Vulnerability nyob rau hauv uBlock Keeb Kwm ua rau poob los yog cov peev txheej tag

Qhov tsis zoo tau raug txheeb xyuas nyob rau hauv uBlock Keeb Kwm qhov system rau thaiv cov ntsiab lus tsis xav tau uas tso cai rau kev sib tsoo lossis lub cim xeeb ua rau muaj qhov tshwm sim thaum taug kev mus rau qhov tshwj xeeb tsim URL, yog tias qhov URL no poob rau hauv cov ntxaij lim dej nruj. Qhov tsis txaus ntseeg tsuas yog tshwm sim thaum ncaj qha mus rau qhov teeb meem URL, piv txwv li thaum nyem rau ntawm qhov txuas.

Qhov tsis zoo yog kho nyob rau hauv uBlock Keeb Kwm 1.36.2 hloov tshiab. Lub uMatrix add-on kuj raug kev txom nyem los ntawm qhov teeb meem zoo sib xws, tab sis nws tau raug txiav thiab hloov tshiab tsis tso tawm lawm. Tsis muaj kev ruaj ntseg workarounds hauv uMatrix (thaum pib nws tau hais kom lov tes taw tag nrho cov thaiv thaiv cov ntxaij lim dej los ntawm "Assets" tab, tab sis qhov kev pom zoo no tau pom tias tsis txaus thiab tsim teeb meem rau cov neeg siv nrog lawv tus kheej thaiv cov cai). Hauv Ξ· Matrix, rab rawg ntawm uMatrix los ntawm Pale Moon qhov project, qhov tsis zoo tau raug kho hauv kev tso tawm 4.4.9.

Ib qho kev lim dej nruj nruj feem ntau txhais tau hais tias nyob rau theem sau npe thiab txhais tau tias txhua qhov kev sib txuas raug thaiv, txawm tias ua raws li qhov txuas ncaj qha. Qhov tsis zoo yog tshwm sim los ntawm qhov tseeb tias thaum taug kev mus rau nplooj ntawv uas raug rau cov lim dej nruj, tus neeg siv tau pom cov lus ceeb toom uas muab cov ntaub ntawv hais txog cov peev txheej thaiv, suav nrog URL thiab cov lus nug tsis. Qhov teeb meem yog tias uBlock Keeb Kwm parses qhov kev thov tsis rov ua dua thiab ntxiv rau DOM tsob ntoo yam tsis xav txog qib zes.

Thaum tuav ib qho tshwj xeeb crafted URL nyob rau hauv uBlock Keeb Kwm rau Chrome, nws muaj peev xwm mus tsoo cov txheej txheem khiav lub browser add-on. Tom qab kev sib tsoo, kom txog rau thaum cov txheej txheem nrog cov add-on rov pib dua, tus neeg siv tau tawm mus yam tsis thaiv cov ntsiab lus tsis xav tau. Firefox tab tom muaj kev nco qaug zog.

Vulnerability nyob rau hauv uBlock Keeb Kwm ua rau poob los yog cov peev txheej tag


Tau qhov twg los: opennet.ru

Ntxiv ib saib