Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2019-25056: Support user-specified adblock filters · Issue #2 · bromite/bromite

In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blocked and which aren’t can identify the application version and defeat the User-Agent protection mechanism.

CVE
#web#google

Right now the biggest problem I see is that the original NoChromo patch is a very simplified request blocker, it has no support for the rules’ options, or for the selectors.

Comparing to SWE (I recently could give a look to their commits), they use WebRefiner there, which is quite advanced.

To complicate further the picture, Google is developing their own in-house adblocking, which makes it somewhat not a good choice to try to add WebRefiner to latest Chromium codebase: it might be better to just mod Google’s own safebrowsing-with-adblocking.

So for now I will just maintain the current simple approach to ad blocking, and wait for Google’s own adblocker to mature. They’ll likely add some external API to check what to block and/or whitelists, which we do not want.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907