Arris S33 Cable Modem UI broken

[InvisiBill]

In the web UI for the Arris S33 cable modem, the Event Log page

Code: Select all

https://192.168.100.1/Cmeventlog.html

is populated via a script named eventlog.js. EasyPrivacy contains a filter for

Code: Select all

/eventlog.js

which blocks this script call.

Code: Select all

Loading failed for the <script> with source “https://192.168.100.1/js/eventlog.js”.

This causes the entire table of events to not load at all, as well as causing a modal popup message in the page's code (not normally seen) to incorrectly display its text in the page's header section, as seen at https://i.imgur.com/J5BpWTT.png. With EasyPrivacy disabled, https://i.imgur.com/2rY09ea.png is how it appears.

I have verified that whitelisting that one file

Code: Select all

@@||192.168.100.1/js/eventlog.js

corrects the issue. To play it safe, it may be better to whitelist all .js files in that directory, or even the whole directory. Since it's a private IP and the de facto address for cable modem management UIs, there should be minimal risk of that allowing anything from the public Internet through.

[InvisiBill]

Another option is to exclude the host 192.168.100.1 from the existing filter. (This method is used on the filter for /stat.htm.)

Code: Select all

/eventlog.js$domain=~192.168.100.1

It may still be better to exclude the entire directory or even the host from filtering, to avoid accidentally causing other issues with the UI of your own device. I've heard that newer firmwares include a nag banner to download their phone app, so that might be one reason not to exclude the entire host.