5 ms·

Ublock still blocks this

by a13n 5y ago

rendall 5y ago
I think OP meant that the info coming to the server gets sent directly to GA. IP Address, etc.
- lostcolony 5y ago
  I'm sure OP meant that. Proxy through a server != return a redirect to the client. And as mentioned elsewhere, they're writing directly to GA using a documented API; unless they are sending data from the client to the backend using a query and path that look exactly like GA's (which, why?), there is no way to know what client requests are logging data (and that's assuming they're specific client requests, rather than being logged as part of the actual functional interactions, using a session store, which if Ublock tried to heuristically detect and block, would block actual user facing functionality)
jsmith99 5y ago
Only if it's DNS level (just a CNAME). Ublock can't detect it if it's really proxied through the server itself.
- a13n 5y ago
  Yes it can. It blocks the request to your first-party domain based on path/query.
  - throwaway3699 5y ago
    ... and there are half a dozen ways to get around that too. You could proxy everything through a function that base64 encodes everything. It's an arms race. Besides, I was talking about my server directly sending data to Google Analytics without JavaScript on the client side. GA has strong adherence to GDPR so there's no legal or privacy issues I can see with that.
  - jayd16 5y ago
    This isn't detected automatically though, right? Someone would have to reverse engineer your setup and add it to the lists?
    - a13n 5y ago
      uBlock does detect this automatically, without reverse engineering your setup and adding it to their lists. This assumes you self-host analytics.js and proxy GA API requests through your domain without changing path/query. If you manage to reverse engineer analytics.js and change the path/query AND proxy through your own domain, then this likely wouldn't be detected. But there's a chance that Google will make changes to analytics.js that aren't compatible with your reverse engineering it, and your setup breaks.
  - rendall 5y ago
    You're not thinking this through. Any request can be proxied. Ublock won't block GET requests for `index.html` or other assets, nor even random POSTs to `/detail` from button clicks and such
    - deleted 5y ago
      [deleted]
    - a13n 5y ago
      Just speaking from first-hand experience.

Ublock still blocks this

by a13n 5y ago

Ublock still blocks this

rendall 5y ago

I think OP meant that the info coming to the server gets sent directly to GA. IP Address, etc.

lostcolony 5y ago
I'm sure OP meant that. Proxy through a server != return a redirect to the client. And as mentioned elsewhere, they're writing directly to GA using a documented API; unless they are sending data from the client to the backend using a query and path that look exactly like GA's (which, why?), there is no way to know what client requests are logging data (and that's assuming they're specific client requests, rather than being logged as part of the actual functional interactions, using a session store, which if Ublock tried to heuristically detect and block, would block actual user facing functionality)

jsmith99 5y ago

Only if it's DNS level (just a CNAME). Ublock can't detect it if it's really proxied through the server itself.

a13n 5y ago
Yes it can. It blocks the request to your first-party domain based on path/query.
- throwaway3699 5y ago
  ... and there are half a dozen ways to get around that too. You could proxy everything through a function that base64 encodes everything. It's an arms race. Besides, I was talking about my server directly sending data to Google Analytics without JavaScript on the client side. GA has strong adherence to GDPR so there's no legal or privacy issues I can see with that.
- jayd16 5y ago
  This isn't detected automatically though, right? Someone would have to reverse engineer your setup and add it to the lists?
  - a13n 5y ago
    uBlock does detect this automatically, without reverse engineering your setup and adding it to their lists. This assumes you self-host analytics.js and proxy GA API requests through your domain without changing path/query. If you manage to reverse engineer analytics.js and change the path/query AND proxy through your own domain, then this likely wouldn't be detected. But there's a chance that Google will make changes to analytics.js that aren't compatible with your reverse engineering it, and your setup breaks.
- rendall 5y ago
  You're not thinking this through. Any request can be proxied. Ublock won't block GET requests for `index.html` or other assets, nor even random POSTs to `/detail` from button clicks and such
  - deleted 5y ago
    [deleted]
  - a13n 5y ago
    Just speaking from first-hand experience.