Back in april, I suggested adding support for "checked jumps" to fproxy.

see:
http://lists.freenetproject.org/pipermail/devl/2001-April/005036.html

I managed to surive flaming on the list but never got around to implementing 
it.

I noticed that Mr. Snarfoo raised the issue of spurious anonymity filter
warnings on his homepage today.

I finally have a simple patch for fproxy to add support for checked http and 
ftp jumps (see attached diffs).

The attached html file will give you an idea of how it works for content 
authors.  

Basically as long as your link minus the leading "http://"; or "ftp://"; 
doesn't trip the anonymity filter, you can embed a checked link to
it in an html page and that page shouldn't trip the filter either.

Note that this still won't allow you to embed links that trip the security 
filter for other reasons (e.g. because of embedded html control characters, 
cgi queries etc.). 

I don't think that there are any hidden anonymity attacks.  Let me know
if you see any.  Obviously, once the user clicks past the warning page
out of Freenet all bets are off.

If no one screams too loud  I would be happy to commit this patch.

-- gj


-- 
Web page inside Freenet:
freenet:MSK at SSK@enI8YFo3gj8UVh-Au0HpKMftf6QQAgE/homepage//
-------------- next part --------------
A non-text attachment was scrubbed...
Name: checked_jump.diffs.txt
Type: text/english
Size: 2763 bytes
Desc: not available
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20010611/39321a99/attachment.bin>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20010611/39321a99/attachment.html>

Reply via email to