-
Notifications
You must be signed in to change notification settings - Fork 829
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DNS-lookups happening with everything blacklisted(via uMatrix/uBlock) #815
Comments
ghost
mentioned this issue
Aug 26, 2019
hmm page source code reveals the likely reason: <!-- test of preconnect -->
--
| <link rel="preconnect" href="https://product.pcmag.com" crossorigin>
| <link rel="preconnect" href="//zdbb.net">
| <link rel="preconnect" href="//a.zdbb.net">
| <link rel="preconnect" href="//partner.googleadservices.com">
| <link rel="preconnect" href="//pagead2.googlesyndication.com">
| <link rel="preconnect" href="https//securepubads.g.doubleclick.net">
| <link rel="preconnect" href="//www.googleadservices.com">
| <link rel="preconnect" href="//assets.pcmag.com">
| <link rel="preconnect" href="//static.pcmag.com">
| <link rel="preconnect" href="//www.google-analytics.com">
| <link rel="preconnect" href="//api.bounceexchange.com">
|
ok fixed by: --- a/chrome/browser/predictors/preconnect_manager.cc 2019-08-26 14:08:51.054928230 +0200
+++ b/chrome/browser/predictors/preconnect_manager.cc 2019-08-26 14:09:00.778805985 +0200
@@ -105,6 +105,7 @@ void PreconnectManager::StartPreresolveH
void PreconnectManager::StartPreresolveHosts(
const std::vector<std::string>& hostnames) {
DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
+ return;
// Push jobs in front of the queue due to higher priority.
for (auto it = hostnames.rbegin(); it != hostnames.rend(); ++it) {
PreresolveJobId job_id =
@@ -120,7 +121,7 @@ void PreconnectManager::StartPreresolveH
void PreconnectManager::StartPreconnectUrl(const GURL& url,
bool allow_credentials) {
DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
- if (!url.SchemeIsHTTPOrHTTPS())
+// if (!url.SchemeIsHTTPOrHTTPS())
return;
PreresolveJobId job_id = preresolve_jobs_.Add(std::make_unique<PreresolveJob>(
url.GetOrigin(), 1, allow_credentials, nullptr)); |
ghost
closed this as completed
Aug 26, 2019
This issue was closed.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Describe the bug
A bunch of DNS lookups (at least!) are happening when visiting certain websites (currently only 1 I remember), while everything is blocked via uMatrix (including CSS/images!)
So, does this bypass blocking?! yes
To Reproduce
Steps to reproduce the behavior:
www.pcmag.com
is allowed to be successfully DNS-looked up (ie. you have no DNS servers in/etc/resolv.conf
andwww.pcmag.com
is already in /etc/hosts eg.104.121.166.103 www.pcmag.com
), or alternatively usetcpdump
to catch DNS lookups.So the question is why? why does this happen? More importantly, if I do allow those to DNS lookup, will they load anything? (not tested yet)
Expected behavior
Only www.pcmag.com should be looked up! (which would be what happens on any other normal website that hasn't managed to find a sneaky way to bypass blocking(or whatever is going on here))
Screenshots
If applicable, add screenshots to help explain your problem.
Environment (please complete the following information):
OS/Platform and version:
ArchLinux 64 bit (it's a rolling release, so it's current)
ungoogled-chromium version:
local/ungoogled-chromium 76.0.3809.100-1
Additional context
I'm using these policies and this ~/.config/chromium-flags.
The text was updated successfully, but these errors were encountered: