Activity log for bug #457471

Date Who What changed Old value New value Message
2009-10-21 16:34:37 root bug added bug
2009-10-21 16:34:37 Bug Importer bug Imported external bug #167
2009-10-29 19:50:21 Adam P psiphon: status New Confirmed
2009-11-24 00:53:39 Rod visibility private public
2010-05-06 21:06:39 e.fryntov tags category2
2010-07-09 19:37:24 Adam P tags category2 category2 category2.2
2010-07-27 18:11:55 Rod description * On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css * html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation) The estimated time to complete this project is 1 to 2 month depending on the team experience with Apache modules development. We also would like to receive weekly updates on the project progress.
2010-07-27 18:12:35 Rod description Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation) The estimated time to complete this project is 1 to 2 month depending on the team experience with Apache modules development. We also would like to receive weekly updates on the project progress. Problem: On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Proposed solutions: Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation) The estimated time to complete this project is 1 to 2 month depending on the team experience with Apache modules development. We also would like to receive weekly updates on the project progress.
2010-07-27 18:12:35 Rod tags category2 category2.2 category2 category2.2 sprint3
2010-07-27 18:12:48 Rod psiphon: importance Unknown High
2010-07-27 18:17:09 Rod description Problem: On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Proposed solutions: Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation) The estimated time to complete this project is 1 to 2 month depending on the team experience with Apache modules development. We also would like to receive weekly updates on the project progress. Problem: On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Proposed solutions: Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation)
2010-07-27 18:20:33 Rod description Problem: On IE, requests for these pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Proposed solutions: Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation) Problem: On IE, requests for some pages cause the browser to make un-proxied requests. Breaks anonymity and site compatibility (if truly blocked) Examples: http://i.cdn.turner.com/cnn/.element/css/2.0/common.css html .cnnMoPoBoxContent {background:transparent;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='http://i.cdn.turner.com/cnn/.element/img/2.0/global/dropdowns/shdw_center.png', sizingMethod='scale');} Other sites that gave the same IE mixed sources (HTTPS -- from Psiphon, and HTTP -- un-proxied): http://www.slashdot.org This seems very common. Proposed solutions: Design and develop a SAC (simple API for CSS) based CSS rewriting module for Psiphon Current Psiphon CSS rewriting module(mod_psiphon_proxy_css) is loosely based on mod_line_edit(http://apache.webthing.com/mod_line_edit/) and is using a simple Flex(http://flex.sourceforge.net/) generated scanner for searching URLs in CSS. We'd like to replace existing scanner with a robust event-based CSS parser in order to gain better control over CSS filtering such as allow/disallow custom CSS extensions like Microsoft AlphaImageLoader, behavioral extensions to CSS(http://www.w3.org/TR/1999/WD-becss-19990804#scriptblock), etc. The new CSS rewriting module is expected to behave in the same fashion as mod_psiphon_proxy_html which is utilizing SAX interface of libxml2. Good candidates for the parser itself might be 1. SAC 1.3 (http://www.w3.org/Style/CSS/SAC/, C implementation) 2. libcroco 6.x(http://www.freespiders.org/projects/libcroco/) *I think this one is the most promising out of the 2 3. ...or you do your own research for the one that suits you the best. One of the important things to keep in mind is that the parser should be able to work seemlesly with chunked input(or buffers) and should not try to fetch the whole document prior to parsing. (See mod_psiphon_proxy_html implementation)
2010-09-13 17:43:44 Adam P tags category2 category2.2 sprint3 category2 category2.2