Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?
-
Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?
-
Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?
@badrihippo JavaScript can be disabled/enabled on a per-domain basis: https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-scripting
Would you mind providing more information about what you are trying to achieve?
Thanks -
@badrihippo JavaScript can be disabled/enabled on a per-domain basis: https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-scripting
Would you mind providing more information about what you are trying to achieve?
Thanks@iampytest1 Anubis is a self-hosted tool used to protect services like https://git.disroot.org (to give you one example installation) from crawlers. I only want that script to run (so it can let me in) but not any of the other scripts, so it'd have to be based on generic path (or better, hash or something) rather than domain. My workaround for now is to enable JavaScript to get through the Anubis challenge and then disable it again once I'm through
Anubis: Web AI Firewall Utility | Anubis
Weigh the soul of incoming HTTP requests to protect your website!
(anubis.techaro.lol)
-
@iampytest1 Anubis is a self-hosted tool used to protect services like https://git.disroot.org (to give you one example installation) from crawlers. I only want that script to run (so it can let me in) but not any of the other scripts, so it'd have to be based on generic path (or better, hash or something) rather than domain. My workaround for now is to enable JavaScript to get through the Anubis challenge and then disable it again once I'm through
Anubis: Web AI Firewall Utility | Anubis
Weigh the soul of incoming HTTP requests to protect your website!
(anubis.techaro.lol)
Interestingly, I got past the Anubis banner or the official Anubis landing page without JavaScript enabled! Is this some kind of new JS-free version that's been deployed?

-
Interestingly, I got past the Anubis banner or the official Anubis landing page without JavaScript enabled! Is this some kind of new JS-free version that's been deployed?

Ooh yes looks like this exists! (With a higher false positive rate, unfortunately but understandably)
Meta Refresh (No JavaScript) | Anubis
The metarefresh challenge sends a browser a much simpler challenge that makes it refresh the page after a set period of time. This enables clients to pass challenges without executing JavaScript.
(anubis.techaro.lol)
-
@iampytest1 Anubis is a self-hosted tool used to protect services like https://git.disroot.org (to give you one example installation) from crawlers. I only want that script to run (so it can let me in) but not any of the other scripts, so it'd have to be based on generic path (or better, hash or something) rather than domain. My workaround for now is to enable JavaScript to get through the Anubis challenge and then disable it again once I'm through
Anubis: Web AI Firewall Utility | Anubis
Weigh the soul of incoming HTTP requests to protect your website!
(anubis.techaro.lol)
I only want that script to run (so it can let me in) but not any of the other scripts
There isn't a way to do that with per site switches - like enabling/disabling JavaScript.
Those apply to the entire website, and are disabled/enabled based on the domain of the website.One workaround could be to block all scripts (or all third party scripts) with dynamic filtering, and selectively allow them: https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode
But that sounds different from what you want.
Furthermore, there is no way with per site switches or dynamic filtering to allow something in a more granular way such as based on a generic path or hash.Thanks
-
R relay@relay.infosec.exchange shared this topic