api.spendino.de

This is where you should report issues arising from the subscription filters.
Locked
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

api.spendino.de

Post by spendino »

Hi,
we are a german software company offering different solutions for nonprofit organisations. One of our solutions is GRUEN spendino, which is a browser based Saas for small npo/ngo to create own donation forms and include them into their websites. This is done by inserting a HTML-snippet like “<script src="https://api.spendino.de/admanager/forms/display/nnn"></script>” on the organisation website.

We discovered actually that Adblock Plus is blocking our forms since one of the last updates. Can you please add our domain to the whitelist or something like that? You can see an example on our company site (sorry, only in german)
https://www.gruen.net/spendino/online-spendenformulare/features/live-ansehen/

I’m looking forward to your answer. Thanks in advance, Ralph
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

It's complicated.
The filter blocking your api is /admanager/*$~object

Possible solutions:

1. on your side, fast, best fix => just rename /admanager/ folder (and ... sure, you have to work with your partner sites to rename the same api in their piece of code)
2.
on easylist side (if easylist authors decide to fix it ..)

needing

Code: Select all

@@||api.spendino.de/admanager/$domain=api.spendino.de
@@||api.spendino.de/admanager/$domain=gruen.net|domain2|domain3| ...
The second filter should know all the domains where your api is used. Without the domains some malicious dev could use the exception filter to whitelist some nasty script.
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

Hi, thx for the fast answer.

Well then the problem is a really big one. We sell this software for a couple of years, our customers put in these snippets on their own in their and every other website / domain, they like.

So we can change our URL only for future use and will check to do so. But the blocking of our forms just started two weeks ago and all of our customers are running into trouble... can't you add our domain as trustworthy? We can deliver legal information regarding our business if needed...
Thx, Ralph
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

As I said, the first filter is ok (whitelisting api on the same domain of the api).

The second is the problem: nobody will whitelist that api not indicating the domains were is used (a malicious site will use the same name of your api just to put inside nasty code).

I'm not an easylist author.
User avatar
fanboy
EasyList Author
EasyList Author
Posts: 12231
Joined: Wed Sep 05, 2007 8:17 pm

Post by fanboy »

Would be easier to change the url to be honest (to be less "ad-like"), is that an option?
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

Changing the url will fix this issue for the future (until another magic word kills it :) ) but won't help for the hundreds of existing customers. And as mentioned above, this blocking started suddenly a few weeks ago, so the last years, we had no problem with this url...

we had the same topic with another ad blocker and they solved it by adding our domain api.spendino.de. Why exactly isn't this an option for Easylist? I can't imagine (sorry I'm not that technical) how this can be misused from someone else...
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

if your api is hosted by the partner site itself is doable using

Code: Select all

@@||api.spendino.de/admanager/$~third-party
or your partners are using the api hosted by the same api.spendino.de ?
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

Unfortunately they are using the remote script as you said above
<script src="https://api.spendino.de/admanager/forms/display/nnn"></script>
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

Our customers integrate the snippet shown above in their website. These sites are under the customer domains which can be hosted in any hosting provider on the world or on own customer servers. There are all scenarios possible and surely a lot of them reality. We simply don't know these scenarios because they aren't of any relevance for our product...

The api itself is always hosted in our datacenter, it's a SaaS solution, so no hosting or installations on premise...So the only constant is our URL including the domain api.spendino.de...
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

I was wrong (about abusing ..)

needing only

Code: Select all

@@||api.spendino.de/admanager/
in easylist
-Mark-
Postaholic
Postaholic
Posts: 382
Joined: Tue Jul 05, 2016 7:46 pm

Post by -Mark- »

Our customers integrate the snippet shown above in their website. These sites are under the customer domains which can be hosted in any hosting provider on the world or on own customer servers.
Email them about updating the link and update it on your side. You will have to do this now or later, you're only delaying the inevitable.
User avatar
smed79
Liste AR/FR Author
Liste AR/FR Author
Posts: 15839
Joined: Sun Jan 17, 2010 4:00 am
Location: EasyList Forum

Post by smed79 »

@spendino Redirect the folder using .htaccess file in your root level of your web server

Code: Select all

RewriteRule ^old_directory_path/(.*)$ /new_directory_path/$1 [R=301,L]
https://httpd.apache.org/docs/current/e ... ewriterule
•► Read RULES / Use forum Search
••► Don't post clickable links
•••►Upload screenshots at imgbb.com
okiehsch
uBlock Origin Author
uBlock Origin Author
Posts: 98
Joined: Wed Oct 12, 2016 9:00 pm

Post by okiehsch »

Code: Select all

@@||spendino.de/admanager/
was part of EasyList since https://github.com/easylist/easylist/co ... c393e0dae8

It was removed eight years later https://github.com/easylist/easylist/co ... 121718L489

The reason for the removal - according to the commit - is "redundancy". Maybe that filter was removed by mistake?
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

I have notified an easylist author about your issue.
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

Ok, so if we were whitelisted already, can you then simply undo the deleting? As I understand it right, there was no concrete reason for deleting our entry...
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

intense wrote: Fri Sep 06, 2019 6:23 am I have notified an easylist author about your issue.
Didn't saw your reply. Thanks!
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

Good to hear and thanks for your and fanboys support!

Do you have any experience, how long it will take, until this change is published through the different softwares? I don't want to nail you on a date, just to get a feeling for our external communication...
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

Usually in 4-5 days it will be automatically updated by various adblockers or ... force an update in your adblocker
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

thx again!
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

Hi all,
I checked the result today and our forms are still blocked. After manually updating uBlock, which seems to work, and clearing the cache, it is still blocking the form.

I also checked the download during updating and it seems to be ok. The list from https://easylist-downloads.adblockplus.org/easylist.txt contains the line "@@||spendino.de/admanager/" but the snippet "https://api.spendino.de/admanager/forms ... x/xlang:de" is still blocked.

Any suggestions?

Thx Ralph
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

Nothing blocked for me, testing here:
https://www.gruen.net/spendino/online-spendenformulare/features/live-ansehen/

be sure you have disabled all other blocking extensions in your browser (or other stuff: router rules, pi-hole etc)
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

ok, this url already use the new url without \admanager\ so it's of no use for testing anymore...

Please use

Code: Select all

https://www.gruen.net/spendino-adblocker/
for testing
intense
Contributor
Contributor
Posts: 10500
Joined: Wed Mar 27, 2013 9:56 am

Post by intense »

Same, nothing is blocked anymore, investigate on your side.
spendino
Site Member
Site Member
Posts: 11
Joined: Tue Sep 03, 2019 1:29 pm

Post by spendino »

yes, you're right, seems to be something with my browser. Thx and sorry!
Locked