Muva nje kwatholakala ukuthi i-block blocker ethandwayo «I-Adblock Plus »inobungozi obuvumela ukuhlela ukusetshenziswa kwekhodi yeJavaScript kumasayithi, esimweni sokusebenzisa izihlungi ezingahloliwe ezilungiselelwe abantu besithathu ngenhloso enonya (ngokwesibonelo, ngokuxhuma amasethi omthetho wezinkampani zangaphandle noma ngokufaka umthetho ngesikhathi sokuhlaselwa kweMITM).
Faka kuhlu abalobi abanamasethi wokuhlunga ingahlela ukwenziwa kwekhodi yayo kumongo wamasayithi atholakalela i- umsebenzisi engeza imithetho ne-opharetha »$ bhala kabusha«, okuvumela ukufaka enye ingxenye ye-URL.
Lokhu kukhishwa kwekhodi kungenzeka kanjani?
Isimemezelo se- Ukubhala kabusha okungama- $ akuvumeli ukufaka indawo yomsingathi ku-url, kepha kunikeza ithuba lokusebenzisa ngokukhululekile izimpikiswano kwesicelo.
Nokho, ukwenziwa kwekhodi kungatholakala. Amanye amasayithi, afana ne-Google Amamephu, i-Gmail, ne-Google Izithombe, basebenzisa inqubo yokulayisha ngamandla amabhulokhi e-JavaScript asetshenziswayo adluliswa ngendlela yombhalo ocacile.
Uma ngabe iseva ivumela ukuqondiswa kabusha kwezicelo, lapho-ke ingadluliselwa komunye umphathi ngokushintsha amapharamitha we-URL (ngokwesibonelo, kumongo weGoogle, ukuqondiswa kabusha kungenziwa nge-API »google.com/search«) .
Ngaphezu kwalokho Sebawoti esivumela ukuqondiswa kabusha, futhi ungahlasela ngokumelene nezinsizakalo ezivumela ukutholakala kokuqukethwe komsebenzisi (ukusingathwa kwekhodi, ipulatifomu yokubeka i-athikili, njll.).
Indlela ye Ukuhlaselwa okuhlongozwayo kuthinta kuphela amakhasi alayisha ngentambo ngamandla ngekhodi yeJavaScript (ngokwesibonelo, ngeXMLHttpRequest noma i-Fetch) bese uyabaqhuba.
Omunye umkhawulo omkhulu yisidingo sokusebenzisa ukuqondisa kabusha noma ukubeka imininingwane engenacala ohlangothini lweseva yasekuqaleni enikeza insiza.
Nokho, njengesiboniso sokubaluleka kokuhlaselwa, ikukhombisa ukuthi ungakuhlela kanjani ukwenziwa kwekhodi yakho ngokuvula i-maps.google.com usebenzisa ukuqondisa kabusha nge- "google.com/search".
Eqinisweni, izicelo zokusebenzisa i-XMLHttpRequest noma i-Fetch ukulanda imibhalo ekude ukuze zisebenze ngeke zehluleke uma inketho yokubhala kabusha kwe- $ isetshenziswa.
Futhi, ukuqondiswa kabusha okuvulekile kubaluleke kakhulu ngoba kuvumela iXMLHttpRequest ukuthi ifunde iskripthi kusuka kusayithi elikude, noma kubonakala sengathi ivela emthonjeni ofanayo.
Kumanje basebenzela ukuxazulula inkinga
Isixazululo sisalungiswa. Inkinga futhi ithinta i-AdBlock neBlock blocker. IBlock Origin Blocker ayingeni engcupheni yenkinga ngoba ayisekeli opharetha »$ rewrite».
Ngesinye isikhathi, umbhali weBlock Origin wenqabile ukufaka ukusekelwa kabusha kwe- $, ecaphuna izingqinamba ezingaba khona zokuphepha nemikhawulo yezinga lokusingathwa enganele (esikhundleni sokubhala kabusha, inketho yombuzo yaphakanyiswa ukusula amapharamitha wemibuzo esikhundleni sokuyifaka esikhundleni sayo).
Kungumsebenzi wethu ukuvikela abasebenzisi bethu.
Ngaphandle kwengozi ephansi impela, sinqume ukususa inketho yokubhala kabusha engu- $. Ngakho-ke, sizokhipha inguqulo ebuyekeziwe ye-Adblock Plus ngokushesha ngangokunokwenzeka ngobuchwepheshe.
Lokhu sikwenza njengesivikelo. Akukho mzamo owenziwe wokusebenzisa kabi inketho yokubhala kabusha futhi sizokwenza konke okusemandleni ukuvimbela lokhu ukuthi kungenzeki.
Lokhu kusho ukuthi akukho songo kunoma yimuphi umsebenzisi we-Adblock Plus.
UDAbathuthukisi be-Adblock Plus bacabanga ukuthi ukuhlaselwa kwangempela akunakwenzeka, ngoba lonke ushintsho kuhlu lwemithetho ejwayelekile luyabuyekezwa futhi ukuxhumeka kohlu lwamaqembu esithathu kwenziwa ngabasebenzisi kuyaqabukela.
Isimiso sokufaka esikhundleni se-MITM sisusa ukusetshenziswa kwe-HTTPS ngokuzenzakalela ukulayisha uhlu olujwayelekile lwamabhulokhi (kuzinhlu ezisele kuhlelwe ukuvimbela ukulanda kwe-HTTP ekukhishweni okuzayo).
Ukuvimba ukuhlaselwa ohlangothini lwamasayithi, Imiyalo ye-CSP ingasetshenziswa (Inqubomgomo Yokuphepha Kokuqukethwe), lapho ungakhomba khona ngokusobala abaphathi lapho kungalayishwa izinsiza zangaphandle.
Umthombo: https://adblockplus.org, https://armin.dev