Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?

Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?

Scheduled Pinned Locked Moved Uncategorized
anubisjavascriptublockorigin
6 Posts 2 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • badrihippo@fosstodon.orgB This user is from outside of this forum
    badrihippo@fosstodon.orgB This user is from outside of this forum
    badrihippo@fosstodon.org
    wrote last edited by
    #1

    Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?

    iampytest1@infosec.exchangeI 1 Reply Last reply
    0
    • badrihippo@fosstodon.orgB badrihippo@fosstodon.org

      Is there a way to make an exception for #Anubis installations when #JavaScript is disabled by #uBlockOrigin?

      iampytest1@infosec.exchangeI This user is from outside of this forum
      iampytest1@infosec.exchangeI This user is from outside of this forum
      iampytest1@infosec.exchange
      wrote last edited by
      #2

      @badrihippo JavaScript can be disabled/enabled on a per-domain basis: https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-scripting

      Would you mind providing more information about what you are trying to achieve?
      Thanks

      badrihippo@fosstodon.orgB 1 Reply Last reply
      0
      • iampytest1@infosec.exchangeI iampytest1@infosec.exchange

        @badrihippo JavaScript can be disabled/enabled on a per-domain basis: https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-scripting

        Would you mind providing more information about what you are trying to achieve?
        Thanks

        badrihippo@fosstodon.orgB This user is from outside of this forum
        badrihippo@fosstodon.orgB This user is from outside of this forum
        badrihippo@fosstodon.org
        wrote last edited by
        #3

        @iampytest1 Anubis is a self-hosted tool used to protect services like https://git.disroot.org (to give you one example installation) from crawlers. I only want that script to run (so it can let me in) but not any of the other scripts, so it'd have to be based on generic path (or better, hash or something) rather than domain. My workaround for now is to enable JavaScript to get through the Anubis challenge and then disable it again once I'm through

        Link Preview Image
        Anubis: Web AI Firewall Utility | Anubis

        Weigh the soul of incoming HTTP requests to protect your website!

        favicon

        (anubis.techaro.lol)

        badrihippo@fosstodon.orgB iampytest1@infosec.exchangeI 2 Replies Last reply
        0
        • badrihippo@fosstodon.orgB badrihippo@fosstodon.org

          @iampytest1 Anubis is a self-hosted tool used to protect services like https://git.disroot.org (to give you one example installation) from crawlers. I only want that script to run (so it can let me in) but not any of the other scripts, so it'd have to be based on generic path (or better, hash or something) rather than domain. My workaround for now is to enable JavaScript to get through the Anubis challenge and then disable it again once I'm through

          Link Preview Image
          Anubis: Web AI Firewall Utility | Anubis

          Weigh the soul of incoming HTTP requests to protect your website!

          favicon

          (anubis.techaro.lol)

          badrihippo@fosstodon.orgB This user is from outside of this forum
          badrihippo@fosstodon.orgB This user is from outside of this forum
          badrihippo@fosstodon.org
          wrote last edited by
          #4

          Interestingly, I got past the Anubis banner or the official Anubis landing page without JavaScript enabled! Is this some kind of new JS-free version that's been deployed? ๐Ÿ˜ฎ ๐Ÿ‘€

          badrihippo@fosstodon.orgB 1 Reply Last reply
          0
          • badrihippo@fosstodon.orgB badrihippo@fosstodon.org

            Interestingly, I got past the Anubis banner or the official Anubis landing page without JavaScript enabled! Is this some kind of new JS-free version that's been deployed? ๐Ÿ˜ฎ ๐Ÿ‘€

            badrihippo@fosstodon.orgB This user is from outside of this forum
            badrihippo@fosstodon.orgB This user is from outside of this forum
            badrihippo@fosstodon.org
            wrote last edited by
            #5

            Ooh yes looks like this exists! (With a higher false positive rate, unfortunately but understandably)

            Link Preview Image
            Meta Refresh (No JavaScript) | Anubis

            The metarefresh challenge sends a browser a much simpler challenge that makes it refresh the page after a set period of time. This enables clients to pass challenges without executing JavaScript.

            favicon

            (anubis.techaro.lol)

            1 Reply Last reply
            0
            • badrihippo@fosstodon.orgB badrihippo@fosstodon.org

              @iampytest1 Anubis is a self-hosted tool used to protect services like https://git.disroot.org (to give you one example installation) from crawlers. I only want that script to run (so it can let me in) but not any of the other scripts, so it'd have to be based on generic path (or better, hash or something) rather than domain. My workaround for now is to enable JavaScript to get through the Anubis challenge and then disable it again once I'm through

              Link Preview Image
              Anubis: Web AI Firewall Utility | Anubis

              Weigh the soul of incoming HTTP requests to protect your website!

              favicon

              (anubis.techaro.lol)

              iampytest1@infosec.exchangeI This user is from outside of this forum
              iampytest1@infosec.exchangeI This user is from outside of this forum
              iampytest1@infosec.exchange
              wrote last edited by
              #6

              @badrihippo

              I only want that script to run (so it can let me in) but not any of the other scripts

              There isn't a way to do that with per site switches - like enabling/disabling JavaScript.
              Those apply to the entire website, and are disabled/enabled based on the domain of the website.

              One workaround could be to block all scripts (or all third party scripts) with dynamic filtering, and selectively allow them: https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode
              But that sounds different from what you want.
              Furthermore, there is no way with per site switches or dynamic filtering to allow something in a more granular way such as based on a generic path or hash.

              Thanks

              1 Reply Last reply
              1
              0
              • R relay@relay.infosec.exchange shared this topic
              Reply
              • Reply as topic
              Log in to reply
              • Oldest to Newest
              • Newest to Oldest
              • Most Votes


              • Login

              • Login or register to search.
              • First post
                Last post
              0
              • Categories
              • Recent
              • Tags
              • Popular
              • World
              • Users
              • Groups