From d4f092d48044834e2ad4019c8491213b21c6f9cc Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sat, 11 Jul 2020 21:35:27 +0200 Subject: [PATCH] Update IDNHomographProtection-USLatinTLDsOnly.txt --- .../IDNHomographProtection-USLatinTLDsOnly.txt | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/Special security lists/IDNHomographProtection-USLatinTLDsOnly.txt b/Special security lists/IDNHomographProtection-USLatinTLDsOnly.txt index 5e9f528ea..1c9d27b49 100644 --- a/Special security lists/IDNHomographProtection-USLatinTLDsOnly.txt +++ b/Special security lists/IDNHomographProtection-USLatinTLDsOnly.txt @@ -1,18 +1,16 @@ [Adblock Plus 3.4] ! Title: 🆗 IDN Homograph Attack Protection - Does Not Block Non-Latin TLDs -! Version: 05July2020v1-Beta +! Version: 11July2020v1-Beta ! Expires: 15 days ! Description: One of many possible ways for malware to try to enter your computers and phones, is through substituting some US Latin letters with lookalike letters from other alphabets and scripts. For instance, most humans can't easily tell A and А apart (except when using certain fonts), but computers can instantly tell the former is Latin and the latter is Cyrillic, and adresses with them are treated as different. However, ALL use of non-US letters in URLs will be treated as 'xn--[random letters]' by HTML-based tools, making it relatively easy to block, which this list will do for you. ! Note: This version will attempt to let non-Latin TLDs like .рф and .台灣 through; an alternate list version exists that'll block even those. Both versions will also block made-for-convenience European redirects like Elkjøp.no. ! To anyone wondering about the RegEx below: Yes, the longest US-Latin TLD known to exist is indeed 18 letters long, which is ".travelersinsurance", which indeed also looks pretty suspicious at first sight. ! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english -/^(.*[./])?xn--.*\.[a-wyz][a-z]{1,17}/ -/^(.*[./])?xn--.*\.x[a-mo-z]{1,17}/ +^(https?://)?[a-z0-9.]{0,25}?xn--.*\.[a-wyz][a-z]{1,17} +^(https?://)?[a-z0-9.]{0,25}?xn--.*\.x[a-mo-z]{1,17}/ ! ———Exceptions for sites that are believed to have no US-Latin versions——— -! Services -@@||facebook.com/x/oauth/status/*.xn-- ! Norway (most of which are hobby sports clubs) @@||xn--kologisk-44a.no^ @@ -54,3 +52,6 @@ ! Denmark @@||xn--mltidskasser-tcb.net^ @@||xn--bredbnd-ixa.dk^ + +! Sweden +@@||xn--snabbalnen-75a.se^