Ingot icon indicating copy to clipboard operation
Ingot copied to clipboard

README: Ingot will not work on Chrome 106 or after

Open Nebelung-Dev opened this issue 2 years ago • 18 comments

Don't make an issue for this I can not fix it, sorry :(

Also developer mode just lets you see the extension id and version not sideload extensions

Nebelung-Dev avatar Oct 22 '22 02:10 Nebelung-Dev

What on chrome OS build 106 is stopping ingot. I'm wondering if there is a way around it?

Crushstar avatar Oct 22 '22 05:10 Crushstar

do you know why it stopped working?

RedGuyVR avatar Oct 26 '22 13:10 RedGuyVR

I used this for a couple days then it got patched with the new chrome version, is there any alternative to this? anything that has the same effect, just disabling extensions.

nevolua avatar Oct 27 '22 18:10 nevolua

It seems that a Content Security Policy is blocking this from working. image

bohrium2b avatar Oct 27 '22 20:10 bohrium2b

It seems that a Content Security Policy is blocking this from working. image

Maybe if the script was actually within the bookmarklet instead of fetching it from that site it would work?

nevolua avatar Oct 30 '22 18:10 nevolua

The loophole LTBEEF and Ingot used was patched in Chrome 106, it is not a CSP issue or anything and unfortunately, unless there is another "exploit" found they won't work for a while.

sylvxa avatar Nov 07 '22 17:11 sylvxa

I'm on version 102. My friend is also on version 102. Our chromebooks have no differences in policies, versions, model. Somehow this works on his device and nobody else's. If I log into my account on his it still works.

DodoSeal avatar Nov 18 '22 15:11 DodoSeal

whelp, i have a recommendation. create something of a policy destroyer

That's not possible...

DodoSeal avatar Nov 20 '22 23:11 DodoSeal

whelp, i have a recommendation. create something of a policy destroyer

That's not possible...

dude dont say its not possible you dont know that for sure.

raventhecrabraver avatar Nov 28 '22 19:11 raventhecrabraver

whelp, i have a recommendation. create something of a policy destroyer

That's not possible...

dude dont say its not possible you dont know that for sure.

Are you the one with the experience here. Just think, Google is a billion dollar company. They have extremely smart engineers.

DodoSeal avatar Nov 28 '22 21:11 DodoSeal

Here's what you do, make a bookmark with chrome://restart in it and name it something like Restart then make another bookmark with chrome://signOut the o has to be capitalized then click the signOut button first and press the blue button then press the restart and wait for it to load up, and your good!

Aka-but-nice avatar Dec 02 '22 18:12 Aka-but-nice

Here's what you do, make a bookmark with chrome://restart in it and name it something like Restart then make another bookmark with chrome://signOut the o has to be capitalized then click the signOut button first and press the blue button then press the restart and wait for it to load up, and your good!

Hey! so I've tried that it apparently doesn't work at all. what is the blue button?

miiuzu avatar Jan 20 '23 22:01 miiuzu

There is a bypass for iboss https://spacesaver.github.io/Ingot-for-iBoss maybe you could add that to your bypassing list the repository is https://github.com/SpaceSaver/Ingot-for-iBoss.

Antgod4 avatar Feb 05 '23 21:02 Antgod4

thanks!!

miiuzu avatar Feb 13 '23 11:02 miiuzu

It seems that a Content Security Policy is blocking this from working. image

Literally csp shit, you can't just load scripts, fetch doesn't work either.

Aka-but-nice avatar Mar 02 '23 01:03 Aka-but-nice

whelp, i have a recommendation. create something of a policy destroyer

That's not possible...

dude dont say its not possible you dont know that for sure.

Are you the one with the experience here. Just think, Google is a billion dollar company. They have extremely smart engineers.

What I'm saying, no IQ, you can't just edit policies, bro is straight up stupid.

Aka-but-nice avatar Mar 02 '23 01:03 Aka-but-nice

The loophole LTBEEF and Ingot used was patched in Chrome 106, it is not a CSP issue or anything and unfortunately, unless there is another "exploit" found they won't work for a while.

Nobody said it was about CSPs, it was a Chrome mistake involving the API management, this one was the only API, that can fuck up extensions how it did with ltbeef, there are many more exploits, just you can't delete extensions without management, it is intended behavior, without management you wouldn't be able to delete extensions and more, Chrome needed the management API, Chrome didn't expect people would use that API, for bypassing.

Aka-but-nice avatar Mar 02 '23 01:03 Aka-but-nice

do you know why it stopped working?

Yes, when Chrome added the management API, they didn't specify which extensions the webstore could disable, this also included admin ones. When Chrome realized their error, they made it so the webstore couldn't just disable an admin extensions, and this will most likely stay as there is no problems with this, you're not supposed to be able to delete admin extensions in the first place.

Aka-but-nice avatar Mar 02 '23 01:03 Aka-but-nice