From 0e093dd932768357859e7f96ec593be1d9270bc4 Mon Sep 17 00:00:00 2001 From: H 5x S <16c52527@opayq.com> Date: Wed, 7 Nov 2018 11:36:41 +0000 Subject: [PATCH 1/2] Changing the extensions.blocklist.url flag Limit the amount of identifiable information sent when requesting the Mozilla harmful extensions blocklist. --- index.html | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/index.html b/index.html index 31ac670f..54ea7f3b 100644 --- a/index.html +++ b/index.html @@ -845,6 +845,13 @@ layout: default
  • Not rendering IDNs as their Punycode equivalent leaves you open to phishing attacks that can be very difficult to notice. Source
  • + +
  • extensions.blocklist.url = https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%APP_ID%/%APP_VERSION%/ + +
  • -- 2.47.2 From 55b24a82bc62a039b8707d4deb1b8dcaba2cc925 Mon Sep 17 00:00:00 2001 From: H 5x S <16c52527@opayq.com> Date: Wed, 7 Nov 2018 14:35:09 +0000 Subject: [PATCH 2/2] Change extensions.blocklist.url parameters to nullbytes We don't actually need to supply the `%APP_ID%`/`%APP_VERSION%` parameters --- index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.html b/index.html index 54ea7f3b..a1518f0e 100644 --- a/index.html +++ b/index.html @@ -846,7 +846,7 @@ layout: default -
  • extensions.blocklist.url = https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%APP_ID%/%APP_VERSION%/ +
  • extensions.blocklist.url = https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/