ublock users

[trium]

ublock v1.33.2

github-actions released this

Feb 1, 2021

Closed as fixed:

• After downgrading to 1.32.4, uBO is broken
• Whitelisting a site on Chromium Edge still blocks resources fetched by service worker

[trium]

ublock v1.34.0

github-actions released this

Mar 10, 2021

Closed as fixed:

• Picker glitch with elements with special characters in their tag name
• Expose CNAME-uncloaking as a Privacy option in the Settings pane
• Impossible to add explicit exception for implicit strict blocking
• Invalid network filters suggested in element picker
• Use +/- in the popup to indicate whether 3-p frames were blocked

Notable commits without en entry in the issue tracker

• Fix no-scripting switch not working for SVG-based documents
• Upgrade CodeMirror to 5.59.2
• Fix 'adsbygoogle' neutered script
• Inject procedural cosmetic filterer's code only when needed

[trium]

ublock v1.35.0

github-actions released this

Apr 21, 2021

New

New filtering ability to remove specific response headers from document resources. Example:

example.com##^responseheader(refresh)

Only the following response headers are allowed to be removed, anything else will cause the filter to be invalid and discarded:

• location
• refresh
• report-to
• set-cookie

Chromium-based browsers

Google's FLoC is defused by default. Websites will be able to use the FLoC API (only if already present), but will be unable to get a result from it -- uBO causes the API to always fail as if there was no FLoC data available.

If your Chromium-based browser supports the FLoC API, this is the result you should get with uBO when testing with EFF's "Am I FLoCed?" (assuming you did not disable uBO's "uBlock filters -- Privacy" list):

Additionally, uBO causes all websites to opt-out of being part of FLoC calculation by injecting the appropriate response header.

You can opt-in to FLoC by creating the appropriate exception filter, see commit message for details.

Closed as fixed

• Block FLoC checks in Chrome/uBO
• json-prune doesn't remove all properties by full wildcard

Notable commits without en entry in the issue tracker

• Remove advanced setting ignoreScriptInjectFilters
• Finalize 3rd-party scripts/frames mini-filtering widget
• Remove advanced setting ignoreRedirectFilters
• Fix regex used to extract attribute name in element picker
• Add support for removal of response headers

[trium]

ublock v1.35.2

github-actions released this

Apr 30, 2021

Closed as fixed:

Firefox 66.0 and earlier.

• Element picker, zapper and procedural filtering not working on facebook.com

Notable commits without en entry in the issue tracker

• Better handle network error when fetching sublist
• Stop autoplay for unset media source with no-large-media-elements
• Use CDN URLs as fall back URLs

[trium]

ublock v1.36.0

github-actions released this

7 days ago

Closed as fixed

Chromium

• uBlock does not load adminSettings at first run

Firefox

• Bizarre perf drain when ajaxing in 90,000 DOM nodes in a react component

Core

• Google Tag Manager eventCallback in a populated dataLayer not called
• Countering a removeparam filter causes page-redirect problem
• Asset viewer shows no space between !#endif and a comment line in uBlock's list
• Text in Manage Extension Shortcuts includes escaped ­
• In popup, the Reload button becomes immediately hidden if re-enabling the large power button too quickly

Notable commits without en entry in the issue tracker

• Add ability to linger for remove-class scriptlet
• Add empty array, object to set-constant scriptlet
• Fix potential exception when casting to string
• Make googletagmanager_gtm.js an alias of google-analytics_analytics.js
• Ensure getter/setter are called with proper context
• Allow filter list subscription through context menu
• Keep reporting last time "out of date" lists were updated
• Fix improper hashing of rules in classic popup panel

[trium]

firefox legacy v1.16.4.29

JustOff released this

14 days ago

Change

• Update scriptlets from the upstream
  • Fix 'adsbygoogle' neutered script
  • Add any-delay to timeout/interval boosters
  • Add support for "remove all properties" in json-prune scriptlet
  • Ensure getter/setter are called with proper context
  • Fix potential exception when casting to string
  • Add empty array, object to set-constant scriptlet
  • Add ability to linger for remove-class scriptlet
  • Add missing getResponseInformation() method to neutered JS API
  • Use zero-based index for id
  • Make googletagmanager_gtm.js an alias of google-analytics_analytics.js
• Update filter lists
  • Update Fanboy's filter lists
  • Update URL of HUN filter list
  • Replace "EasyList China" with "AdGuard Chinese"
  • Removing Fanboy Enhanced Tracking
  • Add fallback URLs for "IRN: Adblock-Iran"
  • Update ABPVN List url to uBO specific support
• Update filter lists not included in the package
• Use getWindowlessBrowserFrame for all supported applications

[trium]

ublock v1.36.2

github-actions released this

Jul 6, 2021

Closed as fixed

• DoS with strict-blocking filter

[trium]

ublock v1.37.0

github-actions released this

Jul 23, 2021

Closed as fixed

Core

• '$popup' not working
• Service worker "tabless" requests with correct context are still modified when page is whitelisted
• Back/Forward navigation does not work between Ublock Origin option pages
• csp_report filter created via logger is marked as invalid
• Extreme popup blocking - uBo dashboard is blocked when popups are
• ipv6 fe80::1%lo0 localhost from hosts file is marked as error line
• Whitespaces are now stripped from blocking-rule URLs, causing rules targeting whitespaces to fail and/or block extremely broadly
• uBO's dashboard does not refresh custom filters in real-time
• Element picker/zapper don't work if cosmetic filtering is disabled
• Logger always highlights first match
• Static filtering: Cannot prevent my filter from strict-blocking

Notable commits without en entry in the issue tracker

• Provide visual cue in popup panel when base domain has subdomains
• Disclose where uBO's own filter lists are hosted
• Add abort-current-script scriptlet
• Fix spurious error messages when updating contextual menu
• Make getByName() return an dummy Tracker object
• Add asap behavior to remove-attr scriptlet
• Ensure pending callbacks are called only once

[trium]

ublock v1.37.2

github-actions released this

Jul 28, 2021

Closed as fixed:

• uBO 1.37 breaks at least some sites that use googletagmanager if specific filters in use

[trium]

firefox legacy v1.16.4.30

JustOff released this

Jul 20, 2021

Change

• Limit recursion when parsing URL in document-blocked page

[trium]

ublock v1.38.0

New

:matches-path(...)

New cosmetic procedural operator, :matches-path(...). See "Add $path modifier of Adguard or any equivalents of this".

Node.js

A new Node.js package will now published with every release. The package allows to import and use uBO's static and dynamic filtering engines into Node.js. This is currently minimal and a first iteration, and issues regarding the Node.js package are accepted in order to improve usability of uBO's filtering engines in a Node.js package. The ability to run code from a Node.js package also opens the door to have test coverage in uBO.

For now the package can be downloaded and unzipped locally. Once installed, you can execute node test in the root of the package to verify that the static network filtering engine works properly. For usage, refer to the test.js, or ublock.js used in Cliqz's benchmark.

Since I have little experience with dealing with Node.js environment/packages, thanks to @mjethani for assistance.

Removed

The setting "Prevent WebRTC from leaking local IP addresses" has been removed since it is no longer necessary in modern browsers, except for Firefox for Android where the issue is still present.

Closed as fixed:

• Remove WebRTC leak prevention
• $removeparam doesn't work well with UrlEncoded gb2312 Chinese word
• Scriptlets don't work randomly in Firefox
• Security: comments can be used to smuggle url() functions into css values
• Prevent uBO from hiding html or body when matched by a generic cosmetic filter
• On Android Popup Overlays [or Underlays] On-Screen Navigation Buttons
• Add $path modifier of Adguard or any equivalents of this
• The overview panel will not show everything if the uBO's icon is placed in the Firefox overflow menu
• [patch by @vtriolet] TypeError in noscript-spoof scriptlet with invalid meta refresh URL
• TypeError when trying to use element picker on plaintext resource
• Split out core functionality into separate module
  • This is of course an ongoing work for the foreseeable future, but the concrete goal sought in the issue has been reached, i.e. the static network filtering engine can be used as a nodejs module with no external dependencies.
  • Since uBO's codebase now uses JS modules, the minimum version of supported browsers has been increased to Chromium 61, Firefox 60, and Opera 48.

Notable commits without an entry in the issue tracker

• Better lookup all elements under mouse cursor in element picker
• Add visual hint to grab area of element picker dialog
• Add no-xhr-if scriptlet
• Refactor hntrie to avoid the need for boundary cells
• Fix bad test in WASM version of HNTrieContainer
• Export the rule-based filtering engines to the nodejs package
• Rewrite logical expressions for ESLint
• [patch by @mjethani] Add Makefile
• [patch by @mjethani] Make uAssets a submodule
• Ensure compiled sections are ordered in ascending id
• Fix handling of some procedural cosmetic filters with explicit :scope

[trium]

ublock v1.38.2

Closed as fixed:

• Regression with important filter option
• Weird issues with removeparam and negated types

[trium]

ublock v1.38.4

Notable commits without an entry in the issue tracker

• Update twitch-videoad scriptlet (solution contibuted by @pixeltris)

[trium]

ublock v1.38.6

Closed as fixed

• [patch by @pixeltris] Fix broken twitch.tv functionality

[trium]

ublock v1.39.0

Important

Fixed security issues reported by @hackvertor, see "uBlock, I exfiltrate: exploiting ad blockers with CSS".

New

A new "Report an issue on this website" icon has been added to the popup panel, to make it easier to report filter issue to volunteers maintaining filter lists. Reporting filter issues through this new feature requires a GitHub account.

A new Support pane has been added to the dashboard, to make it easy for users to share technical information about their current uBO's configuration, and consequently make it easier for volunteers to diagnose reported issues.

Closed as fixed

Chromium

• Text editing boxes have mouse location issues in higher DPIs
• Cosmetic filters not working on many websites with "Experimental Web Platform features" in chrome://flags
  • This also fixed "Security: Comments can still be used to smuggle arbitrary CSS", which was reported afterward.

Core

• [discovered by @hackvertor] Security: Cosmetic filters can make background requests using image-set() on Firefox
• uBlock GA overwrites breaking _link implementation when using a named property
• [discovered by @hackvertor] Security: Smuggle arbitrary CSS inside cosmetic uBlock filters
• [discovered by @hackvertor] Security: JavaScript URL injection allowed in query string parameter and redirection to uBlock origin urls
• Fix not highlighting cases of invalid syntax
• [patch by @pixeltris] Twitch bypass is circumvented
• Extension report website adblocking option
• [patch by @eligrey] Don't assume document.documentElement is non-null
• Add support for pseudo classes

Notable commits without an entry in the issue tracker

• Do not decode query parameter name when used as token
• Suggest network filter as best candidate by default
• Auto-escape commas in removeparam's regexes
• Simplify handling of valid HTML tags in i18n files
• Give precedence to negated types in case of ambiguity
• Fix regression in isBlockImportant()
• Add refresh-defuser scriptlet
• Add advanced setting to modify default webext flavor
• Convert fingerprint2.js scriptlet into a redirectable resource

 

 

[trium]

ublock v1.39.2

30. Nov 2021

Closed as fixed

• 'Address of webpage' textbox needs to be readonly or changes to it need to be monitored

Notable commits without an entry in the issue tracker

• Fine tune new reporting feature
• Link to filter descriptions (patch by @breyed)
• Reject generic HTML block filters

[trium]

ublock v1.40.0

22. Dec 2021

Notes:

Given that the format of compiled lists and selfie changed, this may cause a noticeable delay for the first launch after updating to 1.40.0 on less powerful devices. For a concrete example, in Firefox for Android I got ~7 seconds launch time after update to 1.40.0. Subsequent launches will be back to normal, for example on mobile I get ~790ms with selfie (and "uBlock filters -- Annoyances" enabled). On more powerful devices, this should be less noticeable if at all.

Closed as fixed:

• Inconsistent line-break in the support pane for Japanese environment
• Wrong description in Trusted site pane
• Update nobab
• Specific-generic cosmetic filter is not disabled by generichide
• "Your request URL is too long": problem with too many filters and the new "problem with filter lists" button
• Exceptions do not work when processing requests with long paths

Notable commits without an entry in the issue tracker

• Improve auto-completion in "My filters" editor
• Store domain= option into trie container's character buffer
• Partially bring suspendTabsUntilReady out of experimental status
• Fix potentially reporting wrong context in logger for ghide filters
• Fine-tune static network filtering engine code
• Wait for placeholders to be present (in googlesyndication_adsbygoogle.js)
• Create synthetic event for new windows created from external application
• Add window.close scriptlet
• Store regex filter pattern into bidi-trie buffer
• Ignore pointless trailing *^ in network filters
• Change compiled list format to a saner block id management
• Store generic pattern string into bidi-trie buffer
• Remove classes specialized in handling single-wildcarded patterns
• Refactoring work in static network filtering engine
• Have getAll() returns at least one neutered Tracker object

[trium]

ublock v1.40.2

26. Dec 2021

Closed as fixed:

• localhost: breakage

[trium]

ublock v1.40.4

02. Jan 2022

Notes

This release is intended for Chromium-based browsers only.

Closed as fixed:

Chromium

• Better test for presence of browser extensions API

Notable commits without an entry in the issue tracker:

• Offer a way to disable tab-reloading at launch on Chromium-based browsers
• Fix broken suspendTabsUntilReady for Chromium-based browsers

[trium]

ublock v1.40.8

11. Jan 2022

• Fix selfie with invalid data in some circumstances (reported internally by @gwarser)
  • Fix bad release 1.40.6: the previous release should have forced an invalidation of existing selfie, I overlooked this.

[trium]

ublock v1.41.0

08. Feb 2022

Firefox: Rejected by Mozilla Add-ons Team. The reason is that I did not provide an exact link to the origin of the hsluv-0.1.0.min.js library used by uBO to implement dark theme (uBO's About page does credit the author of the library). A README has been added to 1.41.2 to disclose the exact origin of the library.

Notes

Minimum supported browser versions has been bumped up:

• Firefox 68
• Chromium 66
  • Consequently, Opera 53

New

Dark mode

Support for dark mode added to the Settings pane, under the (new) Appearance section:

The new setting can be either Auto, Light, or Dark.

In addition, there is a new setting to control the accent color used by uBO throughout its user interface:

For example, changing the accent color changes the look of the popup panel:

Behavior at browser launch

A new setting in "Filter lists" pane to control whether uBO should wait for all filter lists to be loaded before unsuspending network activity.

By default, at browser launch uBO waits for all filter lists to be loaded before unsuspending network activity so as to ensure web pages are properly filtered at launch.

The new setting allows to opt out of network activity suspension at launch, i.e. allowing web pages to load without waiting for filter lists to be fully loaded, of course at the cost of potentially not filtering properly those web pages.

Closed as fixed:

Chromium-based browsers

• Conflicted with another extension called WebRTC Protect

Core

• Logger incorrectly reporting header= filters
• Picker is broken by quotation mark in attribute
• Use "…" instead of "..."
• Fix bad detection of unnecessary trailing |
• Unexplained popup block on streamlare
• Scrollbars appear in click2load.html
• Element Zapper denies on a specific website
• Prevent uBO from hiding html or body when matched by a generic cosmetic filter (final fix)
• Dark Mode support

Notable commits without an entry in the issue tracker:

• Add a redirectable script that sets canRunAds true
  • Related commit (contributed by @Yuki2718)
• Raise minimum versions of browsers
• Improve dealing with ambiguity in regex-based-looking network filters
• Improve google-analytics shim
• Fix regression causing regex-based filters to be case sensitive
• Add shim for FingerprintJS (aka Fingerprint v3)
• Disable the suspending of network requests when installing the extension
• Do not select background images as best candidate in picker
• Add "blockedDetails" section to troubleshooting information
• Remove "ABP X Files" from stock filter lists
• Add setting to control suspension on network activity at launch
• Make FilterJustOrigin derive from FilterOriginHitSet

[trium]

ublock v1.41.2

10. Feb 2022

Notes

Mozilla Add-ons Team rejected 1.41.0 and disabled the submission, and this breaks the history of uBO's versions for Firefox. See Release 1.41.0 for complete release notes for 1.41.2.

Closed as fixed:

• Textarea focus border is slightly cut off from the sides in the static filter pane in the logger

Notable commits without an entry in the issue tracker:

• Use theme-related shade of red for DOM inspector
• Fix bad font size in DOM inspector
• Fix visually glitchy Create button in element picker

[trium]

ublock v1.41.4

github-actions released this

16. Feb 2022

Notes

As per various feedback, the new setting "Suspend network activity until all filter lists are loaded" is now unchecked by default in Chromium-based browsers. You will have to explicitly enable it to restore the attempt at mitigating Chromium-based browsers inability to reliably block network requests at launch.

Closed as fixed:

• Fix improper handling of match-all removeparam
• [Chromium] Rework behavior of "Suspend network activity until ..."

[trium]

ublock v1.41.6

github-actions released this

18. Feb 2022

Fixes:

• Use unspoofable MessageSender.origin to determine privilege level of ports
• Revert "Prevent highly generic cosmetic filters from affecting html/body elements"

[trium]

ublock v1.41.8

github-actions released this

23. Feb 2022

Fixes:

• Fix testing a 8-bit integer instead of a 32-bit integer in PSL library