u00fcmbermineku v\u00f5imalused (alguses soovitati keelata k\u00f5ik range blokeerimise filtrid vahekaardilt 'Assets', kuid see soovitus tunnistati ebapiisavaks ja probleemide tekitamiseks kasutajatele, kellel on oma blokeerimisreeglid). uMatrixis, mis on uMatrixi fork Pale Moon projekti poolt, on haavatavus k\u00f5rvaldatud versioonis 4.4.9. <\/p>\n

Range blokeerimise filter m\u00e4\u00e4ratakse tavaliselt tasemel domeenide<\/a> ja t\u00e4hendab k\u00f5igi \u00fchenduste keelamist, isegi kui minnakse otse lingi kaudu. Haavatavuse p\u00f5hjus on selles, et range blokeerimise filtri alla kuuluvale lehele liikumisel kuvatakse kasutajale hoiatus, mis sisaldab teavet blokeeritud ressursi kohta, sealhulgas n\u00e4idatakse URL-i ja p\u00e4ringuparameetreid. Probleem seisneb selles, et uBlock Origin t\u00f6\u00f6tleb p\u00e4ringuparameetreid rekursiivselt ja lisab need DOM-puusse, arvestamata pesastatuse taset. <\/p>\n

Spetsiaalselt koostatud URL-i t\u00f6\u00f6tlemisel saab Chrome'i uBlock Originis esile kutsuda selle protsessi krahhi, milles brauserilaiendus t\u00f6\u00f6tab. P\u00e4rast krahhi j\u00e4\u00e4b kasutaja kuni laienduse protsessi taask\u00e4ivitumiseni soovimatu sisu blokeerimiseta. Firefoxis t\u00e4heldatakse m\u00e4lut\u00fchjenemist.

\"uBlock<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 uBlock Origin \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043a\u0440\u0430\u0445\u0430 \u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u043c\u0443 URL, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e URL \u043f\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 («strict blocking»). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043f\u0440\u044f\u043c\u043e\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 URL, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u0438 \u043a\u043b\u0438\u043a\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 uBlock Origin 1.36.2. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100783,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100782","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47uBlock Origini haavatavus, mis p\u00f5hjustab krahhi v\u00f5i ressursside ammendumise | ProHoster","description":"Soovimatu sisu blokeerimise s\u00fcsteemis uBlock Origin avastati haavatavus, mis v\u00f5imaldab spetsiaalselt koostatud URL-ile navigeerimisel p\u00f5hjustada krahhi v\u00f5i m\u00e4lut\u00fchjenemise, kui see URL satub.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ublock-origin-privodyashhaya-k-krahu-ili-ischerpaniyu-resursov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 uBlock Origin, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043a\u0440\u0430\u0445\u0443 \u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 | ProHoster","og:description":"\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 uBlock Origin \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043a\u0440\u0430\u0445\u0430 \u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u043c\u0443 URL, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e URL \u043f\u043e\u0434.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ublock-origin-privodyashhaya-k-krahu-ili-ischerpaniyu-resursov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-16T20:23:00+00:00","article:modified_time":"2021-07-16T20:23:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100782","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-16 20:30:54","updated":"2026-02-11 11:12:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100782"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100782\/revisions"}],"predecessor-version":[{"id":160557,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100782\/revisions\/160557"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/100783"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}