1.39.0

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.39.0.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Important

Fixed security issues reported by @hackvertor, see "uBlock, I exfiltrate: exploiting ad blockers with CSS".

New

A new "Report an issue on this website" icon has been added to the popup panel, to make it easier to report filter issue to volunteers maintaining filter lists. Reporting filter issues through this new feature requires a GitHub account.

A new Support pane has been added to the dashboard, to make it easy for users to share technical information about their current uBO's configuration, and consequently make it easier for volunteers to diagnose reported issues.

Closed as fixed

Chromium

• Text editing boxes have mouse location issues in higher DPIs
• Cosmetic filters not working on many websites with "Experimental Web Platform features" in chrome://flags
  • This also fixed "Security: Comments can still be used to smuggle arbitrary CSS", which was reported afterward.

Core

• [discovered by @hackvertor] Security: Cosmetic filters can make background requests using image-set() on Firefox
• uBlock GA overwrites breaking _link implementation when using a named property
• [discovered by @hackvertor] Security: Smuggle arbitrary CSS inside cosmetic uBlock filters
• [discovered by @hackvertor] Security: JavaScript URL injection allowed in query string parameter and redirection to uBlock origin urls
• Fix not highlighting cases of invalid syntax
• [patch by @pixeltris] Twitch bypass is circumvented
• Extension report website adblocking option
• [patch by @eligrey] Don't assume document.documentElement is non-null
• Add support for pseudo classes

Notable commits without an entry in the issue tracker

• Do not decode query parameter name when used as token
• Suggest network filter as best candidate by default
• Auto-escape commas in removeparam's regexes
• Simplify handling of valid HTML tags in i18n files
• Give precedence to negated types in case of ambiguity
• Fix regression in isBlockImportant()
• Add refresh-defuser scriptlet
• Add advanced setting to modify default webext flavor
• Convert fingerprint2.js scriptlet into a redirectable resource

1.38.6

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.38.6.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Closed as fixed

• [patch by @pixeltris] Fix broken twitch.tv functionality

1.38.4

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.38.4.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Notable commits without an entry in the issue tracker

• Update twitch-videoad scriptlet (solution contibuted by @pixeltris)

1.38.2

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.38.2.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Closed as fixed:

• Regression with important filter option
• Weird issues with removeparam and negated types

npm_0.1.11

Fix usage documentation

Related issue:
- https://github.com/uBlockOrigin/uBlock-issues/issues/1734

1.38.0

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Skipped to 1.38.2
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

New

:matches-path(...)

New cosmetic procedural operator, :matches-path(...). See "Add $path modifier of Adguard or any equivalents of this".

Node.js

A new Node.js package will now published with every release. The package allows to import and use uBO's static and dynamic filtering engines into Node.js. This is currently minimal and a first iteration, and issues regarding the Node.js package are accepted in order to improve usability of uBO's filtering engines in a Node.js package. The ability to run code from a Node.js package also opens the door to have test coverage in uBO.

For now the package can be downloaded and unzipped locally. Once installed, you can execute node test in the root of the package to verify that the static network filtering engine works properly. For usage, refer to the test.js, or ublock.js used in Cliqz's benchmark.

Since I have little experience with dealing with Node.js environment/packages, thanks to @mjethani for assistance.

Removed

The setting "Prevent WebRTC from leaking local IP addresses" has been removed since it is no longer necessary in modern browsers, except for Firefox for Android where the issue is still present.

Closed as fixed:

• Remove WebRTC leak prevention
• $removeparam doesn't work well with UrlEncoded gb2312 Chinese word
• Scriptlets don't work randomly in Firefox
• Security: comments can be used to smuggle url() functions into css values
• Prevent uBO from hiding html or body when matched by a generic cosmetic filter
• On Android Popup Overlays [or Underlays] On-Screen Navigation Buttons
• Add $path modifier of Adguard or any equivalents of this
• The overview panel will not show everything if the uBO's icon is placed in the Firefox overflow menu
• [patch by @vtriolet] TypeError in noscript-spoof scriptlet with invalid meta refresh URL
• TypeError when trying to use element picker on plaintext resource
• Split out core functionality into separate module
  • This is of course an ongoing work for the foreseeable future, but the concrete goal sought in the issue has been reached, i.e. the static network filtering engine can be used as a nodejs module with no external dependencies.
  • Since uBO's codebase now uses JS modules, the minimum version of supported browsers has been increased to Chromium 61, Firefox 60, and Opera 48.

Notable commits without an entry in the issue tracker

• Better lookup all elements under mouse cursor in element picker
• Add visual hint to grab area of element picker dialog
• Add no-xhr-if scriptlet
• Refactor hntrie to avoid the need for boundary cells
• Fix bad test in WASM version of HNTrieContainer
• Export the rule-based filtering engines to the nodejs package
• Rewrite logical expressions for ESLint
• [patch by @mjethani] Add Makefile
• [patch by @mjethani] Make uAssets a submodule
• Ensure compiled sections are ordered in ascending id
• Fix handling of some procedural cosmetic filters with explicit :scope

1.37.2

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.37.2.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Closed as fixed:

• uBO 1.37 breaks at least some sites that use googletagmanager if specific filters in use

1.37.0

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.37.0.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Closed as fixed

Core

• '$popup' not working
• Service worker "tabless" requests with correct context are still modified when page is whitelisted
• Back/Forward navigation does not work between Ublock Origin option pages
• csp_report filter created via logger is marked as invalid
• Extreme popup blocking - uBo dashboard is blocked when popups are
• ipv6 fe80::1%lo0 localhost from hosts file is marked as error line
• Whitespaces are now stripped from blocking-rule URLs, causing rules targeting whitespaces to fail and/or block extremely broadly
• uBO's dashboard does not refresh custom filters in real-time
• Element picker/zapper don't work if cosmetic filtering is disabled
• Logger always highlights first match
• Static filtering: Cannot prevent my filter from strict-blocking

Notable commits without an entry in the issue tracker

• Provide visual cue in popup panel when base domain has subdomains
• Disclose where uBO's own filter lists are hosted
• Add abort-current-script scriptlet
• Fix spurious error messages when updating contextual menu
• Make getByName() return an dummy Tracker object
• Add asap behavior to remove-attr scriptlet
• Ensure pending callbacks are called only once

1.36.2

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.36.2.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Closed as fixed

• DoS with strict-blocking filter

1.36.0

Commits to master since this release
Commits since last release

To install the stable build:

• Firefox: Click uBlock0_1.36.0.firefox.signed.xpi
  • uBO works best on Firefox.
• Chromium: Install from the Chrome store (CWS): https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm
• Edge: Install from Microsoft Store: https://microsoftedge.microsoft.com/addons/detail/odfafepnkmbhccpbejgmiehpchacaeak
  • The Microsoft Store version of uBO is published by Nik Rolls
• Opera: Install from Opera addons: https://addons.opera.com/en/extensions/details/ublock/

---

Closed as fixed

Chromium

• uBlock does not load adminSettings at first run

Firefox

• Bizarre perf drain when ajaxing in 90,000 DOM nodes in a react component

Core

• Google Tag Manager eventCallback in a populated dataLayer not called
• Countering a removeparam filter causes page-redirect problem
• Asset viewer shows no space between !#endif and a comment line in uBlock's list
• Text in Manage Extension Shortcuts includes escaped ­
• In popup, the Reload button becomes immediately hidden if re-enabling the large power button too quickly

Notable commits without an entry in the issue tracker

• Add ability to linger for remove-class scriptlet
• Add empty array, object to set-constant scriptlet
• Fix potential exception when casting to string
• Make googletagmanager_gtm.js an alias of google-analytics_analytics.js
• Ensure getter/setter are called with proper context
• Allow filter list subscription through context menu
• Keep reporting last time "out of date" lists were updated
• Fix improper hashing of rules in classic popup panel