Block Exit Blockers User Script

[dev]

http://javascript.about.com/library/blexitblock.htm Stops sites popups that stop you from leaving their page. The popup usually says stay on page and leave this page so you have to click either to continue on.
Install tampermonkey https://chrome.google.com/webstore/deta ... ldmpobfkfo then click http://javascript.about.com/library/exitblock.user.js or the blue highlighted text ( exitblock.user.js ) from the first link posted above. Not sure if slimjet runs userscripts without tampermonkey installed using the extensions page drag and drop to install method as I haven't tried.

[neilishere]

Hello,
I have Slimjet 304 and cannot get this script to work. This script works great on other browsers - Opera (latest stable), and Palemoon with greasemonkey.

I tried 3 ways to install script:
1.drag script onto ext. page - slimjet created manifest.json.
2.made manifest file and used "load unpacked extension" on ext.page.
3.finally installed tampermonkey and enabled script (after removing script extension).

nothing works - here is safe clickjacking test : http://www.enhanceie.com/test/clickjack/

here is actual IT scam http://myresolver.info/ - you will have to force quit browser.
Opera has exact same extensions as Slimjet - ublock and scroller.
Maybe a permission issue? ?
Thank you

[dev]

I have no problems exiting the resolver link but this is a old script the last time it was updated was 2008 so it may need a fix So Create a new script with the following text:


// ==UserScript==
// @name Disable Leave Page
// @namespace https://tampermonkey.net/
// @include *

// ==/UserScript==

location.href = "javascript:(" + function() {
window.onbeforeunload = null;
window.onunload = null;
} + ")()";

Then get tampermonkey to run it

Or try this https://chrome.google.com/webstore/deta ... _medium=et
Or this http://userscripts-mirror.org/scripts/review/187713

[neilishere]

Thank you for your response,
I should have explained the resolver link better - about half the time the page is innocent and just trying to sell the domain name. The other half there is a redirect to alert.norton.com or alert.windows.com with a loud alarm and popup saying your computer is infected and you must call the number, etc. - and you cannot escape by changing tabs or close the browser, unless you dare to click on one of their programmed buttons which does who knows what.

The thing that puzzles me about the Stephen Chapman script is that it works perfectly on that page in Opera - which is a chromium fork like Slimjet. I am able to back out of the page or change tabs - clickjacking is completely disabled. Same with Palemoon/greasemonkey. It seems to only be a problem with Slimjet (32 or 64 bit).

Thank you for your updated script. I will try it and report back.

[neilishere]

I couldn't get the scripts to work. For some reason Slimjet doesn't allow Top window for a script at the same time of an alert like other browsers. I'm not sure - just a guess.

I know ublock just introduced site blocking - but that doesn't help the first time you get clickjacked. That is why I wanted this simple script to test each website.

[dev]

Try umatrix https://chrome.google.com/webstore/deta ... jdcf?hl=en from same bloke who runs ublock. It will block iframes etc which may be the problem as the scripts don't work for them. You could use safe script same as no script for firefox but for chrome but as you may know they are a bit cumbersome to configure.
I can't recreate the clickjacking you are getting so either the script i'm using is working or something else is blocking them so i'll do some testing maybe switch off ghostery etc.
Switching java off will do it of course but seems a bit overt to do so.

[neilishere]

Here is another test :http://jessehakanen.net/adblockpluspopupaddon/test.html
This is safe to click the buttons to get out of it.

I cannot break out of the popup #4 (after trying to close the tab) in the alert dialogs section - even with Opera or Palemoon running the script. This seems to be what the clickjackers use.

[neilishere]

This may be an explanation as to why I am seeing differences between browsers executing the same script:

Why is window (and unsafeWindow) not the same from a userscript as from a <script> tag? - http://stackoverflow.com/questions/1082 ... 1#10828021 . . . "Strictly blocks any access to the page's JS by the script and vice-versa."

I guess userscript java is not allowed to inject into webpage java. It may not be possible to do what I want.

[dev]

The extension i posted earlier https://chrome.google.com/webstore/deta ... _medium=et allows me to exit number 4 without any dialog's coming into force and this script for me works too http://userscripts-mirror.org/scripts/s ... 51.user.js

I think Opera and firefox just ignore the onbeforeunload event and if you try to close a tab like that, it will close just like any other. You could try to crash the tab.

Type slimjet://crash into the address bar and save as a bookmark.

Next time you want to leave such a page just click the bookmark and it will kill that tab instantly, without affecting your other tabs. No need to kill the entire browser session as you have had to. Alternatively you can hang the tab using slimjet://hang then simply close the tab without any JavaScript running, not sure if this is possible in other browsers.

[neilishere]

Hello,
Thank you for your good ideas. I installed the extension and it works! I dismissed it before because I equate to many extensions with bloat - I shouldn't do that because I only have 3.

I hope the developer maintains this extension to keep up with those bad sites - they are always trying new tactics to steal your info.

Thanks again for your help,
neil