adịghị ike na Adblock Plus na-enye ohere mkpochapụ koodu mgbe ị na-eji nzacha na-enyo enyo

Na Adblock Plus mgbochi mgbasa ozi mara adịghị ike, ikwe Hazie ogbugbu nke koodu Javascript na ọnọdụ saịtị, n'ihe banyere iji nzacha akwadoghị nke ndị mwakpo kwadebere (dịka ọmụmaatụ, mgbe ị na-ejikọ usoro iwu ndị ọzọ ma ọ bụ site na nnọchi nke iwu n'oge mwakpo MITM).

Ndị na-ede ndepụta nwere ọtụtụ ihe nzacha nwere ike hazie ogbugbu nke koodu ha na saịtị nke onye ọrụ meghere site na itinye iwu na onye ọrụ "deeghachi ya", nke na-enye gị ohere iji dochie akụkụ nke URL. Onye na-arụ ọrụ na-edegharị anaghị ekwe ka dochie onye ọbịa na URL ahụ, mana ọ na-enye gị ohere ịmegharị arụmụka arịrịọ ahụ kpamkpam. Naanị ederede ka enwere ike iji dị ka nkpuchi dochie anya, ma dochie script, ihe na mkpado subdocument ka anabatara akpọchiri.

Agbanyeghị, enwere ike nweta koodu mmebe n'oge ọrụ.
Saịtị ụfọdụ, gụnyere Google Maps, Gmail, na Google Images, na-eji usoro nke na-ebunye ngwa ngwa JavaScript blocks, nke a na-ebufe n'ụdị ederede efu. Ọ bụrụ na ihe nkesa na-enye ohere redirection arịrịọ, mgbe ahụ, a ga-enweta iziga onye ọbịa ọzọ site n'ịgbanwe paramita URL (dịka ọmụmaatụ, na ọnọdụ Google, enwere ike ịmegharị ntụgharị site na API "google.com/search"). Na mgbakwunye na ndị ọbịa na-enye ohere redirection, a nwekwara ike ịme mwakpo megide ọrụ ndị na-enye ohere ikesa ọdịnaya nke onye ọrụ (nchịkọta koodu, ikpo okwu biputere akụkọ, wdg).

Usoro mbuso agha a na-atụ aro na-emetụta naanị ibe ndị na-ebu eriri koodu Javascript ike (dịka ọmụmaatụ, site na XMLHttpRequest ma ọ bụ Fetch) wee mebie ha. Mmachi ọzọ dị mkpa bụ mkpa iji redirect ma ọ bụ tinye data aka ike n'akụkụ ihe nkesa mbụ na-enye akụrụngwa. Agbanyeghị, iji gosipụta mkpa mwakpo ahụ, egosiri ya ka esi ahazi mmebe nke koodu gị mgbe ị na-emepe maps.google.com, na-eji redirect site na “google.com/search”.

Ndozi ka na-akwado. Nsogbu a na-emetụtakwa ihe mgbochi AdBlock и uBlock. Nsogbu a emetụtaghị ihe mgbochi uBlock Origin, ebe ọ naghị akwado onye ọrụ “rewrite”. N'otu oge onye odee nke uBlock Origin
jụrụ tinye nkwado maka idegharị, na-ekwu maka nsogbu nchekwa nwere ike yana mmachi ọkwa ọkwa ezughị ezu (a tụpụtara nhọrọ ajụjụ ajụjụ kama idegharị iji hichaa paramita ajụjụ kama dochie ha).

Ndị mmepe Adblock Plus na-ewere ezigbo mwakpo agaghị ekwe omume, ebe ọ bụ na a na-enyocha mgbanwe niile na ndepụta ọkọlọtọ nke iwu, yana ijikọ ndepụta ndị ọzọ dị ụkọ n'etiti ndị ọrụ. A na-egbochi nnọchi nke iwu site na MITM site na iji HTTPS ndabara maka nbudata ndepụta ngọngọ ọkọlọtọ (maka ndepụta ndị ọzọ a na-eme atụmatụ machibido nbudata site na HTTP na mwepụta n'ọdịnihu). Enwere ike iji ntuziaka iji gbochie mbuso agha n'akụkụ saịtị ahụ CSP (Amụma Nchekwa Ọdịnaya), nke ị nwere ike ikpebi nke ọma ndị ọbịa nke enwere ike ibunye akụrụngwa mpụga.

isi: opennet.ru