{"action":"created","issue":{"url":"https://api.github.com/repos/gorhill/uMatrix/issues/393","repository_url":"https://api.github.com/repos/gorhill/uMatrix","labels_url":"https://api.github.com/repos/gorhill/uMatrix/issues/393/labels{/name}","comments_url":"https://api.github.com/repos/gorhill/uMatrix/issues/393/comments","events_url":"https://api.github.com/repos/gorhill/uMatrix/issues/393/events","html_url":"https://github.com/gorhill/uMatrix/issues/393","id":113076993,"number":393,"title":"Referrer spoofing","user":{"login":"seafox","id":9025690,"avatar_url":"https://avatars.githubusercontent.com/u/9025690?v=3","gravatar_id":"","url":"https://api.github.com/users/seafox","html_url":"https://github.com/seafox","followers_url":"https://api.github.com/users/seafox/followers","following_url":"https://api.github.com/users/seafox/following{/other_user}","gists_url":"https://api.github.com/users/seafox/gists{/gist_id}","starred_url":"https://api.github.com/users/seafox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/seafox/subscriptions","organizations_url":"https://api.github.com/users/seafox/orgs","repos_url":"https://api.github.com/users/seafox/repos","events_url":"https://api.github.com/users/seafox/events{/privacy}","received_events_url":"https://api.github.com/users/seafox/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":18,"created_at":"2015-10-23T18:40:51Z","updated_at":"2016-11-18T19:09:28Z","closed_at":null,"body":"Re my [first observations](https://addons.mozilla.org/en-US/firefox/addon/umatrix/reviews/757866/).\n\nThe core ideology of uMatrix is the total control over the security leaks. To consciously allow something and deny unknown by default. That gives the best security. The big question is could a user with uMatrix cope with constant overhead of adding rules as he surf? Note, uBlock Origin doesn't even contain the feature, for exactly this reason!\n\nLet's take youtube videos embedded on so many pages. Its very frustrating experience to add the rules for each site containing videos like youtube, as it would require disabling referrer spoofing on per site basis. All the trouble just to see the embedded videos. We need a smart way to code dynamic rules, such as \"if page contains youtube.com links, assume it has built-in video frames, thus disable referrer spoofing for the page\". But how can we know the site to load contains youtube links prior to calling it from the browser when it has to decide whether spoof the referrer or not? If anyone knows the solution, then great, its doable!\n\nSo if we can't get the info prior to parsing the page, the best remaining workaround would be just marking the video to open in its own \"home\" page (like www.youtube.com for youtube) and simply wrapping it inline to the special placeholder space or icon with the link to click. That would be different from the current two options for blocked items, when very small arrow up with link address shown or just the entire part is hidden altogether. Or, maybe iframe wrapper with \\* youtube.com allow global permission will work better?\n\nThoughts?\n"},"comment":{"url":"https://api.github.com/repos/gorhill/uMatrix/issues/comments/261615157","html_url":"https://github.com/gorhill/uMatrix/issues/393#issuecomment-261615157","issue_url":"https://api.github.com/repos/gorhill/uMatrix/issues/393","id":261615157,"user":{"login":"johnswolter","id":497452,"avatar_url":"https://avatars.githubusercontent.com/u/497452?v=3","gravatar_id":"","url":"https://api.github.com/users/johnswolter","html_url":"https://github.com/johnswolter","followers_url":"https://api.github.com/users/johnswolter/followers","following_url":"https://api.github.com/users/johnswolter/following{/other_user}","gists_url":"https://api.github.com/users/johnswolter/gists{/gist_id}","starred_url":"https://api.github.com/users/johnswolter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/johnswolter/subscriptions","organizations_url":"https://api.github.com/users/johnswolter/orgs","repos_url":"https://api.github.com/users/johnswolter/repos","events_url":"https://api.github.com/users/johnswolter/events{/privacy}","received_events_url":"https://api.github.com/users/johnswolter/received_events","type":"User","site_admin":false},"created_at":"2016-11-18T19:09:28Z","updated_at":"2016-11-18T19:09:28Z","body":"How would I override for one viewing this doubleclick monster,  this discussion reads like it could be relatyed to this issue..\r\nhttps://googleads.g.doubleclick.net/aclk?sa=l&ai=C60uYDE0vWMmyH5aNmQTMiLLoC5-g-KNHkozMyPACwI23ARACIOP7kwMoAmDJvquJkKToD6ABhd-Z2wPIAQGoAwGqBJ4BT9Cp8dcASA8fSNslD2tadyK9-u9Jmdk6Os5-nM224clCkp7TzXxArh3a6l-Xrvo_XTSgMkc1g5dkU-ARxlSJuBPFHPI_WHXUYNF8hx9fO53LdBjoFc99t2LWm7supO9c1VMv4hxg47h8Fd4ViQ__knm4JAGTKGMaprD8O1DTS2xdmoJqjBAexQp0uHTMw1M3ViA8ldLCDMX2XEcfle2gBhrIBrv0s-vhAYAH46DmJKgHpr4b2AcB0ggFCMBhEAG4E-gB&num=2&cid=CAASSeRoz9i-cBUHZblMyzAAS7fubyYD7pn5RzTwiFxtNk1nZhVITVCY9tBFNxi7rCYgbYY3p8rycOLCNVAhqeoJakF_EXBycihspNQ&sig=AOD64_2oUkfNshBz5u_95VJeivl590yBlg&ctype=21&video_id=lm3JsPibKB4&client=ca-pub-6219811747049371&adurl=http://www.youtube.com/watch%3Fv%3Dlm3JsPibKB4"}}
{"actor":{"display_login":"johnswolter"}}