decentraleyes issueshttps://git.synz.io/Synzvato/decentraleyes/-/issues2018-06-07T13:20:55Zhttps://git.synz.io/Synzvato/decentraleyes/-/issues/4Generalize the concept to any website2018-06-07T13:20:55ZGhost UserGeneralize the concept to any website*Created by: gadcam*
I find your addon useful but what about doing the same with any website?
Check this file out https://github.com/AliasIO/Wappalyzer/blob/master/src/apps.json. It is the file used by Wappalyzer to uncovers the technol...*Created by: gadcam*
I find your addon useful but what about doing the same with any website?
Check this file out https://github.com/AliasIO/Wappalyzer/blob/master/src/apps.json. It is the file used by Wappalyzer to uncovers the technologies used on a website, and sometimes with the versions.
I think using these regular expressions it could be achievable.
https://git.synz.io/Synzvato/decentraleyes/-/issues/6Create standard for custom resource bundles2022-06-15T12:44:55ZThomas RientjesCreate standard for custom resource bundlesIt should be possible for end-users, to create, share, and import custom resource bundles. This will allow us to keep Decentraleyes lean and tidy, without having to disappoint power-users. To be able to support these bundles, we will nee...It should be possible for end-users, to create, share, and import custom resource bundles. This will allow us to keep Decentraleyes lean and tidy, without having to disappoint power-users. To be able to support these bundles, we will need to develop an open standard. Bundles should contain the actual resources, and essential metadata (such as resource mappings, a title, and a description).
Feel free to weigh in with suggestions, ideas, or concrete proposals.
https://git.synz.io/Synzvato/decentraleyes/-/issues/10Consider mirroring Google Publisher Tags2018-06-07T13:20:55ZGhost UserConsider mirroring Google Publisher Tags*Created by: ssauce*
Several sites use www.googletagservices.com/tag/js/gpt.js (to serve ads?).
This is usually not blocked by uBlock lists.
It was originally in uBlock's mirror-candidates.txt:
https://github.com/gorhill/uBlock/blob/1...*Created by: ssauce*
Several sites use www.googletagservices.com/tag/js/gpt.js (to serve ads?).
This is usually not blocked by uBlock lists.
It was originally in uBlock's mirror-candidates.txt:
https://github.com/gorhill/uBlock/blob/1.3.6/assets/ublock/mirror-candidates.txt
https://git.synz.io/Synzvato/decentraleyes/-/issues/16Specific script element attributes prevent injections2023-08-01T19:37:06ZGhost UserSpecific script element attributes prevent injections*Created by: coloco21*
I have found that this extension broke the Google Play Store (http://play.google.com/) for me. It doesn't show the menu on the left, the search bar doesn't work, and clicking on install on an app's page doesn't wo...*Created by: coloco21*
I have found that this extension broke the Google Play Store (http://play.google.com/) for me. It doesn't show the menu on the left, the search bar doesn't work, and clicking on install on an app's page doesn't work either. Seems like a JS script is broken, but I don't have time to figure out which one.
Deactivating the extension fixes the problem as expected.
https://git.synz.io/Synzvato/decentraleyes/-/issues/26Use SRI to Detect More Libraries2018-06-13T04:11:09ZGhost UserUse SRI to Detect More Libraries*Created by: chris-barry*
Mozilla recently put in [SRI](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) support into Firefox. If a script tag has a SRI attached, and it matches the hash of a known, then it c...*Created by: chris-barry*
Mozilla recently put in [SRI](https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity) support into Firefox. If a script tag has a SRI attached, and it matches the hash of a known, then it can be assumed there is no need to download the resource.
Edit: To be clear, this would allow the same library hosted anywhere to be caught. I don't know the current usage of SRI, but hopefully it grows.
https://git.synz.io/Synzvato/decentraleyes/-/issues/34Add popular Google Fonts to the bundle2021-12-13T12:36:27ZGhost UserAdd popular Google Fonts to the bundle*Created by: notatestuser*
Plenty of sites use these. Could we mirror them in decentraleyes?
*Created by: notatestuser*
Plenty of sites use these. Could we mirror them in decentraleyes?
https://git.synz.io/Synzvato/decentraleyes/-/issues/37Add additional resources to the default bundle2019-02-03T00:35:20ZGhost UserAdd additional resources to the default bundle*Created by: heforfree*
will you add google recaptcha?
and script from script.aculo.us
http://madrobby.github.io/scriptaculous/
css from maxcdn.bootstrapcdn.com
https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css...*Created by: heforfree*
will you add google recaptcha?
and script from script.aculo.us
http://madrobby.github.io/scriptaculous/
css from maxcdn.bootstrapcdn.com
https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
css from jsdelivr.net
http://cdn.jsdelivr.net/bootstrap/3.3.4/css/bootstrap.min.css
and for addon name will better like "cache content" or "local content"
thank you
https://git.synz.io/Synzvato/decentraleyes/-/issues/44Add support for a wide range of languages2020-04-13T15:58:35ZThomas RientjesAdd support for a wide range of languagesNow that Decentraleyes has proper support for localizations, it's time to move this forward. Do you master a non-supported language? Please help out by translating this add-on on [Crowdin](https://crowdin.com/project/decentraleyes).
**L...Now that Decentraleyes has proper support for localizations, it's time to move this forward. Do you master a non-supported language? Please help out by translating this add-on on [Crowdin](https://crowdin.com/project/decentraleyes).
**Language requests:** If your preferred language is not in the current list, please post a request here or send me an email. I'll happily add any language you'd like to help maintain.
If you don't feel like signing up for Crowdin, feel free to ask for a source file package.
https://git.synz.io/Synzvato/decentraleyes/-/issues/64Situations in which the add-on does not work2018-06-13T04:38:52ZGhost UserSituations in which the add-on does not work*Created by: Gitoffthelawn*
Decentraleyes will work perfectly in almost all cases.
But it may not work on a few sites. Document why this is the case.
Topics to cover include:
- Incompatible security policies
- "Tainted" domains
- Whi...*Created by: Gitoffthelawn*
Decentraleyes will work perfectly in almost all cases.
But it may not work on a few sites. Document why this is the case.
Topics to cover include:
- Incompatible security policies
- "Tainted" domains
- Whitelisted domains
https://git.synz.io/Synzvato/decentraleyes/-/issues/69Start supporting other types of resources2018-06-07T13:20:56ZGhost UserStart supporting other types of resources*Created by: ivysrono*
https://fonts.googleapis.com/css?family=Open+Sans
http://fonts.googleapis.com/css?family=Open+Sans
http://platform.twitter.com/widgets.js
https://platform.twitter.com/widgets.js
*Created by: ivysrono*
https://fonts.googleapis.com/css?family=Open+Sans
http://fonts.googleapis.com/css?family=Open+Sans
http://platform.twitter.com/widgets.js
https://platform.twitter.com/widgets.js
https://git.synz.io/Synzvato/decentraleyes/-/issues/76Default theme files are similar third-party resources2018-06-07T13:20:56ZGhost UserDefault theme files are similar third-party resources*Created by: Gitoffthelawn*
I've noticed another similar class of downloaded third-party resources: UI creation images.
For example, take a look at http://filehippo.com
It currently loads http://code.jquery.com/ui/1.11.4/themes/smooth...*Created by: Gitoffthelawn*
I've noticed another similar class of downloaded third-party resources: UI creation images.
For example, take a look at http://filehippo.com
It currently loads http://code.jquery.com/ui/1.11.4/themes/smoothness/images/ui-bg_flat_75_ffffff_40x100.png
The issues with loading this third-party resource are similar to those of loading the other resources handled by this extension.
https://git.synz.io/Synzvato/decentraleyes/-/issues/86Tainted domains are a potential privacy issue2018-06-13T05:04:56ZGhost UserTainted domains are a potential privacy issue*Created by: Gitoffthelawn*
Decentraleyes stores data in `store.json` in a subfolder in the user's Firefox profile. This data contains a list of some of the domains the user has visited (_tainted_ domains).
This data file is not clear...*Created by: Gitoffthelawn*
Decentraleyes stores data in `store.json` in a subfolder in the user's Firefox profile. This data contains a list of some of the domains the user has visited (_tainted_ domains).
This data file is not cleared when the user clears their browsing history. This represents a privacy issue and possibly a security issue.
https://git.synz.io/Synzvato/decentraleyes/-/issues/88Can Google reCAPTCHAs be handled locally?2018-06-13T04:34:53ZGhost UserCan Google reCAPTCHAs be handled locally?*Created by: Gitoffthelawn*
Many sites, unbelievably, still use a Google recaptcha instead of using open-source solutions.
Is there any way that these could be hosted locally instead of from Google?
*Created by: Gitoffthelawn*
Many sites, unbelievably, still use a Google recaptcha instead of using open-source solutions.
Is there any way that these could be hosted locally instead of from Google?
https://git.synz.io/Synzvato/decentraleyes/-/issues/91Replace the default bundle with subscription lists2018-06-13T04:11:09ZGhost UserReplace the default bundle with subscription lists*Created by: najjara*
Since there are so many versions of the popular libs, and so many CDNs offering them, keeping up can become tedious and bothersome.
The main issue with CDNs is that requests are sent from visited pages that use th...*Created by: najjara*
Since there are so many versions of the popular libs, and so many CDNs offering them, keeping up can become tedious and bothersome.
The main issue with CDNs is that requests are sent from visited pages that use them, and this sends a signal to the CDN provider which violates the user's privacy (which is why this addon intercepts those request to provide those resources locally instead).
Here's an outline:
What if there were a list of popular libraries and CDNs, in addition to the option for the user to add their own library/CDN URL. At regular intervals (for example once a week) the addon will contact the list of CDNs specified to check if there's a newer version to store (it wouldn't send a referer or a site origin, because there isn't any).
This way the dev wouldn't have to keep up with all the requests and updates for a certain version or library, and it'll also reduce the size of the addon. The most popular libs can be included, or something similar to subscription lists used in uMatrix & uOrigin for a "default" experience. And the libraries can be all uploaded to a GitHub repo so that the addon contacts it instead of the hosting site directly for added privacy.
https://git.synz.io/Synzvato/decentraleyes/-/issues/94Replace Gravatar avatars with static images2018-06-07T13:20:56ZGhost UserReplace Gravatar avatars with static images*Created by: Gitoffthelawn*
Avatars served by gravatar behave, in some ways, similar to a CDN. At the least, gravatar poses many of the same issues as a traditional CDN.
Some websites like bitbucket.org don't look great when the user ...*Created by: Gitoffthelawn*
Avatars served by gravatar behave, in some ways, similar to a CDN. At the least, gravatar poses many of the same issues as a traditional CDN.
Some websites like bitbucket.org don't look great when the user simply blocks access to gravatar.com.
Would it be reasonable for this extension to have an option to replace "gravatars" with a static image?
https://git.synz.io/Synzvato/decentraleyes/-/issues/103Support popular mirrors of already supported CDNs2019-05-14T08:04:58ZGhost UserSupport popular mirrors of already supported CDNs*Created by: ivysrono*
fonts.gstatic.com-------------------fonts-gstatic.proxy.ustclug.org
fonts.googleapis.com--------------fonts.proxy.ustclug.org
ajax.googleapis.com----------------ajax.proxy.ustclug.org
storage.googleapis.com----...*Created by: ivysrono*
fonts.gstatic.com-------------------fonts-gstatic.proxy.ustclug.org
fonts.googleapis.com--------------fonts.proxy.ustclug.org
ajax.googleapis.com----------------ajax.proxy.ustclug.org
storage.googleapis.com------------storage-googleapis.proxy.ustclug.org
themes.googleusercontent.com----google-themes.proxy.ustclug.org
gerrit.googlesource.com-----------gerrit-googlesource.proxy.ustclug.org
secure.gravatar.com---------------gravatar.proxy.ustclug.org
fonts.googleapis.com------------------->fonts.geekzu.org
ajax.googleapis.com-------------------->sdn.geekzu.org/ajax
themes.googleusercontent.com------->sdn.geekzu.org/g-themes
fonts.gstatic.com------------------------->sdn.geekzu.org/g-fonts
They are very popular mirror sites for google in China.
They are equal.
However, they are not replaced by decentraleyes.https://git.synz.io/Synzvato/decentraleyes/-/issues/112Ideas for the future of the extension2018-06-07T13:20:55ZGhost UserIdeas for the future of the extension*Created by: KOLANICH*
In the following comments there are ideas, feel free to vote and add more.
*Created by: KOLANICH*
In the following comments there are ideas, feel free to vote and add more.
https://git.synz.io/Synzvato/decentraleyes/-/issues/114Loading a long page hangs the content process2018-06-07T13:20:55ZGhost UserLoading a long page hangs the content process*Created by: gitarra*
See this bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1232354
Decentraleyes suffers from the same issue.
*Created by: gitarra*
See this bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1232354
Decentraleyes suffers from the same issue.
https://git.synz.io/Synzvato/decentraleyes/-/issues/131Auto-create missing CDN resources on first load2018-06-28T21:30:33ZmwarrenusAuto-create missing CDN resources on first loadCould resources be created automatically by requesting the missing library from the CDN the first time? It seems no worse from a privacy perspective the first time; subsequent requests become private and speedier.Could resources be created automatically by requesting the missing library from the CDN the first time? It seems no worse from a privacy perspective the first time; subsequent requests become private and speedier.https://git.synz.io/Synzvato/decentraleyes/-/issues/140This add-on is incompatible with Adblock Latitude2018-06-07T13:20:55ZGhost UserThis add-on is incompatible with Adblock Latitude*Created by: lambic12*
I tried to use Decentraleyes with PaleMoon 26.5.0 + adblock latitude, and also with Firefox ESR 38.7.1 + adblock edge.
In both cases the browser hangs on page loading and has to be killed.
Adblock has to be disa...*Created by: lambic12*
I tried to use Decentraleyes with PaleMoon 26.5.0 + adblock latitude, and also with Firefox ESR 38.7.1 + adblock edge.
In both cases the browser hangs on page loading and has to be killed.
Adblock has to be disabled to have Decentraleyes usable.