feature/fix: css scriptlet, fix js scriptlet#35
Merged
Conversation
|
✅ No security or compliance issues detected. Reviewed everything up to 6cf1a44. Security Overview
Detected Code Changes
|
9097823 to
6cf1a44
Compare
Merged
joshrmcdaniel
added a commit
that referenced
this pull request
May 30, 2026
* add mipsbe (#26) * add mips be * release ci * tag * ci * v4 * ci * fix: correct adblock request typing, trim report-only CSP, and package MIPS debs/rpms (#27) * request type from Sec-Fetch-Dest; capped block log line; report-only CSP no longer augmented * request_type threaded into the engine check * mips * format * fix host blocking * keep filters on reload * fix: cookie not invalidated (#28) * fix auth * fix blocking button * bump to 0.7.1 * doh (#30) * doh * fmt * Feature/doh (#31) * doh * fmt * Forgot doh lol * http2 adaptive window, add connect timeout (#32) * filter validation (#33) * docs: update docs (#34) * docs * ci * feature/fix: css scriptlet, fix js scriptlet (#35) * add css support, fix scriptlets * debug setting entry * changelog * debug frontned * feature: logging (#36) * add css support, fix scriptlets * debug setting entry * changelog * debug frontned * logging * changelog * fix: mmtls (#37) * mmtls tunneling * timeout socket * docs * pac optimization * buildmode arg * lint rule
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
##+js(...)scriptlet was a silent no-op. adblock-rust emits scriptlet bodies that reference an ambientscriptletGlobalsobject (uBlock Origin supplies it in its own injector; adblock-rust leaves it to the embedder), so the first internal call threwReferenceError: scriptletGlobals is not defined, which each scriptlet's owntry/catchswallowed. Privaxy now definesscriptletGlobalsat the top of the injected payload, soabort-current-script,prevent-addEventListener,abort-on-property-read,set-cookie, etc. take effect.:has-text,:matches-css/-before/-after,:matches-attr,:matches-path,:min-text-length,:upward,:xpath, and the:remove()/:style()/remove-attr/remove-classactions are now evaluated in-page by an injected shim.