X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=doc%2Fwebserver%2Fuser-manual%2Factions-file.html;h=69b6f66a6d4918687c4ed3856c11d1dd418c2bcd;hp=5fc01d7de1a76e9e668efa69451f61b1ac5708a8;hb=0c74c2974dbfc2eb83e2699f80c2e298c1fedfbe;hpb=d5e802dfcd023357fab97705cfaaf52dff1d4bbf diff --git a/doc/webserver/user-manual/actions-file.html b/doc/webserver/user-manual/actions-file.html index 5fc01d7d..69b6f66a 100644 --- a/doc/webserver/user-manual/actions-file.html +++ b/doc/webserver/user-manual/actions-file.html @@ -4,7 +4,7 @@ Actions Files - + @@ -15,7 +15,7 @@ + +
+

8.5.6. client-header-tagger

Typical use:
@@ -939,7 +997,7 @@ TAG:^IP-ADDRESS: 10\.0\.0\.1$
-

8.5.6. +

8.5.7. content-type-overwrite

@@ -1008,7 +1066,7 @@ www.example.net/.*style

-

8.5.7. crunch-client-header

+

8.5.8. crunch-client-header

Typical use:
@@ -1067,7 +1125,7 @@ www.example.net/.*style
-

8.5.8. crunch-if-none-match

+

8.5.9. crunch-if-none-match

Typical use:
@@ -1119,7 +1177,7 @@ www.example.net/.*style
-

8.5.9. +

8.5.10. crunch-incoming-cookies

@@ -1165,7 +1223,7 @@ www.example.net/.*style

-

8.5.10. +

8.5.11. crunch-server-header

@@ -1225,7 +1283,7 @@ www.example.net/.*style

-

8.5.11. +

8.5.12. crunch-outgoing-cookies

@@ -1270,7 +1328,7 @@ www.example.net/.*style

-

8.5.12. deanimate-gifs

+

8.5.13. deanimate-gifs

Typical use:
@@ -1313,7 +1371,7 @@ www.example.net/.*style
-

8.5.13. delay-response

+

8.5.14. delay-response

Typical use:
@@ -1356,7 +1414,7 @@ www.example.net/.*style
-

8.5.14. +

8.5.15. downgrade-http-version

@@ -1403,7 +1461,7 @@ problem-host.example.com

-

8.5.15. external-filter

+

8.5.16. external-filter

Typical use:
@@ -1465,7 +1523,7 @@ problem-host.example.com
-

8.5.16. fast-redirects

+

8.5.17. fast-redirects

Typical use:
@@ -1524,7 +1582,7 @@ problem-host.example.com

To detect a redirection URL, fast-redirects only looks for the string "http://", either in plain text (invalid but often used) or encoded as "http%3a//". Some sites use their own URL encoding scheme, encrypt the address - of the target server or replace it with a database id. In theses cases fast-redirects is fooled and the request reaches the redirection server where it probably gets logged.

@@ -1546,7 +1604,7 @@ problem-host.example.com
-

8.5.17. filter

+

8.5.18. filter

Typical use:
@@ -1584,11 +1642,11 @@ problem-host.example.com completely rendered doesn't change much, but it may be perceived as slower since the page is not incrementally displayed.) This effect will be more noticeable on slower connections.

"Rolling your own" filters requires a knowledge of "Regular - Expressions" and "Regular + Expressions" and "HTML". This is very powerful feature, and potentially very intrusive. Filters should be used with caution, and where an equivalent "action" is not available.

-

The amount of data that can be filtered is limited to the The amount of data that can be filtered is limited by the buffer-limit option in the main config file. The default is 4096 KB (4 Megs). Once this limit is exceeded, the buffered data, and all pending data, is passed through unfiltered.

@@ -1622,8 +1680,8 @@ problem-host.example.com
-
-                    +filter{js-annoyances}       # Get rid of particularly annoying JavaScript abuse.
+
+filter{js-annoyances}       # Get rid of particularly annoying JavaScript abuse.
@@ -1631,8 +1689,8 @@ problem-host.example.com
-
-                    +filter{js-events}           # Kill JavaScript event bindings and timers (Radically destructive! Only for extra nasty sites).
+
+filter{js-events}           # Kill JavaScript event bindings and timers (Radically destructive! Only for extra nasty sites).
@@ -1640,8 +1698,8 @@ problem-host.example.com
-
-                    +filter{html-annoyances}     # Get rid of particularly annoying HTML abuse.
+
+filter{html-annoyances}     # Get rid of particularly annoying HTML abuse.
@@ -1649,8 +1707,8 @@ problem-host.example.com
-
-                    +filter{content-cookies}     # Kill cookies that come in the HTML or JS content.
+
+filter{content-cookies}     # Kill cookies that come in the HTML or JS content.
@@ -1658,8 +1716,8 @@ problem-host.example.com
-
-                    +filter{refresh-tags}        # Kill automatic refresh tags if refresh time is larger than 9 seconds.
+
+filter{refresh-tags}        # Kill automatic refresh tags if refresh time is larger than 9 seconds.
@@ -1683,8 +1741,8 @@ problem-host.example.com
-
-                    +filter{img-reorder}         # Reorder attributes in <img> tags to make the banners-by-* filters more effective.
+
+filter{img-reorder}         # Reorder attributes in <img> tags to make the banners-by-* filters more effective.
@@ -1700,8 +1758,8 @@ problem-host.example.com
-
-                    +filter{banners-by-link}     # Kill banners by their links to known clicktrackers.
+
+filter{banners-by-link}     # Kill banners by their links to known clicktrackers.
@@ -1709,8 +1767,8 @@ problem-host.example.com
-
-                    +filter{webbugs}             # Squish WebBugs (1x1 invisible GIFs used for user tracking).
+
+filter{webbugs}             # Squish WebBugs (1x1 invisible GIFs used for user tracking).
@@ -1718,8 +1776,8 @@ problem-host.example.com
-
-                    +filter{tiny-textforms}      # Extend those tiny textareas up to 40x80 and kill the hard wrap.
+
+filter{tiny-textforms}      # Extend those tiny textareas up to 40x80 and kill the hard wrap.
@@ -1727,8 +1785,8 @@ problem-host.example.com
-
-                    +filter{jumping-windows}     # Prevent windows from resizing and moving themselves.
+
+filter{jumping-windows}     # Prevent windows from resizing and moving themselves.
@@ -1736,8 +1794,8 @@ problem-host.example.com
-
-                    +filter{frameset-borders}    # Give frames a border and make them resizable.
+
+filter{frameset-borders}    # Give frames a border and make them resizable.
@@ -1745,8 +1803,8 @@ problem-host.example.com
-
-                    +filter{iframes}             # Removes all detected iframes. Should only be enabled for individual sites.
+
+filter{iframes}             # Removes all detected iframes. Should only be enabled for individual sites.
@@ -1754,8 +1812,8 @@ problem-host.example.com
-
-                    +filter{demoronizer}         # Fix MS's non-standard use of standard charsets.
+
+filter{demoronizer}         # Fix MS's non-standard use of standard charsets.
@@ -1779,8 +1837,8 @@ problem-host.example.com
-
-                    +filter{fun}                 # Text replacements for subversive browsing fun!
+
+filter{fun}                 # Text replacements for subversive browsing fun!
@@ -1788,8 +1846,8 @@ problem-host.example.com
-
-                    +filter{crude-parental}      # Crude parental filtering. Note that this filter doesn't work reliably.
+
+filter{crude-parental}      # Crude parental filtering. Note that this filter doesn't work reliably.
@@ -1797,8 +1855,8 @@ problem-host.example.com
-
-                    +filter{ie-exploits}         # Disable some known Internet Explorer bug exploits.
+
+filter{ie-exploits}         # Disable some known Internet Explorer bug exploits.
@@ -1806,8 +1864,8 @@ problem-host.example.com
-
-                    +filter{site-specifics}      # Cure for site-specific problems. Don't apply generally!
+
+filter{site-specifics}      # Cure for site-specific problems. Don't apply generally!
@@ -1815,8 +1873,8 @@ problem-host.example.com
-
-                    +filter{no-ping}             # Removes non-standard ping attributes in <a> and <area> tags.
+
+filter{no-ping}             # Removes non-standard ping attributes in <a> and <area> tags.
@@ -1824,8 +1882,8 @@ problem-host.example.com
-
-                    +filter{google}              # CSS-based block for Google text ads. Also removes a width limitation and the toolbar advertisement.
+
+filter{google}              # CSS-based block for Google text ads. Also removes a width limitation and the toolbar advertisement.
@@ -1833,8 +1891,8 @@ problem-host.example.com
-
-                    +filter{yahoo}               # CSS-based block for Yahoo text ads. Also removes a width limitation.
+
+filter{yahoo}               # CSS-based block for Yahoo text ads. Also removes a width limitation.
@@ -1842,8 +1900,8 @@ problem-host.example.com
-
-                    +filter{msn}                 # CSS-based block for MSN text ads. Also removes tracking URLs and a width limitation.
+
+filter{msn}                 # CSS-based block for MSN text ads. Also removes tracking URLs and a width limitation.
@@ -1851,8 +1909,8 @@ problem-host.example.com
-
-                    +filter{blogspot}            # Cleans up some Blogspot blogs. Read the fine print before using this.
+
+filter{blogspot}            # Cleans up some Blogspot blogs. Read the fine print before using this.
@@ -1861,7 +1919,7 @@ problem-host.example.com
-

8.5.18. force-text-mode

+

8.5.19. force-text-mode

Typical use:
@@ -1918,7 +1976,7 @@ problem-host.example.com
-

8.5.19. forward-override

+

8.5.20. forward-override

Typical use:
@@ -2025,7 +2083,7 @@ TAG:^User-Agent: fetch libfetch/2\.0$
-

8.5.20. +

8.5.21. handle-as-empty-document

@@ -2078,7 +2136,7 @@ example.org/.*\.js$

-

8.5.21. handle-as-image

+

8.5.22. handle-as-image

Typical use:
@@ -2138,7 +2196,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-

8.5.22. +

8.5.23. hide-accept-language

@@ -2191,7 +2249,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash

-

8.5.23. +

8.5.24. hide-content-disposition

@@ -2247,7 +2305,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash

-

8.5.24. +

8.5.25. hide-if-modified-since

@@ -2306,7 +2364,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash

-

8.5.25. hide-from-header

+

8.5.26. hide-from-header

Typical use:
@@ -2357,7 +2415,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-

8.5.26. hide-referrer

8.5.27. hide-referrer
@@ -2438,7 +2496,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-

8.5.27. hide-user-agent

+

8.5.28. hide-user-agent

Typical use:
@@ -2482,7 +2540,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash occasionally useful to forge this in order to access sites that won't let you in otherwise (though there may be a good reason in some cases).

More information on known user-agent strings can be found at http://www.user-agents.org/ and http://www.user-agents.org/ and http://en.wikipedia.org/wiki/User_agent.

Example usage:
@@ -2490,7 +2548,8 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-
+hide-user-agent{Netscape 6.1 (X11; I; Linux 2.4.18 i686)}
+
+hide-user-agent{Mozilla/5.0 (X11; ElectroBSD i386; rv:78.0) Gecko/20100101 Firefox/78.0}
@@ -2499,7 +2558,101 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-

8.5.28. limit-connect

+

8.5.29. https-inspection

+
+
+
Typical use:
+
+

Filter encrypted requests and responses

+
+
Effect:
+
+

Encrypted requests are decrypted, filtered and forwarded encrypted.

+
+
Type:
+
+

Boolean.

+
+
Parameter:
+
+

N/A

+
+
Notes:
+
+

This action allows Privoxy to filter encrypted requests and + responses. For this to work Privoxy has to generate a certificate and + send it to the client which has to accept it.

+

Before this works the directives in the HTTPS inspection section of the config + file have to be configured.

+

Note that the action has to be enabled based on the CONNECT request which doesn't contain a path. + Enabling it based on a pattern with path doesn't work as the path is only seen by Privoxy if the action is already enabled.

+

This is an experimental feature.

+
+
Example usage (section):
+
+ + + + +
+
{+https-inspection}
+www.example.com
+
+
+
+
+
+
+

8.5.30. + ignore-certificate-errors

+
+
+
Typical use:
+
+

Filter encrypted requests and responses without verifying the certificate

+
+
Effect:
+
+

Encrypted requests are forwarded to sites without verifying the certificate.

+
+
Type:
+
+

Boolean.

+
+
Parameter:
+
+

N/A

+
+
Notes:
+
+

When the "+https-inspection" action is used Privoxy by default + verifies that the remote site uses a valid certificate.

+

If the certificate can't be validated by Privoxy the connection is + aborted.

+

This action disables the certificate check so requests to sites with certificates that can't be + validated are allowed.

+

Note that enabling this action allows Man-in-the-middle attacks.

+
+
Example usage:
+
+ + + + +
+
    {+ignore-certificate-errors}
+    www.example.org
+   
+
+
+
+
+
+
+

8.5.31. limit-connect

Typical use:
@@ -2551,7 +2704,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-

8.5.29. +

8.5.32. limit-cookie-lifetime

@@ -2603,7 +2756,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash

-

8.5.30. prevent-compression

+

8.5.33. prevent-compression

Typical use:
@@ -2641,8 +2794,9 @@ nasty-banner-server.example.com/junk.cgi\?output=trash action settings.

Note that some (rare) ill-configured sites don't handle requests for uncompressed documents correctly. Broken PHP applications tend to send an empty document body, some IIS versions only send the beginning of - the content. If you enable prevent-compression per default, you might want to - add exceptions for those sites. See the example for how to do that.

+ the content and some content delivery networks let the connection time out. If you enable prevent-compression per default, you might want to add exceptions for those sites. See the + example for how to do that.

Example usage (sections):
@@ -2674,7 +2828,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash
-

8.5.31. +

8.5.34. overwrite-last-modified

@@ -2736,7 +2890,7 @@ nasty-banner-server.example.com/junk.cgi\?output=trash

-

8.5.32. redirect

+

8.5.35. redirect

Typical use:
@@ -2816,6 +2970,10 @@ example.com/.*toChange=(?!bar) # Redirect Destination = https://www.illumos.org/issues/4974 i[0-9][0-9][0-9][0-9]*/ +# Redirect requests for the old Tor Hidden Service of the Privoxy website to the new one +{+redirect{s@^http://jvauzb4sb3bwlsnc.onion/@http://l3tczdiiwoo63iwxty4lhs6p7eaxop5micbn7vbliydgv63x5zrrrfyd.onion/@}} +jvauzb4sb3bwlsnc.onion/ + # Redirect remote requests for this manual # to the local version delivered by Privoxy {+redirect{s@^http://www@http://config@}} @@ -2828,7 +2986,7 @@ www.privoxy.org/user-manual/
-

8.5.33. +

8.5.36. server-header-filter

@@ -2878,7 +3036,7 @@ example.org/instance-that-is-delivered-as-xml-but-is-not

-

8.5.34. +

8.5.37. server-header-tagger

@@ -2935,7 +3093,45 @@ TAG:^image/

-

8.5.35. +

8.5.38. suppress-tag

+
+
+
Typical use:
+
+

Suppress client or server tag.

+
+
Effect:
+
+

Server or client tags to which this action applies are not added to the request, thus making all + actions that are specific to these request tags inactive.

+
+
Type:
+
+

Multi-value.

+
+
Parameter:
+
+

The result tag of a server-header or client-header tagger, as defined in one of the filter files.

+
+
Example usage (section):
+
+ + + + +
+
# Suppress tag produced by range-requests client-header tagger for requests coming from address 10.0.0.1
+{+suppress-tag{RANGE-REQUEST}}
+TAG:^IP-ADDRESS: 10\.0\.0\.1$
+
+
+
+
+

+
+

8.5.39. session-cookies-only

@@ -2997,7 +3193,7 @@ TAG:^image/
-

8.5.36. set-image-blocker

+

8.5.40. set-image-blocker

Typical use:
@@ -3086,7 +3282,7 @@ TAG:^image/
-

8.5.37. Summary

+

8.5.41. Summary

Note that many of these actions have the potential to cause a page to misbehave, possibly even not to display at all. There are many ways a site designer may choose to design his site, and what HTTP header content, and other criteria, he may depend on. There is no way to have hard and fast rules for all sites. See