futpib / policeman

Firefox extention for cross-site requests control (kind of RequestPolicy clone)
https://addons.mozilla.org/en-US/firefox/addon/policeman/
142 stars 11 forks source link

Help, Questions and General Discussion #18

Open futpib opened 9 years ago

futpib commented 9 years ago

If you have a question, need help, unsure if something is an issue, have something else to say, whatever else — post it here.

liangxyz commented 9 years ago

hello futpib,thanks for your work!can you tell me why i cant find 360buying.com in the popup when the policeman prevent www.jd.com load the images. default

heforfree commented 9 years ago

@futpib when you build next version with current change? can you build and put it in releases page before uploading in addons.mozilla.org thank you

futpib commented 9 years ago

@heforfree just uploaded 0.14 to AMO

heforfree commented 9 years ago

@futpib thank you very much work very well :)

ghost commented 9 years ago

Expressing enthusiasm is not strictly scientific but, hey! what the heck : Policeman 0.14 on AMO is much appreciated :+1: Thanks a lot futpib, Policeman is really fantastic. I just love it when I see a page perfectly rendered after I have given it the only authorizations it needs and observe all the extra left behind : an invaluable pleasure :)

heforfree commented 9 years ago

@futpib can you make deny ruleset for local file? example i save page as html then drag it to browser then opend page will make some request. i want pervent that.is this possible? thank you

futpib commented 9 years ago

@heforfree Unfortunately, you can't deny requests from files as of 0.14, since Default ruleset allows them and is forced to have the most priority.

futpib commented 9 years ago

Blocking requests for files isn't possible too, for kind of the same reason. Opened #71 for that

heforfree commented 9 years ago

thank you.

bastik-1001 commented 9 years ago

@futpib Do you think it is a good idea to replace the string "Help" with "Online-Help"? As I first clicked on help, I expected an internal document to be displayed. I had that expectation mostly for the help within the preferences. It is nothing big, but might avoid unexpected user experience.

futpib commented 9 years ago

@bastik-tor It's not a destructive action or something, it just opens a tab, I don't think opening web page in a browser can break someone's expectations badly.

heforfree commented 9 years ago

@futpib will you upload new version with new change? thank you

futpib commented 9 years ago

@heforfree I have some issues I'd like to fix before next version. There may be a lot of commits on the log, but no real changes or fixes since 0.14. In a few weeks I'll have some spare time for the add-on.

heforfree commented 9 years ago

@futpib thak you for answer

futpib commented 9 years ago

I've uploaded 0.15 on AMO, and soon after that I found it too broken, so I disabled it.

If you never installed 0.15 and firefox did not update it automatically (or you are OK with 0.15), please ignore this. For those of you who happened to upgrate to 0.15 and want to downgrade to 0.14 here are a guide:

Sorry for inconvenience.

distractedGuy commented 9 years ago

Hello,

I'm trying to get airbnb.com working. It's not working, even when allowed everything.

Maybe it's a bug in policeman, if not the better.

Best regards,

distractedGuy

heforfree commented 9 years ago

@distractedGuy it is working image 1

futpib commented 9 years ago

@heforfree I just noticed, your setup looks wierd. If you want requests to be rejected when no rule applies, it is enough to have "reject any" ruleset enabled. No need for those reject images, reject fonts etc. rules.

heforfree commented 9 years ago

@futpib i want also reject same domain and same second level(anything Except styles ).so i must disable that rulesets,but if i disable them i must allow styles everytime. and cause too many rule

distractedGuy commented 9 years ago

@heforfree You are right, after a reinstall of the addon.

I have installed policeman and betterPrivacy at the same time, and after that it was not possible to execute javascript. Now I deinstalled both, activated javascript again in about:config and reinstalled policeman again. Now airbnb is working.

Best regards,

distractedGuy

heforfree commented 9 years ago

@futpib will you make ruleset to reject everything except styles for same domain and second domain level?so i put that below persistent ruleset and remove my custom rule thanks

futpib commented 9 years ago

@heforfree I tried a bit, but couldn't get around #48. I'll take care of it in a couple of weeks.

Matthewus commented 9 years ago

Hi! Is it normal that on BBC iPlayer subdomains does not show up so i can not block them? It is fine if i set Flash to "Ask to activate", but as soon as i activate it i can not see the subdomains in Policeman anymore. I would like to block a subdomain that loads when a video starts to play.

futpib commented 9 years ago

@Matthewus take a look at #65 please. It that the problem you describe?

Matthewus commented 9 years ago

Maybe. This is exactly what is see: With Click to play enabled: policeman_ctp Click to play disabled: policeman_noctp

futpib commented 9 years ago

Looks like it. It will be fixed in the next version (at least for *.uk domains I found listed on wikipedia).

ghost commented 9 years ago

Incidentally I've never understood why a .co.uk rather than a simple .uk I love laughing but I have the greatest difficulty being funny. For instance if I say "God shave that .co" it'll make laugh no one but me, hardly.

stefhf commented 9 years ago

I just installed this addon in latest firefox but I seem to have some major problem...I only see http://tinypic.com/view.php?pic=2h4x3dw&s=8 when pressing the policeman button (it never seems to finish summarizing request data) and I have no idea how to allow a site to load properly, see for example http://postimg.org/image/va8qeu3f9/ . I can open preferences but that is not much of a help. What should I do to be able to use Policeman? I was expecting a kind of operation as in NoScript (which I would like to drop since it causes problems for me with several sites). Thank you.

futpib commented 9 years ago

@stefhf Let's gather some more info, if you will. Hit Ctrl+Shift+J (browser console should open), press Policeman toolbar button, copypaste console content into a gist and post it here. Also tell me exactly what versions of Firefox (see About Firefox) and Policeman (see add-ons manager) you are running.

heforfree commented 9 years ago

@stefhf ..... for now install ProfileSwitcher addon create new profile and test addon to see it is work in new profile or not. https://addons.mozilla.org/en-US/firefox/addon/profileswitcher

also this is maybe because addon conflict.disable or uninstall similar addon like NoTrace,AVG Do Not Track,Disconnec,betterPrivacy,Ghostery,CsFire,Priv3+,Privacy Badger,TrackerBlock.

stefhf commented 9 years ago

Thanks for the fast replies..I have no idea what changed but after restarting firefox 34.0 one more time (I already restarted after installing Policeman and disabling NoScript) not reloading all my previous tabs pressing the Policeman (0.16.1) button did work, restarting Firefox once again and this time reloading all previous tabs (I'm using the session manager extension) the Policeman button kept working so it seems solved now...I did notice however that pressing "reload on change" didn't actually reload the page after changing rules, I have to reload the page manually. I also use Priv3 (0.11), should that be disabled now? Last question: there is no need for AdBlock Plus anymore right, using Policeman?

futpib commented 9 years ago

@stefhf "Reload on change" is actually a checkbox, I know it may be hard to notice (#99). You don't have to disable anything unless something is broken. I do not know about Priv3, but I still use AdBlock, it has some features beyond Policeman's capabilities, element hiding helper for instance.

heforfree commented 9 years ago

@stefhf you can disable Priv3, my self removed AdBlock, i use Yet Another Remove It Permanently,this is much better than AdBlock element hiding helper

stefhf commented 9 years ago

Thanks for the outstanding support guys..If I have more issues or notice any buys I'll be sure to come back here!

danieljl commented 9 years ago

Is it possible to create a custom ruleset to block inline Javascript? Thanks.

futpib commented 9 years ago

@danieljl It is only possible to block "javascript:..." URLs, but not <script>...</script> tags.

futpib commented 9 years ago

From now on I'll build pre-release versions before uploading anything to AMO. I know some people install updates before they get reviewed and report issues, so now I encourage you to install those instead.

If it was not for cutting-edge-users and slow-ish AMO review process, people would get more broken updates, so thank you.

bastik-1001 commented 9 years ago

@futpib Do you expect reports if the pre-releases work as expected?

E.g Are you going to assume that after x amount of time without a report of something broken it will be safe to release it to the general public? Or are you waiting until a fair share of people told you that the addon works as expected?

So far I don't notice anything broken. I tried to install two rulesets and it worked fine. Then I tested the HTTPS sandbox ruleset I installed. As far as I can tell it is working, as I don't see any images from non-https on https websites. Instead the addon displays placeholders. I hope this ruleset makes it into a future release.

heforfree commented 9 years ago

thank you for adding this test build i try install rulset via "install link.." then it wont installed also probably same error on none prebuild this link tested https://gist.githubusercontent.com/somini/0a9e0406f03d5f14363a/raw/a7a4b939c97bc3a2406a3113e9be85c94cd75f86/magnet.ruleset

https://gist.github.com/heforfree/c39423c3eea947630eb0

and i tested allow_styles_same_site.ruleset and working very fine.Please add it as preinstalled ruleset by default. i just see this in ctrl+shift+j syntax error allow_styles_same_site.ruleset:2

for https_sandbox.ruleset this need sample url

tested this also and working fine. allow_my_very_special_script.ruleset

just if you can make an ruleset to reject per url path http://site.com/ads/

futpib commented 9 years ago

@bastik-tor I think I'll just close issues I consider fixed, and if you see something is broken, open a new issue or comment on a mis-closed one. If no major issue pops up after some time I'll release it to general public.

heforfree commented 9 years ago

@futpib on 0.18pre1 no more syntax error and i am able to install ruleset via link

futpib commented 9 years ago

@heforfree Cool. Though that magnet-ruleset has no use as far as I can see, compatibility ruleset allows magnet links among other things.

heforfree commented 9 years ago

@futpib yes i remember bug fix for magnet link i selected that just for testing,since other ruleset is installed

jyfo commented 9 years ago

Under Popup, what does "show types if no request of this type was made"? What does checking that box do?

What is "content types available in popup"?

heforfree commented 9 years ago

@jyfo if it checked it is like below image 1

if not checked image 2

so if any content types dont have any request.remain hidden.and make popup smaller

futpib commented 9 years ago

@jyfo Feel free to suggest a better title for that checkbox.

jyfo commented 9 years ago

Thanks heforfree and futpib, after staring at that screenshot for long time I finally reached enlightenment.

I think "Content types displayed in popup" might be better than "Content types available in popup" since checking or unchecking the boxes below it just effects what is displayed in the popup right?

To confirm, "show types if no request of this type was made" and "content types available in popup" just effects how the popup is displayed right?

futpib commented 9 years ago

@jyfo right

neurodiverseEsoteric commented 9 years ago

When I select all content types to be shown in the popup menu, the menu expands beyond my screen, making the "make temporary/make permanent" and other buttons inaccessible. Can you add a way for the menu to fit all display sizes/resolutions no matter how many items are shown in the menu, please?

heforfree commented 9 years ago

@esotericDisciple this is in to do list of developer #40 In the meantime,you can uncheck "Show types if no request of this type was made". this cause hide, zero (0) content type.so popup will be smaller