security-and-privacy/CanvasBlocker
security-and-privacy/CanvasBlocker
1
0
Fork 0
mirror of https://github.com/kkapsner/CanvasBlocker synced 2024-12-22 21:00:23 +01:00
Code Releases Activity
1,059 Commits 81 Branches 113 Tags 12 MiB
Commit Graph

426 Commits

Author SHA1 Message Date
kkapsner
b6e5384945 Linting 2019-05-24 18:29:45 +02:00
kkapsner
2da680bfcb Improved iFrame protection 2019-05-22 23:37:23 +02:00
kkapsner
92ff2ff5d4 Audio cache could break readout 2019-05-22 10:06:11 +02:00
kkapsner
e0dda5ec0f Detection over navigator and DOMRect getters was possible 2019-05-20 08:45:31 +02:00
kkapsner
79a9034051 Preventing double interception 2019-05-17 00:36:34 +02:00
kkapsner
587bd5bca8 DOMRect: further performance improvements 
Total improvement compared to 0.5.8: 7.2 (For #253)
 2019-05-11 13:16:45 +02:00
kkapsner
82ba61095a fake- and getterGenerator: added original and window in call 
Might enable a performance increase.
 2019-05-10 08:28:28 +02:00
kkapsner
103397e35d Minor performance improvements 2019-05-10 01:11:31 +02:00
kkapsner
a89bf0aba8 Remove all "var" from intercept.js 2019-05-10 00:45:50 +02:00
kkapsner
2222ba65c8 Only set random supply when it changes 2019-05-10 00:38:38 +02:00
kkapsner
983423dafa Improved general performance when stack list is disabled 2019-05-10 00:29:53 +02:00
kkapsner
88537c7516 Fixed broken setter on DOMRect 2019-05-09 23:11:15 +02:00
kkapsner
2c291322cf Further improved DOMRect performance 
Additional factor 2.6 = total factor 4.7 (For #253).
 2019-05-04 13:44:02 +02:00
kkapsner
89124235c0 Improved DOMRect performance 
Factor 1.8 (For #253).
 2019-05-04 12:39:31 +02:00
kkapsner
4e276edb22 Merge branch 'WhitelistAPISpecific' 2019-05-04 01:14:04 +02:00
kkapsner
b27cf7087b Added whitelist inspection 
Fixes #331
 2019-05-04 01:12:45 +02:00
kkapsner
6ffd537a58 Unified action pages and fixed display issues 
For #341
 2019-05-03 23:17:35 +02:00
kkapsner
ed5a1b03cd Merge branch 'master' into WhitelistAPISpecific 2019-05-03 00:46:08 +02:00
kkapsner
54e3f8d3f4 Improved theme system and appearance 
Fixes #181 and #341
 2019-05-02 23:46:20 +02:00
kkapsner
6301b744d2 Added centralized theme system and themed all pages 2019-05-02 00:30:30 +02:00
kkapsner
51445b36e0 Added whitelist scope question 2019-04-30 23:42:21 +02:00
kkapsner
403885f426 Don't break if browser API is not available 2019-04-30 23:39:40 +02:00
kkapsner
31bc324019 Added option to protect no part of the canvas API 2019-04-27 22:37:25 +02:00
kkapsner
8e628f9d13 Made history length threshold url specific 2019-04-27 22:26:23 +02:00
kkapsner
505fb6409e Run setting migration only in background script 2019-04-19 14:09:56 +02:00
kkapsner
b7a8a51a56 Made data URL protection url specific 
Fixes #333
 2019-04-19 13:58:04 +02:00
kkapsner
bab7d1496f Moved i18n to extension module 2019-04-09 08:29:52 +02:00
kkapsner
d89bfe4cb0 Minibug in require 2019-04-08 23:56:25 +02:00
kkapsner
7f048b80d7 Removed ".js" from require paths 2019-04-08 00:06:25 +02:00
kkapsner
12137402de Fixed relative require paths 2019-04-08 00:02:29 +02:00
kkapsner
9f3da67cf2 Removed proprietary require event system 2019-04-07 23:22:56 +02:00
kkapsner
f8f35890a1 Removed remaining sdk shortcut module 2019-04-07 23:09:02 +02:00
kkapsner
ef4e238b94 Faking audio did not work with white random generator 2019-04-05 16:26:22 +02:00
kkapsner
137c1688ba Reduced direct dependency on browser.xxx APIs 2019-03-14 16:51:20 +01:00
kkapsner
91c3c34412 Moved canvas api to separate file 2019-03-13 08:08:36 +01:00
kkapsner
574efa23e7 Cleanup require system 2019-03-12 22:24:23 +01:00
kkapsner
f565b8c32e Enabled import of older storage versions. 2019-03-11 22:10:34 +01:00
kkapsner
e56df7160f Added navigator protection 2019-02-27 23:49:00 +01:00
kkapsner
7bf1b2e595 Fix require.register 2019-02-26 15:59:44 +01:00
kkapsner
91b814ce7e Improved audio API protection 
reduced detection
more consistent faking
 2019-02-10 02:55:45 +01:00
kkapsner
ea30fb3370 Fixed md5 and sha256 hashing 
Fixes #315.
 2019-02-10 02:49:58 +01:00
kkapsner
e47f726abb Added cache for getChannelData 
Fixes #310
 2019-02-07 20:12:12 +01:00
kkapsner
53cdf8347e after reset the hidden settings and expanded views were not reset 
Fixes #314
 2019-02-07 00:44:16 +01:00
kkapsner
1bb5013a39 Protection for history.length did not work 
Fixes #309
 2019-02-04 13:40:44 +01:00
kkapsner
f38e55b538 Linting 2019-01-24 15:43:20 +01:00
kkapsner
b4b6fcdd13 Fix optional parameter 
Fixes #302
 2018-12-30 22:22:10 +01:00
kkapsner
43e2f59cba Updated storageVersion to 0.5 2018-11-09 23:38:19 +01:00
kkapsner
947d9e0c59 added "share persistent randomness between domains" 
Fixes #290
 2018-10-25 13:42:18 +02:00
kkapsner
045379c349 constant rng did not work properly when protecting input 2018-10-23 23:39:47 +02:00
kkapsner
8b9197a68a Decoupled block mode from protected part 
Fixes #287
 2018-10-23 08:26:23 +02:00
kkapsner
eff86ce4ed Added search field to browser page popup 
Fixes #268
 2018-10-09 12:59:53 +02:00
kkapsner
3a7c15157c Protected notification api calls 
Firefox on Android does not support all of them.

Fixes #276
 2018-10-02 19:23:59 +02:00
kkapsner
d4d0d80721 Linting 2018-10-02 13:27:01 +02:00
kkapsner
f3a6031f5a Handle wrong content script order 
For #273
 2018-10-02 13:20:40 +02:00
kkapsner
0f07cde869 Added value cache for DOMRect 
Fixes #272
 2018-09-29 09:41:43 +02:00
kkapsner
18bbab50a5 Removed unused setting notificationDisplayTime 2018-09-23 12:40:05 +02:00
kkapsner
5ca27505eb Messages were not passed to tabs. 2018-09-23 12:33:23 +02:00
kkapsner
2f4fca10ab Ask mode did not show canvas canvas any more. 2018-09-21 16:42:58 +02:00
kkapsner
95605ef746 Search did not include button labels 
For #242
 2018-09-21 16:40:24 +02:00
kkapsner
ccc36a2154 Initilaize storage with correct version. 2018-09-21 16:32:47 +02:00
kkapsner
ecc55ad13f Unknown classes might break CB 
Fixes #267
 2018-09-20 22:46:45 +02:00
kkapsner
5513bcbb61 Search refinement and bugfixing 
Fixes #242
 2018-09-19 09:15:19 +02:00
kkapsner
2271477376 fakeUint8Array called forEachIndex with wrong parameters. 
Fixes #266
 2018-09-18 21:52:15 +02:00
kkapsner
e3861e67b4 Create search in options page 
Fixes #242
 2018-09-18 13:14:39 +02:00
kkapsner
a1202f9a6e Made audio cache url specific 
Fixes #261
 2018-09-18 00:03:42 +02:00
kkapsner
f8de9b9539 Merge branch 'whitelistedIndicator' 
Fixes #241
 2018-09-16 14:08:00 +02:00
kkapsner
55af2c3dc4 Moved url container initialization 
Fixes #166
 2018-09-16 12:27:50 +02:00
kkapsner
e4c2196131 Send only necessary notifications to main process 
For #238
 2018-09-16 12:15:04 +02:00
kkapsner
db79c0129b Audio API notifies on every call 2018-09-16 12:09:48 +02:00
kkapsner
ee7f9b4dae Separated setting containers 
For #166
 2018-09-16 01:22:40 +02:00
kkapsner
57ef8a4166 Simplified relation logging <-> settings 
For #166
 2018-09-15 21:13:25 +02:00
kkapsner
9d5e8b71ed Separated settings migration 
For #166
 2018-09-14 16:29:30 +02:00
kkapsner
456c21cb04 Ignore port connection without tab 
Fixes #255
 2018-09-13 22:50:10 +02:00
kkapsner
b0e1e69ec9 Do not pass messages to internal tabs 
E.g. about:addons
Otherwise this causes an error.
 2018-09-13 18:40:18 +02:00
kkapsner
f73a4ee619 Save state of the arrow menu in options page 
Fixes #251
 2018-09-12 23:43:48 +02:00
kkapsner
fe1f1ec79a Fixed caching issue 
md5 was too slow.

Fixes #236
 2018-09-12 22:23:29 +02:00
kkapsner
f05717836d canvas content was not stored to be displayed when wanted 2018-09-11 23:56:44 +02:00
kkapsner
5e5011f208 Added setting to controll to save notification details 
Fixes #236
 2018-09-11 23:54:59 +02:00
kkapsner
0133af70f5 Add proper DOMRect ask texts. 
For #236
 2018-09-09 00:16:44 +02:00
kkapsner
1eacfe7dc5 Ignoring DOMRect did not work. 
For #236.
 2018-09-09 00:15:47 +02:00
kkapsner
4c2fea8a90 Don't store ignored notifications. 
For #236
 2018-09-09 00:15:21 +02:00
kkapsner
e147c119ef Only use whitelisted status of tab url 
For #241
 2018-09-08 00:44:37 +02:00
kkapsner
255c8e6bbf DOMRect did not work because of protectedAPIFeatures 2018-09-08 00:05:56 +02:00
kkapsner
fa92c15dab Converted apiWhiteList to protectedAPIFeatures 
For #247
 2018-09-07 23:52:29 +02:00
kkapsner
6477572f79 Added indicator for whitelisted tab 
First draft for #241
 2018-09-06 20:13:16 +02:00
kkapsner
d3d137beed Fixed accidental blocking 
See #243
 2018-09-06 17:30:44 +02:00
kkapsner
bda97dbc38 Merge branch 'master' into DOMRect 2018-09-06 17:27:52 +02:00
kkapsner
aa8b202545 Fixed bug with "block" mode 
window and audio API were always blocked when using any of the "block
..." modes

Fixes #243
 2018-09-06 17:24:05 +02:00
kkapsner
e0729480fb Fix dataUrls.js 2018-09-06 08:38:22 +02:00
kkapsner
360c4628ce Corrected domain recognition 
Domains with hyphens were treates like RegExps.

Fixes #244.
 2018-09-06 08:34:08 +02:00
kkapsner
fb31545604 Removed debugging statement 2018-09-05 17:02:36 +02:00
kkapsner
a01ccf458f Corrected type and api on DOMRect changed functions 2018-09-05 16:47:32 +02:00
kkapsner
df1d59cf52 Added support for pixel fractions 
Pixel fractions can be controlled by CSS. These fractions must not be
faked.

For #236.
 2018-09-05 15:53:01 +02:00
kkapsner
1d5953e8c7 Added protection from undefined properties. 
DOMRect has some new properties that are only in nightly at the moment.
 2018-09-05 15:50:59 +02:00
kkapsner
f00c3b674e First DOMRect draft 
For #236
 2018-09-04 23:29:58 +02:00
kkapsner
bde8ac3e8e Only use onHeadersReceived listener when necessary 
As mentioned in #214
 2018-08-28 21:09:03 +02:00
kkapsner
83efac5e49 Added protection for window.name and window.opener 
As requested by #231.

But this protection is disabled by default.
 2018-08-27 00:33:39 +02:00
kkapsner
fd7c4fabbd Added protection for history.length 
As requested by #231.
 2018-08-27 00:30:48 +02:00
kkapsner
4c7b83aca6 Added support to fake getters. 2018-08-27 00:23:19 +02:00
kkapsner
da14aaff51 Added option to ignore APIs 
As mentioned in #233
 2018-08-24 19:39:34 +02:00
kkapsner
391deae6f1 Improved browser action title 
As mentioned in #233.
 2018-08-22 22:37:06 +02:00
kkapsner
4a043b2c78 Typos and linting 2018-08-22 22:16:49 +02:00
kkapsner
f873bd84e5 protectAudio should be url specific 2018-08-22 14:41:48 +02:00
kkapsner
bfb959c290 Added badge 
First draft for #233.
 2018-08-21 22:43:41 +02:00
kkapsner
c0563cd7d5 Theme settings 
For #232
 2018-08-21 22:03:16 +02:00
kkapsner
9d231c7b02 CSP cleanup 
Should help with #223.
 2018-08-21 22:01:10 +02:00
kkapsner
c25e95f845 Added highlighting options for notification icons 
Fixes #225.
 2018-08-20 21:48:05 +02:00
kkapsner
cedd2137e2 Added option "Don't show again on update." for options page. 
Fixes #227.
 2018-08-19 00:13:43 +02:00
kkapsner
bf868eb6ae Missing semicolon in CSP 
Fixed #224.
 2018-08-02 20:56:01 +02:00
kkapsner
05a3429dbe Change browser action icon depending on fake status. 
As mentioned in #217
 2018-07-31 13:36:34 +02:00
kkapsner
9b18631768 separate persistent random numbers for incognito windows 2018-07-28 14:13:14 +02:00
kkapsner
7f1fe0ed1c Intercepting broken on getter. 
Issue mentioned in #215
 2018-07-28 13:44:21 +02:00
kkapsner
9a26baf5c1 Block blob in Firefox ESR (52) 2018-07-24 23:30:00 +02:00
kkapsner
942d74ce54 Optimized CSP 2018-07-24 21:30:57 +02:00
kkapsner
7bfd300f6a Inject CSP only in the relevant requests. 
Prevents detection of CB.
 2018-07-21 19:34:24 +02:00
kkapsner
8389165b70 Allow blob and filesystem schemes 
They are protected and do not need to be blocked (like data-URLs).

Fixes #212 and fixes #213.
 2018-07-21 13:25:15 +02:00
kkapsner
9ba9c48422 Block data URLs instead of their requests 
Fixes #211
 2018-07-21 00:32:15 +02:00
kkapsner
5077c86859 Added session white list 
Fixes #197
 2018-07-17 13:07:50 +02:00
kkapsner
9753681651 Return storage promise from settings.set(). 2018-07-17 12:54:10 +02:00
kkapsner
1f5f5bccc4 Remove all traces of the addon in the displayed calling stack. 2018-07-17 12:50:40 +02:00
kkapsner
47a9519ceb "Protect" data URL pages by blocking outgoing requests 
Fixes #208
 2018-07-16 00:14:44 +02:00
kkapsner
8db0774d7c Added note where the dynamic content script fails. 2018-07-15 22:39:03 +02:00
kkapsner
a65855a587 Show page action when blocking 
Fixes #207
 2018-07-13 16:59:49 +02:00
kkapsner
26529a3653 Hide function replacement 
Fixes #206
 2018-07-13 16:58:13 +02:00
kkapsner
6dc08534a6 Improved logging on settings storage. 2018-07-12 01:18:49 +02:00
kkapsner
07c5585f5a Added 10% and 100% fake rates for audio 2018-07-04 23:59:27 +02:00
kkapsner
720a9bc9a5 Added feature to hide settings. 2018-07-02 00:29:41 +02:00
kkapsner
22fda1eac7 Changed the way the random indices are chosen 
Only the offset is random. The indices are then spaced evenly.
 2018-06-30 23:34:59 +02:00
kkapsner
d580c35898 Added hashCode 2018-06-30 23:06:20 +02:00
kkapsner
8472e877a4 Corrected md5 hashing 2018-06-30 23:02:31 +02:00
kkapsner
4d71d6bc02 Added audio cache. 2018-06-30 00:34:20 +02:00
kkapsner
f7a0990a29 Also fake array entries that contain zero. 2018-06-29 23:27:20 +02:00
kkapsner
df5109bbf6 Refined audio faking procedure. 2018-06-21 00:20:41 +02:00
kkapsner
c13a6f88b3 Added fixed indices setting. 2018-06-21 00:19:49 +02:00
kkapsner
a41eba1dff Notification should show up for every function. 2018-06-21 00:19:12 +02:00
kkapsner
21992121b9 Audio faking broke when using "storeImageForInspection". 2018-06-21 00:14:20 +02:00
kkapsner
0f44820e3d Used api property to display correct text in ask mode. 2018-06-21 00:13:32 +02:00
kkapsner
1abc681e3f Added api property to changedFunctions. 2018-06-21 00:09:07 +02:00
kkapsner
e9fbb7259e Added grouping for keys in object setting. 2018-06-21 00:07:29 +02:00
kkapsner
4f18dc3ab6 Computed default value 
Default values for settings can now be functions to be computed.
 2018-06-21 00:03:17 +02:00
kkapsner
0f0f526fd5 Added protection for audio API 2018-06-16 00:22:31 +02:00
kkapsner
032bc2e424 Modified randomSuppies API 
getRng now returns a 32 bit random Number
getIndexRng returns a random index in a range
getBitRng returns a random bit
getValueRng is the old getRng which alters the provided value
 2018-06-16 00:09:06 +02:00
kkapsner
52e44e0eb2 respect RFP setting in isPointInPath and isPointInStroke 
Fixes #189
 2018-05-26 15:36:55 +02:00
kkapsner
f02246128e Added setting to whitelist parts of the canvas API 2018-05-26 15:33:39 +02:00
kkapsner
a7e472f298 added isPointInPath and isPointInStroke to the readout-API list 2018-04-01 22:47:57 +02:00
kkapsner
6f8f9a7e9c Split long clear timeout delays. 
window.setTimeout can not handle big delays.

Fixes #180
 2018-02-16 18:10:18 +01:00
kkapsner
2b92481004 Show options page on install or update 
But only when pageAction is not available (i.e. Fennec)
 2018-01-08 17:07:46 +01:00
kkapsner
77e079e5cc Added showCanvasWhileAsking 
Fixes #175
 2018-01-04 13:36:18 +01:00
kkapsner
ab19ebd2c6 Enable asking in iframes 2018-01-04 13:30:48 +01:00
kkapsner
66336d1b65 prevent possible double faking 2018-01-03 10:59:56 +01:00