Merge1.56.0 #2515
Merge1.56.0 #2515
Commits on Jan 4, 2024
Commits on Jan 9, 2024
-
Do not use tab character as field separator
Related issue: uBlockOrigin/uBlock-issues#2730 (comment) Character `\x1F` is now used instead.
Commits on Jan 10, 2024
-
Add
elementsvararg toprevent-addEventListenerscriptletIf present, `elements` vararg must be a valid CSS selector, which will be used to apply the scriptlet to only elements matching the selector. Related issue: uBlockOrigin/uBlock-issues#3061 Example of usage: [...]##+js(aeld, click, return"undefined", elements, a.indirect)
-
-
-
Commits on Jan 11, 2024
-
Do not prevent applying changes when lists are updating
Related issue: uBlockOrigin/uBlock-issues#3066
-
Shield some code paths against potentially tampered global properties
Related feedback: uBlockOrigin/uAssets#21895 (comment)
-
-
-
-
Do not exceed rate-limited calls to handlerBehaviorChanged()
Related issue: uBlockOrigin/uBlock-issues#3063 To prevent spurious performance warnings by chromium-based browsers.
-
-
-
Commits on Jan 12, 2024
Commits on Jan 14, 2024
Commits on Jan 16, 2024
Commits on Jan 17, 2024
Commits on Jan 18, 2024
Commits on Jan 19, 2024
-
Unregister all scriptlets when disabling uBO on a specific site
Related issue: uBlockOrigin/uBlock-issues#3083 This will not completely eliminate the issue but it should lower the likelihood it will occur -- so at least uBO can still benefit from reliable scriptlet execution in Firefox.
-
Remove minimum height constraint from "My filters" pane
Related issue: uBlockOrigin/uBlock-issues#3058
-
-
-
Commits on Jan 20, 2024
-
Add support for
extraMatchintrusted-click-elementscriptletRelated issue: uBlockOrigin/uAssets#20744 (comment) Reference documentation: https://github.com/AdguardTeam/Scriptlets/blob/master/wiki/about-trusted-scriptlets.md#-%EF%B8%8F-trusted-click-element Except that in uBO's implementation, if a regex is given as value to match, it will be tested against an assembled "key=value" string.
-
-
-
Commits on Jan 21, 2024
-
Fix decompiling of scriptlet parameters
Scriptlets parameters which are quoted must be re-quoted when output to the logger to be sure they can be properly looked up in the list, and that they can be used through copy-paste operations.
-
-
-
-
Code review recent commit re. quoting parameters
Related commit: gorhill@fa3a290
-
-
-
-
Commits on Jan 22, 2024
-
[mv3] Fix conversion of
:xpathprocedural filtersProcedural filters with `:xpath` operator were silently rejected at conversion time because the parser was failing to evaluate the xpath expression due to the absence of a `document` object in nodejs. If `document` object is not present, the parser will assume the xpath expression is valid.
Commits on Jan 25, 2024
-
Output scriptlet logging information to the logger
This commit brings the following changes to the logger: All logging output generated by injected scriptlets are now sent to the logger, the developer console will no longer be used to log scriptlet logging information. When the logger is not opened, the scriplets will not output any logging information. The goal with this new approach is to allow filter authors to more easily assess the working of scriptlets without having to go through scriptlet parameters to enable logging. Consequently all the previous ways to tell scriptlets to log information are now obsolete: if the logger is opened, the scriptlets will log information to the logger. Another benefit of this approach is that the dev tools do not need to be open to obtain scriptlets logging information. Accordingly, new filter expressions have been added to the logger: "info" and "error". Selecting the "scriptlet" expression will also keep the logging information from scriptlets. A new button has been added to the logger (not yet i18n-ed): a "volume" icon, which allows to enable verbose mode. When verbose mode is enabled, the scriptlets may choose to output more information regarding their inner working. The entries in the logger will automatically expand on mouse hover. This allows to scroll through entries which text does not fit into a single row. Clicking anywhere on an entry in the logger will open the detailed view when applicable. Generic information/errors will now be rendered regardless of which tab is currently selected in the logger (similar to how tabless entries are already being rendered).
-
-
-
-
-
-
Commits on Jan 26, 2024
-
Fix regression in looking up scriptlets for entity
Related feedback: https://www.reddit.com/r/uBlockOrigin/comments/19fihsu/
-
-
-
-
Ensure scriptlet logging information make it to destination
Avoid race conditions between isolated world-side broadcast channel and main-side broadcast channel, so as to not lose logging information if the isolated world-side is not yet ready to receive through its broadcast channel. Additionally, added new scriptlet: `trusted-replace-argument`. [...]##+js(trusted-replace-argument, fn, argpos, argval [,condition, pattern]) Where: - `fn` is the function we want to proxy through an `apply` handler. This can also be a class, in which case the scriptlet will proxy through `construct` handler. At the moment, `fn` must exist at the time the scriptlet executes. - `argpos` is the 0-based position of the argument we want to change - `argval` is the value we want to have for the argument -- the value is interpreted the same way the value for `set-constant` is interpreted. - `condition, pattern` is a vararg which tells the scriptlet to act only if `pattern` is found in the argument to overwrite. Example of usage: alliptvlinks.com##+js(trusted-replace-argument, MutationObserver, 0, noopFunc) -
-
-
-
-
-
Commits on Jan 27, 2024
-
Fix error when site has only exception scriptlet filters
Cause by recent refactoring of scriptlet-related code.
-
-
-
-
-
-
-
-
-
-
-
-
Add
remove-cache-storage-itemscriptletUsage: ...##+js(remove-cache-storage-item, cacheNamePattern[, urlPattern]) `cacheNamePattern`: the name of the cache to target. Plain string or regex. `urlPattern`: the URL of the resource to remove. Plain string or regex. If no pattern is provided, the whole cache is removed. Reference: https://developer.mozilla.org/en-US/docs/Web/API/CacheStorage
-
Output more information to dev console when loading filter lists
Related discussion: uBlockOrigin/uBlock-issues#2993 (reply in thread)
-
-
Commits on Jan 28, 2024
-
-
-
-
-
Related feedback: uBlockOrigin/uBlock-issues#3096 (reply in thread) Related commit: gorhill@6cfba08
-
Commits on Jan 31, 2024
Commits on Feb 1, 2024
Commits on Feb 2, 2024
Commits on Feb 13, 2024
-
Fix potential exfiltration of browsing history by a rogue list author…
… through `csp=` As reported internally to ubo-security by https://github.com/distinctmondaylila One issue is a regression from the rewriting of the static filtering parser in version 1.47.0, specifically the following commit: gorhill@8ea3b0f64c The existing regex was no longer suitable to properly detect some usage of `report-xxx` in the rwritten parser. Another issue which predates 1.47.0 is that the regex used for validation was case-sensititive, while the `report-uri` directive can be written using uppercase letters, i.e. `Report-uri`.
-
Ignore event handler-related attributes in
set-attrscriptletAs suggested by https://github.com/distinctmondaylilac in internal email to ubo-security: > As a sidenote, it may be worth considering if `set-attr` should > be able to set event handler attributes. It could potentially > be used to copy the contents of e.g. onclick to other event handlers, > resulting in self-clicking buttons.
-
Fix potential exfiltration of browsing history by a rogue list author…
… through permissions= As with `csp=` option, reporting capabilities need to be taken into account with `permissions=` option. Reference: https://github.com/w3c/webappsec-permissions-policy/blob/main/reporting.md This commit ensures that `permissions=` option using `report-to` are marked as invalid.
-
-
-
-
-
-
-
-
Commits on Feb 14, 2024
-
In
set-attr, restricton...attributes to empty string onlyAs per feedback from https://github.com/distinctmondaylilac Related commit: gorhill@3037ae5f04 Additionally, added logging ability to the scriptlet.
-
Improve
prevent-addEventListenerscriptletRelated feedback: uBlockOrigin/uBlock-issues#3061 (comment)
-
-
-
-
Fix logging code in
trusted-replace-argumentscriptletRelated feedback: uBlockOrigin/uBlock-discussions#859 (comment)
-
-
-
[mv3] Reuse rule ids across release where possible
This is to reduce the diff size of rulesets in new releases. Beside smaller diff size, this also makes it easier to investigate rule changes across releases.
-
Fix improper invalidation of valid
uritransformexception filtersRelated feedback: uBlockOrigin/uBlock-discussions#831 (reply in thread)
-
-
-
Further improve detection of forbidden
report-xxxusage in filtersAs per feedback from https://github.com/distinctmondaylila
-
Further improve detection of forbidden
report-xxxusage in filtersAs per feedback from https://github.com/distinctmondaylila Related commit: gorhill@db5656f607
-
-
-
-
-
-
