search

schomery / popup-blocker

A reliable popup blocker with history
https://webextension.org/listing/popup-blocker.html
Mozilla Public License 2.0
145 stars 35 forks source link

Popup ad site, iframe window.open and avoidance measures - defeats popup-blocker #46

Open JonasNo opened 7 years ago

JonasNo commented 7 years ago

Example: https://www.iwatchonline.cr/episode/58490-wynonna-earp-s02e10

Click on the left white space side. It will redirect to an ad page and the popup will contain the previous site (the above one).

It use obfuscation and window.open, assume using an iframe to get the original function. I put event listener breakpoints on Mouse: click, mousedown, mouseup and contextmenu. You'll find the call to window.open in the function above where the breakpoint hits. (Expand the Closure and you'll see the open and text "admavenpop".

If you block IFRAME creation via createElement, the ad site opens in a new tab instead. Unknown how since window.open is hooked and disabled.

schomery commented 7 years ago

Is this on Firefox?

JonasNo commented 7 years ago

No this is in Chrome.

Firefox usually don't have these kinds of problems because its API doesn't hinder extension developers. Enables Adblock (and NoScript) to block such nastiness.

schomery commented 7 years ago

So without any adblocker I get this screen.zip

JonasNo commented 7 years ago

Those ads are sneaky that way, they change behavior and scripts. What software are you using to record that? Could be useful for demonstration in the future.

JonasNo commented 7 years ago

You did test it under incognito with devtools->Applications tab->Clear Storage->Clear site data button clicked, yes?