Request small Privacy selection

[SampeiNihira]

It could be of interest to many users of UBO Lite.
I will insert an image with my ideas but you can decide more.
putting a Ping checkbox doesn't seem interesting to me ,because it can be blocked in Chromium-based browsers with the command-line:

--no-pings

https://www.ghacks.net/2022/08/27/websites-may-write-to-the-clipboard-in-chrome-without-user-permission/

It has been proposed to put this rule in my filters in UBO:

*##+js(acis, navigator.clipboard)

It seems to work,but I have no idea if it can work in UBO Lite.

I hope I have not disturbed too much.
Thank you for your attention.

[krystian3w]

Chrome/ium 107 no longer allow read clipboard without prompting asking to allow permission.

If you found new option to read clipboard in Chromium 107+ without permissions the best will be open new issue about lack of fixes if ping here https://bugs.chromium.org/p/chromium/issues/detail?id=1334203 was ignored.

---

Also acs no cover all tries read clipboard in Chromium 66 - 106 (e.g. randomized file loaded by src with rare chance block by network filtering). Almost all tries should cover closed AdGuard PR/draft: AdguardTeam/AdguardFilters#128408

[SampeiNihira]

That is just one option,which I assumed interesting.
If it is not interesting to the developer,he can eliminate it.
I use Edge.
And I often notice that not all the new features in Chromium/Chrome are carried over to Edge.
Example:

https://www.chromium.org/updates/chips/

CHIPS cannot work in Edge due to the lack of a required flag.

[krystian3w]

Egde/MS insisted that clipboard API it be fixed directly in the Chromium code.

So as not to fix it with your own hotifix (Exclusive for Edge).

[SampeiNihira]

Better for everyone if it will be so.
Do you have any alternatives to propose as a substitute for the third idea?
If you do have it instead of just criticizing expose an alternative.

[krystian3w]

If gorhill don't reject install uBOL on Chromium older than 105 these option cover only two builds:

• outdated 105
• latest 106

So for these maybe enough if condition to don't touch corrected API in Chromium 107+.

To watch needed then is CCSTree engine (how old Chromium support latest release).

I suppose no possible write fastly scriptlet to cover only the vulnerability in API (like touch event instead all functionality).

[SampeiNihira]

In Edge 107 the setting:

"disable clipboard writing"

is no longer necessary.

Compared to the default setting I prefer:

[gorhill]

uBO Lite is meant to be as not technical as possible. "Blocking CSP reports" is quite technical, I don't see this fitting in uBOL; how would you even explain this to a computer illiterate person?

uBO is best for this, as it is for wider audience, from those who prefer install-and-forget to those who prefer to control every details as much as possible.

[SampeiNihira]

Unfortunately, it will not be possible to use UBO in Edge.
And I set up my Edge to have very good security at the Sandbox/Appcontainer level:

This is critical in Windows OS.
These settings cannot be obtained in other Chromium-based browsers.

My PC already has Firefox + UBO installed.
But it is necessary to have a Chromium-based browser installed as well.

I would not wish to give up Edge,for example switch to Brave (with its internal adblocker) as will many users of Chromium-based browsers who consider privacy more important than security.

[gorhill]

You have different goal with your personal installation than I do have with uBOL, in such case its best for you to find a solution elsewhere than for me to detract from my goal with uBOL.

---

Given this, closing as declined for the time being.

[Yuki2718]

Off-topic:
https://www.wilderssecurity.com/threads/ublock-a-lean-and-fast-blocker.365273/page-274#post-3113350

With UBO Lite this is not possible now and will not be possible in the future either because mr.Hill refused my request for a small privacy panel.

@SampeiNihira Beacon API is globally blocked by EP with $ping,third-party - it's not "in addtion", they are the same thing. The rule is limited to 3p due to problems but individual 1p cases has been added. Globally blocking CSP reports by filters is simply not possible, the only way is *$other if you don't care possible problems as it blocks more than just csp reports ¹. It's likely you confused somthing about $csp and csp report or someone told you misinformation.

---

_{AG generally disables such a too wide rule: Yuki2718/adblock#4 (comment)}

[SampeiNihira]

Off-Topic

@Yuki2718
How is it then possible to pass this test?

https://apps.armin.dev/ping-spotter/