X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=standard.action;h=7e574bc5ff31699973f889d5f7943c1d1dbd42ff;hp=7d5fd9909973b60d5f233c15ef7734f82cfea71b;hb=3789d801f6b08697f16edd034108a544f183ef31;hpb=5b8478a9a4e1ea4515db998edd21a9600b278422

diff --git a/standard.action b/standard.action
index 7d5fd990..7e574bc5 100644
--- a/standard.action
+++ b/standard.action
@@ -2,137 +2,237 @@
 # 
 #  File        :  $Source: /cvsroot/ijbswa/current/standard.action,v $
 # 
-#  $Id: standard.action,v 1.1 2002/04/24 02:20:49 oes Exp $
+#  $Id: standard.action,v 1.18 2007/01/22 16:06:28 fabiankeil Exp $
 #
 #  Purpose     :  Provide prefedined sets of actions, see
-#                 http://www.privoxy.org/faq/questions.html#CONFIGFILES
+#                 http://www.privoxy.org/user-manual/actions-file.html
 #
-#  Copyright   :  Written by and Copyright
+#  Copyright   :  Written by and Copyright 2002-2007
 #                 Privoxy team. http://www.privoxy.org/
 #
 ######################################################################
 
 ######################################################################
 #
-# CAUTION: MODYFING THIS FILE IS *NOT* RECOMMENDED for the average
-#          user.
+# WARNING: THIS FILE IS *NOT* THE PLACE TO CUSTOMIZE YOUR CONFIGURATION!
 #
-#          If you want to customize Privoxy to suit your needs, 
-#          you can alter the default section in default.action and/or
-#          add your personal exceptions and additions in user.action
+#          This is not a user modifiable configuration file!
+#          Local customizations and preferences should go in 
+#          user.action and/or user.filter. Or use the custom editor at
+#          http://p.p/. Thanks.
 #
 ######################################################################
 
 ################
 #
-# Cautions settings -- safe for all sites
+# Cautious settings -- safe for all sites, but offer little privacy protection
 #
 { \
 -add-header \
 -block \
+-client-header-filter{hide-tor-exit-notation} \
+-content-type-overwrite \
+-crunch-client-header \
+-crunch-if-none-match \
+-crunch-outgoing-cookies \
+-crunch-incoming-cookies \
+-crunch-server-header \
 -deanimate-gifs \
 -downgrade-http-version \
 -fast-redirects \
-+filter{html-annoyances} \
-+filter{js-annoyances} \
+-filter{js-annoyances} \
+-filter{js-events} \
+-filter{html-annoyances} \
 -filter{content-cookies} \
--filter{popups} \
-+filter{webbugs} \
 -filter{refresh-tags} \
--filter{fun} \
-+filter{nimda} \
-+filter{banners-by-size} \
+-filter{unsolicited-popups} \
+-filter{all-popups} \
+-filter{img-reorder} \
+-filter{banners-by-size} \
+-filter{banners-by-link} \
+-filter{webbugs} \
+-filter{tiny-textforms} \
+-filter{jumping-windows} \
+-filter{frameset-borders} \
+-filter{demoronizer} \
 -filter{shockwave-flash} \
--filter{crude-prental} \
+-filter{quicktime-kioskmode} \
+-filter{fun} \
+-filter{crude-parental} \
+-filter{ie-exploits} \
+-filter{site-specifics} \
+-filter{google} \
+-filter{yahoo} \
+-filter{msn} \
+-filter{blogspot} \
+-filter{no-ping} \
+-force-text-mode \
+-handle-as-empty-document \
+-handle-as-image \
+-hide-accept-language \
+-hide-content-disposition \
+-hide-if-modified-since \
 +hide-forwarded-for-headers \
 +hide-from-header{block} \
 -hide-referrer \
 -hide-user-agent \
--handle-as-image \
-+set-image-blocker{pattern} \
--limit-connect \
-+prevent-compression \
--session-cookies-only \
--crunch-outgoing-cookies \
--crunch-incoming-cookies \
+-inspect-jpegs \
 -kill-popups \
+-limit-connect \
+-prevent-compression \
+-overwrite-last-modified \
+-redirect \
 -send-vanilla-wafer \
 -send-wafer \
+-server-header-filter{xml-to-html} \
+-server-header-filter{html-to-xml} \
+-session-cookies-only \
++set-image-blocker{pattern} \
+-treat-forbidden-connects-like-blocks \
 }
 standard.Cautious
 
 ################
 #
-# Medium settings -- safe for most sites
+# Medium settings -- safe for most sites, with reasonable protection/damage tradeoff
 #
 { \
 -add-header \
 -block \
+-client-header-filter{hide-tor-exit-notation} \
+-content-type-overwrite \
+-crunch-client-header \
+-crunch-if-none-match \
+-crunch-outgoing-cookies \
+-crunch-incoming-cookies \
+-crunch-server-header \
 +deanimate-gifs{last} \
 -downgrade-http-version \
 -fast-redirects \
-+filter{html-annoyances} \
-+filter{js-annoyances} \
-+filter{content-cookies} \
--filter{popups} \
-+filter{webbugs} \
+-filter{js-annoyances} \
+-filter{js-events} \
+-filter{html-annoyances} \
+-filter{content-cookies} \
 +filter{refresh-tags} \
--filter{fun} \
-+filter{nimda} \
+-filter{unsolicited-popups} \
+-filter{all-popups} \
++filter{img-reorder} \
 +filter{banners-by-size} \
+-filter{banners-by-link} \
++filter{webbugs} \
+-filter{tiny-textforms} \
++filter{jumping-windows} \
+-filter{frameset-borders} \
+-filter{demoronizer} \
 -filter{shockwave-flash} \
--filter{crude-prental} \
+-filter{quicktime-kioskmode} \
+-filter{fun} \
+-filter{crude-parental} \
++filter{ie-exploits} \
+-filter{site-specifics} \
+-filter{google} \
+-filter{yahoo} \
+-filter{msn} \
+-filter{blogspot} \
+-filter{no-ping} \
+-force-text-mode \
+-handle-as-empty-document \
+-handle-as-image \
+-hide-accept-language \
+-hide-content-disposition \
+-hide-if-modified-since \
 +hide-forwarded-for-headers \
 +hide-from-header{block} \
-+hide-referrer{forge} \
++hide-referrer{conditional-block} \
 -hide-user-agent \
--handle-as-image \
-+set-image-blocker{pattern} \
--limit-connect \
-+prevent-compression \
-+session-cookies-only \
--crunch-outgoing-cookies \
--crunch-incoming-cookies \
+-inspect-jpegs \
 -kill-popups \
+-limit-connect \
+-prevent-compression \
+-overwrite-last-modified \
+-redirect \
 -send-vanilla-wafer \
 -send-wafer \
+-server-header-filter{xml-to-html} \
+-server-header-filter{html-to-xml} \
++session-cookies-only \
++set-image-blocker{pattern} \
+-treat-forbidden-connects-like-blocks \
 }
 standard.Medium
 
 ################
 #
-# Advanced settings -- fun but risky
+# Advanced settings -- reasonable privacy protection but
+# require some exceptions for trusted sites, most likely
+# because of cookies or SSL. Also testing ground for
+# new options.
+#
+# CAUTION: These settings can still be subverted by a
+# misconfigured client that executes code from untrusted
+# sources.
 #
 { \
-+add-header{X-User-Tracking: sucks} \
+-add-header \
 -block \
+-client-header-filter{hide-tor-exit-notation} \
+-content-type-overwrite \
+-crunch-client-header \
++crunch-if-none-match \
++crunch-outgoing-cookies \
++crunch-incoming-cookies \
+-crunch-server-header \
 +deanimate-gifs{last} \
 -downgrade-http-version \
-+fast-redirects \
++fast-redirects{check-decoded-url} \
+-filter{js-annoyances} \
+-filter{js-events} \
 +filter{html-annoyances} \
-+filter{js-annoyances} \
 +filter{content-cookies} \
-+filter{popups} \
-+filter{webbugs} \
 +filter{refresh-tags} \
-+filter{fun} \
-+filter{nimda} \
+-filter{unsolicited-popups} \
+-filter{all-popups} \
++filter{img-reorder} \
 +filter{banners-by-size} \
++filter{banners-by-link} \
++filter{webbugs} \
+-filter{tiny-textforms} \
++filter{jumping-windows} \
++filter{frameset-borders} \
+-filter{demoronizer} \
 -filter{shockwave-flash} \
--filter{crude-prental} \
++filter{quicktime-kioskmode} \
+-filter{fun} \
+-filter{crude-parental} \
+-filter{ie-exploits} \
+-filter{site-specifics} \
+-filter{google} \
+-filter{yahoo} \
+-filter{msn} \
+-filter{blogspot} \
+-filter{no-ping} \
+-force-text-mode \
+-handle-as-empty-document \
+-handle-as-image \
+-hide-accept-language \
+-hide-content-disposition \
++hide-if-modified-since{-60} \
 +hide-forwarded-for-headers \
 +hide-from-header{block} \
-+hide-referrer{forge} \
++hide-referrer{conditional-block} \
 -hide-user-agent \
--handle-as-image \
-+set-image-blocker{pattern} \
--limit-connect \
-+prevent-compression \
-+session-cookies-only \
--crunch-outgoing-cookies \
--crunch-incoming-cookies \
+-inspect-jpegs \
 -kill-popups \
++limit-connect{,} \
+-prevent-compression \
++overwrite-last-modified{randomize} \
+-redirect \
 -send-vanilla-wafer \
 -send-wafer \
+-server-header-filter{xml-to-html} \
+-server-header-filter{html-to-xml} \
+-session-cookies-only \
++set-image-blocker{pattern} \
++treat-forbidden-connects-like-blocks \
 }
 standard.Advanced