18 | 
19 |
20 |
21 |
22 |
19 |
20 |
24 |
33 |
34 | 25 | Protection Options 26 |
27 |
28 | ◀
29 | 1/2
30 | ▶
31 |
32 |
35 | 
36 | PrecisionSec Web Protection
37 |
78 |
79 |
36 | PrecisionSec Web Protection
37 |
38 |
39 | Active
40 |
41 |
42 | Microsoft SmartScreen
43 |
44 |
45 | Active
46 |
47 |
48 | Symantec Browser Protection
49 |
50 |
51 | Active
52 |
53 |
54 | Emsisoft Web Protection
55 |
56 |
57 | Active
58 |
59 |
60 | Bitdefender TrafficLight
61 |
62 |
63 | Active
64 |
65 |
66 | Norton SafeWeb
67 |
68 |
69 | Active
70 |
71 |
72 | G DATA WebProtection
73 |
74 |
75 | Active
76 |
77 |
80 | Cloudflare Security DNS
81 |
122 |
123 |
82 |
83 | Active
84 |
85 |
86 | Quad9 Security DNS
87 |
88 |
89 | Active
90 |
91 |
92 | DNS0.eu Security DNS
93 |
94 |
95 | Active
96 |
97 |
98 | CleanBrowsing Security DNS
99 |
100 |
101 | Active
102 |
103 |
104 | CIRA Canadian Shield DNS
105 |
106 |
107 | Active
108 |
109 |
110 | AdGuard Security DNS
111 |
112 |
113 | Active
114 |
115 |
116 | Switch.ch Security DNS
117 |
118 |
119 | Active
120 |
121 |
124 | CERT-EE Security DNS
125 |
136 |
137 |
142 |
126 |
127 | Active
128 |
129 |
130 | Control D Security DNS
131 |
132 |
133 | Active
134 |
135 |
19 |
20 |
21 |
22 |
23 |
20 |
21 |
24 |
64 |
65 |
66 |
--------------------------------------------------------------------------------
/src/main/pages/warning/WarningPage.js:
--------------------------------------------------------------------------------
1 | "use strict";
2 |
3 | // Use a global singleton pattern to ensure we don't duplicate resources
4 | window.WarningSingleton = window.WarningSingleton || (function () {
5 | // Browser API compatibility between Chrome and Firefox
6 | const browserAPI = typeof browser === 'undefined' ? chrome : browser;
7 |
8 | /**
9 | * Initialize the popup or refresh if already initialized
10 | */
11 | const initialize = function () {
12 | // Extract the threat code from the current page URL
13 | const pageUrl = window.document.URL;
14 | const result = UrlHelpers.extractResult(pageUrl);
15 |
16 | // Set the reason text based on the result
17 | if (!result) {
18 | console.warn("No result found in the URL.");
19 | return;
20 | }
21 |
22 | // Cache for DOM elements
23 | const domElements = Object.fromEntries(
24 | ["reason", "url", "reportedBy", "reportSite", "allowSite", "homepageButton", "continueButton"]
25 | .map(id => [id, document.getElementById(id)])
26 | );
27 |
28 | domElements.reason.innerText = result;
29 |
30 | // Extract the blocked URL from the current page URL
31 | const blockedUrl = UrlHelpers.extractBlockedUrl(pageUrl);
32 |
33 | // Encode the URLs for safe use in other contexts
34 | const encodedBlockedUrl = encodeURIComponent(blockedUrl);
35 | const encodedResult = encodeURIComponent(result);
36 |
37 | // Set the URL text to the current page URL
38 | domElements.url.innerText = blockedUrl;
39 |
40 | // Get origin information
41 | const origin = UrlHelpers.extractOrigin(pageUrl);
42 | const originInt = parseInt(origin);
43 | const systemName = ProtectionResult.ResultOriginNames[originInt];
44 |
45 | // Set reported by text
46 | domElements.reportedBy.innerText = systemName || "Unknown";
47 |
48 | // Create a function to get the report URL lazily when needed
49 | const getReportUrl = () => {
50 | switch (originInt) {
51 | case ProtectionResult.ResultOrigin.PRECISIONSEC:
52 | // Verified working as of: May 28, 2025
53 | // Response time: 1-2 days
54 | return new URL("mailto:info@precisionsec.com?subject=False%20Positive&body=Hello%2C"
55 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
56 | + "%0A%0AProduct%3A%20PrecisionSec%20Web%20Protection"
57 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
58 | + "%0ADetected%20as%3A%20" + encodedResult
59 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
60 |
61 | case ProtectionResult.ResultOrigin.SMARTSCREEN:
62 | return new URL("https://feedback.smartscreen.microsoft.com/feedback.aspx?t=16&url=" + blockedUrl);
63 |
64 | case ProtectionResult.ResultOrigin.SYMANTEC:
65 | return new URL("https://sitereview.symantec.com/sitereview.jsp?referrer=sedsbp&url=" + encodedBlockedUrl);
66 |
67 | case ProtectionResult.ResultOrigin.EMSISOFT:
68 | // Verified working as of: May 1, 2025
69 | // Response time: 1-2 days
70 | return new URL("mailto:fp@emsisoft.com?subject=False%20Positive&body=Hello%2C"
71 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
72 | + "%0A%0AProduct%3A%20Emsisoft%20Browser%20Security"
73 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
74 | + "%0ADetected%20as%3A%20" + encodedResult
75 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
76 |
77 | case ProtectionResult.ResultOrigin.BITDEFENDER:
78 | return new URL("https://bitdefender.com/consumer/support/answer/29358/#scroll-to-heading-2");
79 |
80 | case ProtectionResult.ResultOrigin.NORTON:
81 | return new URL("https://safeweb.norton.com/report?url=" + encodedBlockedUrl);
82 |
83 | case ProtectionResult.ResultOrigin.G_DATA:
84 | // Old URL: "https://submit.gdatasoftware.com/privacy"
85 | // TODO: Needs verification of response from support team.
86 | return new URL("mailto:support-us@gdata-software.com?subject=False%20Positive&body=Hello%2C"
87 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
88 | + "%0A%0AProduct%3A%20G%20DATA%20WebProtection"
89 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
90 | + "%0ADetected%20as%3A%20" + encodedResult
91 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
92 |
93 | case ProtectionResult.ResultOrigin.CLOUDFLARE:
94 | return new URL("https://radar.cloudflare.com/domains/feedback/" + encodedBlockedUrl);
95 |
96 | case ProtectionResult.ResultOrigin.QUAD9:
97 | // Old URL: "https://quad9.net/support/contact"
98 | // TODO: Needs verification of response from support team.
99 | return new URL("mailto:support@quad9.net?subject=False%20Positive&body=Hello%2C"
100 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
101 | + "%0A%0AProduct%3A%20Quad9%20DNS"
102 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
103 | + "%0ADetected%20as%3A%20" + encodedResult
104 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
105 |
106 | case ProtectionResult.ResultOrigin.DNS0:
107 | return new URL("https://www.dns0.eu/report");
108 |
109 | case ProtectionResult.ResultOrigin.CLEANBROWSING:
110 | // Verified working as of: May 12, 2025
111 | // Response time: 1-2 days
112 | return new URL("mailto:support@cleanbrowsing.org?subject=False%20Positive&body=Hello%2C"
113 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
114 | + "%0A%0AProduct%3A%20CleanBrowsing%20Security%20Filter"
115 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
116 | + "%0ADetected%20as%3A%20" + encodedResult
117 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
118 |
119 | case ProtectionResult.ResultOrigin.CIRA:
120 | // Alternate URL: "https://www.cira.ca/en/canadian-shield/support"
121 | // TODO: Needs verification of response from support team.
122 | // Report sent on: May 18, 2025 - no response yet; false positive still active
123 | return new URL("mailto:info@cira.ca?subject=False%20Positive&body=Hello%2C"
124 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
125 | + "%0A%0AProduct%3A%20CIRA%20Canadian%20Shield%20DNS"
126 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
127 | + "%0ADetected%20as%3A%20" + encodedResult
128 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
129 |
130 | case ProtectionResult.ResultOrigin.ADGUARD:
131 | // Verified working as of: May 25, 2025
132 | // Response time: 1-2 days
133 | return new URL("mailto:support@adguard.com?subject=False%20Positive&body=Hello%2C"
134 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
135 | + "%0A%0AProduct%3A%20AdGuard%20DNS"
136 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
137 | + "%0ADetected%20as%3A%20" + encodedResult
138 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
139 |
140 | case ProtectionResult.ResultOrigin.SWITCH_CH:
141 | // TODO: Needs verification of response from support team.
142 | return new URL("mailto:info@switch.ch?subject=False%20Positive&body=Hello%2C"
143 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
144 | + "%0A%0AProduct%3A%20Switch.ch%20DNS"
145 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
146 | + "%0ADetected%20as%3A%20" + encodedResult
147 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
148 |
149 | case ProtectionResult.ResultOrigin.CERT_EE:
150 | // Verified working as of: May 6, 2025
151 | // Response time: 2-3 days
152 | return new URL("mailto:ria@ria.ee?subject=False%20Positive&body=Hello%2C"
153 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
154 | + "%0A%0AProduct%3A%20CERT-EE%20DNS"
155 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
156 | + "%0ADetected%20as%3A%20" + encodedResult
157 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
158 |
159 | case ProtectionResult.ResultOrigin.CONTROL_D:
160 | // TODO: Needs verification of response from support team.
161 | return new URL("mailto:help@controld.com?subject=False%20Positive&body=Hello%2C"
162 | + "%0A%0AI%20would%20like%20to%20report%20a%20false%20positive."
163 | + "%0A%0AProduct%3A%20Control%20D%20DNS"
164 | + "%0AURL%3A%20" + encodedBlockedUrl + "%20%28or%20the%20hostname%20itself%29"
165 | + "%0ADetected%20as%3A%20" + encodedResult
166 | + "%0A%0AI%20believe%20this%20website%20is%20legitimate.%0A%0AThanks.");
167 |
168 | default:
169 | return null;
170 | }
171 | };
172 |
173 | // Unified message sending function with error handling
174 | const sendMessage = async (messageType, additionalData = {}) => {
175 | try {
176 | // Convert URL objects to strings before sending
177 | const message = {
178 | messageType,
179 | blockedUrl: blockedUrl instanceof URL ? blockedUrl.toString() : blockedUrl,
180 | origin: origin instanceof URL ? origin.toString() : origin,
181 | ...additionalData
182 | };
183 |
184 | // Also check any properties in additionalData that might be URL objects
185 | for (const key in message) {
186 | if (message[key] instanceof URL) {
187 | message[key] = message[key].toString();
188 | }
189 | }
190 |
191 | await browserAPI.runtime.sendMessage(message);
192 | } catch (error) {
193 | console.error(`Error sending message ${messageType}:`, error);
194 | }
195 | };
196 |
197 | // Add event listener to "Report this website as safe" button
198 | Settings.get(settings => {
199 | domElements.reportSite.addEventListener("click", async () => {
200 | if (!settings.hideReportButton) {
201 | await sendMessage(Messages.MessageType.REPORT_SITE, {
202 | reportUrl: getReportUrl()
203 | });
204 | }
205 | });
206 |
207 | // Add event listener to "Temporarily allow this website" button
208 | domElements.allowSite.addEventListener("click", async () => {
209 | if (!settings.hideContinueButtons) {
210 | await sendMessage(Messages.MessageType.ALLOW_SITE, {
211 | blockedUrl: blockedUrl
212 | });
213 | }
214 | });
215 |
216 | // Add event listener to "Back to safety" button
217 | domElements.homepageButton.addEventListener("click", async () => {
218 | await sendMessage(Messages.MessageType.CONTINUE_TO_SAFETY, {
219 | blockedUrl: blockedUrl
220 | });
221 | });
222 |
223 | // Add event listener to "Continue anyway" button
224 | domElements.continueButton.addEventListener("click", async () => {
225 | if (!settings.hideContinueButtons) {
226 | await sendMessage(Messages.MessageType.CONTINUE_TO_SITE, {
227 | blockedUrl: blockedUrl
228 | });
229 | }
230 | });
231 |
232 | // Checks for overrides to any HTML elements from settings
233 | if (!settings.hideContinueButtons) {
234 | document.getElementById("allowSite").style.display = "";
235 | document.getElementById("continueButton").style.display = "";
236 | }
237 |
238 | if (!settings.hideReportButton) {
239 | document.getElementById("reportSite").style.display = "";
240 | document.getElementById("reportBreakpoint").style.display = "";
241 | }
242 | });
243 | };
244 |
245 | // Public API
246 | return {
247 | initialize
248 | };
249 | })();
250 |
251 | document.addEventListener("DOMContentLoaded", () => {
252 | // Initialize the singleton instance
253 | window.WarningSingleton.initialize();
254 | });
255 |
--------------------------------------------------------------------------------
/src/main/policies.json:
--------------------------------------------------------------------------------
1 | {
2 | "_comment_1": "https://chromium.org/administrators/configuring-policy-for-extensions",
3 | "_comment_2": "In Windows, these policies are stored under HKLM\\SOFTWARE\\Policies\\Google\\Chrome\\3rdParty\\Extensions\\
25 |
63 | 26 | Warning: This website is unsafe 27 |
28 | 29 |
30 |
36 |
42 | URL:
43 | Reported by:
44 | Reason:
45 |
48 | 49 | 50 | 51 |
52 | 53 |
54 |
57 |
58 |
61 |
62 |