Third party tracker obfuscation

[kaytwo]

Description

Cloudflare acquired Zaraz, which purports to increase privacy and performance for third party tracking, and have integrated it into their main whole-site CDN product. A significant side effect of their architecture is that these third party (largely tracking-related) requests appear to the browser to be first party requests to https://YOURDOMAIN/cdn-cgi/zaraz/**. In Brave Nightly on Windows, these requests are not blocked by aggressive shields in incognito mode (or any weaker setting).

Steps to Reproduce

1. Activate Zaraz on a Cloudflare-proxied website
2. Load the site in Brave
3. Observe in the Network tab that tracking via Facebook Pixel, Google Analytics, etc. is successfully sent.

Actual result:

Status: 200

Expected result:

Status: Blocked

Reproduces how often:

Easily reproduced

Desktop Brave version:

Brave	1.35.77 Chromium: 97.0.4692.71 (Official Build) beta (64-bit)
Revision	adefa7837d02a07a604c1e6eff0b3a09422ab88d-refs/branch-heads/4692@{#1247}
OS	Windows 11 Version 21H2 (Build 22000.434)

Version/Channel Information:

• Can you reproduce this issue with the current release?
  Did not attempt
• Can you reproduce this issue with the beta channel?
  Yes
• Can you reproduce this issue with the nightly channel?
  Yes

[diracdeltas]

cc @ryanbr , should be easy to add a filter for this

[ryanbr]

Example website of this in action @kaytwo ?

[kaytwo]

I enabled it on kaytwo.org for testing purposes. (for posterity: I will probably turn it off after we resolve this).

…

On Thu, Jan 20, 2022 at 4:49 AM Fanboynz ***@***.***> wrote: Example website of this in action @kaytwo <https://github.com/kaytwo> ? — Reply to this email directly, view it on GitHub <#20533 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAEPLM7CCSAOIELI36LNTA3UW7SDTANCNFSM5MFCB52A> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[ryanbr]

kaytwo.org unable to find domain from NZ/US/UK ips. Standard Cloudflare error message @kaytwo

[kaytwo]

My bad, url bar slurping up www strikes again - https://www.kaytwo.org/ is the correct one.

…

On Fri, Jan 21, 2022 at 3:19 AM Fanboynz ***@***.***> wrote: kaytwo.org unable to find domain from NZ/US/UK ips. Standard Cloudflare error message @kaytwo <https://github.com/kaytwo> — Reply to this email directly, view it on GitHub <#20533 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAEPLM4U56UKIQVMBZRFJKDUXEQJ5ANCNFSM5MFCB52A> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you were mentioned.Message ID: ***@***.***>