Giter Club home page Giter Club logo

port_authority's Introduction

for Firefox

Firefox Rating Mozilla Add-on

Port Authority

This addon blocks websites from using javascript to port scan your computer/internal-network and also dynamically blocks all LexisNexis endpoints from running their invasive data collection scripts.

GUIThe GUI allows the user to turn on or off global blocking, notifications and add domains to a whitelist using the gear in the top right corner. Chick-Fil-AAdd or remove domains from the whitelist such that if they make a local request or request a Lexis Nexis script, it will be allowed. Discord Discord port scans your computer using websockets, attempting to connect with the desktop Discord app.

What does this addon do?

  1. Blocks all possible types of port scanning through your browser (HTTP/HTTPS/WS/WSS/FTP/FTPS)
  2. Dynamically blocks the ThreatMetrix tracking scripts made by one of the largest and least ethical data brokers in the world (Lexis Nexis)
  3. Easily auditable, with the core functionality being about 250 lines of code. HERE
  4. Provides an optional whitelist to prevent portscans and tracking scripts from being blocked on trusted domains
  5. Gives a nice notification when one of the above scenarios are blocked
  6. This addon doesn't store/transmit/log any data or metadata about you or your requests... because, ya know, privacy

Donations ❤️

If you are feeling generous or really like my work, consider donating

  • Monero Address: 89jYJvX3CaFNv1T6mhg69wK5dMQJSF3aG2AYRNU1ZSo6WbccGtJN7TNMAf39vrmKNR6zXUKxJVABggR4a8cZDGST11Q4yS8

Regex Explanation

Test All Forms of Port Scanning

Test HTTP / HTTPS Portscanning

Test Websocket Portscanning

  • Site where you can test if WebSocket port scanning works: https://discord.com/invite/32ZNZVN
  • Click CTRL + Shift + I to see the networking tab where the blocked port scans will be shown.

Test sites that port scan you or otherwise run ThreatMetrix scripts

  • The full list of endpoints can be found HERE.

Permissions Needed

Display notifications to you

  • This is needed so the addon can alert you when a malicious script is blocked or javascript port scanning is blocked.

Access browser tabs

  • This is needed so the addon can display the correct number of blocked requests on a per-tab basis.

Access your data for all websites

  • This is needed because the addon needs to check every request your browser makes to determine if it needs to be blocked.

Why I wrote this addon?

Back in May of 2020 eBay got caught port scanning their customers. I noticed that all of the articles covering this topic mentioned that there was nothing you could do to prevent it... so I wanted to make one. After going down many rabbit holes, I found that this script which was port scanning everyone is, in my opinion, malware.

Here's why I think that:

  • The data being exfiled from your computer is encrypted into an image with XOR.
  • The domain it reaches out to is made to look legitimate but redirects using a CNAME record to Lexis Nexis' servers.
  • It can determine your “real IP” address even if you use a VPN / Proxy HERE.
  • The javascript is assembled via string.join (like malware often does) and then executed in a service worker.
  • Each time you load the page, the javascript is re-obfuscated.
  • The script collects 416 pieces of personally identifiable information about you and your network. ( Shown HERE )
  • They talk about trying to bypass adblockers by using encryption in their customer onboarding documentation HERE

So I developed multiple ways to stop this. The first being the existing functionality built into Port Authority. By default, Port Authority will check the sites that your browser reaches out to, and if it redirects to Lexis Nexis' infrastructure, it will be blocked, and you will receive a notification. The second is a Python script I wrote which uses Shodan to find all of Lexis Nexis' customer-specific domains on the internet HERE. You can add the script's output to a blocker such as uBlockOrigin to prevent your computer from connecting to them.

Note: This second method will never include every customer-specific endpoint, so you are better off using the dynamic blocking built into Port Authority which WILL block every customer-specific endpoint Lexis Nexis uses.

Reverse Engineering

Most of these sites are using Lexis Nexis's Threat Metrix scripts, Dan Nemec has a great blog post reverse engineering the script and showing all the invasive data collected https://blog.nem.ec/2020/05/24/ebay-port-scanning/

Zachary Hampton wrote some tools to reverse engineer the ThreatMetrix scripts. Go check it out https://github.com/ZacharyHampton/tmx-solver

  • Solver
  • Deobfuscator
  • Harvester
  • Payload Decryption Site
  • Network Comparator (compare solver to real implementation)

WARNING

USING SOCKS5 PROXIES WITH THIS ADDON WILL CAUSE DNS LEAKS DUE TO HOW FIREFOX HANDLES CNAME LOOKUPS. FOR MORE INFORMATION SEE HERE #7 (comment)

  • There is a simple fix for this. Type about:config in your browser, accept the warning, search for network.trr.mode and change it to 3

ToDo:

  • Port to Chromium
  • Add a whitelist

port_authority's People

Contributors

ack-j avatar jjk1492 avatar laniakea64 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar

port_authority's Issues

[BUG] Version 1.1.0 Crashes Firefox

Describe the bug
After updating extension to 1.1.0 Firefox 92.0.1 crashes

To Reproduce
Steps to reproduce the behavior:

  1. Install Port_Authority 1.1.0
  2. Wait 15 seconds

Expected behavior
It should not crash ;)

Screenshots
No screenshots, log attached - it crashes without any tab open, just after starting FF. Disabling Port_Authority solves the issue.
crash_log.txt

Desktop (please complete the following information):

  • OS: Windows 10 21H1 19043.1237
  • Browser: Firefox 92.0.1

[BUG] doesn't remember disabled notifications option after restart

Describe the bug
Port Authority remembers the disabled notifications option on the session, but when restarting the browser, it forgets it and I have to disable it again.

Expected behavior
Keep the setting disabled even after restart.

Desktop (please complete the following information):

  • OS: Windows 10, 22H2
  • Browser: Firefox 114.0.1

[False Positive] identity.trimble.com -> localhost (SketchUp)

The URL
identity.trimble.com

To Reproduce
Steps to reproduce the behavior:

  1. You will need SketchUp 2020 Desktop version to reproduce this false positive (free trail: https://www.sketchup.com/try-sketchup#for-personal)
  2. When trying to login to the application it opens a browser window.
  3. Login in to a Trimble account.
  4. The website redirects to a local IP, set up by the SketchUp application to authenticate the app. The browser will show the Port Authority warning and log in process is broken.

Desktop (please complete the following information):

  • OS: Windows 10
  • Browser Firefox 91

Additional context
In relation to #10 it would be nice to have the option to allow redirecting from certain domains to a local IP and have a per-configured whitelist.

Interestingly UBo (with LAN filter enabled) does not block this redirection login method.

[BUG] PA prevents Azure CLI login

Describe the bug
(not sure if this is a bug or false positive)

When running az login (Azure CLI), it opens a browser window to complete the login. Port Authority blocks a "scan" and login is prevented:

image

This is how it looks after successful login (without PA) - eg it talks back to the CLI or something/returns the login token:

image

Thanks!

To Reproduce
Steps to reproduce the behavior:

  1. Using Azure CLI, run az login
  2. Browser window will open, login with your azure account

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: Win10
  • Browser: Firefox
  • Version: 78.13.0 ESR

Smartphone (please complete the following information):

  • Device: [e.g. iPhone6]
  • OS: [e.g. iOS8.1]
  • Browser [e.g. stock browser, safari]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

[BUG] 1.1.3 causes images to load very slowly

Describe the bug
1.1.3 causes images to load very slowly. Not all, but most.

Screenshots
https://i.imgur.com/kJ6Ilzj.mp4

Desktop (please complete the following information):

  • OS: Windows 10
  • Browser: FireFox
  • Version: 116.0
  • Extensions: Ublock Origin, LocalCDN, Disconnect, HTTPS Everywhere, NoScript (only cross-site protection enabled)

Additional context
Noticed after 1.1.3 update, doesn't seem to apply to 1.1.2 (another computer has it installed and is still on 1.1.2 and is OK).

Sadly I don't know how to help diagnose more, so I'll need some direction if you're up to tackle it!

[BUG] Port Authority 1.1.1 crashes on Firefox 94.0.2 (Linux)

Describe the bug
After upgrading to Firefox 94.0.2, Firefox continues to crash while Port Authority is enabled. Once it's disabled, the problem disappears.

I saw the next message if I wanted to report the issue to Firefox:

MozCrashReason: MOZ_CRASH(IPC message size is too large)

To Reproduce
Steps to reproduce the behavior:

  1. Upgrade to Firefox 94.0.2

Expected behavior
No crash of Firefox

Screenshots
N/A

Desktop (please complete the following information):

  • OS: Manjaro (Linux)
  • Browser: Firefox
  • Version: 94.0.2 (64-bit)

Additional context
Add any other context about the problem here.

Some Youtube videos will not play or just freeze

I noticed right after loading Port Authority that some Youtube videos either won't play at all and others will just freeze. Here is an example of a video ... https://www.youtube.com/watch?v=tlR98APSmXw

I first load the network console and then start this video and then immediately see errors from the Port Authority extension. When I disable this extension, all the videos play fine. This problem doesn't happen on all videos but it happens enough where I have to disable this extension. I'm using the latest version of Firefox on Windows 10 desktop.

Otherwise, website browsing seems ok and I love seeing Port Authority working in the background. I really like the idea behind this extension and hope this little bug ca be fixed.

Thanks for all your hard work.

Where is the GUI?

The GUI does not show. How does one change "settings" if the GUI does not come up?

[BUG] 1.1.3 crashes browser immediately

Describe the bug
As soon as I got this update my browser crashed/forced close. It had been fine for days. I reopened Waterfox and again within a few seconds of the browser opening it would disappear.
I then ran Waterfox in safe mode and looked at my most recent updates and figured straight away that it was this extension and proceeded to disabled it and restarted my browser as normal and now without it enabled everything is running rock solid again.

Desktop (please complete the following information):

  • OS: Windows 10 Pro
  • Browser Waterfox G5.19
  • Version Port Authority 1.1.3

[BUG] Discord Endpoint

an endpoint that can be added to the list...
when I use an invite from some server on discord (Example Link: discord.com/invite/ServerID or discord.gg/invite/ServerID )
the extension blocks about 10 port scans and that's the first time I got that many
I'm not knowledgable about this topic so idk if this is the right place to post this

[BUG] blocks local Jupyter Lab init's default redirect and logout

thanks for providing this extension

Describe the bug
Jupyter lab on executing uses a local html file to redirect to the localhost server that was launched.
ex: file:///home/user/.local/share/jupyter/runtime/jpserver-34548-open.html

the extension currently blocks this local redirect.

workaround: copy and paste the url output from jupyter in the terminal

It also blocks when you select Logout from the Jupyter application menu.

To Reproduce
Steps to reproduce the behavior:

  1. extension installed
  2. jupyter lab installed locally
  3. run jupyter lab in terminal

Expected behavior
Allows local jupyter page to redirect to localhost jupyter server (default port 8888)

Screenshots
blocked by the addon
image

Desktop (please complete the following information):

  • OS: Ubuntu
  • Browser Firefox 109
    1.1.2

GUI breaks after opening a private browsing window

Describe the bug
When opening a private browsing window with Port Authority the GUI switches don't work but functionality of the addon still works.

To Reproduce
Steps to reproduce the behavior:

  1. Open a private browsing window in FF
  2. Open the Port Authority GUI

Expected behavior
The GUI to function normally and the switches to work

Screenshots
image

Desktop (please complete the following information):

  • OS: Windows 10
  • Browser FF
  • Version 89.0.2

Blocked Hosts and Ports Memory Issue

Describe the bug
There is a bug in the way hosts and ports are parsed and appended to the blocked_hosts local storage object. It adds additional \\\\\\\ until RAM is filled and the addon crashes.

Below is an example blocked hosts file with the error. You can cause the bug by going to http://samy.pl/webscan/ and then opening up about:debugging in your browser and viewing the extension storage in the storage tab.

blocked_hosts.txt

Expected behavior
I believe the issue has to do with how tabs are managed. For example here is the blocked_ports object. See how each tab is numbered.
image

Here is the blocked_hosts object. See how there is only a single browser tab number which holds all the data. Also no data should be entered into the blocked_hosts object since no lexis nexis domains were requested.
image

[False Positive] fc01.deviantart.net

The URL
The URL to go to which triggered this false positive.

To Reproduce
Steps to reproduce the behavior:

  1. Go to aforementioned URL
  2. Watch Port Authority block the image in the final post (by LIMPET235) from fc01.deviantart.net as a port scan attempt. But neither that URL nor the domain's DNS lookup has any reference to anything local here.

Screenshots
n/a

Desktop (please complete the following information):

  • OS: Xubuntu 20.04 64-bit
  • Browser Firefox 95.0.1
  • Version Port Authority 1.1.1

Smartphone (please complete the following information):
n/a

Additional context
Also, sometimes most of the browser will hang and be unresponsive while trying to load that URL. It prevents opening other extensions' popups. This happens even if Port Authority's blocking switch is toggled off from its popup. Only when Port Authority is completely disabled from Add-ons Manager did this stop happening and the page load as expected.

I did not see any related messages in about:debugging console for Port Authority.

[Feature Request] Disable per-URL

Is your feature request related to a problem? Please describe.
I have a local NAS serving up a noVNC instance. This extension gets cranky about it and prevents me from loading the page. I have to either disable the extension or reload the page. It would be great if the extension had a "disable for this site" option or at least a quick way to manage exceptions.

Port_Authority is causing Dns Leak

Describe the bug
After having set up a socks 5 proxy in my browser (with the option "proxy Dns when using Socksv5" checked), only the Dns IP relative to my proxy should be displayed on various "Dns Leak test" sites. But when I set up the proxy with Port_Authority enabled, several of these site are displaying the not only the Dns IP relative to the proxy, but my ISP Dns IPs too.

To Reproduce
Steps to reproduce the behavior:

  1. Set up a socks 5 proxy in FF, with proxyfication of Dns traffic checked
  2. Go to (for example) to www.grc.com/dns/dns.htm
  3. The site detects only the Dns Ip relative to the proxy.
  4. Install & actovate Port_Authority
  5. Perform the same test on the same site a second time: The test site displays the Dns IP relative to the proxy alongside your ISP Dns IP.
  6. Uninstall Port_Authority and perform the same test: Only the proxy Dns Ip is displayed.

Expected behavior
When "proxy Dns when using Socksv5" is checked, only the IP relative to the proxy should be displayed.

Desktop (please complete the following information):

  • OS: Win10
  • Browser: FF
  • Version: 89.0.

False Positive: https://www.uship.com/register/

The site above reaches out to https://10207287.fls.doubleclick.net/activityi;src=10207287;type=counter;cat=uship0;ord=4880235517192;gtm=2wg3h0;auiddc=2059049732.1617109349;u1=https%3A%2F%2Fwww.uship.com%2Fregister%2F;u2=undefined;u3=undefined;u4=undefined;~oref=https%3A%2F%2Fwww.uship.com%2Fregister%2F and causes Port Authority to fire due to https://10207287

[BUG] Toggles render black on black

Describe the bug

I need to use black theme on everything; all backgrounds are black, all text is white. Port authority doesn't handle this

To Reproduce

Edit | Settings | Colors | Background: Black, Text: White, Allow Pages to set their own: Never
Open Port Authority's config

Expected behavior

Buttons render

Screenshots

portauthoritybuttons

Desktop (please complete the following information):

Known Affected: Linux x64, Windows x64
Probably all are affected

[BUG] Firefox keeps crashing when Port Authority is enabled

Describe the bug
Firefox kept crashing when I try to open it with Port Authority enabled. I've tested this multiple times by booting into safe mode, disabling all the extensions, then start Firefox without safe mode and then enable every extension one by one. The moment I enable Port Authority, it crashes, even if it's the only extension enabled.

I noticed the crash log Firefox generates contains MOZ_CRASH(IPC message size is too large).

To Reproduce
Steps to reproduce the behavior:

  1. Open Firefox
  2. Enable the plugin
  3. Firefox crashes and shows "report crash" dialog

Expected behavior
I expected Firefox not to crash

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: MacOS Monterey 12.0.1
  • Browser: Firefox
  • Version: 94.0.2 (64-bit)

Additional context
I have copied the contents of the Firefox crash report:

AdapterVendorID: 0x8086
Add-ons: %7B6c00218c-707a-4977-84cf-36df1cef310f%7D:1.1.1,nl-NL%40dictionaries.addons.mozilla.org:4.20.19,reset-search-defaults%40mozilla.com:2.1.0,addons-search-detection%40mozilla.com:1.0.1,doh-rollout%40mozilla.org:2.0.0,formautofill%40mozilla.org:1.0.1,pictureinpicture%40mozilla.org:1.0.0,screenshots%40mozilla.org:39.0.1,webcompat%40mozilla.org:27.1.0,proxy-failover%40mozilla.com:1.0.2,firefox-compact-dark%40mozilla.org:1.2,google%40search.mozilla.org:1.1,wikipedia%40search.mozilla.org:1.1,bing%40search.mozilla.org:1.3,ddg%40search.mozilla.org:1.1,amazon%40search.mozilla.org:1.9,ebay%40search.mozilla.org:1.3
AvailablePhysicalMemory: 72519680
AvailableSwapMemory: 0
BuildID: 20211119140621
ContentSandboxCapable: 1
ContentSandboxLevel: 3
CrashTime: 1638522644
DOMFissionEnabled: 1
DOMIPCEnabled: 1
ExperimentalFeatures: fission.autostart,media.videocontrols.picture-in-picture.allow-multiple
IPCMessageName: PBackgroundIDBCursor::Msg_Response
IPCMessageSize: 335545632
InstallTime: 1638023629
MacAvailableMemorySysctl: 80
MacMemoryPressure: Normal
MacMemoryPressureCriticalTime: Unset
MacMemoryPressureNormalTime: 1638522491
MacMemoryPressureSysctl: 1
MacMemoryPressureWarningTime: Unset
MozCrashReason: MOZ_CRASH(IPC message size is too large)
Notes: FP(D00-L1000-W00000000-T000) WR? WR+ GL Context? GL Context+
ProductID: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
ProductName: Firefox
PurgeablePhysicalMemory: 66060288
ReleaseChannel: release
SafeMode: 0
SecondsSinceLastCrash: 196
StartupCrash: 0
StartupTime: 1638522491
TelemetryEnvironment: {"build":{"applicationId":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","applicationName":"Firefox","architecture":"x86-64","buildId":"20211119140621","version":"94.0.2","vendor":"Mozilla","displayVersion":"94.0.2","platformVersion":"94.0.2","xpcomAbi":"x86_64-gcc3","updaterAvailable":true},"partner":{"distributionId":null,"distributionVersion":null,"partnerId":null,"distributor":null,"distributorChannel":null,"partnerNames":[]},"system":{"memoryMB":8192,"virtualMaxMB":null,"cpu":{"count":4,"cores":2,"vendor":"GenuineIntel","family":6,"model":78,"stepping":3,"l2cacheKB":256,"l3cacheKB":4096,"speedMHz":2900,"extensions":["hasMMX","hasSSE","hasSSE2","hasSSE3","hasSSSE3","hasSSE4_1","hasSSE4_2","hasAVX","hasAVX2","hasAES"]},"os":{"name":"Darwin","version":"21.1.0","locale":"en-GB"},"hdd":{"profile":{"model":null,"revision":null,"type":null},"binary":{"model":null,"revision":null,"type":null},"system":{"model":null,"revision":null,"type":null}},"gfx":{"D2DEnabled":null,"DWriteEnabled":null,"ContentBackend":"Skia","Headless":false,"EmbeddedInFirefoxReality":null,"adapters":[{"description":null,"vendorID":"0x8086","deviceID":"0x1927","subsysID":null,"RAM":0,"driver":null,"driverVendor":null,"driverVersion":null,"driverDate":null,"GPUActive":true}],"monitors":[{"screenWidth":1440,"screenHeight":900,"scale":2}],"features":{"compositor":"webrender","hwCompositing":{"status":"available"},"gpuProcess":{"status":"unused"},"wrQualified":{"status":"available"},"webrender":{"status":"available"},"wrCompositor":{"status":"available"},"wrSoftware":{"status":"available"},"openglCompositing":{"status":"available"},"omtp":{"status":"unused"}}},"appleModelId":"MacBookPro13,2","hasWinPackageId":null},"settings":{"blocklistEnabled":true,"e10sEnabled":true,"e10sMultiProcesses":8,"fissionEnabled":true,"telemetryEnabled":false,"locale":"en-US","intl":{"requestedLocales":["en-US"],"availableLocales":["en-US"],"appLocales":["en-US"],"systemLocales":["en-GB","nl-NL"],"regionalPrefsLocales":["en-GB","nl-NL"],"acceptLanguages":["en-us","en"]},"update":{"channel":"release","enabled":true,"autoDownload":true,"background":false},"userPrefs":{"app.shield.optoutstudies.enabled":false,"browser.formfill.enable":false,"browser.search.region":"NL","browser.search.widget.inNavBar":false,"browser.urlbar.quicksuggest.dataCollection.enabled":false,"browser.urlbar.showSearchSuggestionsFirst":false,"browser.urlbar.suggest.quicksuggest.nonsponsored":false,"browser.urlbar.suggest.quicksuggest.sponsored":false,"privacy.donottrackheader.enabled":true,"signon.rememberSignons":false,"widget.content.allow-gtk-dark-theme":false,"widget.content.gtk-high-contrast.enabled":true},"sandbox":{"effectiveContentProcessLevel":3,"contentWin32kLockdownState":3},"addonCompatibilityCheckEnabled":true,"isDefaultBrowser":true,"defaultSearchEngine":"ddg","defaultSearchEngineData":{"loadPath":"[other]addEngineWithDetails:[email protected]","name":"DuckDuckGo","origin":"default","submissionURL":"https://duckduckgo.com/?t=ffsb&q="}},"profile":{"creationDate":18806,"firstUseDate":18806},"addons":{"activeAddons":{"{6c00218c-707a-4977-84cf-36df1cef310f}":{"version":"1.1.1","scope":1,"type":"extension","updateDay":18900,"isSystem":false,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Blocks websites from using javascript to port scan your computer/network and dynamically blocks all ","name":"Port Authority","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18813,"signedState":2},"[email protected]":{"version":"2.0.0","scope":1,"type":"extension","updateDay":18956,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"This used to be a Mozilla add-on that supported the roll-out of DoH, but now only exists as a stub t","name":"DoH Roll-Out","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18800},"[email protected]":{"version":"1.0.1","scope":1,"type":"extension","updateDay":18956,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":null,"name":"Form Autofill","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18800},"[email protected]":{"version":"1.0.0","scope":1,"type":"extension","updateDay":18956,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Fixes for web compatibility with Picture-in-Picture","name":"Picture-In-Picture","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18800},"[email protected]":{"version":"39.0.1","scope":1,"type":"extension","updateDay":18956,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Take clips and screenshots from the Web and save them temporarily or permanently.","name":"Firefox Screenshots","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18800},"[email protected]":{"version":"27.1.0","scope":1,"type":"extension","updateDay":18956,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Urgent post-release fixes for web compatibility.","name":"Web Compatibility Interventions","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18800},"[email protected]":{"version":"1.0.2","scope":1,"type":"extension","updateDay":18956,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Direct Failover for system requests.","name":"Proxy Failover","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18936},"[email protected]":{"version":"2.1.0","scope":1,"type":"extension","updateDay":18958,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Ask the user if they would like to use a specified search engine as the default.","name":"Reset Search Defaults","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18958,"signedState":3},"[email protected]":{"version":"1.0.1","scope":1,"type":"extension","updateDay":18958,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"","name":"Add-ons Search Detection","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18958,"signedState":3}},"theme":{"id":"[email protected]","blocklisted":false,"description":"A theme with a dark color scheme.","name":"Dark","userDisabled":false,"appDisabled":false,"version":"1.2","scope":4,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18806,"updateDay":18806},"activeGMPlugins":{"gmp-gmpopenh264":{"version":"1.8.1.1","userDisabled":false,"applyBackgroundUpdates":1},"gmp-widevinecdm":{"version":"4.10.2391.0","userDisabled":false,"applyBackgroundUpdates":1}}},"experiments":{"bug-1690367-rollout-moving-webrtc-networking-functionality-into-i-release-87-100":{"branch":"active","type":"normandy-prefrollout","enrollmentId":"af52d088-fd04-3d4c-ab21-6f1b2ad99b07"},"bug-1732206-rollout-fission-release-rollout-release-94-95":{"branch":"active","type":"normandy-prefrollout","enrollmentId":"96a89e4c-5413-2042-8b89-6ce81e4cf4e0"}},"services":{"accountEnabled":true,"syncEnabled":true}}
ThreadIdNameMapping: 5:"IPC I/O Parent",6:"Timer",9:"Socket Thread",10:"Permission",11:"JS Watchdog",14:"Cache2 I/O",15:"Cookie",16:"TaskController #0",17:"TaskController #1",18:"TaskController #2",19:"TaskController #3",21:"Worker Launcher",22:"Renderer",24:"WRWorker#1",23:"WRWorker#0",27:"WRWorkerLP#0",25:"WRWorker#2",28:"WRWorkerLP#1",30:"WRWorkerLP#3",26:"WRWorker#3",29:"WRWorkerLP#2",31:"Compositor",33:"ImageIO",34:"IPDL Background",35:"DOM Worker",53:"QuotaManager IO",42:"TRR Background",49:"StyleThread#1",50:"StyleThread#2",48:"StyleThread#0",47:"ImageBridgeChld",48:"WRSceneBuilder#1",50:"WRRenderBackend#1",49:"WRSceneBuilderLP#1",54:"GMPThread",55:"ProcessHangMon",56:"BgIOThreadPool #1",61:"DNS Resolver #1",62:"mozStorage #1",63:"mozStorage #2",66:"DNS Resolver #2",67:"DNS Resolver #3",71:"mozStorage #3",70:"DOM Worker",75:"DOM Worker",76:"DOM Worker",81:"URL Classifier",81:"mozStorage #4",84:"mozStorage #5",85:"LS Thread",89:"IndexedDB #10",96:"mozStorage #6",92:"mozStorage #7",93:"RemoteLzyStream",71:"SSL Cert #3",72:"StreamTrans #71",73:"StreamTrans #72",76:"WRSceneBuilder#2",78:"WRRenderBackend#2",77:"WRSceneBuilderLP#2",80:"StreamTrans #73",87:"StreamTrans #74",89:"HTML5 Parser",85:"BackgroundThreadPool #3",88:"ExtensionProtocolHandler",
Throttleable: 1
TotalPhysicalMemory: 8589934592
URL: about:addons
UptimeTS: 152.5444479
Vendor: Mozilla
Version: 94.0.2
useragent_locale: en-US```

[Feature Request] Domain whitelists

In the description and screenshots is montioned that it is possible to add domains to a whitelist.

How can I do this? Unfortunately there is no add-on preferences page in FF.

[BUG] Evernote windows app login not working

When starting the evernote app on windows, it wants to log in. Clocking the login button opens the default webbrowser (firefox in my case). After logging in (or when already logged in to firefox) I get the portscan warning for port 56379. I assume that is how it wants to communicate to evernote that I'm logged in? Evernote does not log me in to the app, and I haven't figured out how to disable PA for this domain.

Evernote points to https://help.evernote.com/hc/en-us/articles/30732911590931-What-to-do-when-you-re-stuck-on-a-Signing-In-screen

Using

  • latest firefox 127.0.2 and 128.0
  • latest PA 1.1.4
  • latest win11
  • latest evernote version

[BUG] Crashes Firefox. IndexedDB corruption?

I believe I'm experiencing the same issue as these reports: #18, #19, #20 but I've been able to partially reproduce the issue.

In the user profile folder, there are two files in the IndexedDB storage that cause a crash when they are present in the directory
%USERPROFILE%\AppData\Roaming\Mozilla\Firefox\Profiles\l7oajxa5.nightly\storage\default\moz-extension+++0e9f146b-ad34-4208-bd97-b2042b1fa6d4^userContextId=4294967295\idb\3647222921wleabcEoxlt-eengsairo.files The files are named "14 and "15" which contain binary data that seems like Snappy compressed JSON containing the strings "blocked ports" and "blocked hosts" respectively. When these files are transferred between profiles, they consistently cause Firefox to crash. When deleted, the issue is fixed. I've uploaded these two files for debugging purposes: corrupt data.zip

I don't know how these files got there or how they became corrupted, but it may indicate an issue with Firefox itself rather than the add-on. From some brief digging, this directory should not be accessible to extensions at all, and WebExtensions should not be able to crash Firefox anyways.

Tested on Firefox 99.0 and 101 nightly. PortAuthority version 1.1.1

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.