deCDN

[RealityRipple]

Seems to work without any hiccups after two days of having it installed. Any other kind of unusual behavior we should be watching out for as we use this development version?

There's a possibility of character encoding mangling with non-UTF-8 sites, but I have run a few testbeds and it seems to be alright, so I think we're OK on that front.
I've also done some amount of iframe testing, with no problems so far, but that's not to say it's impossible.
If you have ServiceWorkers manually enabled (for as much as they're supported on PM), I'm pretty sure they'll bypass this extension, since there's no associated tab with a worker.
Other than that, I'm... not sure yet.

[RealityRipple]

I think this is a necessary trade-off for deep-replacing script resources. I think if you let the browser start to parse/interpret chunks before it's all sanitised, you'll potentially run into (serious) problems.

If JSON forced "<" to be escaped, it wouldn't be so difficult; but as it is, I think you're correct.


Edit: Relying on the need for JSON to escape slashes, though... I think I might have something.

[RealityRipple]

Pushed up a new release candidate with the experimental chunking; you can turn it off in about:config (extensions.decdn.chunky), but I'd love some help making sure it's OK. If you notice any sites with doubled or missing content when it's enabled, please let me know.

I also changed some of the regular expressions for attribute detection to be a bit more strict and efficient.

If anyone's curious about the function I'm using to split HTML data, it's on line 851 of interceptor.js; it's kind of clever and stupid at the same time.

[Michaell]

Using blockers that apply to chome and not exclusively content... That's just asking for things to break.
The file it needs to access is https://codeberg.org/api/v1/repos/nobod ... N/branches. If something's blocking JSON, your blockers might be a little too heavy. JSON is just data, not executable code.

Nope, that's the way I want it. I don't want to allow just anything that ηMatrix categorizes as "Behind the scenes". So like everything else, I block it by default and unblock as needed. To me, anybody who doesn't do that is happy being played for a fool. Blind trust has no place in this upside-down world. Anyway, I unblocked Codeberg for XHR behind the scenes (it is for the domain not a specific folder or file, but I have another blocker I can add specific file blocks too later if ever needed).

Edit: Just tried accessing the issue page with JS completely disabled. There's a tiny "this website requires javascript" bar across the top, but other than that, nothing is amiss or different. I think your problem lies elsewhere.

This isn't important to me; I just reported it in case you wanted to know. But here's what I saw (and it did not show with js enabled).

I've updated to RC9 and will try leaving it enabled. I haven't changed any exceptions in ηMatrix for the CDNs from what I had for DeCentralEyes.

[andyprough]

Pushed up a new release candidate with the experimental chunking; you can turn it off in about:config (extensions.decdn.chunky), but I'd love some help making sure it's OK. If you notice any sites with doubled or missing content when it's enabled, please let me know.

I got the deCDN auto update last night and have tried all my regular blogs and news sites and video sites since then, haven't noticed anything unusual.

I'm on 33.0rc9 now. Nice touch to include auto-updates already - I had assumed I would need to go download your next development version.

[sinfulosd]

Now that deCDN finally got out of the RC and it is now made for public use, It is safe to say that this Add-on must be added to Pale Moon add-on site,

And maybe add "outdated" tag into Decentraleyes add-on, just like this post on the forum stated viewtopic.php?f=44&t=23326/

Despite it seems that Decentraleyes developer just recently made a change in the Pale Moon version of the extension, I highly doubt that the add-on could add something that deCDN doesn't already have, except the name and the hype behind it.

[Michaell]

Decentraleyes developer just recently made a change in the Pale Moon version

No new downloadable/installable release though.

[back2themoon]

Well done on the release of the brilliant deCDN 33.0!

We know DDG needs to be excluded in the ad/content blocker, for the Pale Moon - DuckDuckGo partnership to work.

Does duckduckgo.com also need to be ignored/excluded in deCDN for this, or it's irrelevant? I've noticed some interceptions in an earlier search, but couldn't reproduce upon further searches (no CDN resources).

[RealityRipple]

Does duckduckgo.com also need to be ignored/excluded in deCDN for this, or it's irrelevant? I've noticed some interceptions in an earlier search, but couldn't reproduce upon further searches (no CDN resources).

Shouldn't be relevant; if the data is being requested from a CDN, it's not going to matter to the website if a request does or doesn't show up in the CDN's logs.

[frostknight]

Does duckduckgo.com also need to be ignored/excluded in deCDN for this, or it's irrelevant? I've noticed some interceptions in an earlier search, but couldn't reproduce upon further searches (no CDN resources).

Shouldn't be relevant; if the data is being requested from a CDN, it's not going to matter to the website if a request does or doesn't show up in the CDN's logs.

Is there a list of tracking CDNs online?

If so, , myself, would like to know so I can add specific ones.

[RealityRipple]

Does duckduckgo.com also need to be ignored/excluded in deCDN for this, or it's irrelevant? I've noticed some interceptions in an earlier search, but couldn't reproduce upon further searches (no CDN resources).

Shouldn't be relevant; if the data is being requested from a CDN, it's not going to matter to the website if a request does or doesn't show up in the CDN's logs.

Is there a list of tracking CDNs online?

If so, , myself, would like to know so I can add specific ones.

Every web server in existence tracks you by default, unless the server's admin disables logging manually. And this extension isn't one where you can add CDNs manually; they're all pulled from the LocalCDN repository.

[suzyne]

they're all pulled from the LocalCDN repository.

I presume that site must be a desirable target for hackers wanting to substitute code with their own versions!

[RealityRipple]

they're all pulled from the LocalCDN repository.

I presume that site must be a desirable target for hackers wanting to substitute code with their own versions!

What site? Codeberg? It's probably a tiny target compared to GitHub.

[suzyne]

What site?

When you say,

they're all pulled from the LocalCDN repository

I thought that https://www.localcdn.org/ is keeping its own copy of the javascript files (and so would be a good place for them to be substituted with malicious copies) but from your reply I must have got that wrong and LocalCDN doesn't actually store the libraries of code?

[frostknight]

Every web server in existence tracks you by default, unless the server's admin disables logging manually. And this extension isn't one where you can add CDNs manually; they're all pulled from the LocalCDN repository.

Hmm... fair enough.

I don't see it activating much though. It makes me curious why.

[RealityRipple]

What site?

When you say,

they're all pulled from the LocalCDN repository

I thought that https://www.localcdn.org/ is keeping its own copy of the javascript files (and so would be a good place for them to be substituted with malicious copies) but from your reply I must have got that wrong and LocalCDN doesn't actually store the libraries of code?

I'm talking about https://codeberg.org/nobody/LocalCDN - deCDN downloads the entire source code to LocalCDN, then extracts the resources folder and a few specific files.

[Michaell]

How often does it download that large file? I don't want more than one update per month. But I can at least just unblock codeberg temporarily.

[RealityRipple]

How often does it download that large file? I don't want more than one update per month. But I can at least just unblock codeberg temporarily.

I can't answer that question directly. The extension checks for repository changes every 2 weeks (by default), but that doesn't necessarily mean a download will occur.

[frostknight]

How often does it download that large file? I don't want more than one update per month. But I can at least just unblock codeberg temporarily.

To be honest, if you use windows, that uses more memory than a measly download. Also, if you aren't, I very much doubt it would use much memory at all.

Same goes for cpu usage.

[Michaell]

To be honest, if you use windows, that uses more memory than a measly download. Also, if you aren't, I very much doubt it would use much memory at all.

Same goes for cpu usage.

The issue isn't memory or CPU [although I do care about those]. It's about monthly data limit, which I'm not going to debate here.

RealityRipple - I may have misunderstood your explanation about "Block CDN access for missing resources". I do not see how that can be site specific. FWIW, I want it to be global, I think, as that's what I'm used to. And worse, the setting is not being saved. I thought maybe it needed at least one domain added to the Block CDNs tab. But there's no obvious way to add any. Even if that worked though, adding specific sites to block is not going to work for me, unless I can configure my content blocking extensions to work around that. So, I'll have to go back to DCE for routine browsing until I can figure out if yours will work the way I want.