Skip to content

CSP filters ignored if domain isn't provided in the filter text

Environment

  • OS version: Windows 10
  • Browser version: Chrome 101.0.4951.67
  • Extension version: Adblock Plus 3.13
  • Last working version: Adblock Plus 3.12

Steps to reproduce

  1. Go to https://testpages.adblockplus.org/en/filters/csp_specific
  2. Add $csp=script-src https://testpages.adblockplus.org/lib/utils.js,domain=testpages.adblockplus.org as a custom filter
  3. Refresh the page

Observed behavior

The filter isn't applied and the red image still shows.

Expected behavior

The filter is applied and the red image is blocked.

Further information

Adding an asterix at the very beginning (*$csp=script-src https://testpages.adblockplus.org/lib/utils.js,domain=testpages.adblockplus.org) doesn't help. It seems with 3.13 $csp filters only work if the actual domain is included in the beginning of the filter (before $csp) and not via the $domain option.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information