"Deny INCLUSION (IMAGE) from ALL" seems not to work

Discussions about the Application Boundaries Enforcer (ABE) module
Ilya

"Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Ilya »

Hello,

Perhaps I'm doing something wrong, or don't understand something, but putting something like

Code: Select all

Site .somesite.com
Deny INCLUSION (IMAGE) from ALL
to the USER section of rulesets still doesn't block HTTP requests for images, they are loaded and displayed.

Notably,

Code: Select all

Site .somesite.com
Deny INCLUSION from ALL
works just fine (as expected - blocks everything, including images).

What's wrong?
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 SeaMonkey/2.19
Guest

Re: "Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Guest »

(Sorry, forgot to say that the version of NoScript I'm using is 2.6.6.8)
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 SeaMonkey/2.19
Ilya

Re: "Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Ilya »

Sorry, I just realized I misunderstood how ABE works.

Still, "Deny INCLUSION (IMAGE)" seems not to work.

Say, I want to block all HTTP requests for images sent from .somesite.com to .somesite.com

Code: Select all

Site .somesite.com
Deny INCLUSION (IMAGE) from SELF
does not do that.

And, again,

Code: Select all

Site .somesite.com
Deny INCLUSION form SELF
works as expected.
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 SeaMonkey/2.19
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: "Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Thrawn »

Not sure. Could be a bug. I don't think the specific inclusion types are used very often, so they're probably not tested as thoroughly as some features.

Can you look in the Error Console (Ctrl+Shift+J) under Messages and see what ABE is producing?
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:22.0) Gecko/20100101 Firefox/22.0
Guest

Re: "Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Guest »

Thrawn wrote:Can you look in the Error Console (Ctrl+Shift+J) under Messages and see what ABE is producing?
Sure, here's the message ABE produces after I load this very page:

[ABE] <.informaction.com> Deny INCLUSION(IMAGE) from SELF on {GET http://forums.informaction.com/styles/p ... w_left.gif <<< http://forums.informaction.com/style.php?id=3&lang=en - 3}
USER rule:
Site .informaction.com
Deny INCLUSION(IMAGE) from SELF

(Not that I'd like to block images on .informaction.com, just an example).
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 SeaMonkey/2.19
Ilya

Re: "Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Ilya »

(The forum engine turned the two URIs from the previous message into links and cut their beginnings. So, I'm reposting, now it should be displayed as intended)

Code: Select all

[ABE] <.informaction.com> Deny INCLUSION(IMAGE) from SELF on {GET http://forums.informaction.com/styles/prosilver/theme/images/arrow_left.gif <<< http://forums.informaction.com/style.php?id=3&lang=en - 3}
USER rule:
Site .informaction.com
Deny INCLUSION(IMAGE) from SELF
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 SeaMonkey/2.19
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: "Deny INCLUSION (IMAGE) from ALL" seems not to work

Post by Thrawn »

Funnily enough, I tested it out on the forums too :). Looks like it's blocking some images, but certainly not all. Probably it is a bug. Not sure what priority it would be for Giorgio.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:22.0) Gecko/20100101 Firefox/22.0
Post Reply