search

cycyrild / SebBypass

Chrome extension to bypass Safe Exam Browser (SEB) restrictions when taking quizzes. It modifies HTTP request headers to mimic SEB.
8 stars 0 forks source link

Cloudflare issue #2

Open phamjhungf opened 1 week ago

phamjhungf commented 1 week ago

I use this extension to do my homewark without using seb but get problem with Cloudflare Screenshot 2024-11-14 205634

cycyrild commented 1 week ago

Hi, I believe the issue may be due to the removal of the CSP HTTP headers when the extension is activated using the SEB file. Could you provide more details about when exactly the error occurs? Does it happen when you load the SEB file and refresh the exam page? Have you tried updating the URL filter to match the start URL by clicking the "Update and set to the domain of the start URL" button?

phamjhungf commented 5 days ago

Alright, the problem happens when I reload the web after adding the .seb file. And I don't know the URL filter; if you mean the URL challenges Cloudflare, it will become normal requiring using it in SEB, but if the URL is CMS, it will make the Cloudflare loop. 

cycyrild commented 5 days ago

I mean that the HTTP header modifications made by the extension might interfere with the CloudFlare WAF. To prevent this, I think you should configure the extension to limit its scope to the current quiz domain. To do this, you need to modify the "Request URLs filter" input in the extension popup (when you activate it with the .seb file). You can either click on "Update and set to the domain of the start URL" or configure it manually.

This field affects the url property of the webRequest.RequestFilter object used to filter the URLs that the extension manages. You can check this site for more information: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/webRequest/RequestFilter#urls