Uassets: multiup.org

[vdias]

https://multiup.org

Examples:

https://multiup.org/3d6e5076aedfcb5af554f3e1df7f9ea4
https://multiup.org/285c879fbe0aa972db51e6964dacbff1

Describe the issue

Multiple popups open on mouse click
JSEcoin coin miner banners

Screenshot(s)

Versions

Firefox 66.0.3
uBlock Origin 1.18.16

Settings

Default Settings

[mapx-]

No popups or jsecoin for me. Try updating all your lists (purge + update)

[vdias]

what list are you using...?

[mapx-]

@vdias You have to tell us all the lists you are using (see what lists are enabled and if are updated)

[vdias]

My filters​​​​​0 used out of 0​​​​
uBlock filters​ ​​​​15,977 used out of 16,092​​
​​uBlock filters – Badware risks​ ​​​​119 used out of 119​​
​​uBlock filters – Privacy​​​​​ 156 used out of 158​​
​​uBlock filters – Resource abuse​​​​​ 110 used out of 110​​
​​uBlock filters – Unbreak​​​​​ 901 used out of 903​​
spa, por: AdGuard Spanish/Portuguese​​​​​ 2,753 used out of 2,826​​​​

And on every mouse click i get a new webpage with ads...
​​

[mapx-]

Close firefox, open it again, reset uBo to default settings (you have no easylist, easyprivacy, Peter Lowe's), then click Purge all caches, click Update now.

[ghajini]

https://multiup.org/en/mirror/7ab5bfcde2419d3a4977c8c7c1cb53c3/J_M_IMS__2019__www.Jalshamoviez.Uk_720p_HDRip_x264_AAC_ESubs.mkv

STR=

1. click on download in 1st page

2. issue is that when you open one of the file host in new tab through rightclick on download button
   ads are loaded instead of target link

3. another issue is if you click download button under corresponding host in current tab ,new tab is opened for target link while original tab is laded with vpn ads,1fichier ads etc
   @gorhill

[llacb47]

Destination link is hardcoded in DOM link attribute of a tag. All of the links have the host class. Maybe a scriplet would work.

<a href="/redirect-to-host/ulozto.net/7ab5bfcde2419d3a4977c8c7c1cb53c3/3" onclick="location.href='/redirect-to-host/ulozto.net/7ab5bfcde2419d3a4977c8c7c1cb53c3' ; return true" ontouchend="this.onclick=false;location.href='/redirect-to-host/ulozto.net/7ab5bfcde2419d3a4977c8c7c1cb53c3'; if(navigator.userAgent.match(/ucbrowser/i)){window.open('/redirect-to-host/ulozto.net/7ab5bfcde2419d3a4977c8c7c1cb53c3/3', '_blank') ; return false;} ; return true;" onauxclick="return false;" namehost="ulozto.net" link="https://ulozto.net/!O1ej7zi3ecQe" validity="valid" datelastchecked="7/21/19, 8:09 AM" id="107778895" target="_blank" rel="noopener" class="host btn btn-md btn-default btn-block btn-3d hvr-bounce-to-right">
<i class="fa fa-fw fa-download"></i>
Download (3)
</a>

Maybe something like this?

var hosts = document.getElementsByClassName('host');

for (i = 0; i < hosts.length; i++) {
    hosts[i].setAttribute('href', hosts[i].getAttribute('link'));
    hosts[i].removeAttribute('onclick');
    hosts[i].removeAttribute('ontouchend');
    hosts[i].removeAttribute('target'); // prevent from popping up in new window/tab
}

[llacb47]

@mapx- Issue needs to be reopened

[krystian3w]

bad attribs should remove:

multiup.org##+js(ra, onclick|ontouchend|target, .host)

---

for legacy build maybe better use long name for scriplet "remove-attr.js"

---

change link to href only possible in AdGuard (uBO no have scriptlet).

[uBlock-user]

@llacb47 good idea, it works.

Here's the scriptlet if anyone wants to use it --

linkfilterer.js application/javascript
(() => {
        'use strict';
                let linkfilter = () => {
            let hosts = document.getElementsByClassName('host');
            for (let host of hosts) {
                 host.setAttribute('href', host.getAttribute('link'));
                                 host.removeAttribute('onclick');
                                 host.removeAttribute('ontouchend');
                                 host.removeAttribute('target');
             }   
        };
        if (document.readyState === 'interactive' || document.readyState === 'complete') {
            linkfilter();
        } else {
            addEventListener('DOMContentLoaded', linkfilter);
        }
})();

[ghajini]

Userscript version of that scriptlet @uBlock-user
Because gorhill is not going to add single scriptlet for single site

[krystian3w]

This is dangerous if unlock for all sites.

[uBlock-user]

@ghajini

// ==UserScript==
// @name Multi-up-defuser
// @namespace Multi-up-defuser User-Script
// @match *://multiup.*/*
// @grant none
// ==/UserScript==

(() => {
            'use strict';
            let linkfilter = () => {
            let hosts = document.getElementsByClassName('host');
            for (let host of hosts) {
                 host.setAttribute('href', host.getAttribute('link'));
                 host.removeAttribute('onclick');
                 host.removeAttribute('ontouchend');
                 host.removeAttribute('target');
             }   
        };
        if (document.readyState === 'interactive' || document.readyState === 'complete') {
                linkfilter();
        } else {
                addEventListener('DOMContentLoaded', linkfilter);
        }
})();

[ghajini]

Anyone can reproduce,I don't know why its not fixing.....😫

1. Go to https://multiup.org/en/mirror/7ab5bfcde2419d3a4977c8c7c1cb53c3/J_M_IMS__2019__www.Jalshamoviez.Uk_720p_HDRip_x264_AAC_ESubs.mkv
2. Click download on filehosts like filerio/uptobox ,you will get destination link in new tab and original tab is loaded with ads(multinews etc )
   Or
   Right click download to open link in new tab and you will get ads instead of destination link....

[krystian3w]

first suppose have other attrib as "link="..."".

Or user-script need set-timeout.

[uBlock-user]

@ghajini I tested in ViolentMonkey and it works as expected there.

[ghajini]

Thanks @uBlock-user

[uBlock-user]

@ghajini You don't need VM for this, just copy paste this javascript into a text file and name it somename.txt, add the RAW version of that txt in advanced settings at userResourcesLocation That parameter supports multiple files, so there's no issue if you have more than one.

[krystian3w]

Or convert to bookmarklet scriplet.

Example generator: https://mrcoles.com/bookmarklet/

[ghajini]

https://multiup.org/download/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003

Something changed,
@llacb47

Clicking on download leads to ads

[uBlock-user]

They saw the scriptlet and filters I posted and fired back. Using those filters will block the page from opening the page you want to go to which is --

https://multiup.org/en/mirror/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003

[uBlock-user]

Nevermind, adding multiup.org##+js(window.open-defuser) fixes it for me.

[ghajini]

No it doesn't work for me....
Same bad attribs https://github.com/uBlockOrigin/uAssets/issues/5435#issuecomment-513592110

Clicking on download leads to ads in current tab(multinews.me) while it opens file mirrors in new tab

[uBlock-user]

Someone will have to test it in Firefox Android as I don't use that.

[ghajini]

Firefox desktop/opera browser/firefox android
also doesn't work, may be need update to linkfilterer.js to work on this url
https://multiup.org/download/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003(in this page\URL, you have to click on download to reproduce ads)

Screenshot=

https://user-images.githubusercontent.com/20338483/63648361-59bcc300-c71e-11e9-9642-17497f05c4da.png

[uBlock-user]

I'm seeing different set of behaviours when trying to reproduce, once it gets stuck on Please Wait.... then it didn't, so can't tell what's going on. There's nothing to fix in the scriptlet, it does what's it supposed to do.

[ghajini]

Okay here is video captured of whole problem
streamable.com/4v216

[uBlock-user]

You need to add multiup.org##+js(window.open-defuser) for popups which was mentioned in https://github.com/uBlockOrigin/uAssets/issues/5435#issuecomment-524610841

[ghajini]

Yeah added
multiup.org##+js(window.open-defuser)
Doesn't work

[uBlock-user]

Use the modified version of the scriptlet I made -- https://github.com/uBlock-user/uBO-Scriptlets/blob/master/scriptlets.txt#L69

Filters

multiup.org##+js(ra, onsubmit|onclick|ontouchend)
multiup.org##+js(window.open-defuser)
multiup.org##+js(hyperlink-setter)

That does it for me on Firefox 70 desktop, new tab will open but for the download links only.

[ghajini]

No it won't work....sorry to say that...
Opera browser stable /Firefox desktop stable version/firefox android stable

Video captured=

https://streamable.com/9o90y

[uBlock-user]

No it won't work....sorry to say that...

Works for me. Disable all extensions except uBO and the VPN extension you use. Some webfiltering extension seems to be interfering on your end. From here on now, you need to investigate further.

[ghajini]

Yeah webfiltering extension(webroot) won't interfere, that's for website safety ratings.....
I will check with that extension disable....

Edit= okay checked with ubo + VPN extension only ,redirect ads seen

Also 2nd thing, it doesn't work on firefox android also which has no such extension. ...

[gwarser]

I get popunders when using VPN extension.

[ghajini]

Iam using vpn because that site multiup.org is blocked on my isp....
Did you get ads like in
streamable.com/4v216

[gwarser]

Correction - I get it only once after switching country.

Did you get ads like in

More or less.

[ghajini]

STR=

1. Go here
   https://multiup.org/download/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003
2. In that page(https://multiup.org/download/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003) you see download button ,clicking on that leads to ads (random ads)in current page and real mirror sites in new tab.....😵😵😵

Btw adguard browser extension works correctly...
Any correction to be done in ubo scriptlet to suggest https://github.com/uBlockOrigin/uAssets/issues/5435#issuecomment-515527000

[krystian3w]

<form 
action="/en/mirror/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003"
method="post"
target="2037349134"
onsubmit="window.open('','2037349134','')">
````

So replace something: `onsubmit="window.open('','2037349134','')">`? 
Maybe AdGuard dynamic change `window.open` to "current.tab" - uBO no support scriplet for this...

---

if remove attribs is safe (or works with `security.csp.enable;true` - IMO CSP block remove attribs) try this:

multiup.org##+js(ra, target|onsubmit, form[action])
```

[ghajini]

On this file not found page I get redirects if I click anywhere
https://multiup.org/download/da841635216f5d3365dd7315a3ca03d0/

[krystian3w]

Made with inline script e.g. window.location or meta tag:

<meta id="link" http-equiv="refresh" content="1;url=/en/mirror/NOT_FOUND/LINK?t=0">

<meta id="link" http-equiv="refresh" content="0;url=https://multinews.me/...">

multiup.org##^meta[http-equiv="refresh"]

uBO can block meta tag with only html filtering.

So on Chromium/Firefox 56 (and older / or Quantum with uBO older than 1.15) no possible remove... only can block load:

||multinews.me^$all

||multinews.me^

[ghajini]

@mapx-, can you add

||multinews.me^$all
||multinews.me^

Until more definitive filters are found, you can call it partially address/partial fix

[krystian3w]

@ghajini

||multinews.me^$all - uBO 1.20.0+

||multinews.me^ - uBO 1.19.X and uBO legacy

[ghajini]

Yes iam on stable updated browsers/ublock origin

[ghajini]

Hello @okiehsch

1. Issue is no more with valid url's https://multiup.org/download/776832992837d723d4a3937fa587c126/aladnd.br18_300mbfilms.com.mkv.003 with default Ublock origin settings

1. Issue is there with file not found pages
   https://multiup.org/download/da841635216f5d3365dd7315a3ca03d0/
   For this
   ||multinews.me^$all
||multinews.me^ is enough .....

[ghajini]

that annoyance is back

https://multiup.org/en/mirror/585006cb98bae35de38df56d1fdd69b3/ExtraMovies.wiki_TABM219DAHC72HCHRFD.mkv

clicking download under respective file servers/mirror links doesn't lead to file server website....

also custom fix at https://github.com/uBlockOrigin/uAssets/issues/5435#issuecomment-515761024 doesn't work
@uBlock-user

[uBlock-user]

I can kill the popup with multiup.org##+js(ra, action, form)

clicking download under respective file servers/mirror links doesn't lead to file server website....

Because they replaced <a href...> with <button...> instead. Need a new scriptlet for replacing one attribute with another.

[uBlock-user]

Can't reproduce it anymore, they're watching this thread I think, they changed action attribute to the link instead of a popup.

[ghajini]

Yes they seen us.....may be they will come with something nefarious😌

[uBlock-user]

Nevertheless, I updated my scriptlet

[ghajini]

They changed something again

https://multiup.org/en/mirror/c21c9313c591c0a6f0fb04a1e4dfb59d/ExtraMovies.wiki_WND19DAH72HRESD.mkv

Clicking downloadbutton under various file mirrors leads to blocked ubo dialougue of multinews.me and never leads to real link
@uBlock-user

[uBlock-user]

You can disable the popup with filter posted in https://github.com/uBlockOrigin/uAssets/issues/5435#issuecomment-543750286

[ghajini]

URL =
https://multiup.org/en/mirror/e48f4eb2ff37222ef0adfe9ac2e2cf48/ExtraMovies.wiki_LK19FMH48PDRFD.mkv

1.
@mapx- this is what happened with ubo default settings, I don't get file for download but ads only

https://i.imgur.com/W7hgVWd.gifv

2.
@uBlock-user with your settings ,I don't get file but only current page is reloaded again n again, hope you help me with working fix

i.imgur.com/64WgtXI.gifv

[mapx-]

I see no different behaviour with uBo disabled, how does work this site ?

[ghajini]

1.
Ubo disabled I get target download site eg 1fichier.com or uptobox.com etc

i.imgur.com/YTX2JPP.gifv

2.
With ubo enabled iam stuck at multinews.me blocked dialogue and never proceeded to target site even if I allow temporarily blocked dialogue

[uBlock-user]

,I don't file but only current page is reloaded again n again, hope you help me with working fix

Removing the "action" attribute will do that which is what the filter does to stop browsing to the blocked site. Unfortunately the new scriptlet I made doesn't work as expected. What you can do is open dev tools and look for the link attribute to find the download link, copy that link and paste it in the address bar and browse there that way untill a solution is found.

Working scriptlet --

multiup.js application/javascript
(() => {
        'use strict';
        const selector = '{{1}}';
        if ( selector === '' || selector === '{{1}}' ) {
            return;
        }
        const selector2 = '{{2}}';
        if ( selector2 === '' || selector2 === '{{2}}' ) {
            return;
        }
        const multiup = () => {
                    const elem = document.querySelectorAll(selector);
                    const elem2 = document.querySelectorAll(selector2);
                    try {
                        for (let elems = 0; elems < elem.length; elems++) {
                            elem[elems].setAttribute('action', elem2[elems].getAttribute('link'));
                        }
                    } catch { }
        };
        const observer = new MutationObserver(multiup);
        observer.observe(document.documentElement, { childList: true, subtree: true });
        if (document.readyState === 'complete') { observer.disconnect(); return; } 
})();

Filter -- multiup.org##+js(multiup, form[action], button[link])

@ghajini

[ghajini]

https://multiup.org/en/mirror/f4b0706791f3967d495312bc48e1299d/ExtraMovies.casa_DRB20FMHD72HRESD.mkv

Is this correct userscript format @uBlock-user @jspenguin2017
```
// ==UserScript==
// @name Multi-up-defuser
// @namespace Multi-up-defuser User-Script
// @match ://multiup./*
// @grant none
// ==/UserScript==

document.querySelectorAll("form>button[link]").forEach(b => {
b.addEventListener("click", ev => {
ev.preventDefault();
location.href = b.getAttribute("link");
}, true);
});

[uBlock-user]

@ghajini Aren't you using the scriptlet I made ? or is not working anymore ?

[krystian3w]

IMO fake:

So should hidden?

[ghajini]

@ghajini Aren't you using the scriptlet I made ? or is not working anymore ?

A lot of difficulties described over here
https://github.com/uBlock-user/uBO-Scriptlets/issues/6

[uBlock-user]

A lot of difficulties described over here

None of them are caused by the scriptlet which I already addressed there and is based on what AdGuard does in their raw snippet code, anyways your choice.

Your issue may be avoided if your script changes those FORM based buttons into hyperlinks which was the original way.

[krystian3w]

Fake button maybe again visible - https://github.com/uBlockOrigin/uAssets/issues/5435#issuecomment-611038987 due change "Usenet" to "UseNet":

-multiup.org##.panel-body > .row > .col-md-4:has(:scope > .panel > .panel-footer > a[href^="/download-fast/"][namehost="Usenet"])
+multiup.*##a[href^="/download-fast/"][namehost="Usenet" i]:upward(.col-md-4)

or

+multiup.*##.panel-body > .row > .col-md-4:has(:scope > .panel > .panel-footer > a[href^="/download-fast/"][namehost="Usenet" i])

+multiup.*##.panel-body > .row > .col-md-4:has(:scope > .panel > .panel-footer > a[href^="/download-fast/"][namehost="UseNet"])