search

mlgualtieri / CSS-Exfil-Protection

Official repository for the CSS Exfil Protection browser extensions.
MIT License
155 stars 11 forks source link

CSS Exfil Protection conflicts with uBlock Origin #22

Closed RustyBurton closed 4 years ago

RustyBurton commented 4 years ago

Hello mlgualtieri.

I have been using your excellent extension from day one. From the first day I discovered a problem that is present in all versions of your extension. I ignored her until she began to bother me. It consists in the following. I block in uBlock Origin all known cdn css inline fonts. Like fonts.googleapis.com, bootstrapcdn.com, cloudfront.net, jsdelivr.net etc. But CSS Exfil Protection overrides blocking rules uBlock Origin and browser create connection to this cdn providers. If CSS Exfil Protection disabled blocking rules uBlock Origin works fine. Is it possible to somehow fix this? uBlock Origin is a very popular extension and this problem affects a lot of people. Regards.

mlgualtieri commented 4 years ago

I'll need to do more research to understand what might be possible. I actually didn't realize that this was happening, but it makes sense as extensions operate at a lower level in the browser. As far as I'm aware there isn't a mechanism that would allow two extensions to communicate with each other, and I don't believe there is a uBlock API available that would allow some sort of communication.

So, I'll need to think about this one a bit more. I recognize it's an issue though, and something that I think should be addressed in some way.

mlgualtieri commented 4 years ago

I investigated this and I can't replicate the issue you describe. I've tested in both Firefox and Chrome and when uBlock Origin is set to block a domain, it also blocks the request made by CSS Exfil Protection. This also appears to be the case with other privacy extensions, like Privacy Badger.

So, perhaps there is another issue with your particular browser config?

mlgualtieri commented 4 years ago

I'm going to close this issue for now, pending more information since I can't replicate.