Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FYI about strict navigation blocking any URLs that have fbclid parameter #19

Open
kowith337 opened this issue Oct 13, 2018 · 6 comments

Comments

@kowith337
Copy link
Owner

kowith337 commented Oct 13, 2018

I've noticed that Facebook start to have improved their ability to track external URLs by add the fbclid parameters, even the target URL was already resolved by custom userscript, extensions and others like...

Here's an example of URL that added fbclid parameter.

https://github.com/kowith337/PersonalFilterListCollection/blob/master/docs/Facebook0-Bypassing.md?fbclid=IwAR0EibcyYCzmDGfhk_Z1WqKaq8FpBuKjDwO8rTTWEPzMNHrGM7bLvb2-DN4

And now I have added two rules, both are block as document to prevent navigation happen.


An idea is to let the strict blocking function activated by two rules above, while uBlock or Nano give the warning about strict blocking to prevent navigating to the URL that have tracked parameter, the real URL can be exposed below the blocked URL by click to the 🔍 button with all parameters stripped and it won't bind in the real URL together.

image

However, for some domains that have multiple parameters like...
image

You need to make a text selection and then...

  • Copy URL and then paste to address bar (or perform Paste and Go), make sure you have exclude selecting all of fbclid parameters and values.
  • Right Click (or Tap+Hold) and perform Go to web address that you've selected.
    • For Firefox and other forks, it doesn't show the Go to menu, instead, you can perform Open in new tab/window or private window with text selected URL.
@uBlock-user
Copy link

why two filters ?

Just use *fbclid=$1p,document,important or *clid=$1p,document,important to block gclid too.

@kowith337
Copy link
Owner Author

I'm not sure using wildcard will be affected to anything that not related to both parameter of that or not, but based on my experience, the first parameter will start with ?param_name, and will be start with &param_name for second and/or afterwards, depend on the target site that have another parameter before Facebook injecting fbclid or not.

However, I think I've seen sometime it's also beginning with # but don't know is Facebook still can read their fbclid value with that situation or not?

@uBlock-user
Copy link

Forbes makes use of # so it's not just ? or &, unfortunately # is not considered as a URL param query.

@kowith337
Copy link
Owner Author

kowith337 commented Nov 1, 2020

image

Currently Facebook also increase layer of external URLs tracking...

  1. All of external URLs will going through l.facebook.com or lm.facebook.com if you're use mobile site, neither it's basic or touch.
  2. Destination URL inside u parameter will also binding with fbclid (URL encode/decode)
  3. Also boxed by h, __tn__ and c[0] parameter.

@uBlock-user
Copy link

$queryprune has been added to uBO dev build, now you can prune those queries.

@kowith337
Copy link
Owner Author

Thanks for your information and updates about uBO dev, however, after testing by myself, I decided to use the queryprune rules as for handling requests that shipped with unnecessary parameters, this might helpful in some case e.g. Steam trying to bind snr parameters everywhere, even while search for games and/or products, the strict blocking document in ASTLW may still keep with left some short message behind domain=~, but other requests (e.g. xhr in overdone version) will lower priority to block or getting removed once that function added in stable releases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants