bypass notification #5890

ghost · 2019-06-29T18:13:39Z

URL(s) where the issue occurs

http://sprysphere.com/BiZZ

Describe the issue

The link above require notification to be allowed in order to continue but i don't want any notification. Can it be bypassed?

Screenshot(s)

Versions

Browser/version: 1.20.0
uBlock Origin version: Opera 60.0.3255.170

Settings

Default

Notes

None

The text was updated successfully, but these errors were encountered:

krystian3w · 2019-06-29T19:26:00Z

no filters block push...

krystian3w · 2019-06-29T19:33:23Z

@mapx- badfilter:

/ntfc.php?$script

url:

https://www1.ecleneue.com/pushredirect/?placementid=10729309&clickid=5743133391&t=1561836513&dest=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0

blocked:

https://pushokey.com/ntfc.php?p=2553225&ucis=true&m=https&nbinp=true&var=10729309&ymid=5743133391

krystian3w · 2019-06-29T19:42:28Z

@kenviet links open after 4 redirect in maranhesduve.club site.

okiehsch · 2019-06-29T20:09:57Z

After getting redirected through maranhesduve.club I arrive at

without any notification on my end.

krystian3w · 2019-06-29T20:14:09Z

You no have any:

https://p1.maranhesduve.club/?tag_id=759228&sub_id1=10729309&sub_id2=5946832176255722117&cookie_id=1a5d90e7-dcc7-4ee2-9bf1-0d76f9a4ce5e&lp=adfly_allow&convert=Your%20Video%20Is%20Ready%20To%20Stream&allb=redirect&ob=redirect&href=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0&hop=-1&info=&sub=p1

https://p2.maranhesduve.club/?tag_id=759228&sub_id1=10729309&sub_id2=5946832176255722117&cookie_id=1a5d90e7-dcc7-4ee2-9bf1-0d76f9a4ce5e&lp=adfly_allow&convert=Your%20Video%20Is%20Ready%20To%20Stream&allb=redirect&ob=redirect&href=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0&hop=0&info=&sub=p2

krystian3w · 2019-06-29T20:15:13Z

okiehsch · 2019-06-29T20:42:07Z

https://p1.maranhesduve.club/?tag_id=759228&sub_id1=10729309&sub_id2=5946832176255722117&cookie_id=1a5d90e7-dcc7-4ee2-9bf1-0d76f9a4ce5e&lp=adfly_allow&convert=Your%20Video%20Is%20Ready%20To%20Stream&allb=redirect&ob=redirect&href=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0&hop=-1&info=&sub=p1

I do have those and I also get the screenshot of the OP but I get automatically redirected to the dropbox site without me having to do anything.

krystian3w · 2019-06-29T20:43:04Z

for me site wait for allow push and push also blocked on sister domain:

https://www1.ecleneue.com/pushredirect/?placementid=10729309&clickid=5743133391&t=1561839614&dest=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0

https://www2.ecleneue.com/pushredirect/?placementid=10729309&clickid=5743133391&t=1561839614&dest=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0&reason=Deny1

https://www3.ecleneue.com/pushredirect/?placementid=10729309&clickid=5743133391&t=1561839614&dest=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0&reason=Deny1

no reddirect to drobox...

okiehsch · 2019-06-29T20:45:06Z

Well, not for me and I would not badfilter /ntfc.php?$script maybe allow it for the site only if necessary.
Let's wait and see if mapx- can reproduce.

mapx- · 2019-06-29T21:54:04Z

I cannot arrive at dropbox even whitelisting

@@||pushokey.com/ntfc.php$script,domain=ecleneue.com
@@||pushlaram.com/ntfc.php$script,domain=ecleneue.com

okiehsch · 2019-06-29T22:02:29Z

Do you get the same result if you go to
sprysphere.com/DvHm?
The shortener leads to a mediafire site on my end.

mapx- · 2019-06-29T22:04:51Z

yeah, same behaviour the destination page (waiting for allow) is
https://www1.ecleneue.com/pushredirect/?placementid=3860662&clickid=5744570877&t=1561845822&dest=https%3A%2F%2Fgloyah.net%2Fredirecting%2FaHR0cDovL3d3dy5tZWRpYWZpcmUuY29tL2ZvbGRlci9oYWpyMWZqd2cwb2IxL0ZSUDIwMTg%3D%2F2df3c7c1bae1ddeeeeea3e09ff221ae2

okiehsch · 2019-06-29T22:08:58Z

I never get to ecleneue.com.
It's sprysphere --> gloyah --> maranhesduve --> mediafire on my end.

If it does not work at all on your end adding an exception for the push notification seems pointless.

mapx- · 2019-06-29T22:17:07Z

using a hungarian ip:

FF => sprysphere --> gloyah --> maranhesduve (not arriving on mediafire)
chrome => sprysphere --> gloyah --> ecleneue (not arriving on mediafire)

okiehsch · 2019-06-29T22:33:34Z

Does it work if you whitelist maranhesduve or ecleneue?

mapx- · 2019-06-29T22:37:25Z

No effect => still waiting allow

okiehsch · 2019-06-29T22:45:22Z

Well, then it seems to be a site issue on your end, though I don't know why it works for me without doing anything and for krystian3w it works after adding the exceptions.

krystian3w · 2019-06-30T00:14:59Z

ecleneue.*,maranhesduve.*##+js(abort-on-property-read.js, Notification.requestPermission)

maybe works to disable webpush if for other users allow notify is no needed.

dumbusernameidk · 2019-06-30T02:41:58Z

I can't reproduce anything either opening the link in the op goes through correctly with no issue.

edit: so i tested it a few times with/without ubo it just seems to be random whether or not if it lets you through. Probably just an issue with the site i've had a lot of issues with adfly clones in the past.

ghajini · 2019-06-30T05:19:50Z

I can reproduce on firefox android....
Site needs to allow push notifications
Then it drops you to Dropbox at the expense of 3rd party trackers exposure
@jspenguin2017 🐧can you help here

jspenguin2017 · 2019-06-30T19:22:39Z

I can reproduce, final destination is https://www.dropbox.com/s/lwph95lsyuv21kw/LDOE_v1.8_Mod_iOSGods_Div.zip?dl=0.

We need a new script snippet.

uBlockOrigin/uAssets#5890

jspenguin2017 · 2019-06-30T19:43:58Z

Eh... The notification is requested from a service worker... We can't inject script snippets to service workers...

The only way I can think of interfering with it is to periodically revoke the notification permission for those bad domains.

krystian3w · 2019-06-30T20:05:30Z

Redirection?

FF => sprysphere --> gloyah --> maranhesduve > p1.maranhesduve.club
chrome => sprysphere --> gloyah --> ecleneue  > www4.ecleneue.com

website should ignore notification after 4 tests.

jspenguin2017 · 2019-06-30T20:09:12Z

Hum... Yea, if you do not grant notification it will try ~5 times then give up.

krystian3w · 2019-06-30T20:39:19Z

https://www4.ecleneue.com/pushredirect/?placementid=10729309&clickid=5743133391&t=1561927096&dest=https%3A%2F%2Fwww.dropbox.com%2Fs%2Flwph95lsyuv21kw%2FLDOE_v1.8_Mod_iOSGods_Div.zip%3Fdl%3D0

for me www4 no need:

@@/ntfc.php?$script,domain=ecleneue.com

okiehsch · 2019-06-30T20:57:01Z

Hum... Yea, if you do not grant notification it will try ~5 times then give up.

That is what I get at my end, maranhesduve automatically reloads 4 times and then I get redirected to dropbox or mediafire in the two linked examples.

mapx- · 2020-03-03T08:54:16Z

well, I don't know if all other sites were fixed .. however we don't have for now a specific fix (scriptlet). I'd say we can close it for now.

uBlock-user · 2020-03-03T08:56:29Z

if all other sites were fixed

what other sites ?

mapx- · 2020-03-03T09:04:53Z

oxy.cloud ? (see above)

uBlock-user · 2020-03-03T09:14:36Z

Go to https://oxy.cloud/d/pyH, Click on the free download blue button,

Get redirected from news-fbe.com and till 10.news-fbe.com and then finally reach -- https://oxy.cloud/d/pyH/2/9d9c30a7bad75647eebca17ade51869f

Add oxy.cloud##+js(ra, disabled) to My Filters and refresh the page, wait till the bar get filled to 100 % and then click Download File blue button, and file gets downloaded.

Not seeing any issue here either except the disabled button which can be fixed with the above filter.

mapx- · 2020-03-03T09:32:33Z

ok then .. fix it and we can close the thread

uBlock-user · 2020-03-03T09:35:52Z

@mapx- Actually enabling the button back doesn't help, file will not be downloaded until the bar gets filled (100 %) and once the bar is filled the button does get enabled, so should we still enable it by force ?

mapx- · 2020-03-03T09:42:41Z

I still get

which is the original issue, right ?

uBlock-user · 2020-03-03T09:43:53Z

i get that too and i wait for a minute or less and I get redirected.

mapx- · 2020-03-03T09:48:40Z

I'm stuck on that page, so I cannot test further

uBlock-user · 2020-03-03T09:50:32Z

Is gstatic.com blocked when you get stuck on news-fbe.com ? I get stuck if I block gstatic.com

mapx- · 2020-03-03T09:53:09Z

no, nothing blocked, using chrome + default settings

okiehsch · 2020-03-03T09:54:54Z

which is the original issue, right ?

Correct, I don't get stuck but let's leave the issue open. It's not like we are drowning in open issues.

uBlock-user · 2020-03-03T09:54:55Z

Must be a Chrome issue then, work on Firefox.

LGLTeam · 2020-03-29T11:27:50Z

This site have it too
https://shre.su/F0NV

krystian3w · 2020-03-29T12:18:35Z

for my generate 5-6 redirect on "gumk.pro"

at end open https://oxy.st/d/mAvb with your apk cracked (or modded) game.

and oxy have ad:

oxy.st##.adv-wrap

uBlock-user · 2020-03-29T12:20:02Z

This site have it too
https://shre.su/F0NV

Specific to Chrome as above, can't reproduce on Firefox.

ghajini · 2020-12-20T09:23:11Z

Any custom scriptlet that I can use at userresourcelocation
working solution is present in nano defender but extension is unsupported/unavailable as of now in firefox android extension platform ....

URL =

https://www42.elbaestes.pro/pushredirect/?network=1&site=adfly&ppi=2220594&pci=6707862119&t=1608455433&dest=https%3A%2F%2Fonleech.me%2Fshort%3Fomg%3DvrUMDPLgiiO-BEck9ry8DVovYO_tLrxKyOJUZcP2P_GKiECapmtnoCaoLZsFENe38x_5UsHKh6y-gRv4JDo9kE7g6L5w8T6GCF4NbjZLhENMkEDVSCfgq2IcG0DEbA18

Got from https://exe.app/U8JdoJM

Issue=

can't proceed further to destination site, stuck at site saying Please press 'Allow' to continue

Platform=

firefox android stable

Note=

Please consider fixing this in ublock origin itself @gwarser @gorhill

krystian3w · 2020-12-20T14:54:26Z

grant-fake-notification no help for these ad-fly short url engine = bugged by useage serviceWorker.

ghost · 2021-06-04T19:54:23Z

I added darenjarvis.pro##+js(adfly-defuser) to 'My filters' and then accessed the first link from the issue again.

ghost · 2021-06-04T19:54:39Z

krystian3w · 2021-06-05T21:21:57Z

Maybe resource need update...?

krystian3w · 2022-01-01T19:07:51Z

May need add can't Fix or won't fix.

Also lock conversation to collaborators only is good idea.

okiehsch added the unable to reproduce label Jun 29, 2019

jspenguin2017 added a commit to NanoAdblocker/NanoFilters that referenced this issue Jun 30, 2019

https://github.com/uBlockOrigin/uAssets/issues/5890

caf91cf

jspenguin2017 added a commit to NanoAdblocker/NanoFilters that referenced this issue Jun 30, 2019

Doesn't work, demote to beta script snippet

fdbae2d

uBlockOrigin/uAssets#5890

adguard-bot mentioned this issue Jun 30, 2019

sprysphere.com AdguardTeam/AdguardFilters#36033

Closed

NanoMeow mentioned this issue Mar 29, 2020

gumk.pro NanoMeow/QuickReports#3429

Open

mapx- changed the title ~~bypass notification / other requirement?~~ bypass notification Aug 7, 2020

ghajini mentioned this issue Dec 12, 2020

adf.ly malicious links causing UBlockOrigin crash #8364

Closed

bypass notification #5890

bypass notification #5890

Comments

ghost commented Jun 29, 2019 • edited by mapx-

URL(s) where the issue occurs

Describe the issue

Screenshot(s)

Versions

Settings

Notes

krystian3w commented Jun 29, 2019

krystian3w commented Jun 29, 2019 • edited

krystian3w commented Jun 29, 2019

okiehsch commented Jun 29, 2019

krystian3w commented Jun 29, 2019 • edited

krystian3w commented Jun 29, 2019

okiehsch commented Jun 29, 2019 • edited

krystian3w commented Jun 29, 2019 • edited

okiehsch commented Jun 29, 2019

mapx- commented Jun 29, 2019

okiehsch commented Jun 29, 2019

mapx- commented Jun 29, 2019

okiehsch commented Jun 29, 2019

mapx- commented Jun 29, 2019

okiehsch commented Jun 29, 2019

mapx- commented Jun 29, 2019

okiehsch commented Jun 29, 2019 • edited

krystian3w commented Jun 30, 2019 • edited

dumbusernameidk commented Jun 30, 2019 • edited

ghajini commented Jun 30, 2019 • edited

jspenguin2017 commented Jun 30, 2019 • edited

jspenguin2017 commented Jun 30, 2019 • edited

krystian3w commented Jun 30, 2019 • edited

jspenguin2017 commented Jun 30, 2019

krystian3w commented Jun 30, 2019 • edited

okiehsch commented Jun 30, 2019

mapx- commented Mar 3, 2020 • edited

uBlock-user commented Mar 3, 2020

mapx- commented Mar 3, 2020

uBlock-user commented Mar 3, 2020 • edited

mapx- commented Mar 3, 2020

uBlock-user commented Mar 3, 2020

mapx- commented Mar 3, 2020

uBlock-user commented Mar 3, 2020

mapx- commented Mar 3, 2020

uBlock-user commented Mar 3, 2020

mapx- commented Mar 3, 2020

okiehsch commented Mar 3, 2020

uBlock-user commented Mar 3, 2020

LGLTeam commented Mar 29, 2020

krystian3w commented Mar 29, 2020 • edited

uBlock-user commented Mar 29, 2020 • edited

ghajini commented Dec 20, 2020 • edited

krystian3w commented Dec 20, 2020

ghost commented Jun 4, 2021

ghost commented Jun 4, 2021

krystian3w commented Jun 5, 2021

This comment has been minimized.

krystian3w commented Jan 1, 2022

ghost commented Jun 29, 2019 •

edited by mapx-

krystian3w commented Jun 29, 2019 •

edited

krystian3w commented Jun 29, 2019 •

edited

okiehsch commented Jun 29, 2019 •

edited

krystian3w commented Jun 29, 2019 •

edited

okiehsch commented Jun 29, 2019 •

edited

krystian3w commented Jun 30, 2019 •

edited

dumbusernameidk commented Jun 30, 2019 •

edited

ghajini commented Jun 30, 2019 •

edited

jspenguin2017 commented Jun 30, 2019 •

edited

jspenguin2017 commented Jun 30, 2019 •

edited

krystian3w commented Jun 30, 2019 •

edited

krystian3w commented Jun 30, 2019 •

edited

mapx- commented Mar 3, 2020 •

edited

uBlock-user commented Mar 3, 2020 •

edited

krystian3w commented Mar 29, 2020 •

edited

uBlock-user commented Mar 29, 2020 •

edited

ghajini commented Dec 20, 2020 •

edited