Opened 6 years ago

Last modified 6 years ago

#406 closed change

The $sitekey option should enable/disable specific filters — at Initial Version

Reported by: fhd Assignee:
Priority: P2 Milestone:
Module: Unknown Keywords: 2014q3, meta
Cc: trev, greiner Blocked By:
Blocking: Platform: Unknown
Ready: yes Confidential: no
Tester: Verified working: no
Review URL(s):

Description

Background

Currently, the $sitekey option makes it possible to whitelist everything on a site that has the matching private key. It's the only practicable approach for whitelisting a large number of sites, but easy to abuse.

What to change

The $sitekey option should apply to the filter it's specified with, not globally. Adding the $sitekey option to any filter should make sure that filter runs only on sites that provide the correct private key.

While we're at it, we should also document this.

Change History (0)

Note: See TracTickets for help on using tickets.