Skip to content
This repository has been archived by the owner. It is now read-only.

Requests bypass uMatrix on Firefox start #69

Closed
5 of 7 tasks
glacambre opened this issue Oct 3, 2018 · 6 comments
Closed
5 of 7 tasks

Requests bypass uMatrix on Firefox start #69

glacambre opened this issue Oct 3, 2018 · 6 comments

Comments

@glacambre
Copy link

@glacambre glacambre commented Oct 3, 2018

Prerequisites

  • I performed a cursory search of the issue tracker to avoid opening a duplicate issue
    • Your issue may already be reported.
  • This is not a support issue or a question
    • Support issues and questions are handled at /r/uMatrix
  • I tried to reproduce the issue when...
    • uMatrix is the only extension
    • uMatrix with default lists/settings
    • using a new, unmodified browser profile
  • I am running the latest version of uMatrix
  • I checked the documentation to understand that the issue I report is not a normal behavior

Description

Requests that should be caught by uMatrix are not caught.

A specific URL where the issue occurs

I managed to reproduce this on Github but I do not think this only happens on Github.

Steps to Reproduce

  1. Use a slow computer
  2. Use Firefox 62
  3. Set browser.sessionstore.restore_on_demand to false in about:config
  4. In uMatrix, make sure that the website you're testing this on is not allowed to fetch images
  5. Open lots of tabs, notice how the images aren't loaded
  6. Close firefox and restart it immediately
  7. Notice that the images of the active tab have been loaded
  8. Reload the page, notice that the images are not loaded

Supporting evidence

2018-10-03-211945_958x1078_scrot

As you can see my github avatar is loaded while requests to githubusercontent are forbidden.

Your environment

  • uMatrix version: 1.3.14
  • Browser Name and version: Firefox 62.0
  • Operating System and version: Linux 4.15.0-36-generic #39-Ubuntu SMP Mon Sep 24 16:19:09 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Additional thoughts

This might be a Firefox problem rather that a uMatrix problem. There could be a race between the extension-loading process and the page-loading one. If this is what's happening here you might not be able to do anything about it except report it to Mozilla.

@glacambre glacambre changed the title Requests bypass uMatrix on Firefox launch Requests bypass uMatrix on Firefox start Oct 3, 2018
@uBlock-user
Copy link
Member

@uBlock-user uBlock-user commented Oct 3, 2018

Browser behaviour. See - gorhill/uBlock#1327

@glacambre
Copy link
Author

@glacambre glacambre commented Oct 3, 2018

Oh, sorry, didn't think about checking uBlock's issues. Thanks for the prompt reply :)

@gorhill gorhill reopened this Oct 3, 2018
@gorhill
Copy link
Member

@gorhill gorhill commented Oct 3, 2018

I need to add the same mechanism in uMatrix as that of uBO -- to my surprise the advanced option suspendTabsUntilReady is not in uMatrix. I will consider turning it on by default.

@Cerberus-tm
Copy link

@Cerberus-tm Cerberus-tm commented Oct 31, 2018

It would be great if this option were available! As to whether it should be enabled by default, I cannot say (I certainly would enable it myself).

@uBlock-user
Copy link
Member

@uBlock-user uBlock-user commented Oct 31, 2018

The setting is going to be experimental, so it may work and may not sometimes.

@Cerberus-tm
Copy link

@Cerberus-tm Cerberus-tm commented Oct 31, 2018

Even so, there is currently a privacy/security hiatus, so anything is better than nothing.

gorhill added a commit to gorhill/uMatrix that referenced this issue Jan 1, 2019
Related issues:

- "Requests bypass uMatrix on Firefox start"
  <uBlockOrigin/uMatrix-issues#69>

  Using same approach as with uBO:
  https://github.com/gorhill/uBloc/commit/41548be6be35

  `suspendTabsUntilReady` advanced setting added to "More" pane,
  useful only for Chromium -- the blocking of early network
  requests is enforced unconditionally on Firefox (because it
  supports returning Promises from webRequest handlers).

- "Cookies leaking temporarily"
  <uBlockOrigin/uMatrix-issues#74>

  Changes in the webRequest API in Chromium 72+ caused uMatrix
  to fail to process `Cookie` and `Referer` headers on that
  platform.
@uBlock-user uBlock-user closed this Jan 1, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
4 participants