1208051 - Block "speedfox" add-on version 1.2.78

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

palant brought this to my attention, this review seems to be true: https://addons.mozilla.org/en-US/firefox/addon/speedfox/reviews/746094/

SpeedFox seems to be injecting ads into the page based on remote rules. One of the scripts says "RoyalAds", which is apparently associated with a well-known adware application.

Snippets:
http://dlbox.org/sp/JS.txt
http://dlbox.org/sp/JSS.txt

Version 1.2.78, which introduced the "feature", is now disabled. Nevertheless, a blocklist entry should likely be created in addition.

Comment 1

[Wladimir Palant]

Note that the feature in question was masquerading as ad removal - supposedly it was using nsITraceableChannel to remove ads by doing search&replace based on remote rules. Of course, this functionality can be just as well be used to inject content, and that's what it is doing right now. The rules files have July 30 as modification date, I guess that before that they weren't injecting any ads in order to fool reviewers and people updating from the previous release.

Comment 2

[Jorge Villalobos [:jorgev] (he/him)]

ID: jid1-uabu5A9hduqzCw@jetpack

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

Blocked: https://addons.mozilla.org/en-US/firefox/blocked/i1016

Thanks for bringing it up.