• Categories
  • Recent
  • Tags
Collapse
  1. Home
  2. Minim
  3. Won't block 3rd party properly

Won't block 3rd party properly

Scheduled Pinned Locked Moved Minim
bugminimmajor
64 Posts 2 Posters 10.5k Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • SweetPS Offline
    SweetPS Offline
    SweetP
    wrote on last edited by
    #21

    Interesting,
    As a workaround, you could set an exception on the top level domain and block everything

    ~
    Russell
    SweetPProductions.com

    N 1 Reply Last reply
    0
    • SweetPS SweetP

      Interesting,
      As a workaround, you could set an exception on the top level domain and block everything

      N Offline
      N Offline
      NickC
      wrote on last edited by
      #22

      @SweetP I tried that and also tried blocking other subdomains explicitly but still they load. It’s weird.
      This is probably a corner case, as the bulk of the app is about blocking 3rd party resources.
      But with new tracking/fingerprinting scripts being hosted on subdomains they usually pass by unfiltered.

      It would be great to specifically add an exception to those pesky subdomains and let all other subdomains load. But currently the exception doesn’t apply if one is permitting JS, all will load regardless. 😞

      1 Reply Last reply
      0
      • SweetPS Offline
        SweetPS Offline
        SweetP
        wrote on last edited by
        #23

        This seems like it may be a WebKit issue then
        😞

        ~
        Russell
        SweetPProductions.com

        1 Reply Last reply
        0
        • SweetPS Offline
          SweetPS Offline
          SweetP
          wrote on last edited by
          #24

          The App Store Version should now be live

          ~
          Russell
          SweetPProductions.com

          N 1 Reply Last reply
          0
          • SweetPS SweetP

            The App Store Version should now be live

            N Offline
            N Offline
            NickC
            wrote on last edited by
            #25

            @SweetP Still seeing 3.18. Will update once it hits 🙂

            N 1 Reply Last reply
            0
            • N NickC

              @SweetP Still seeing 3.18. Will update once it hits 🙂

              N Offline
              N Offline
              NickC
              wrote on last edited by
              #26

              @NickC OK, it finally updated in the store and got to update my main Mac.

              I tried it out and as detailed, I think there's still a minor bug either with the subdomain enforcement or with Webkit itself.

              From the 2 rules added, I would expect the images from www.investors.com to be blocked and just the ones on research.investors.com to be allowed. However, this is not the case. It would make for a fairly advanced Ad-blocker with this feature fully working 🤠

              Maybe when you get some spare time to investigate you can figure where the issue lies. Thanks for all your work so far!

              Screenshot 2023-03-10 at 2.35.07 PM.png

              1 Reply Last reply
              0
              • SweetPS Offline
                SweetPS Offline
                SweetP
                wrote on last edited by SweetP
                #27

                Ive been thinking about this, and im not sure this is an actual bug (in WebKit) but more of a limitation in the way it is implemented.

                With the subdomain rule, you are blocking all third parties - which is happening.
                but allowing some first party resources other subdomains and the top-level domain are actually first party resources, which it is also doing.

                I don't think there is a way to restrict resources to the specific domain/subdomain only - at least not via the APIs that Apple is providing.

                ~
                Russell
                SweetPProductions.com

                1 Reply Last reply
                0
                • SweetPS Offline
                  SweetPS Offline
                  SweetP
                  wrote on last edited by
                  #28

                  hmm,
                  I might have spoke too soon.
                  there is maybe a rule I can use
                  but it may be too restrictive for most users....

                  Im not sure how this could be implemented in a user friendly and non destructive way for most users.
                  Ill have a think about it and see if I can find a way to implement what you are hoping for, but not degrade the experience for everyone else (assuming the rule I mentioned does actually work :))

                  ~
                  Russell
                  SweetPProductions.com

                  N 1 Reply Last reply
                  1
                  • SweetPS SweetP

                    hmm,
                    I might have spoke too soon.
                    there is maybe a rule I can use
                    but it may be too restrictive for most users....

                    Im not sure how this could be implemented in a user friendly and non destructive way for most users.
                    Ill have a think about it and see if I can find a way to implement what you are hoping for, but not degrade the experience for everyone else (assuming the rule I mentioned does actually work :))

                    N Offline
                    N Offline
                    NickC
                    wrote on last edited by
                    #29

                    @SweetP That sounds good. Maybe an "advanced" switch in the options that enforces strict subdomain separation? The default could be current behaviour, but for savvy users, the switch would allow for more granularity.

                    Anyways, would be happy to test a beta of what you come up with. Let me know if I can help in any way. 👍

                    1 Reply Last reply
                    0
                    • SweetPS Offline
                      SweetPS Offline
                      SweetP
                      wrote on last edited by
                      #30

                      Im having a play around with options now. If I come up with something ill post here
                      🙂

                      ~
                      Russell
                      SweetPProductions.com

                      1 Reply Last reply
                      1
                      • SweetPS Offline
                        SweetPS Offline
                        SweetP
                        wrote on last edited by
                        #31

                        Ive been trying to make this work, but it seems to be a WebKit limitation.
                        Ive contacted one of the WebKit devs, to see if he can let me know if it is indeed possible or not

                        ~
                        Russell
                        SweetPProductions.com

                        N 1 Reply Last reply
                        1
                        • SweetPS SweetP

                          Ive been trying to make this work, but it seems to be a WebKit limitation.
                          Ive contacted one of the WebKit devs, to see if he can let me know if it is indeed possible or not

                          N Offline
                          N Offline
                          NickC
                          wrote on last edited by
                          #32

                          @SweetP Might be a WebKit limitation sadly 😞

                          If it turns out that the feature cannot be implemented, maybe it’s a better UI to have just the base domain be added when you click the +exception even if you are on a subdomain, since this would be the expected behavior. What do you think?

                          1 Reply Last reply
                          0
                          • SweetPS Offline
                            SweetPS Offline
                            SweetP
                            wrote on last edited by
                            #33

                            I’ve asked a few devs over at WebKit and Apple, hopefully someone will answer for good or bad…

                            Also, it’s super easy to edit the (sub)domain in either the main app or the extension, so maybe it’s better to leave the domain detection as is.

                            ~
                            Russell
                            SweetPProductions.com

                            N 1 Reply Last reply
                            1
                            • SweetPS SweetP

                              I’ve asked a few devs over at WebKit and Apple, hopefully someone will answer for good or bad…

                              Also, it’s super easy to edit the (sub)domain in either the main app or the extension, so maybe it’s better to leave the domain detection as is.

                              N Offline
                              N Offline
                              NickC
                              wrote on last edited by
                              #34

                              @SweetP Any news from the WebKit devs? 🙂

                              1 Reply Last reply
                              0
                              • SweetPS Offline
                                SweetPS Offline
                                SweetP
                                wrote on last edited by
                                #35

                                None…
                                😕

                                ~
                                Russell
                                SweetPProductions.com

                                N 1 Reply Last reply
                                1
                                • SweetPS SweetP

                                  None…
                                  😕

                                  N Offline
                                  N Offline
                                  NickC
                                  wrote on last edited by NickC
                                  #36

                                  @SweetP Ok, so from what I could tell of the way Minim is writing its ruleset, the trigger “if-domain” with the wildcard * seems to make the root domain + all subdomains whitelist appear.
                                  As per Apple’s docs, "if-domain | An array of strings to match to a URL's domain; limits the action to a list of specific domains. The values must be lowercase ASCII, or Punycode for non-ASCII. Add * in front to match domain and subdomains. You can't use this with unless-domain.”

                                  Would this mean that having Minim just add the if-domain without the wildcard * in front work as expected (i.e. to block just that specific subdomain) ?

                                  This way, the user could either add * in front if he/she wants to block the root domain and be done with it or have more granular control by default.

                                  Of course, there could be a small UI element (like a checkmark/asterisk icon or something similar) in front when adding a wildcard exception to the Minim list.

                                  Would this work/be reasonable? 🤠

                                  1 Reply Last reply
                                  0
                                  • SweetPS Offline
                                    SweetPS Offline
                                    SweetP
                                    wrote on last edited by
                                    #37

                                    that seems pretty reasonable,
                                    ill take a look tonight and see if nothing breaks
                                    🙂

                                    ~
                                    Russell
                                    SweetPProductions.com

                                    1 Reply Last reply
                                    1
                                    • SweetPS Offline
                                      SweetPS Offline
                                      SweetP
                                      wrote on last edited by
                                      #38

                                      ok so Ive worked on this a little this morning.
                                      and I have changed the default behaviour in Minim to only block the urls listed.
                                      subdomains will be unaffected by rules.

                                      After lunch ill take a look add adding in support for the use of the * wild card prefix to also block all subdomains.

                                      These changes have the added benefit of speeding up url matching, which should improve performance
                                      🙂

                                      ~
                                      Russell
                                      SweetPProductions.com

                                      N 1 Reply Last reply
                                      1
                                      • SweetPS SweetP

                                        ok so Ive worked on this a little this morning.
                                        and I have changed the default behaviour in Minim to only block the urls listed.
                                        subdomains will be unaffected by rules.

                                        After lunch ill take a look add adding in support for the use of the * wild card prefix to also block all subdomains.

                                        These changes have the added benefit of speeding up url matching, which should improve performance
                                        🙂

                                        N Offline
                                        N Offline
                                        NickC
                                        wrote on last edited by
                                        #39

                                        @SweetP wow, that’s awesome news! Thank you for looking into this, Russell. Looking forward to testing it. 🎯

                                        1 Reply Last reply
                                        0
                                        • SweetPS Offline
                                          SweetPS Offline
                                          SweetP
                                          wrote on last edited by
                                          #40

                                          I’ve also added wildcard support,
                                          I just need to figure out how to make it obvious in the UI.
                                          😊

                                          Also, currently domains with a wildcard will override subdomain rules…
                                          I’ll see if there’s anything I can do about that

                                          ~
                                          Russell
                                          SweetPProductions.com

                                          N 1 Reply Last reply
                                          1
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags