Speed and Dynamic-filtering:-precedence

[ruy-benton]

In wiki, you describe for better security - enable:
3rd-party scripts and frames, inline and 1st-party scripts.

And there is another Benefit / Advantage - IT'S SPEED.
If uBlock (Dynamic-filter) blocks all that scripts and frames ... he don't search in static filters.

I analysed https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-precedence

If I block 3rd-party frames and scripts - red in "My rules",
why the local "www.example.com * * noop" don't disable this 3rd-party?

and this disable:
"www.example.com * 3p-script noop"
"www.example.com * 3p-frame noop"

Thank you in advance for your comments

[gorhill]

why the local "www.example.com * * noop" don't disable this 3rd-party?

I don't understand the issue report. What do you mean by "don't disable this 3rd-party"? www.example.com * * noop means to disable dynamic filtering for www.example.com.

[RoxKilly]

@ruy-benton noop means allow this request unless a static filter blocks it where static filters come from block lists in the 3rd Party Filters tab of UBlock's settings (EasyList and EasyPrivacy for example).

In dynamic filtering, site-specific rules will take precedence over more general rules. So even if you block 3rd party scripts generally, the site-specific rule www.example.com * * noop will override the block and allow 3rd party scripts made from www.example.com (except those scripts blocked by static filters)

[ruy-benton]

Edit: Understand the concept and implementation of @gorhill and the comments in the end of this thread.

@RoxKilly

1. I want that procedure ... correct
   And "Fanboy+Easylist-Merged Ultimate List‎", "Malware domains‎" ...

@RoxKilly
2) "... even if you block 3rd party scripts generally, the site-specific rule
'www.example.com * * noop' will override the block and allow 3rd party scripts made from www.example.com ..."

But ... for example http://www.ic.ac.uk

I block 3rd-party frames and scripts - red in "My rules",

In Logger:

....
10:11:04 image http://www.ic.ac.uk/NewsEvents/image/featurenews2012/28511.jpg
10:11:04 image http://www.ic.ac.uk/NewsEvents/image/featurenews2012/28512.jpg
10:11:04 * * 3p-script block -- script http://www.google-analytics.com/ga.js

Insert: www.ic.ac.uk * * noop

10:24:31 image http://www.ic.ac.uk/NewsEvents/image/featurenews2012/28511.jpg
10:24:31 image http://www.ic.ac.uk/NewsEvents/image/featurenews2012/28512.jpg
10:24:31 * * 3p-script block -- script http://www.google-analytics.com/ga.js

No change ...

Insert: www.ic.ac.uk * 3p-script noop

10:28:06 image http://www.ic.ac.uk/NewsEvents/image/featurenews2012/28511.jpg
10:28:06 image http://www.ic.ac.uk/NewsEvents/image/featurenews2012/28512.jpg
10:28:06 .com/ga.js -- script http://www.google-analytics.com/ga.js

Static filter in action

In some sites I want the local - 3p-script ... access ... I need the content of 3rd

Thank you for your work and comments,
Ruy

[gorhill]

"... the site-specific rule www.example.com * * noop will override the block and allow 3rd party scripts made from www.example.com ..."

Put in words, www.ic.ac.uk * * noop means you are noop'ing the all cell for site www.ic.ac.uk, which is usually pointless unless you have a block or allow rule for the global all cell.

The 3p-script cell has precedence over the all cell, hence the result:

All cells override the all cells. The local all cell overrides the global all cell.

https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-precedence.

The order of cells in the matrix offers a hint: the lower the cell, the higher precedence (and the more specific).

[ruy-benton]

Edit: Other users have the same comments ...

Another one:

@seanrand
...
"Edit: Just tried countering the * * 3p block with behind-the-scene * * noop, but it seems that 3p block takes precedence. Hmm.

Edit: behind-the-scene * 3p noop did the trick. Might be worth adding to the wiki."

[gorhill]

I don't' understand why you close the issue

Because there is no issue with uBlock, what you think is an issue is exactly how the precedence is documented.

[seanrand]

Trying to understand why I'm being quoted here, my comment was just me figuring out the precedences (which gorhill explained in this issue before closing it), sorry if that caused any confusion.

[ruy-benton]

It's very simple ... if you post or I can insert some images in WIKI.

When I change "www.ic.ac.uk * 3p-script noop" ( in "3rd-party scripts" right ) -> "www.ic.ac.uk * * noop"
uBlock move to "all" ( local ).

[seanrand]

@ruy-benton, I don't want to derail #528 any further, so I'm commenting here. I think I see where the confusion might stem from.

Let's take this page as an example. We are using default-deny (* * 3p-frame block and * * 3p-script block) and apply github.com * * noop:

When you look at the matrix, you could think that github * * noop overrides the * * 3p-frame block and * * 3p-script block rules because all hosts are greyed out. But, as we learnt earlier, that actually isn't the case! With this setup, github * * noop does not noop third-party scripts and frames.

A better representation of the situation would be this:

Some third-party assets such as images and css are allowed (because there is no github * 3p deny or github * 3p-passive deny rule) while others (scripts, frames) are still blocked.

---

Similarly, nooping third-party scripts locally on a default-deny setup is currently represented like this in the matrix:

It's not immediately obvious that some third-party requests are still being blocked (frames). This could be represented more accurately like this:

---

@gorhill, are you following? You're already using a yellow indicator for "mixed" (some requests blocked, some allowed) in the first column of the matrix, so applying it to the second and third column would be intuitive and more accurately represent the state of dynamic filtering for a host.

---

For completeness, another (more realistic) example:

This situation is even more inconsistent, as third-party images/css are nooped and third-party scripts/frames are blocked in both cases. (I hope I'm correct - I'm not very familiar with 3p-passive yet, please correct me if I'm wrong)
Yet when you look at the matrix, the third-party hosts could be interpreted as blocked in the first case or nooped in the second case.

Both would be better represented by this:

and this, respectively:

[ruy-benton]

@seanrand translated my text -> images !!!!! Wowwwwwwwwwwwwwwwwwwww

I understand @gorhill in 2 comment and write:

---

When I change "www.ic.ac.uk * 3p-script noop" local ( in "3rd-party scripts" right ) -> "www.ic.ac.uk * * noop"
uBlock move to "all" ( local ).

---

and try to help you in #528

Please update WIKI with images and this will help other users.

Thank you very much for your great software