7 ms·

RemoveJS – Remove JavaScript from any website

44 points by steviedotboston 6y ago

deleted 6y ago
[deleted]
palencharizard 6y ago
Interesting that "https://remove-js.com https://remove-js.com" is reported an invalid URL by remove-js.com
rangoon626 6y ago
This also seems to remove img srcset from any website?
Debug_Overload 6y ago
> This website is using a security service to protect itself from online attacks. Oh, boy. This early? The link is on HN for less than an hour and the site already panicked.
- mattl 6y ago
  Or it was already using Cloudflare
- ffpip 6y ago
  That message usually appears on cloudflare sites using Hcaptcha
  - chrismorgan 6y ago
    This time it’s not the “fill out a CAPTCHA to gain access” thing, but rather the more aggressive “no, you just flat-out can’t access this site” form.
    - ffpip 6y ago
      Yes. It is enabled by the website owner. I can that on many russian sites that ban all non-russian IP's.
wayneftw 6y ago
Works well for reading medium.com and you can paste a whole URL in there not just the domain [0]. I will have to make an iOS bookmarklet for this since Apple doesn't allow disabling JS on a per site basis. [0] https://remove-js.com/https://medium.com/the-write-brain/how-to-start-writing-on-medium-a-tutorial-a5d89926f5ef https://remove-js.com/https://medium.com/the-write-brain/how...
- Jakob 6y ago
  I searched for the same on iOS and now use Brave as browser with JS deactivated by default, since it has the functionality to quickly switch on JS for the current site only.
steviedotboston 6y ago
Here is a little snippet you can add as a bookmark to load the current page you are viewing with remove-js.com javascript:window.location.href='http://remove-js.com/'+window.location.href http://remove-js.com/'+window.location.href
encom 6y ago
Cloudflare thinks I'm an attacker. Thank you Cloudflare, very cool.
gruez 6y ago
What's the difference between this and disabling scripts in your browser?
- steviedotboston 6y ago
  This provides you with a link you can share with other people who might not know how to disable JS in their browser. I created it to help show clients how their website behaves without Javsascript support.
  - sundarurfriend 6y ago
    Nice idea, might come in handy when sharing one of those atrocious news websites that want to show you anything but the news, especially confusing and unusable for non-tech people. I used to use the "print view" page those sites used to have, but that seems to be a thing of the past, so this might be a good replacement.
  - programbreeding 6y ago
    Thanks for making this public. That's a fantastic use case that I hadn't considered.
krishan711 6y ago
I don't think this works well with <noscript> tags and this makes me realise I dont actually know how <noscript> works with browsers
- steviedotboston 6y ago
  Yes that's something I need to work on. Basically if you disable JS browser side, the browser ignores the <script> tags and loads the content of <noscript> remove-js.com just strips out the <script> tags, so the noscript tag remains, it just doesn't know to do anything.
  - charrondev 6y ago
    Might be worth adding another small script to iterate through the <noscript > tags and unwrap them.
vbsteven 6y ago
Can't see the website because of cloudflare issues. I prefer the whitelist approach to JS on the web using noscript. JS is by default disabled on any domain and I can whitelist domains temporarily or permanently from the extension.
chaorace 6y ago
I find it bizarre that so many tech-literate people seem upset by Cloudflare DDOS/surge mitigation. Like, it just seems so backwards to me that failing more catastrophically is somehow more endearing to these individuals!
- Isthatablackgsd 6y ago
  The mitigation is more of an annoyance to many people since they have to sit and wait for 5 seconds for CF to do their checking before proceeding to the main website. Their DDOS protection sometime got me stuck in their DDOS protection screen, it looped infinity. Sometime no-cache reload will not work. It just their protection can be a fickle.
- asddubs 6y ago
  if your IP somehow ever ends up on the cloudflare shitlist and have to suddenly fill out minute-long captchas every time you visit one of what feels like half of all websites, you'll know why
josho 6y ago
Here's this page with no JS. https://remove-js.com/https://news.ycombinator.com/item?id=25276193 https://remove-js.com/https://news.ycombinator.com/item?id=2... CSS seems to break somewhat. Does hacker news rely on JS for CSS styling?
- doctorOb 6y ago
  No, seems more like remove-js and hacker news aren't playing well together. HN reference's it's one stylesheet relatively, so the remove-js output builds an invalid URL like this: https://news.ycombinator.com/item?id=25276193/news.css?7xnRK0pv8n1Oh7woNqhn https://news.ycombinator.com/item?id=25276193/news.css?7xnRK...
- chrismorgan 6y ago
  Nah, it’s just not joining URLs correctly, and so is trying to load the wrong stylesheet: Base URL: https://news.ycombinator.com/item?id=25276193 Relative URL: news.css?7xnRK0pv8n1Oh7woNqhn Correct resolved URL: https://news.ycombinator.com/news.css?7xnRK0pv8n1Oh7woNqhn Actual resolved URL: https://news.ycombinator.com/item?id=25276193/news.css?7xnRK0pv8n1Oh7woNqhn
  - steviedotboston 6y ago
    Good catch! I'll try to fix this one
    - chrismorgan 6y ago
      Two things to make sure you’re doing: • Parse according to the URL Standard: https://url.spec.whatwg.org/ https://url.spec.whatwg.org/ • Use the correct base URL: https://html.spec.whatwg.org/#document-base-url; https://html.spec.whatwg.org/#document-base-url; this means largely “take the first base element with an href attribute, if it exists; if so, resolve its href attribute relative to the document URL; otherwise, use the document URL”.
- hanniabu 6y ago
  How does HN know where in the page to bring you back to after you submit a comment?
colesantiago 6y ago
Tried it on YouTube and it doesn't work and can't play videos. Is there a similar service to this where I can access these services like Netflix or Uber without being spied on?
- steviedotboston 6y ago
  If you want Uber without "spying" I think you're looking for a taxi.
psvj 6y ago
this sounds perfect for the tinfoil hat set
bnchrch 6y ago
I can't be the only one that feels the whole "no js" argument is flawed. Its like "yeah it's harder to do malicious things if I disable JS, it's also harder to do malicious things if I don't look at HTML at all!". Feels like throwing the baby out with the bath water.
- hirako2000 6y ago
  There is also the idea that rendering news, blogs, and plenty of other form content can and should work without JavaScript.
- cmroanirgo 6y ago
  I admit that JS brings a whole lot of simplicity to situations that would be tedious otherwise. The problem is that the maliciousness that can exist with js can sometimes outweigh it's usefulness. Looking at HN, which uses js for voting, can be replaced with the olde-school form submission method (at increased page reloads etc), so clearly JS is doing us a favor. But many sites we visit are consume only (blogs and news) and the rest are generally what we interact with only very infrequently (HN, fb, twitter). It's a rare site that actively needs js (excluding all those react/vue architected sites) that doesn't need human interaction on the first place (eg slack and chat sites that need streaming/comet server responses) Random thought: Maybe we could investigate a methodology of "jit" for js in response to human interaction. Browsers already do this to limit access to the clipboard functionality. That is, js will run only if the user clicks on a button, etc, but is otherwise dormant (even document.onload would be delayed until first click). Anything else would require permission to run. Of course, this would break the web as it exists now.
  - chrismorgan 6y ago
    > Looking at HN, which uses js for voting, can be replaced with the olde-school form submission method (at increased page reloads etc), so clearly JS is doing us a favor. The JS here is is an optional enhancement that does the vote in the background. Disable JavaScript and voting still works, it just causes the page to reload. (Aside: it works by using links, but forms so that it’s a POST would be better.)
AntonyGarand 6y ago
Doesn't work with event handlers: https://remove-js.com/http://14.rs https://remove-js.com/http://14.rs
deleted 6y ago
[deleted]
dirtnugget 6y ago
Regularly using this to get around paywalls and no-Adblock overlays
dylkil 6y ago
disappointing response for this one https://remove-js.com/https://remove-js.com https://remove-js.com/https://remove-js.com
th0masr 6y ago
Funny, I have been playing with Cloudflare Worker last night to build a simple POC around "noscript": https://noscript.rabaix.net/https://news.ycombinator.com/item?id=25276193 https://noscript.rabaix.net/https://news.ycombinator.com/ite... I guess, is going to break easily with the free cloudflare quota ;)
- mattl 6y ago
  Would you share your code?
bobbydreamer 6y ago
I am not even fine with no jQuery :) I like it, it's easier than js sometimes.

deleted 6y ago

[deleted]

palencharizard 6y ago

Interesting that "https://remove-js.com https://remove-js.com" is reported an invalid URL by remove-js.com

rangoon626 6y ago

This also seems to remove img srcset from any website?

Debug_Overload 6y ago

> This website is using a security service to protect itself from online attacks. Oh, boy. This early? The link is on HN for less than an hour and the site already panicked.

mattl 6y ago
Or it was already using Cloudflare
ffpip 6y ago
That message usually appears on cloudflare sites using Hcaptcha
- chrismorgan 6y ago
  This time it’s not the “fill out a CAPTCHA to gain access” thing, but rather the more aggressive “no, you just flat-out can’t access this site” form.
  - ffpip 6y ago
    Yes. It is enabled by the website owner. I can that on many russian sites that ban all non-russian IP's.

wayneftw 6y ago

Works well for reading medium.com and you can paste a whole URL in there not just the domain [0]. I will have to make an iOS bookmarklet for this since Apple doesn't allow disabling JS on a per site basis. [0] https://remove-js.com/https://medium.com/the-write-brain/how-to-start-writing-on-medium-a-tutorial-a5d89926f5ef https://remove-js.com/https://medium.com/the-write-brain/how...

Jakob 6y ago
I searched for the same on iOS and now use Brave as browser with JS deactivated by default, since it has the functionality to quickly switch on JS for the current site only.

steviedotboston 6y ago

Here is a little snippet you can add as a bookmark to load the current page you are viewing with remove-js.com javascript:window.location.href='http://remove-js.com/'+window.location.href http://remove-js.com/'+window.location.href

encom 6y ago

Cloudflare thinks I'm an attacker. Thank you Cloudflare, very cool.

gruez 6y ago

What's the difference between this and disabling scripts in your browser?

steviedotboston 6y ago
This provides you with a link you can share with other people who might not know how to disable JS in their browser. I created it to help show clients how their website behaves without Javsascript support.
- sundarurfriend 6y ago
  Nice idea, might come in handy when sharing one of those atrocious news websites that want to show you anything but the news, especially confusing and unusable for non-tech people. I used to use the "print view" page those sites used to have, but that seems to be a thing of the past, so this might be a good replacement.
- programbreeding 6y ago
  Thanks for making this public. That's a fantastic use case that I hadn't considered.

krishan711 6y ago

I don't think this works well with <noscript> tags and this makes me realise I dont actually know how <noscript> works with browsers

steviedotboston 6y ago
Yes that's something I need to work on. Basically if you disable JS browser side, the browser ignores the <script> tags and loads the content of <noscript> remove-js.com just strips out the <script> tags, so the noscript tag remains, it just doesn't know to do anything.
- charrondev 6y ago
  Might be worth adding another small script to iterate through the <noscript > tags and unwrap them.

vbsteven 6y ago

Can't see the website because of cloudflare issues. I prefer the whitelist approach to JS on the web using noscript. JS is by default disabled on any domain and I can whitelist domains temporarily or permanently from the extension.

chaorace 6y ago

I find it bizarre that so many tech-literate people seem upset by Cloudflare DDOS/surge mitigation. Like, it just seems so backwards to me that failing more catastrophically is somehow more endearing to these individuals!

Isthatablackgsd 6y ago
The mitigation is more of an annoyance to many people since they have to sit and wait for 5 seconds for CF to do their checking before proceeding to the main website. Their DDOS protection sometime got me stuck in their DDOS protection screen, it looped infinity. Sometime no-cache reload will not work. It just their protection can be a fickle.
asddubs 6y ago
if your IP somehow ever ends up on the cloudflare shitlist and have to suddenly fill out minute-long captchas every time you visit one of what feels like half of all websites, you'll know why

josho 6y ago

Here's this page with no JS. https://remove-js.com/https://news.ycombinator.com/item?id=25276193 https://remove-js.com/https://news.ycombinator.com/item?id=2... CSS seems to break somewhat. Does hacker news rely on JS for CSS styling?

doctorOb 6y ago
No, seems more like remove-js and hacker news aren't playing well together. HN reference's it's one stylesheet relatively, so the remove-js output builds an invalid URL like this: https://news.ycombinator.com/item?id=25276193/news.css?7xnRK0pv8n1Oh7woNqhn https://news.ycombinator.com/item?id=25276193/news.css?7xnRK...
chrismorgan 6y ago
Nah, it’s just not joining URLs correctly, and so is trying to load the wrong stylesheet: Base URL: https://news.ycombinator.com/item?id=25276193 Relative URL: news.css?7xnRK0pv8n1Oh7woNqhn Correct resolved URL: https://news.ycombinator.com/news.css?7xnRK0pv8n1Oh7woNqhn Actual resolved URL: https://news.ycombinator.com/item?id=25276193/news.css?7xnRK0pv8n1Oh7woNqhn
- steviedotboston 6y ago
  Good catch! I'll try to fix this one
  - chrismorgan 6y ago
    Two things to make sure you’re doing: • Parse according to the URL Standard: https://url.spec.whatwg.org/ https://url.spec.whatwg.org/ • Use the correct base URL: https://html.spec.whatwg.org/#document-base-url; https://html.spec.whatwg.org/#document-base-url; this means largely “take the first base element with an href attribute, if it exists; if so, resolve its href attribute relative to the document URL; otherwise, use the document URL”.
hanniabu 6y ago
How does HN know where in the page to bring you back to after you submit a comment?

colesantiago 6y ago

Tried it on YouTube and it doesn't work and can't play videos. Is there a similar service to this where I can access these services like Netflix or Uber without being spied on?

steviedotboston 6y ago
If you want Uber without "spying" I think you're looking for a taxi.

psvj 6y ago

this sounds perfect for the tinfoil hat set

bnchrch 6y ago

I can't be the only one that feels the whole "no js" argument is flawed. Its like "yeah it's harder to do malicious things if I disable JS, it's also harder to do malicious things if I don't look at HTML at all!". Feels like throwing the baby out with the bath water.

hirako2000 6y ago
There is also the idea that rendering news, blogs, and plenty of other form content can and should work without JavaScript.
cmroanirgo 6y ago
I admit that JS brings a whole lot of simplicity to situations that would be tedious otherwise. The problem is that the maliciousness that can exist with js can sometimes outweigh it's usefulness. Looking at HN, which uses js for voting, can be replaced with the olde-school form submission method (at increased page reloads etc), so clearly JS is doing us a favor. But many sites we visit are consume only (blogs and news) and the rest are generally what we interact with only very infrequently (HN, fb, twitter). It's a rare site that actively needs js (excluding all those react/vue architected sites) that doesn't need human interaction on the first place (eg slack and chat sites that need streaming/comet server responses) Random thought: Maybe we could investigate a methodology of "jit" for js in response to human interaction. Browsers already do this to limit access to the clipboard functionality. That is, js will run only if the user clicks on a button, etc, but is otherwise dormant (even document.onload would be delayed until first click). Anything else would require permission to run. Of course, this would break the web as it exists now.
- chrismorgan 6y ago
  > Looking at HN, which uses js for voting, can be replaced with the olde-school form submission method (at increased page reloads etc), so clearly JS is doing us a favor. The JS here is is an optional enhancement that does the vote in the background. Disable JavaScript and voting still works, it just causes the page to reload. (Aside: it works by using links, but forms so that it’s a POST would be better.)

AntonyGarand 6y ago

Doesn't work with event handlers: https://remove-js.com/http://14.rs https://remove-js.com/http://14.rs

deleted 6y ago

[deleted]

dirtnugget 6y ago

Regularly using this to get around paywalls and no-Adblock overlays

dylkil 6y ago

disappointing response for this one https://remove-js.com/https://remove-js.com https://remove-js.com/https://remove-js.com

th0masr 6y ago

Funny, I have been playing with Cloudflare Worker last night to build a simple POC around "noscript": https://noscript.rabaix.net/https://news.ycombinator.com/item?id=25276193 https://noscript.rabaix.net/https://news.ycombinator.com/ite... I guess, is going to break easily with the free cloudflare quota ;)

mattl 6y ago
Would you share your code?

bobbydreamer 6y ago

I am not even fine with no jQuery :) I like it, it's easier than js sometimes.