This has been happening for a few months now.
At any cheezeburger.com site, the comment section of the page does not load while EastList is active. They use spot.im for comments.
I found a number of older posts here and there about spot.im being blocked by EasyList, but none were recent enough to be relevant.
I tried to whitelist the relevant parts of the page, but I was unsuccessful.
The page load time is abysmal with ad block disabled, so it'd be nice to have this problem fixed.
--
Using uBlock Origin in Firefox.
cheezburger.com
Hello,
cheezburger.com currently has a very short whitelist of allowed script domains which blocks pretty much any script embeds other than YouTube. For example Twitter, Instagram, any other script-style embed won't work. Any chance this can be converted back to a blacklist rather than this restrictive whitelist?
cheezburger.com currently has a very short whitelist of allowed script domains which blocks pretty much any script embeds other than YouTube. For example Twitter, Instagram, any other script-style embed won't work. Any chance this can be converted back to a blacklist rather than this restrictive whitelist?
Works fine here; https://cheezburger.com/84158977/the-lego-batman-movie-extended-tv-spot displayed and played as expected. Comments loaded, video played.
If cheezburger.com decided to stop feeding adverts that attempted to circumvent adblock lists they we can re-look at this.
If cheezburger.com decided to stop feeding adverts that attempted to circumvent adblock lists they we can re-look at this.
Sure, that video works, as it's a YouTube embed. As I mentioned in my request, YouTube is the only external video type which is permitted by the very short whitelist of script domains. Here are some examples:
Google's Recatcha doesn't load on cheezburger pages:
Refused to load the script 'https://www.google.com/recaptcha/api.js?onload=reCaptchaOnLoad&render=explicit' because it violates the following Content Security Policy directive:
Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
This Instagram embed doesn't work:
https://cheezburger.com/97107713/the-3-most-beautiful-things-in-life
Refused to load the script 'https://www.instagram.com/embed.js' because it violates the following Content Security Policy directive:...
And a whole bunch of broken twitter embeds:
https://cheezburger.com/5609733/people-are-tweeting-the-adorably-hilarious-things-their-moms-have-said
Refused to load the script 'https://platform.twitter.com/widgets.js' because it violates the following Content Security Policy directive:...
Etc. for a multitude of other embeds.
Google's Recatcha doesn't load on cheezburger pages:
Refused to load the script 'https://www.google.com/recaptcha/api.js?onload=reCaptchaOnLoad&render=explicit' because it violates the following Content Security Policy directive:
Code: Select all
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.youtube.com *.ytimg.com *.google-analytics.com *.facebook.net *.complex.com *.b2c.com *.chartbeat.com *.chzbgr.com *.scorecardresearch.com *.air.tv *.quantserve.com *.optimizely.com *.cheezburger.com *.quantcount.com *.newrelic.com *.spot.imThis Instagram embed doesn't work:
https://cheezburger.com/97107713/the-3-most-beautiful-things-in-life
Refused to load the script 'https://www.instagram.com/embed.js' because it violates the following Content Security Policy directive:...
And a whole bunch of broken twitter embeds:
https://cheezburger.com/5609733/people-are-tweeting-the-adorably-hilarious-things-their-moms-have-said
Refused to load the script 'https://platform.twitter.com/widgets.js' because it violates the following Content Security Policy directive:...
Etc. for a multitude of other embeds.
https://hg.adblockplus.org/easylist/rev/07f0892dea71google recaptcha