gorhill / uBlock-for-firefox-legacy

uBlock Origin for Firefox legacy-based browsers.
GNU General Public License v3.0
201 stars 24 forks source link

Updating Malicious URL Blocklist fails #332

Open nicolaasjan opened 2 years ago

nicolaasjan commented 2 years ago

Prerequisites

Description

After investigation, it turned out that the URL and mirrors changed. See on: https://gitlab.com/malware-filter/urlhaus-filter#url-based

Announcement (2022/05/21): curben.gitlab.io has been migrated to malware-filter.gitlab.io

New URL:

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-online.txt

New mirrors:


https://curbengh.github.io/malware-filter/urlhaus-filter-online.txt
https://curbengh.github.io/urlhaus-filter/urlhaus-filter-online.txt
https://malware-filter.gitlab.io/urlhaus-filter/urlhaus-filter-online.txt
https://malware-filter.pages.dev/urlhaus-filter-online.txt
https://urlhaus-filter.pages.dev/urlhaus-filter-online.txt

I'm aware that the dev is currently not able to do anything about it... 🌻

A specific URL where the issue occurs

N.A.

Steps to Reproduce

  1. Empty cache
  2. Update

Expected behavior:

All lists should be updated

Actual behavior:

Updating Malicious URL Blocklist fails

Your environment

nicolaasjan commented 2 years ago

Upstream uBlock has already received a pull request: https://github.com/gorhill/uBlock/pull/3867

krystian3w commented 2 years ago

Follow also #319

Vangelis66 commented 2 years ago

I have uBO v1.16.4.31b2 (acquired from here) installed in Serpent 52.9.0 32-bit and in my case I am still able to "update" the embedded Online Malicious URL Blocklist, however monitoring more closely in the Browser Console the updating process, I'm seeing the following:

BrowserConsoleSt52

i.e. the current update URI https://curben.gitlab.io/malware-filter/urlhaus-filter-online.txt?_=229604 finally redirects to https://gitcdn.xyz/cdn/curbengh/urlhaus-filter/343648350b2134423b55be2f2eed7da4a6ddf310/urlhaus-filter-online.txt and the "update" succeeds - so, I was not notified of the real issue via the extension itself; however, inspecting that list revealed that the gitcdn.xyz mirror only delivers an outdated version of the list (from March 14th):

! Title: Online Malicious URL Blocklist
! Updated: Mon, 14 Mar 2022 00:11:32 +0000
! Expires: 1 day (update frequency)
! Homepage: https://gitlab.com/curben/urlhaus-filter
! License: https://gitlab.com/curben/urlhaus-filter#license
! Source: https://urlhaus.abuse.ch/api/
...

So, many thanks to the OP for making me aware of the issue! 😉 👍