Stories
Slash Boxes
Comments

SoylentNews is people

uBlock Origin Criticized for Blocking Content Security Policy

posted by Fnord666 on Monday October 23 2017, @09:09AM   Printer-friendly
from the Digital-Arms-Race dept.

MrPlow writes:

Submitted via IRC for TheMightyBuzzard

The popular content blocking extension uBlock Origin blocks CSP reporting on websites that make use of it if it injects neutered scripts.

CSP, Content Security Policy, can be used by web developers to whitelist code that is allowed to run on web properties. The idea behind the feature is to prevent attackers from injecting JavaScript on websites protected by CSP.

CSP reports any attempt of interfering with the site's policies in regards to scripts to the webmaster. This happens when users connect to the site, and is used by webmasters to analyze and resolve the detected issues.

[...] Raymond Hill, the developer of uBlock Origin, replied stating that this was not a bug but by design. The extension blocks the sending of CSP reports if it injects a neutered Google Analytics script.

Source: https://www.ghacks.net/2017/10/19/ublock-criticized-for-blocking-csp/

Original Submission

 
This discussion has been archived. No new comments can be posted.
uBlock Origin Criticized for Blocking Content Security Policy | Log In/Create an Account | Top | 89 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 1, Insightful) by Anonymous Coward on Tuesday October 24 2017, @05:54AM (2 children)

    by Anonymous Coward on Tuesday October 24 2017, @05:54AM (#586738)

    "having ads" != "fucking your users' privacy, bandwidth, and security with ad networks, trackers, non-vetted third-party JS, and ad videos and scripts that can reach hundreds of megabytes"

    You can have static ads and host them yourself. There's a bunch of sites doing this. There's also services like Flattr and Patreon. If ad networks die a fiery death, other means of payment can be developed in the vacuum, and non-hobby websites can adapt or fail, as any other business.

    Web without adblockers is almost completely unusable and way too dangerous. Browsing without disabling that bullshit is like eating sushi you picked up from the street. Have fun with ransomware, hope you have good backups.

    Starting Score:    0  points
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  
    Total Score:   1  

  • (Score: 2) by chromas on Tuesday October 24 2017, @09:12AM

    by chromas (34) Subscriber Badge on Tuesday October 24 2017, @09:12AM (#586787) Journal

    "having ads" != "fucking your users

    Exactly this. We could go back to basic text and static image ads, but they kinda shat the bed. It would take a bit to regain trust. Or not. How many people still don't run ad blockers?

  • (Score: 2) by Pino P on Tuesday October 24 2017, @01:17PM

    by Pino P (4721) on Tuesday October 24 2017, @01:17PM (#586835) Journal

    You can have static ads and host them yourself. There's a bunch of sites doing this.

    What other prominent websites have gone this route, other than Daring Fireball [daringfireball.net]? I want to pass on the recommendation to self-host a site's ads, but I want to avoid replies to the effect: "That works for Daring Fireball but won't work for any other site."