search

gorhill / uMatrix

uMatrix: Point and click matrix to filter net requests according to source, destination and type
GNU General Public License v3.0
4.55k stars 470 forks source link

Referer Spoofing + TypeKit #68

Open ghost opened 9 years ago

ghost commented 9 years ago

I''ve tried to get TypeKit to work by whitelisting it on Referer Spoofing, but it does not seem to work.

TypeKit generally needs to get the Referer of the site it is included on. So I whitelisted typekit.net assuming the 3rd Party request would be processed, but it doesn't appear to be.

It only works if whitelisting the actual site you are on.

ghost commented 9 years ago

I'd like to add to this, that I use Referer Control. The behavior of uMatrix seems to be to send that site's Referer, because Referer tests change from Google Search to that site.

I set that addon to do that (just send REFERER_HOST for all sites), and TypeKit fonts work.

gorhill commented 9 years ago

does not seem to work [...] It only works if whitelisting the actual site you are on.

It's not a bug, it's how the feature works: See Per scope switches:

allow a user to customize various settings for a specific scope

ghost commented 9 years ago

Is there any way within the context of uMatrix to make this work?

Otherwise I’m just going to have to globally disable it and keep using the other add-on for now.

On Sun, Nov 23, 2014 at 11:24 AM, Raymond Hill notifications@github.com wrote:

does not seem to work [...] It only works if whitelisting the actual site you are on.

It's not a bug, it's how the feature works: See Per scope switches https://github.com/gorhill/uMatrix/wiki/Per-scope-switches:

allow a user to customize various settings for a specific scope

— Reply to this email directly or view it on GitHub https://github.com/gorhill/uMatrix/issues/68#issuecomment-64123576.

myshen commented 9 years ago

@CODYQX4 Open the "per scope switch" menu and turn off "Referer spoofing". That removes the conflict with Referer Control. Don't forget to save changes to the scope!

ghost commented 9 years ago

I disabled it globally a long time ago to fix that, as I spoof all sites with RefControl.

Sent from my iPhone 6 Plus

On Jan 23, 2015, at 11:30 AM, Matt Shen notifications@github.com wrote:

@CODYQX4 Open the "per scope switch" menu and turn off "Referer spoofing". That removes the conflict with Referer Control. Don't forget to save changes to the scope!

— Reply to this email directly or view it on GitHub.

myshen commented 9 years ago

Sounds like a good solution for a more general problem. I think that it's possible to disable referrer spoofing only on specific sites, e.g. referrer-spoof: wsj.com false so I thought that might help with specific sites like TypeKit.