Due to ethical (not to mention legal) concerns, we opted not explore this vector.Ī while ago one of my heroes, Tavis Ormandy mentioned on Twitter that uBlock Origin was vulnerable to CSS injection in their filter rules. We did find a technique to encourage malicious rule installation, but believe that the most plausible attack vector is a compromised filter list. Please note that these techniques assume a malicious rule has been installed. All vulnerabilities discussed in this post have been reported to uBlock Origin and patched. In this post, we'll show you how we were able to bypass these restrictions in uBlock Origin, use a novel CSS-based exploitation technique to extract data from scripts and attributes, and even steal passwords from Microsoft Edge. These lists are not entirely trusted, so they're constrained to prevent malicious rules from stealing user data. Behind the scenes, they're powered by community-provided filter lists - CSS selectors that dictate which elements to block. Ad blockers like uBlock Origin are extremely popular, and typically have access to every page a user visits.
0 kommentar(er)
