Skip to content

Commit adb6a50

Browse files
jumdebrave-browser-releases
authored andcommitted
Fix 8034: Add Crowd Deny requests to audit whitelist
1 parent d95dd39 commit adb6a50

File tree

2 files changed

+5
-2
lines changed

2 files changed

+5
-2
lines changed

lib/whitelistedUrlPatterns.js

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
module.exports = [
33
'http://[A-Za-z0-9-\.]+\.gvt1\.com/edgedl/release2/chrome_component/.+', // allowed because it 307's to crlsets.brave.com
44
'https://[A-Za-z0-9-\.]+\.gvt1\.com/edgedl/release2/chrome_component/.+', // allowed because it 307's to crlsets.brave.com
5+
'http://[A-Za-z0-9-\.]+\.gvt1\.com/edgedl/release2/.+', // allowed because it 307's to redirector.brave.com
6+
'https://[A-Za-z0-9-\.]+\.gvt1\.com/edgedl/release2/.+', // allowed because it 307's to redirector.brave.com
57
'http://www.google.com/dl/release2/chrome_component/.+crl-set.+', // allowed because it 307's to crlsets.brave.com
68
'https://www.google.com/dl/release2/chrome_component/.+crl-set.+', // allowed because it 307's to crlsets.brave.com
79
'http://storage.googleapis.com/update-delta/hfnkpimlhhgieaddgfemjhofmfblmnib/.+crxd', // allowed because it 307's to crlsets.brave.com,

lib/whitelistedUrlPrefixes.js

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@ module.exports = [
44
'https://update.googleapis.com/service/update2', // allowed because it 307's to go-updater.brave.com. should never actually connect to googleapis.com.
55
'https://safebrowsing.googleapis.com/v4/threatListUpdates', // allowed because it 307's to safebrowsing.brave.com
66
'https://clients2.googleusercontent.com/crx/blobs/',
7-
'http://dl.google.com/release2/chrome_component/', // allowed because it 307's to crlset1.brave.com
8-
'https://dl.google.com/release2/chrome_component/', // allowed because it 307's to crlset1.brave.com
7+
'http://dl.google.com/', // allowed because it 307's to redirector.brave.com
8+
'https://dl.google.com/', // allowed because it 307's to redirector.brave.com
99
'https://no-thanks.invalid/', // fake gaia URL
1010
'https://go-updater.brave.com/',
1111
'https://safebrowsing.brave.com/',
@@ -30,4 +30,5 @@ module.exports = [
3030
'https://dns.google/dns-query', // needed for DoH on Mac build machines
3131
'https://chrome.cloudflare-dns.com/dns-query', // needed for DoH on Mac build machines
3232
'https://tor.bravesoftware.com/', // for fetching tor client updater component
33+
'https://redirector.brave.com',
3334
]

0 commit comments

Comments
 (0)