Dodaci za preglednik Firefox
  • Proširenja
  • Teme
    • za Firefox
    • Rječnici i jezični paketi
    • Druge stranice preglednika
    • Dodaci za Android
Prijavi se
Pregled za CSP B Gone

CSP B Gone od Hacks and Hops

Check the CSP of the current website against a list of known bypasses.

0 (0 reviews)0 (0 reviews)
14 Users14 Users
Za korištenje ovog proširenja trebat ćeš Firefox
Preuzmi Firefox i nabavi proširenje
Preuzmi datoteku

Metapodaci proširenja

Snimke ekrana
CSP Bypass Popup
Informacije o ovom proširenju
Code
This addon is free and open-source software (FOSS) all code can be found here: https://github.com/ACK-J/CSP-B-Gone
Please report your bugs or feature requests in a GitHub issue instead of in a review.

Test if it works!
https://apple.com/

This addon checks the CSP of the current website against a list of known bypasses. You can also use the search bar to check if a specific domain has a known CSP bypass.

How Does a CSP Bypass Work?
The most common way to bypass CSP is by finding a JSONP endpoint on a trusted domain within the CSP. JSONP takes advantage of the fact that the same-origin policy does not prevent execution of external <script> tags. Usually, a <script src="some/js/file.js"> tag represents a static script file. But you can just as well create a dynamic API endpoint, say /userdata. jsonp, and have it behave as a script by accepting a query parameter (such as ?callback=CALLBACK).

JSONP endpoints used to bypass CSP are discovered by querying the archive.org database on a monthly basis for URLs with a common feature set. Each suspected URL is injected into a script src element inside a headless browser with the alert() function hooked. If an alert box fires then the URL is a confirmed JSONP endpoint and added to the GitHub list HERE.

When would I need a CSP Bypass?
A Content Security Policy (CSP) bypass may be necessary in specific scenarios, typically related to web security testing or development. CSP is a security feature that helps prevent a range of attacks like Cross-Site Scripting (XSS), data injection attacks, and clickjacking by controlling which resources the browser is allowed to load and execute.

Donations
  • Monero Address: 89jYJvX3CaFNv1T6mhg69wK5dMQJSF3aG2AYRNU1ZSo6WbccGtJN7TNMAf39vrmKNR6zXUKxJVABggR4a8cZDGST11Q4yS8
Rated 0 by 0 reviewers
Prijavi se i ocijeni ovo proširenje
Još nema ocjena

Ocjena je spremljena

5
0
4
0
3
0
2
0
1
0
Još nema recenzija
Dozvole i podaciSaznaj više

Potrebne dozvole:

  • Pristupiti karticama preglednika
  • Pristupiti tvojim podacima za sve web stranice
Daljnje informacije
Poveznice dodatka
  • Stranica podrške
Verzija
1.0
Veličina
28,6 KB
Zadnje aktualiziranje
prije 8 mjeseci (17. pro. 2024)
Povezane kategorije
  • Razvoj weba
  • Privatnost i sigurnost
Licenca
Samo GNU Opća javna licenca v3.0
Povijest verzija
  • Pogledaj sve verzije
Oznake
  • ad blocker
  • content blocker
  • privacy
  • search
  • security
  • user scripts
  • wayback machine
Dodaj u zbirku
Prijavi ovaj dodatak
Daljnja proširenja od Hacks and Hops
  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

  • Još nema ocjena

Idi na početnu stranicu Mozille

Dodaci

  • Informacije
  • Blog za Firefox dodatke
  • Radionica za proširenja
  • Centar za programere
  • Pravila za programere
  • Blog zajednice
  • Forum
  • Prijavi grešku
  • Priručnik za recenziranje

Preglednici

  • Desktop
  • Mobile
  • Enterprise

Proizvodi

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Privatnost
  • Kolačići
  • Pravne informacije

Osim gdje je drugačije navedeno, sadržaj ove stranice licenciran je pod licencom Creative Commons Imenovanje dijeli pod istim uvjetima verzija 3.0 ili novijoj.