Single Accept VS Multi-Accept lines

Discussions about the Application Boundaries Enforcer (ABE) module
ReporterX
Senior Member
Posts: 74
Joined: Mon Sep 15, 2014 11:46 pm

Single Accept VS Multi-Accept lines

Post by ReporterX »

Try to play a video which requires whitelisting brightcove.com

Example: http://www.dailymail.co.uk/femail/artic ... -visa.html

The video will play with this rule:

Code: Select all

Site .brightcove.com
Accept INCLUSION from .brightcove.com .dailymail.co.uk
Deny INCLUSION
But none of them works:

Code: Select all

Site .brightcove.com
Accept from .brightcove.com
Accept INCLUSION from .dailymail.co.uk
Deny INCLUSION

Code: Select all

Site .brightcove.com
Accept INCLUSION from .brightcove.com
Accept INCLUSION from .dailymail.co.uk
Deny INCLUSION

Code: Select all

Site .brightcove.com
Accept INCLUSION from SELF+ SELF++ .dailymail.co.uk
Deny INCLUSION
I'm curious.
I thought it was identical by putting both sites in the same "Accept" line and putting them separately.
Why? What is the cause? :|
Firefox 37.0.2, NoScript 2.6.9.22
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0
barbaz
Senior Member
Posts: 10847
Joined: Sat Aug 03, 2013 5:45 pm

Re: Single Accept VS Multi-Accept lines

Post by barbaz »

ReporterX wrote:But none of them works:

Code: Select all

Site .brightcove.com
Accept from .brightcove.com
Accept INCLUSION from .dailymail.co.uk
Deny INCLUSION
^^ Strange, that's probably what I would have tried to use.
No time to check this myself atm, sorry, so can you please try this rule, and post here the message you see from ABE in the Browser Console (Ctrl-Shift-J) when it doesn't work?
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20140618 Firefox/24.0 PaleMoon/24.6.2
ReporterX
Senior Member
Posts: 74
Joined: Mon Sep 15, 2014 11:46 pm

Re: Single Accept VS Multi-Accept lines

Post by ReporterX »

barbaz wrote:
ReporterX wrote:But none of them works:

Code: Select all

Site .brightcove.com
Accept from .brightcove.com
Accept INCLUSION from .dailymail.co.uk
Deny INCLUSION
^^ Strange, that's probably what I would have tried to use.
No time to check this myself atm, sorry, so can you please try this rule, and post here the message you see from ABE in the Browser Console (Ctrl-Shift-J) when it doesn't work?
No problem, and I just tested all 3 ABE codes. Here is the messages:

First (Accept from .brightcove.com + Accept INCLUSION from .dailymail.co.uk)
http://pastebin.com/uYFEzApS

Second (Both Accept INCLUSION but separate lines)
http://pastebin.com/KkCK0SvJ

Third (Accept INCLUSION from SELF+ SELF++ .dailymail.co.uk)
http://pastebin.com/e7bKx1N7

P.S. It hits the anti-spam filter so I have to past the whole message elsewhere. :oops:
Firefox 37.0.2, NoScript 2.6.9.22
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0
barbaz
Senior Member
Posts: 10847
Joined: Sat Aug 03, 2013 5:45 pm

Re: Single Accept VS Multi-Accept lines

Post by barbaz »

OK, I'm not completely sure but I think it's related to the fact the brightcove resource requested by dailymail redirects to another brightcove resource, so if dailymail and brightcove aren't together then ABE thinks the request isn't something you want because one the redirect URLs doesn't match the Accept line hit initially.
(Would be helpful if someone who knows for sure could confirm?)
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20140618 Firefox/24.0 PaleMoon/24.6.2
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Single Accept VS Multi-Accept lines

Post by Thrawn »

I can confirm that redirections cause ABE to behave differently, and often require the sites to be on the same line.

I ran into this a while ago at work, when following links from our team wiki to a local development server, which then redirected to another local URL. It wasn't enough to have

Code: Select all

Site LOCAL
Accept from <wiki>
Accept from LOCAL
Deny
I had to have

Code: Select all

Site LOCAL
Accept from <wiki> LOCAL
Deny
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:32.0) Gecko/20100101 Firefox/32.0
Post Reply