1
0
mirror of https://github.com/gorhill/uBlock.git synced 2024-10-04 16:47:15 +02:00
uBlock/platform/chromium
Raymond Hill 9e4385243c
Web accessible secrets can be used for at most one second
Related issue:
- https://github.com/uBlockOrigin/uBlock-issues/issues/550

Related Chromium issue (I can't access it):
- https://bugs.chromium.org/p/chromium/issues/detail?id=957866

Findings so far: affects browsers based on Chromium 74.
I could not reproduce the issue with either Chromium 73 or
Google Chrome 75.

This commit is a mitigation: to prevent sites from using
uBO's internal WAR secret for tracking purpose. A secret
can be used for at most one second, after which a new secret
is generated.

The original issue related to the implementation of
secret-gated web accessible resources is:
- https://github.com/gorhill/uBlock/issues/2823
2019-04-30 14:36:07 -04:00
..
is-webrtc-supported.html fix warnings in browser console 2017-07-25 11:59:52 -04:00
is-webrtc-supported.js this fixes https://github.com/gorhill/uBlock/issues/533#issuecomment-167931681 2015-12-31 09:24:55 -05:00
managed_storage.json #985: might be the missing trailing # 2015-11-27 14:30:17 -05:00
manifest.json fix reported extension error in Chrome 72.0.3622.0 2018-12-05 14:46:35 -05:00
vapi-background.js Web accessible secrets can be used for at most one second 2019-04-30 14:36:07 -04:00
vapi-client.js Minor generic code review of changes since 1.18.2 2019-02-02 08:09:34 -05:00
vapi-common.js Refactor selfie generation into a more flexible persistence mechanism 2019-02-14 13:33:55 -05:00
vapi-usercss.js guard against future instances of issue fixed in #3721 2018-05-03 09:55:36 -04:00
vapi-usercss.pseudo.js guard against future instances of issue fixed in #3721 2018-05-03 09:55:36 -04:00
vapi-usercss.real.js fix another case of https://github.com/uBlockOrigin/uBlock-issues/issues/167 2018-09-29 18:56:59 -04:00
vapi-webrequest.js Make use of X-DNS-Prefetch-Control in Chromium-based browsers 2019-04-27 13:12:33 -04:00
vapi.js refactor some webRequest-related code (now that firefox legacy is out of the way) 2018-10-28 10:58:25 -03:00