Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

This extension is getting bypassed by some websites #213

Open
youngunix opened this issue Jun 14, 2024 · 2 comments
Open

This extension is getting bypassed by some websites #213

youngunix opened this issue Jun 14, 2024 · 2 comments

Comments

@youngunix
Copy link

This extension doesn't seem to be effective against a certain websites such as "open-vsx.org. The only way to get this website to recognize the custom useragent is via the Developer Tools on Chrome. This is definitely not a solution nor a workaround that needs to be adopted since it only works on the tab you set it for (as apposed to all the open tabs) and for that session only.

@lvpha
Copy link

lvpha commented Aug 24, 2024

Hey young man!

How can I see what user-agent https://open-vsx.org/ detects?

@Mozza7
Copy link

Mozza7 commented Oct 20, 2024

Unless I'm misunderstanding - it looks like youngunix is right, using firefox's Network tab and loading the site, there's the odd request header that is showing:
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0

Whilst my agent is set to, and on the majority of requests states it is:
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0 (Edition Yx 05)

The request which sends the wrong header that i saw (there are more):

GET
https://www.eclipse.org/eclipse.org-common/themes/solstice/public/javascript/vendor/cookieconsent/default.min.js
Status
200
VersionHTTP/2
Transferred14.26 kB (39.43 kB size)
Referrer Policystrict-origin-when-cross-origin
DNS ResolutionSystem

I saw a second one:
GET https://openvsxorg.blob.core.windows.net/resources/stateful/runme/darwin-arm64/3.9.0/icon.gif

I came across this issue as my Youtube doesn't work with this enabled - and I could see some requests with my actual user agent being sent.

Blacklist mode: cloudflare.com
Disable spoofing: gitlab.com/users/sign_in

Everything else is as default except I have it set to show debug in console, but it doesn't seem to do that.
I'm not sure if any of that's helpful or if it's expected or what.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants