+- The Un-Official Proxomitron Forum (https://www.prxbx.com/forums)
+-- Forum: Proxomitron Filters (/forumdisplay.php?fid=38)
+--- Forum: Filter Help/Request (/forumdisplay.php?fid=31)
+--- Thread: HTTP Header - Permissions-Policy - attribution-reporting (/showthread.php?tid=3130)
HTTP Header - Permissions-Policy - attribution-reporting - ProxRocks - Jun. 25, 2024 09:03 PM
Anyone know if it is possible for Proxo to get "attribution-reporting" spoofed/bypassed?
For example, my only web browser is Ungoogled Chromium v114.
v114! I would highly prefer to not go any newer!
I've bumped into only one web site that I cannot get to work with v114.
It is -- https://reg.usps.com/login
You DO NOT NEED AN ACCOUNT.
Just type in a RANDOM username and a RANDOM password.
You will see the "unrecognized feature: attribution-reporting" in the error console.
Can a Proxo header filter spoof/bypass this?
This "feature" is something added in v117 - https://caniuse.com/mdn-http_headers_permissions-policy_attribution-reporting
But again, I want to stick with v114 (if possible).
RE: HTTP Header - Permissions-Policy - attribution-reporting - JJoe - Jun. 30, 2024 01:46 AM
RANDOM username and a RANDOM password does not return "unrecognized feature: attribution-reporting" in the error console for this Opera. I see "We are unable to process your request at this time. Please try again..." under the password field.
Are you spoofing your user-agent to mimic v117 or younger? If so, try with a user-agent that doesn't support this feature.
You could also try removing all the related headers.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Attribution-Reporting-Eligible
shows Attribution-Reporting-Eligible (out), and Attribution-Reporting-Register-Source (in) or Attribution-Reporting-Register-Trigger (in)
So
Code:
[HTTP headers]
In = FALSE
Out = TRUE
Key = "Attribution-Reporting-Eligible: 24.06.29 (Out) `"
URL = "?|reg.usps.com/login"
In = TRUE
Out = FALSE
Key = "Attribution-Reporting-Register-Source: 24.06.29 (In) `"
URL = "?|reg.usps.com/login"
In = TRUE
Out = FALSE
Key = "Attribution-Reporting-Register-Trigger: 24.06.29 (In) `"
URL = "?|reg.usps.com/login"URL match is optional. Used to add notes.
The ` lets me display only the filters that I have added.
More at https://developer.mozilla.org/en-US/docs/Web/API/Attribution_Reporting_API