Skip to content

GitLab

decentraleyes
decentraleyes

Microsoft has acquired GitHub. Decentraleyes has left GitHub. Welcome to its new home!

To participate, please register, or sign in with an existing GitLab.com, Bitbucket, or GitHub account.

Past contributions on GitHub? Be sure to reclaim your Comments, Issues, and Pull Requests.

Open
Opened by zsrfrrfam@zsrfrrfam

Resources blocked by uBlock Origin are injected locally in 2.0.15

I have configured uBlock Origin to block all 3rd-party scripts globally and only noop them on the fly when necessary. According to the FAQ, Decentraleyes respect content blockers and does not serve blocked resources. This does not seem to be true after the recent 2.0.15 update.

STR:

  1. Add * * 3p-script block in My rules tab in uBlock Origin
  2. Visit https://decentraleyes.org/test/

Expected Behavior:

No local resources were injected because ajax.googleapis.com is blocked by uBlock Origin as 3rd-party script

Actual Behavior:

Injection counts on extension icon and popup panel suggest that resources were injected locally for ajax.googleapis.com, and no request to ajax.googleapis.com can be seen on Firefox's Network panel. If I add decentraleyes.org to the whitelist, Network panel shows that requests to ajax.googleapis.com were blocked by uBlock Origin.

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information