Filter to block URI scheme data

Posting here is no longer possible, please use the forum of a filter list project, such as EasyList
Locked
davvu
Posts: 3
Joined: Sun Mar 06, 2016 12:34 pm

Filter to block URI scheme data

Post by davvu »

Recently there is a new website that launches a URI scheme data that ABP can't block:

data:text/html;base64,PGh0bWw+PGJvZHk+PHNjcmlwdD53aW5kb3cubG9jYXRpb249Imh0dHA6Ly9kYXRhLnJldGFpbmd1YW5pbmVmbHVvcml0ZS5pbmZvL3pDZnZ2ZXlKeWIzVjBaU0k2SW1kbGRGOXdiM0FpTENKemRHbGtJam9pTWpnek1DSXNJbk5pYVdRaU9pSXhJaXdpZG1WeWMybHZiaUk2SWpRaUxDSndZV2RsWDNWeWJDSTZJbWgwZEhBNkx5OTFjR3h2WVdSbFpDNXVaWFF2Wm1sc1pTODRlRGcxWldwamRDODJiV0kxTmk1Q1pXRjFkR2xtZFd3dVIybHliSE11VUdGeWRDNDFPVGd1Y21GeUluMD1DVTdFOSI7PC9zY3JpcHQ+PC9ib2R5PjwvaHRtbD4=

this decodes into:

<html><body><script>window.location="http://data.retainguaninefluorite.info/ ... ody></html>

Can anybody help me write a custom rule to block this? Or is it better to remove the data scheme from the whitelist at
extensions.adblockplus.whitelistschemes?

Thanks.
lewisje
Posts: 2743
Joined: Mon Jun 14, 2010 12:07 pm

Re: Filter to block URI scheme data

Post by lewisje »

There is no HTTP request associated with the data URI scheme, so ABP can't block that; however, you can block the domain this HTML page redirects to:

Code: Select all

||retainguaninefluorite.info^
||retainguaninefluorite.info^$popup
*$domain=retainguaninefluorite.info
retainguaninefluorite.info##body
I don't know how this data URI is activated, but for one possible way (iframe), if your domain is example.com, you could try

Code: Select all

*$subdocument,domain=example.com
example.com##iframe
if this domain doesn't break with iframes inactive.
There's a buzzin' in my brain I really can't explain; I think about it before they make me go to bed.
davvu
Posts: 3
Joined: Sun Mar 06, 2016 12:34 pm

Re: Filter to block URI scheme data

Post by davvu »

Thanks.

The URL that has this URI data scheme launch is

uploaded.net/file/16tc88nn/zka26.LIFE.N.MX.I.W.P.841.rar

Click on the grey Free Download button and the click will launch the URI data scheme.
User avatar
mapx
Posts: 21940
Joined: Thu Jan 06, 2011 2:01 pm

Re: Filter to block URI scheme data

Post by mapx »

add

Code: Select all

@@||retainguaninefluorite.info^$script,domain=uploaded.net
@@||letsadvertisetogether.com^$script
davvu
Posts: 3
Joined: Sun Mar 06, 2016 12:34 pm

Re: Filter to block URI scheme data

Post by davvu »

Thanks
Locked