gorhill / uMatrix

uMatrix: Point and click matrix to filter net requests according to source, destination and type
GNU General Public License v3.0
4.55k stars 470 forks source link

Page about:addons isn't block as expected #868

Closed WagnerGMD closed 6 years ago

WagnerGMD commented 6 years ago
* * * block
* 1st-party css allow
* 1st-party image allow

Hello,

at first you should remove the page about:addons from the whitelist. As reminder, once it's done uMatrix is supposed to block everything. Then just reload it. What do you see ? The addon catalogue is still there, right ? This trouble seem to exist only with the uMatrix WebExtension. Because it's contrary with the uMatrix Legacy (also known as uMatrix.firefox.xpi)

Kind regards.

gorhill commented 6 years ago

about:addons is a priviledged page, webext extensions do not work on these.

theWalkingDuck commented 6 years ago

That privileged page uses Google-Analytics and the best thing you can do is to remove the link to AMO site or to remove the whole "Get Add-ons" panel.

Steps to remove the "Get Add-ons" link:

or you can go a step forward and remove the whole panel

more info at: https://github.com/ghacksuserjs

ghacks-user.js
    user_pref("extensions.getAddons.showPane", false); // hidden pref
    user_pref("extensions.webservice.discoverURL", "");
WagnerGMD commented 6 years ago

Thank you for the explanation @gorhill and for the solution @theWalkingDuck which seeem's to work fine and no I wasn't aware.

As personal reminder (another subject maybe for the futur) : It wouldn't be better to provide a correct url ? As today, we can't read the url because the people didn't disable the function known as : Block all hyperlink auditing attempts.

def RewriteWrongAdress(SampleURL):
    import re
    SampleURL = re.sub("(?i)%2F","/",SampleURL)
    SampleURL = re.sub("(?i)%2E",".",SampleURL)
    SampleURL = re.sub("(?i)%5F","_",SampleURL)
    SampleURL = re.sub("(?i)%3A",":",SampleURL)
    SampleURL = re.sub("(?i)%3D","=",SampleURL)
    SampleURL = re.sub("(?i)%3F","?",SampleURL)
    print(SampleURL)
    return;
## The WebExtension can't use one language as Python (perhaps Rust, etc) ?
## It's sound very easy to fix and it might a little good improvement.