doogie icon indicating copy to clipboard operation
doogie copied to clipboard

Support CSP Injection In Ad Blocking Rules

Open cretz opened this issue 7 years ago • 1 comments

On the fanboy list (at https://fanboy.co.nz/r/fanboy-ultimate.txt, careful it's a big file) I get errors like:

Line 52030 unrecognized option: "csp=script-src 'self' * 'unsafe-inline' 'unsafe-eval'"
Line 52031 unrecognized option: "csp=script-src 'self' * 'unsafe-inline' 'unsafe-eval'"
Line 52032 unrecognized option: "csp=script-src 'self' * 'unsafe-inline' 'unsafe-eval'"
Line 52033 unrecognized option: "csp=script-src 'self' * 'unsafe-inline' 'unsafe-eval'"
Line 52034 unrecognized option: "csp=script-src 'self' * 'unsafe-inline' 'unsafe-eval'"
Line 52035 unrecognized option: "csp=script-src 'self' * 'unsafe-inline' 'unsafe-eval'"
Line 52036 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52037 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52038 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52039 unrecognized option: "csp=script-src 'self' * blob: 'unsafe-inline'"
Line 52040 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52041 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52042 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52043 unrecognized option: "csp=script-src 'self' 'unsafe-inline' http: https:"
Line 52044 unrecognized option: "csp=script-src 'self' * 'unsafe-inline'"
Line 52045 unrecognized option: "csp=script-src 'self' 'unsafe-inline' data: *.google.com *.google-analytics.com *.scorecardresearch.com"

Researching...

cretz avatar Jun 13 '18 15:06 cretz

Ref: https://issues.adblockplus.org/ticket/6451 and https://github.com/gorhill/uBlock/issues/1930#issuecomment-301052117 (as directed from https://github.com/gorhill/uBlock/releases/tag/1.13.0)

cretz avatar Jun 13 '18 15:06 cretz