Chiwopsezo mu Adblock Plus chomwe chimalola kugwiritsa ntchito ma code mukamagwiritsa ntchito zosefera zokayikitsa

Mu Adblock Plus ad blocker kudziwika kusatetezeka, kulola konzekerani kukhazikitsidwa kwa code ya JavaScript m'malo amasamba, pakugwiritsa ntchito zosefera zosatsimikizika zokonzedwa ndi omwe akuwukira (mwachitsanzo, polumikiza malamulo a chipani chachitatu kapena m'malo mwa malamulo pakuwukira kwa MITM).

Olemba mindandanda yokhala ndi zosefera amatha kukonza ma code awo malinga ndi malo otsegulidwa ndi wogwiritsa ntchito powonjezera malamulo ndi wogwiritsa ntchito "lembaninso", zomwe zimakulolani kuti musinthe gawo la URL. Wolembanso sakulolani kuti mulowe m'malo mwa ulalo wa wolandila, koma amakulolani kuti musinthe momasuka mikangano yopempha. Zolemba zokha zitha kugwiritsidwa ntchito ngati chigoba cholowa m'malo, ndikulowetsa zolemba, chinthu ndi ma tag ang'onoang'ono ndikololedwa. oletsedwa.

Komabe, kukhazikitsidwa kwa code kumatha kutheka mu workaround.
Masamba ena, kuphatikiza Google Maps, Gmail, ndi Google Images, amagwiritsa ntchito njira yotsitsa midadada ya JavaScript yomwe ingathe kuchitika, yofalitsidwa ngati mawu opanda kanthu. Ngati seva ilola kutumizidwanso kwa pempho, ndiye kuti kutumiza kwa wolandila wina kutha kutheka posintha magawo a URL (mwachitsanzo, malinga ndi Google, kuwongolera kutha kupangidwa kudzera mu API "google.com/search"). Kuphatikiza pa makamu omwe amalola kuwongoleranso, kuwukira kungathenso kuchitidwa motsutsana ndi mautumiki omwe amalola kutumiza zomwe ogwiritsa ntchito (kusunga ma code, nsanja zotumizira, ndi zina).

Njira yowukira yomwe akufunsidwa imangokhudza masamba omwe amadzaza zingwe za JavaScript (mwachitsanzo, kudzera pa XMLHttpRequest kapena Fetch) kenako n'kuzipanga. Cholepheretsa china chofunikira ndikufunika kugwiritsa ntchito kutumiziranso kapena kuyika deta yosasinthika kumbali ya seva yoyambirira yomwe ikupereka chithandizo. Komabe, kuti muwonetse kufunikira kwa chiwonongekocho, zimawonetsedwa momwe mungasankhire kachitidwe ka code yanu mukatsegula maps.google.com, pogwiritsa ntchito kuwongolera kudzera pa "google.com/search".

Kukonzekera kukadali kukonzekera. Vutoli limakhudzanso ma blockers AdBlock и Ublock. The uBlock Origin blocker sichimakhudzidwa ndi vutoli, chifukwa sichigwirizana ndi "kulembanso". Panthawi ina wolemba uBlock Origin
anakana onjezani chithandizo cholemberanso, kutchula zovuta zomwe zingachitike pachitetezo ndi zoletsa zosakwanira za wolandila (njira yofunsira mafunso idaperekedwa m'malo molembanso kuti muyeretse magawo a mafunso m'malo mowasintha).

Madivelopa a Adblock Plus amawona kuukira kwenikweni kukhala kosakayikitsa, popeza zosintha zonse pamndandanda wanthawi zonse zimawunikiridwa, ndipo kulumikiza mindandanda yachipani chachitatu ndikosowa kwambiri pakati pa ogwiritsa ntchito. Kulowetsedwa kwa malamulo kudzera pa MITM kumalepheretsedwa ndi kusakhazikika kwa HTTPS kutsitsa mindandanda yokhazikika (pamindandanda ina ikukonzekera kuletsa kutsitsa kudzera pa HTTP pakumasulidwa kwamtsogolo). Malangizo angagwiritsidwe ntchito kuletsa kuwukira kumbali ya tsamba CSP (Content Security Policy), kudzera momwe mungadziwire momveka bwino omwe ali ndi zida zakunja zomwe zitha kukwezedwa.

Source: opennet.ru