My Filters is not a trusted source

[stonedcarrot]

Hello, I'm new to this I usually just use ubo as a non advanced user so likely the problem is between the chair and the keyboard.
anyway I'm having a weird issue where a filter such as: "example.*##+js(trusted-set, targer, value)" and the trusted-set becomes highlighted in red and filter fails to work.

If I could have some help that would be great!

[ghajini]

read release notes https://github.com/gorhill/uBlock/releases/tag/1.53.0
gorhill/uBlock@64c1f8767c

[ghost]

❗ Be careful, do not trust any random filter, not even your own if you're not sure about what you are doing
❗ Also, make sure not to tamper with any other settings on accident.

To allow uBlock Origin to trust My filters, you can:

1. Go to uBlock Origin's settings
2. Make sure I am an advanced user is ticked / checked.
3. Click on the gear (⚙️) icon near I am an advanced user
4. At trustedListPrefixes add user- so that you have ublock- user- (assuming you're not trusting any other maintainer)

[gorhill]

No. If you do not trust CDNs, you can wholly disable filters requiring a trusted source by setting trustedListPrefixes to -.

[ghost]

Well yeah, but most people don't know how ad blockers work. Those people could use online banking, send sensitive information etc.

[ghost]

Isn't this similar to the vulnerability described by different media outlets a couple years ago?

[gorhill]

described by different media outlets a couple years ago?

I can't give answer to vague question. If you mean ABP's rewrite, no it's not because there was no concept of trusted lists and that filter option could be used in any list.

In any case, as said, if you don't trust CDNs, remove all trusted sources, if you don't trust uBO, don't use it -- this is the advice I give to everybody who raise trust issues.

[stonedcarrot]

Sweet, this worked a charm! Thank you very much :)

[Dean-Corso]

Hey guys,

so I found that trusted option to enable it in uBO to make those specific trusted filter rules working. I would also like to ask what the disadvantage is to enable it (user-)? Do you have some example what could be dangerous etc? Just would like to understand it whether it could be really a problem to have this prefix enabled.

So what I can see is that different filter lists I can enable in uBO using the trusted prefix but in case of my own filters I have to enable it extra. Why? I have enabled all own uBO filter scripts & uBO Cookie Notices which is using many trusted rules. I don't use any extern filter lists. Could that bring any problems in that case when just using official uBO scripts & own filters?

If I understand it right then the user- does allow every filter to use the trusted rules including own filters. So what about to separate an option to allow all trusted prefixes just in own custom filters without to allow it for all other filter lists (except the uBO lists)? Just a example, so in my case I have few websites I would like to set some trusted cookies / local etc and I need to enable user- in uBO settings to make them work. Just don't know whether it makes sense to allow the trusted prefix for ALL when I just wanna enable them for my OWN custom filters you know. So do you guys have some advice for that situation or some tips how to deal with that etc? Don't do anything wrong. Thanks.

[stephenhawk8054]

@gorhill I think badfilter doesn't work with trusted filter (for example uritransform) if My filters is not marked as trusted source?

Tested filter: ||rambler.ru/*#rcmrclid=$uritransform=/#rcmrclid=.*// in uBO privacy list

[gorhill]

uBlockOrigin/uBlock-issues#3136