You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The reason will be displayed to describe this comment to others. Learn more.
The problem with this commit:
Redirects through ensighten.com will no longer be stopped by strict blocking
All filters in Peter Lowe's could be argued to be 3rd-party, at which point it no longer make sense to use the list
The resolution for this sort of issue when a user wants to visit a provider of advertisement and/or tracking service is to ask them to disable their blocker: the vast majority of uBO users have no interest in visiting such sites, and I don't like the idea of lowering uBO's defense against these services advertiser/tracker everywhere for everybody for the sake of a handful of people who somehow are interested in visiting the site of these providers.
The reason will be displayed to describe this comment to others. Learn more.
Oh I see. I totally forgot about redirection cases. Yeah, I agree that switching it to 3p will lower defense against redirection. I'll revert the commit.
Should we check other cases that were switched to 3p, since I'm honestly not sure how to check if a domain is used for those purposes?
The reason will be displayed to describe this comment to others. Learn more.
There was a discussion a while ago, we should just stop converting to 3p, and leave things unchanged for now for other cases we may have changed in the past -- we might revisit eventually.
The reason will be displayed to describe this comment to others. Learn more.
@gorhill I wonder if could there be any ways to implement a redirection that's just based on part of the URL (not creating totally new URL). Some pre-defined simple patterns like ?url=. For example ||example.com^$redirect-url
It's not for this specific case of 1p-3p, since we don't know how each of these domains can be used for that purpose. But it would be useful for other common cases and it could reduce the complaints of strict-blocking
The reason will be displayed to describe this comment to others. Learn more.
Yup. For example previously, there's a case of reddit when users are not logged in, they will automatically add an outbound link https://out.reddit.com/t3_tiak32?url= before the link of any reddit's post after user clicking on it. This might not happen when users are logged in.
Go to https://www.reddit.com/r/politics/comments/tiak32/
Open the logger and choose All
Click on the href link https://www.businessinsider.com/biden-student-loan-debt-inaction-democrats-concerned-youth-turnout-midterms-2022-3, it will open the link in new tab
The reason will be displayed to describe this comment to others. Learn more.
Actually I was intended to ask if we should add ||out.reddit.com/t3_*?url=$doc as a click tracking prevent filter when seeing the report, but I was afraid that it could cause quite big trouble for a big site like reddit.
But yes, I will need to find some better cases that were already strict-blocked with redirection links, but I think I would open an issue/discussion thread in uBlock-issues since it's better for discussions than commit comments.
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The problem with this commit:
ensighten.com
will no longer be stopped by strict blockingThe resolution for this sort of issue when a user wants to visit a provider of advertisement and/or tracking service is to ask them to disable their blocker: the vast majority of uBO users have no interest in visiting such sites, and I don't like the idea of lowering uBO's defense against these services advertiser/tracker everywhere for everybody for the sake of a handful of people who somehow are interested in visiting the site of these providers.
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh I see. I totally forgot about redirection cases. Yeah, I agree that switching it to 3p will lower defense against redirection. I'll revert the commit.
Should we check other cases that were switched to 3p, since I'm honestly not sure how to check if a domain is used for those purposes?
Reverted: ac8afa5
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a discussion a while ago, we should just stop converting to
3p
, and leave things unchanged for now for other cases we may have changed in the past -- we might revisit eventually.2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I agree.
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@gorhill I wonder if could there be any ways to implement a redirection that's just based on part of the URL (not creating totally new URL). Some pre-defined simple patterns like
?url=
. For example||example.com^$redirect-url
It's not for this specific case of
1p-3p
, since we don't know how each of these domains can be used for that purpose. But it would be useful for other common cases and it could reduce the complaints ofstrict-blocking
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I can't tell my opinion without seeing specific cases related to what you suggest.
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yup. For example previously, there's a case of reddit when users are not logged in, they will automatically add an outbound link
https://out.reddit.com/t3_tiak32?url=
before the link of any reddit's post after user clicking on it. This might not happen when users are logged in.Issue report:
https://www.reddit.com/r/uBlockOrigin/comments/tihpyw/comment/i1f290z/?context=3
Steps to reproduce:
https://www.reddit.com/r/politics/comments/tiak32/
All
https://www.businessinsider.com/biden-student-loan-debt-inaction-democrats-concerned-youth-turnout-midterms-2022-3
, it will open the link in new tab2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The case you show is not a case of overzealous strict-blocking users complain about. You want to add strict blocking when a user click a reddit link?
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actually I was intended to ask if we should add
||out.reddit.com/t3_*?url=$doc
as a click tracking prevent filter when seeing the report, but I was afraid that it could cause quite big trouble for a big site like reddit.But yes, I will need to find some better cases that were already strict-blocked with redirection links, but I think I would open an issue/discussion thread in
uBlock-issues
since it's better for discussions than commit comments.2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Best to discuss this with other contributors in a discussion thread.
2cb3181
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, will do.