CSS Exfil Protection 作成者: Mike Gualtieri

5 段階中 4.8 の評価

Langoliers によるレビュー

I had no idea this was an issue until reading about it recently. Thanks so much for this extension, appears to be working based on the test page. Hopefully I'll never find a website compromised and using CSS in this manner, however, at least I will have a number sign to show how many and also protection against it.

Thanks for that!

Also, I haven't found the compiled version for Chrome, is it on the chrome store? My friend uses chrome, thanks.

開発者の返信

投稿日時: 7年前

Thanks for the review! You should be able to find it on the Chrome store by searching 'CSS Exfil Protection'. I also have a direct link from the vulnerability tester page: https://www.mike-gualtieri.com/css-exfil-vulnerability-tester

合計レビュー数: 49

5 段階中 5 の評価
Firefox ユーザー 18044618 によるレビュー (1年前)
5 段階中 5 の評価
Firefox ユーザー 17892856 によるレビュー (2年前)
Спасибо. Я был шокирован узнав, что yandex.ru именно этим и занимается.
5 段階中 5 の評価
HugoSS13 によるレビュー (3年前)
5 段階中 4 の評価
Sergi Tsanz によるレビュー (4年前)
5 段階中 5 の評価
peacefulpotato によるレビュー (4年前)
5 段階中 5 の評価
Elizabeth によるレビュー (4年前)
5 段階中 5 の評価
Firefox ユーザー 16931272 によるレビュー (4年前)
5 段階中 5 の評価
Hiro によるレビュー (4年前)
5 段階中 5 の評価
Wojox によるレビュー (4年前)
5 段階中 5 の評価
odysseus によるレビュー (5年前)
5 段階中 5 の評価
spodermenpls によるレビュー (5年前)
5 段階中 5 の評価
Alicia Sykes 🚀 によるレビュー (5年前)
5 段階中 5 の評価
Jerry によるレビュー (5年前)
5 段階中 5 の評価
Kulibin によるレビュー (5年前)
Thank you Mike for additional browser protection. A very necessary extension and very easy to use.
5 段階中 5 の評価
Firefox ユーザー 14177325 によるレビュー (5年前)
5 段階中 5 の評価
Filipo によるレビュー (5年前)
5 段階中 1 の評価
Rodny D`arman によるレビュー (6年前)
Absolutely weird and unnecessary web extension. There is only one test site and it belongs to the author of the extension. If showing silly pictures you are vulnerable. If it doesn’t show, then you are not vulnerable. Great test! Too suspicious. No one even bothers with this problem that the author of the extension describes. As if problem didn’t exist. Conflicts with other extensions which directly or indirectly work with CSS (Ublock Origin one of them). Disrupts the whole CSS. Most review empty placebo.
開発者の返信
投稿日時: 6年前
You aren't forced to use the extension, so if you don't need its protection then don't install.
On your points:
* You are free to create your own test site if you don't trust the page I developed to demonstrate the issue. The page on my site exists for people to use to test that their plugin is working.
* The plugin is 100% open source, so you can view the code yourself to verify that it's doing what is claimed. I've also written a comprehensive technical write up on the issue with proof of concept code that demonstrates how the issue can be abused.
* I know of two cases where bug bounties were paid out by companies to independent researchers (not me) who exploited this issue on a website and used it to gain further access.
* I personally use my extension and uBlock together and do not have any problem. There's a chance there is a conflict and my setup doesn't replicate it, so if you do find a bug, please open a bug report on GitHub with a test case.
* CSS is not disrupted. You should not notice it's running in the background as it scans through the CSS rules quickly and quietly and without disruption.
5 段階中 5 の評価
Mofiac によるレビュー (6年前)
5 段階中 4 の評価
mik3 によるレビュー (6年前)
nice, but needs whitelistning.

Does "CSS Exfil Protection" conflict with uBlock?
開発者の返信
投稿日時: 6年前
It doesn't conflict with uBlock as far as I can tell. A user recently opened a bug report about it potentially conflicting. I did testing and could not replicate. The issue could be caused by multiple extensions being combined together, but I'm unsure what that combination might be. If you have a test case that shows the issue let me know so I can investigate! FYI - I use both my extension and uBlock on some of my devices and have not had issue.
5 段階中 5 の評価
Firefox ユーザー 14033027 によるレビュー (6年前)
5 段階中 5 の評価
Firefox ユーザー 15109409 によるレビュー (6年前)
5 段階中 5 の評価
Firefox ユーザー 15117421 によるレビュー (6年前)
5 段階中 5 の評価
CStark によるレビュー (6年前)
Disregard unless you're U.S. age 62+ Social Security. Could NOT login for weeks to the Soc Sec site (FF 67.0.1) ("Cannot process - Try later" --- https://secure.ssa.gov/RIL/SiView.action - WITH the App in use/ Worse, the "Is it Up-Down" site at websiteplanet.com said Site Down & I wrongly believed it/ finally tested Ext's On/Off to discover this one is cause. Couldn't see a Whitelist mod so stopped use. Probably a Great App.

Thanks for the Follow-up and I'll Re-install when appropriate. I always believed the Up-Dn site was Independent of your Ext; The incorrect Down status report just delayed testing Extensions to get me on the road to a solution. 5 Stars, regardless, because of your commitment!

6-18-19 Re- Installed and working as advertised. All the Best!
開発者の返信
投稿日時: 6年前
My apologies for the inconvenience! You uncovered a bug that I haven't encountered thus far. I am working on a fix and will edit this comment once a new version is released. The bug for this issue is tracked at this issue on GitHub: https://github.com/mlgualtieri/CSS-Exfil-Protection/issues/14

Edit 1: I have a fix that appears to be fully working in testing now. If all goes well a release will come soon. FYI - I also looked into that up/down site at websiteplanet.com and the issue with that site is not related to the plugin. My guess is that the SSA website is blocking checks from that site that would be used to determine if a website is up/down. Same result with the plugin and in a clean profile with no plugins.

Edit 2: I just released version 1.0.14. I've tested the fixes for several days now and everything seems to be working properly. It will fix your issue with the SSA website. Thank you again for bringing attention to the bug!
5 段階中 5 の評価
krystian3w によるレビュー (6年前)
5 段階中 5 の評価
f789987f によるレビュー (6年前)