{"id":84497,"date":"2020-06-08T13:42:02","date_gmt":"2020-06-08T11:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-brauzere-brave-vyyavlena-podstanovka-referalnogo-koda-pri-otkrytii-nekotoryh-sajtov"},"modified":"2020-06-08T13:42:02","modified_gmt":"2020-06-08T11:42:02","slug":"v-brauzere-brave-vyyavlena-podstanovka-referalnogo-koda-pri-otkrytii-nekotoryh-sajtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-brauzere-brave-vyyavlena-podstanovka-referalnogo-koda-pri-otkrytii-nekotoryh-sajtov","title":{"rendered":"Un code de parrainage est ins\u00e9r\u00e9 dans le navigateur Brave lors de l'ouverture de certains sites","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dans le navigateur web Brave une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e<\/a><\/noindex> Substitution of referral links when attempting to open certain websites by entering their domain in the address bar (links on opened pages do not change). For example, when entering \u00abbinance.com\u00bb in the address bar, the autocomplete system automatically appends the referral link \u00abbinance.com\/en?ref=35089877\u00bb to the domain. Similar behavior was observed for the domains coinbase.com, binance.us, ledger.com, and trezor.io. Such actions ont \u00e9t\u00e9<\/a><\/noindex> sont per\u00e7ues<\/a><\/noindex> par beaucoup comme une manipulation incorrecte, sapant la confiance des utilisateurs, ou comme une tentative de gagner de mani\u00e8re cach\u00e9e pour des participants malintentionn\u00e9s au projet.<\/p>\n

Chef de projet sa position :<\/a><\/noindex>, que l'apparition<\/a><\/noindex> de cette fonctionnalit\u00e9 dans le m\u00e9canisme de saisie automatique est caus\u00e9e par une erreur. Brave est effectivement li\u00e9 par un programme de parrainage \u00e0 Binance et \u00e0 certaines autres bourses de cryptomonnaies, mais le code de parrainage est utilis\u00e9 dans le widget affich\u00e9 dans un bloc publicitaire d\u00e9sactivable sur la page de nouvel onglet. L'autocompl\u00e9tion ne devrait pas ajouter de code de parrainage \u00e0 l'adresse saisie, et ce probl\u00e8me sera r\u00e9solu. <\/p>\n

The issue was caused by a flaw in the code handling the transmission of the partner identifier when relaying queries from the address bar to search engines. Entering keywords in the address bar results in sending a request to the search engine with the transmission of the identifier \u2014 such identifiers are transmitted by all browsers participating in the payment programs for commissions from search engines for traffic. Due to the error, direct entry of the domain recommand\u00e9<\/a><\/noindex> du service partenaire entra\u00eenait \u00e9galement l'ajout de l'identifiant du partenaire dans la barre d'adresse. <\/p>\n

Rappelons que le navigateur web Brave<\/a><\/noindex> est d\u00e9velopp\u00e9 sous la direction de Brendan Eich, le cr\u00e9ateur de JavaScript et ancien directeur de Mozilla. Le navigateur est bas\u00e9 sur le moteur Chromium, se concentre sur la protection de la vie priv\u00e9e des utilisateurs, int\u00e8gre un moteur de blocage des publicit\u00e9s, peut fonctionner via Tor, offre un support int\u00e9gr\u00e9 pour HTTPS Everywhere, IPFS et WebTorrent, propose<\/a><\/noindex> un m\u00e9canisme de financement alternatif des \u00e9diteurs bas\u00e9 sur l'abonnement. Le code du projet est distribu\u00e9<\/a><\/noindex> sous la licence libre MPLv2.<\/p>\n

Ajout : Correction a consist\u00e9<\/a><\/noindex> en d\u00e9sactivant par d\u00e9faut le param\u00e8tre contr\u00f4lant la substitution des recommandations de Brave lors de l'autocompl\u00e9tion dans la barre d'adresse (auparavant, le param\u00e8tre \u00e9tait activ\u00e9 par d\u00e9faut). La liste des remplacements, qui indique les liens de parrainage, est laiss\u00e9e<\/a><\/noindex> dans le m\u00eame \u00e9tat.
\n

\"Un<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Brave \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0440\u0435\u0444\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043d\u0430\u0431\u043e\u0440 \u0438\u0445 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 (\u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f). \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u0438 \u0432\u0432\u043e\u0434\u0435 «binance.com» \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0430\u0432\u0442\u043e\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0432\u043e\u0434\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u0434\u043e\u043c\u0435\u043d\u0443 \u0440\u0435\u0444\u0435\u0440\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 «binance.com\/en?ref=35089877». \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u043e\u0432 coinbase.com, binance.us, ledger.com \u0438 trezor.io. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84498,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84497","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Un code de parrainage a \u00e9t\u00e9 d\u00e9tect\u00e9 dans le navigateur Brave lors de l'ouverture de certains sites | ProHoster","description":"Dans le navigateur web Brave, une substitution de liens de parrainage a \u00e9t\u00e9 d\u00e9tect\u00e9e lors de l'ouverture de certains sites.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-brauzere-brave-vyyavlena-podstanovka-referalnogo-koda-pri-otkrytii-nekotoryh-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Brave \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0440\u0435\u0444\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Brave \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0440\u0435\u0444\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-brauzere-brave-vyyavlena-podstanovka-referalnogo-koda-pri-otkrytii-nekotoryh-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-08T11:42:02+00:00","article:modified_time":"2020-06-08T11:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84497","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:56:33","updated":"2022-09-28 10:59:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/84497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=84497"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/84497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/84498"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=84497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=84497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=84497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}