Auto Referer por GarryW
Control HTTP referer to protect privacy and not break web. And this is the addon (maybe the only one?) that deals with the 'document.referrer' bug
Irá necessitar do Firefox para utilizar esta extensão
Metadados da extensão
Acerca desta extensão
Control HTTP referer to protect privacy and not break web.
Notice: Due to browser bug on javascript
So, we've implemented a workaround to improve protection to 85%. Please enable workaround in addon settings (Firefox only currently).
Referer policy:
This addon doesn't use content script. Content script hiding
We use this workaround to kill
Cancel all cross-domain navigating requests and make freshnew ones, like directly hit (currently only implemented for GET method, other methods remain as is)
Fallback operation
If user find a web broken, user can temporary set this addon disabled via toolbar button for:
there's showy toolbar button badge indicating disabling status.
Allowlist
We currently have built-in allowlist (hard-coded. user-define allowlist not yet implemented), for the purpose of not breaking some websites. Some companies have many different websites with different domains. Some of their functionality are based on redirecting between their websites. Some of them check referer.
User can view the allowlist in addon options. Click and expand the list to see. Or view the up-to-date built-in allowlist here: https://github.com/garywill/autoReferer/blob/master/whitelist.js
Disclaimer
This open souce addon comes with no warranty. Use on you own risk!
Notice: Due to browser bug on javascript
document.referrer
on Firefox 69+ (1601496, 1601743) (also on Chrome), using a regular referer controlling addon you can get 70% of expected protection until they fix that bug. So, we've implemented a workaround to improve protection to 85%. Please enable workaround in addon settings (Firefox only currently).
Referer policy:
- For webs' top frame (i.e. clicking link, navigating, redirecting etc.):
- If origin and target url have same domain, allow trimmed referer
- If origin and target url have different domain, no referer
- For in-page resources (images, videos, js, css etc.), allow trimmed referer (this is the key to not break most webs, also a balance between privacy and experience)
- Trim referer: Any referer should be no more than
http(s)://domain-name:port/
(like Firefox's nativeabout:config
settingnetwork.http.referer.trimmingPolicy = 2
). - Not allow referer that not starts with "http" or "https". (Please feedback if you find something broken due to this)
- No referer when downgrade from HTTPS/WSS to HTTP/WS
document.referrer
bug workaroundThis addon doesn't use content script. Content script hiding
document.referrer
is not 100% reliable.We use this workaround to kill
document.referrer
: Cancel all cross-domain navigating requests and make freshnew ones, like directly hit (currently only implemented for GET method, other methods remain as is)
Fallback operation
If user find a web broken, user can temporary set this addon disabled via toolbar button for:
- this one tab
- this one tab and new tabs opened by this tab
- this one window (Firefox only)
- globally
there's showy toolbar button badge indicating disabling status.
Allowlist
We currently have built-in allowlist (hard-coded. user-define allowlist not yet implemented), for the purpose of not breaking some websites. Some companies have many different websites with different domains. Some of their functionality are based on redirecting between their websites. Some of them check referer.
User can view the allowlist in addon options. Click and expand the list to see. Or view the up-to-date built-in allowlist here: https://github.com/garywill/autoReferer/blob/master/whitelist.js
Disclaimer
This open souce addon comes with no warranty. Use on you own risk!
Avalie a sua experiência
PermissõesSaber mais
Este extra precisa de:
- Aceder aos separadores do navegador
- Aceder aos seus dados para todos os sites
Mais informação
- Ligações do extra
- Versão
- 0.8.51
- Tamanho
- 35,74 KB
- Última atualização
- há 2 meses (1 de ago de 2024)
- Categorias relacionadas
- Licença
- Licença Pública Geral GNU v2.0
- Histórico de versões
- Etiquetas
Adicionar à coleção
Mais extensões por GarryW
- Não existem avaliações ainda
- Não existem avaliações ainda
- Não existem avaliações ainda
- Não existem avaliações ainda
- Não existem avaliações ainda
- Não existem avaliações ainda