global ad remover using referrerpolicy

removes ads routed over the current domain (identified using referrerpolicy=unsafe-url)

Author
cabtv
Daily installs
0
Total installs
213
Ratings
0 0 0
Version
1.0
Created
2020-12-20
Updated
2020-12-20
License
N/A
Applies to
All sites

Very basic global script that hides all elements in the form of [referrerpolicy="unsafe-url"].
It's a technique that is currently being widely deployed to stop domain based adblockers (such as adblockplus, ublockorigin and many many more) by routing the ad over the domain you're currently visiting. So ad.jpg won't come from https:/ad.net.work/ad.jpg but from https:/my.normal.site/ad.jpg.

The ad still comes from the ad-server, but is routed over the current domain. Because of that, browsers will trust that url (it's the same domain, so everything should be safe, right?) and submit the full referrer within the http-request to ad.jpg, including potential session or login parameters, etc. Because malicious all ads could will misuse that information, sites use the referrerpolicy-attribute and limit the referrer that is sent to the ad, thus limiting the security risk for the user.

Because there is absolutely no reason to do this for any other reason, it's a good way to identify ads. At least for a few years until the farts at the ad companies think about something new to disrupt our browsing.

If you want to use this in adblockplus, the filter is: ##[referrerpolicy="unsafe-url"]
Note that this only works on the initial page call, not on content that is loaded via ajax.


Be aware, this is a global script (will be loaded in every domain). So i advise everyone to disable automatic updates on this script. I take good care of my account, but i'm not prone to hacking or misuse. Never enable auto update on global scripts.