gorhill/uBlock 1.38.7rc4

on GitHub

To install the developer build:

• Firefox: Click uBlock0_1.38.7rc4.firefox.signed.xpi
  
  • uBO works best on Firefox.
    
• Chromium: Install from the Chrome Web Store (CWS): https://chrome.google.com/webstore/detail/ublock-origin-dev-build/cgbcahbpdhpcegmbfconppldiemgcoii.
  
• Thunderbird: Download uBlock0_1.38.7rc4.thunderbird.xpi, then drag-n-drop it into Thunderbird's Add-ons Manager pane (Thunderbird 78+ required)
  
• Node.js: Import from npm, or download and unzip uBlock0_1.38.7rc4.npm.tgz.
  

New

A new "Report an issue on this website" icon has been added to the popup panel, to make it easier to report filter issue to volunteers maintaining filter lists. Reporting filter issues through this new feature requires a GitHub account.

A new Support pane has been added to the dashboard, to make it easy for users to share technical information about their current uBO's configuration, and consequently make it easier for volunteers to diagnose reported issues.

Closed as fixed

Chromium

• Text editing boxes have mouse location issues in higher DPIs
  
• Cosmetic filters not working on many websites with "Experimental Web Platform features" in chrome://flags
  
  • This also fixed "Security: Comments can still be used to smuggle arbitrary CSS", which was reported afterward.
    

Core

• Security: Cosmetic filters can make background requests using image-set() on Firefox
  
• uBlock GA overwrites breaking _link implementation when using a named property
  
• Security: Smuggle arbitrary CSS inside cosmetic uBlock filters
  
• Security: JavaScript URL injection allowed in query string parameter and redirection to uBlock origin urls
  
• Fix not highlighting cases of invalid syntax
  
• [patch by @pixeltris] Twitch bypass is circumvented
  
• Extension report website adblocking option
  
• [patch by @eligrey] Don't assume document.documentElement is non-null
  
• Add support for pseudo classes
  

Notable commits without an entry in the issue tracker

• Do not decode query parameter name when used as token
  
• Suggest network filter as best candidate by default
  
• Auto-escape commas in removeparam's regexes
  
• Simplify handling of valid HTML tags in i18n files
  
• Give precedence to negated types in case of ambiguity
  
• Fix regression in isBlockImportant()
  
• Add refresh-defuser scriptlet
  
• Add advanced setting to modify default webext flavor
  
• Convert fingerprint2.js scriptlet into a redirectable resource