Uassets: shon.xyz [ADS]

[KiLL4FuNK]

URL(s) where the issue occurs

http://shon.xyz/Yt7zO

Describe the issue

ADS

Microsoft Windows 8.1 Version : Update 3 (64-bit)

Google Chrome Version : 67 (Official Build) (64-bit)

uBlock Origin Version: 1.16.10

Settings

Default

[KiLL4FuNK]

Anti-Adblock

[KiLL4FuNK]

Anti-Adblock

[ghajini]

https://shon.xyz/vPmlE
3rd party tracking from different tracking ad servers at final download page
https://user-images.githubusercontent.com/20338483/70025293-9f611580-15c2-11ea-832c-75568b5fbcf7.jpg

2.
Get link is unclickable on 1st visit, I have to reload the page to make it clickable

Note= change ip/cookies to reproduce

[ghajini]

Firefox android stable

I still see those 3rd party requests....

https://user-images.githubusercontent.com/20338483/70036465-d7745280-15da-11ea-8a88-9213ffe313ed.jpg

Get link button is unclickable
(after captcha completion )
clear cookies/data and change ip

[ghajini]

1.
OK they are smart, they avoid those 3rd party requests to same ip address again even if you clear cookies data.....

1. Now clear cookies data and change ip to other different from previous ip, they will serve ads and get link is unclickable again

View page source=

https://pastebin.com/5NgvVTbi

[mapx-]

I blocked a remaining frame, testing FF desktop / android emulator
get link working fine for me

[ghajini]

Same problem again

[okiehsch]

Get link is unclickable on 1st visit, I have to reload the page to make it clickable.

Works on my end. I have to click twice on 1st visit but it works.

[mapx-]

mmhmm .. on (true) android the button is disabled.
@ghajini test these filters

||shon.xyz^$csp=script-src 'self' 'unsafe-inline' *.gstatic.com *.google.com *.googletagmanager.com *.googleapis.com;frame-src 'self' *.google.com,badfilter
||shon.xyz^$csp=script-src 'self' 'unsafe-inline' *.gstatic.com *.google.com *.googletagmanager.com *.googleapis.com;frame-src 'self' *.google.com;connect-src 'self'
shon.xyz#@#+js(window.open-defuser)
shon.xyz##+js(ra, onclick, [onclick^="window.open"])
*$beacon,domain=shon.xyz

[ghajini]

Filters at
https://github.com/uBlockOrigin/uAssets/issues/2756#issuecomment-561114398

Results in popup ads at final download page

Screenshot=

https://user-images.githubusercontent.com/20338483/70046244-a3edf400-15eb-11ea-949f-1cb7eb224378.jpg

[mapx-]

I tested in android + FF, no popups on my end

[mapx-]

you could try
shon.xyz##+js(aopr, _pop)

[ghajini]

Sorry it doesn't help, I will try tomorrow

[ghajini]

Checked with opera browser also, there are popup ads at final page when clicking anywhere ...
@jspenguin2017 ,@gwarser help here

[okiehsch]

I now also get popups.
We should restore
shon.xyz##+js(window.open-defuser)
for all settings except Firefox android in my opinion.

[mapx-]

@ghajini @okiehsch

could you test
||shon.xyz^$csp=sandbox allow-forms allow-same-origin allow-scripts allow-modals allow-orientation-lock allow-pointer-lock allow-presentation allow-top-navigation

[okiehsch]

That fixes the popup issue on my end using Chromium and Firefox desktop version.

[mapx-]

waiting @ghajini test directly on android

[mapx-]

I did test on android it seems ok on my end, the final button is working

[ghajini]

Fresh firefox installation, fresh ubo 1.24.2 installation, all default settings,
still popup ads on my side, this time firefox is preventing popups

https://shon.xyz/LvWVU

Screenshots=
https://user-images.githubusercontent.com/20338483/70146973-6364a800-16c9-11ea-9236-b9b859182399.jpg

https://user-images.githubusercontent.com/20338483/70146990-68295c00-16c9-11ea-8e48-2b1826746d27.jpg

https://user-images.githubusercontent.com/20338483/70146997-6cee1000-16c9-11ea-8e2c-f08b0b4f6339.jpg

https://user-images.githubusercontent.com/20338483/70147025-76777800-16c9-11ea-8353-c4bdc467d21a.jpg

https://user-images.githubusercontent.com/20338483/70147041-7c6d5900-16c9-11ea-91e0-a0dd7ca46cf1.jpg

https://user-images.githubusercontent.com/20338483/70147051-81320d00-16c9-11ea-9e01-7476aa1f8f04.jpg

[mapx-]

Do you see in the logger the last filter ?

[ghajini]

Yess I see

https://user-images.githubusercontent.com/20338483/70147748-e9cdb980-16ca-11ea-83d1-5fee851f9f5b.jpg

[mapx-]

In this case maybe firefox catched before uBo the popups (before uBo injecting its csp filter).
However, you have no popup / redirect right now.

[ghajini]

right now firefox is preventing popups and not ubo, is upstream solution/fix available for this?

[mapx-]

go into FF settings, disable the popup feature and see if uBo is blocking the popups

[ghajini]

go into FF settings, disable the popup feature and see if uBo is blocking the popups

There is no such feature available on firefox android. .....

Forget this site, my fingers paining by repeated captcha solving and ip change in my vpn(I almost used all ip's😂😂😂)

[mapx-]

FF for android is allowing you to toggle the popup crap:

[ghajini]

I toggled that feature to false, no popups on my end....but that is good feature by browser, it will prevent any unblocked popup not known to ublock origin....

Is there any tweak available for this site apart from disabling popup feature of browser?

[mapx-]

it's already fixed, last filter prevents any popup for that page.

[mapx-]

read about sandbox here:
https://content-security-policy.com/

[mapx-]

Are you still talking about android ? opera ? still getting popups ?

[ghajini]

With popup feature default on firefox android, I get popups

With popup feature from browser disabled on firefox android, I don't get popups

[ghajini]

Adguard browser extension for android works fluently ,why ublock origin lacking @gorhill

[gorhill]

Fresh firefox installation, fresh ubo 1.12.4 installation

Latest stable uBO on Firefox is at 1.24.2.

[ghajini]

Yes iam using that only 1.24.2, it was typo

Also it's not invalid report @gorhill
I have reported to adguard, they have fixed it
https://github.com/AdguardTeam/AdguardFilters/issues/45350

[gorhill]

I have reported to adguard, they have fixed it

Sure, but skimming through the numerous comment I can't figure what _exactly_ is the issue. I would need a well details but succinct steps to reproduce with no guessing on my part needed when I try to reproduce.

[gorhill]

Looking at Adguard fix, it's just a filter to neuter window.open, such scriptlet is also available in uBO.

[mapx-]

@gorhill the problem was with window.open-defuser => on the second page, only for android, the button get link was unclickable.

I removed window.open-defuser and added the csp sandbox filter which is working well on my end. I don't understand why ghajini still is getting popups (he is saying popups blocked by FF)

[ghajini]

https://shon.xyz/2nTBi
Still this appears at firefox android

[ghajini]

Can you add

shon.xyz##+js(acis, decodeURI)
shon.xyz##+js(aopw, Fingerprint2)
shon.xyz##+js(acis, parseFloat)
required for firefox android