dividedby / General-URL-Cleaner-Revived

Userscript to clean various URLs and remove tracking elements
https://greasyfork.org/en/scripts/432387-general-url-cleaner-revived
GNU General Public License v3.0
25 stars 8 forks source link

Google clickjack; re-ofuscating links on click #10

Closed mikewaters closed 11 months ago

mikewaters commented 11 months ago

This userscript nicely cleans the Google SERP links, de-obfuscating them and hence removing the click tracking - I've validated this in the debugger. However, on click/right-click Google re-obfuscates the damn URL, which renders this protection ineffective. Listening to DOMSubtreeModified, you can watch it happen. After doing some research, apparently it has been this way for some time, and there are some ways to mitigate it - like reverting the DOM mutation. There is also a paid Safari/Mac solution, the app Stop the Madness (I am in no way related to them) but I haven't tried it.

Thanks for the code, it works great for more than just The Borg so I'll continue to use it!

A gif: Screen recording of right-click

dividedby commented 11 months ago

This userscript nicely cleans the Google SERP links, de-obfuscating them and hence removing the click tracking - I've validated this in the debugger. However, on click/right-click Google re-obfuscates the damn URL, which renders this protection ineffective. Listening to DOMSubtreeModified, you can watch it happen. After doing some research, apparently it has been this way for some time, and there are some ways to mitigate it - like reverting the DOM mutation. There is also a paid Safari/Mac solution, the app Stop the Madness (I am in no way related to them) but I haven't tried it.

Thanks for the code, it works great for more than just The Borg so I'll continue to use it!

Thanks for the report and glad you are liking the script! Unfortunately I think something like that is outside of my scope knowledge currently and I don't have much time to work on the script. Maybe in the future it is something I try and look in to.

mikewaters commented 11 months ago

Thank you, I will close the issue; even if you do fix it, one of thousands of engineers will un-fix it shortly :). I've installed the StopTheMadness extension because frankly its driving me mad! :).

Be well.

mikewaters commented 11 months ago

whoops