Conversation

This Tweet was deleted by the Tweet author. Learn more

That's not what's happening. The programmatic webRequest API is being partially phased out in favor of a of declarativeNetRequest. developer.chrome.com/extensions/dec It's not true that they're disabling ad-blockers. In fact, they added a built-in ad-blocking engine for extensions to use.

Replying to

and

I don't think it's helpful to spread misinformation about it. The main issue with the proposed draft of the declarative API is the limit of 30000 static rules which is still provisional and they should be pressured to raise it before it ships. It's also genuinely a good approach.

Replying to

and

It's very similar to Safari content blockers. A declarative API is more efficient and enables extensions to offer content filtering without needing to see the content of the requests / responses. There are still more complex valid uses for programmatic webRequest blocking though.

Replying to

and

such as JS blocking, which I refuse to browse the web without (e.g. NoScript on Firefox)

Replying to

and

No, that's still possible with the new API, especially with the added support for dynamic rules. I recommend reading over the API documentation at developer.chrome.com/extensions/dec. Just keep in mind the current limits are placeholders and they haven't decided on the real initial values.

Replying to

and

The placeholder values (30000 static rules, etc.) were set as a lower bound to avoid a situation like setting it to 3000000 and then needing to lower it to 500000 at a later point. It has been officially stated a bunch of times that the shipped values are going to end up higher.

Replying to

and

NoScript allows you to block all JS by default (the most secure way to browse the web). This doesn't allow for that AFAIK. NoScript also has other security features like XSS detection which needs to be able to read requests.

Replying to

and

> NoScript allows you to block all JS by default I'm well aware of what NoScript does along with extensions with similar features like uMatrix. > This doesn't allow for that AFAIK. I linked to the API documentation above which clearly shows that what you're saying isn't true.

Replying to

and

> NoScript also has other security features like XSS detection which needs to be able to read requests. It's still possible to do that webRequest, and the new declarative blocking API supports adding dynamic rules. As I said, I recommend reading over developer.chrome.com/extensions/dec.

9:34 PM · May 30, 2019Twitter Web Client