From 3b1648434530573107510d9c19534f10b084ba41 Mon Sep 17 00:00:00 2001 From: pes10k <76526+pes10k@users.noreply.github.com> Date: Fri, 7 Feb 2025 16:00:08 -0600 Subject: [PATCH 1/3] Add exceptions for statcounter Add exceptions for statcounter after auditing that those resources can be loaded safely and with allowing Brave users to be tracked cross-site or cross-profile (i.e., they do not try to circumvent brave's tracking protecitons) --- brave-lists/brave-specific.txt | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/brave-lists/brave-specific.txt b/brave-lists/brave-specific.txt index 22f430a67..c47415929 100644 --- a/brave-lists/brave-specific.txt +++ b/brave-lists/brave-specific.txt @@ -10,6 +10,15 @@ ||[::1]^$third-party,domain=~localhost|~127.0.0.1|~[::ffff:7f00:1] ||[::ffff:7f00:1]^$third-party,domain=~localhost|~127.0.0.1|~[::1] +! Allow page views in Brave to be counted by statcounter.com. The scripts that match the first +! two rules below have been audited to confirm they don't try to circumvent Brave's cross-site +! or cross-profile tracking protections (e.g., they don't try to fingerprint users, or detect +! private mode, etc.). Brave's other protections (storage partitioning, empheral site lenght +! storage, etc.) prevent statcounter code from tracking or profiling users. +@@||secure.statcounter.com/counter$script +@@||www.statcounter.com/counter$script +@@||c.statcounter.com^$image + ! brave.com specfic filters @@||ads.brave.software^$first-party @@||ads-admin.bravesoftware.com^$first-party From c8221bfb6d8bdd991c8d2e18ee412aa99a570e39 Mon Sep 17 00:00:00 2001 From: Shivan Kaul Sahib Date: Fri, 7 Feb 2025 14:09:22 -0800 Subject: [PATCH 2/3] nit: typo in comment --- brave-lists/brave-specific.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/brave-lists/brave-specific.txt b/brave-lists/brave-specific.txt index c47415929..7fb8cf8db 100644 --- a/brave-lists/brave-specific.txt +++ b/brave-lists/brave-specific.txt @@ -13,7 +13,7 @@ ! Allow page views in Brave to be counted by statcounter.com. The scripts that match the first ! two rules below have been audited to confirm they don't try to circumvent Brave's cross-site ! or cross-profile tracking protections (e.g., they don't try to fingerprint users, or detect -! private mode, etc.). Brave's other protections (storage partitioning, empheral site lenght +! private mode, etc.). Brave's other protections (storage partitioning, ephemeral ! storage, etc.) prevent statcounter code from tracking or profiling users. @@||secure.statcounter.com/counter$script @@||www.statcounter.com/counter$script From 9f5cb4792404a23dd3b48bebd626f9652d248c20 Mon Sep 17 00:00:00 2001 From: pes10k <76526+pes10k@users.noreply.github.com> Date: Tue, 18 Feb 2025 12:13:12 -0600 Subject: [PATCH 3/3] Allow XHR statcounter calls add `xhr` requests to c.statcounter.com too, since these are made when the initial statcoutner script is `https://*.statcounter.com/counter/counter_xhtml.js --- brave-lists/brave-specific.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/brave-lists/brave-specific.txt b/brave-lists/brave-specific.txt index 7fb8cf8db..5d1d56e0d 100644 --- a/brave-lists/brave-specific.txt +++ b/brave-lists/brave-specific.txt @@ -17,7 +17,7 @@ ! storage, etc.) prevent statcounter code from tracking or profiling users. @@||secure.statcounter.com/counter$script @@||www.statcounter.com/counter$script -@@||c.statcounter.com^$image +@@||c.statcounter.com^$image,xhr ! brave.com specfic filters @@||ads.brave.software^$first-party