Re:A timing attack with CSS selectors and JavaScript
by nerdponx on Sunday October 07, 2018 @10:33AM
(#18160716)
Does uMatrix let me block specific JS web APIs and HTML elements like iframes? It never could in the past.
[ Parent
| on HN ]
Re:A timing attack with CSS selectors and JavaScript
by gcb0 on Sunday October 07, 2018 @03:00PM
(#18162092)
yes. I block iframes globally and the web never been better.
it will show a checkered pattern with a link to open the frame in another window. so you don't even have to whitelist sites or anything. if you care about the frame, like for a embedded video, just open it on its own tab with a single click
Re:A timing attack with CSS selectors and JavaScript
by clear_dg on Sunday October 07, 2018 @11:15AM
(#18160947)
uMatrix can block frames and js requests on a domain/sub-domain level. afaik, it can't block at url level, if that's what you meant.
That said, uMatrix, from what I remember, uses the webRequest api which does work from urls. So if you know JS, you can always create an extension and add your own filter.