###############################################################################
#
# Filter updates since the February 22, 2005 config release
#
#
# New filters
# -----------------------------------------------------------------
#
# March 13 - web filters:
#
# Block forced Fullscreen Resizing 5.03.13 (thead fail) [sd] (d.1)
# move below "Block various Events"
#
# Alexa: Multi URL Untangler 5.03.13 [sd] (d.s)
# move above "All-NetTools: Alternate Display for Prox Menu"
#
# JS CSS Protect: Comments III - Other Types 5.03.09 [sd jd] (d.r)
# move below "JS CSS Protect: Comments II - Apply"
#
# $STOP()"
Name = "Block: Sel. JS Methods 5.03.12 [sd] (d.r)"
Active = TRUE
URL = "($TYPE(htm)|$TYPE(js)|$TYPE(vbs))(^$TST(keyword=*.a_code.*))"
Limit = 960
Match = "round$TST(script=[1s]*)(\(log\(pow\()\2$SET(1=round)$SET(3=NO\1\2)"
"($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Method\t\1 \t\u)|)"
"($TST(volat=*.log:[12].*)$ADDLST(Log-Rare,WEB JS_Method\t\1 \t\u)|)"
"($TYPE(htm)$SET(eExploit=$GET(eExploit)$GET(mHead) JS Method: \1
)|)"
"|"
"eval$TST(script=[1s]*)(\((String.fromCharCode)\4)\2$SET(1=eval)$SET(3=PrxDummyZero\2)"
"($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Method\t\1 \4 \t\u)|)"
"($TST(volat=*.log:[12].*)$ADDLST(Log-Rare,WEB JS_Method\t\1 \4 \t\u)|)"
"($TYPE(htm)$SET(eExploit=$GET(eExploit)$GET(mHead) JS Method: \1 \4
)|)"
"|"
"file:/+$TST(script=[1s]*)(javascript:)\2$SET(1=file:)$SET(3=\2)"
"($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Method\t\1\2 \t\u)|)"
"($TST(volat=*.log:[12].*)$ADDLST(Log-Rare,WEB JS_Method\t\1\2 \t\u)|)"
"($TYPE(htm)$SET(eExploit=$GET(eExploit)$GET(mHead) JS Method: \1\2
)|)"
"|"
"document.links.length$TST(flag=*.domlink_b:[12]*)$TST(script=[1s]*)$SET(1=links.length)$SET(3=0)"
"($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Method\t\1 \t\u)|)"
"($TYPE(htm)$SET(dHits=$GET(dHits)$GET(mHead) JS Method: \1
)|)"
Replace = "\3"
Name = "Top Sniff: JS & VBS Content 5.03.13 (full) [sd] (d.2)"
Active = TRUE
URL = "($TYPE(htm)|$TYPE(oth))$TST(uHost=*)(^$TST(keyword=*.(a_jssigns|i_light:[12]).*))"
Limit = 35
Match = "þþø(øøþ|)$STOP()"
" ("
"//|(function(\s[^( ]+|)|eval|(un|)escape) \("
"|var\s|sub\s|\( \);|\(" "\);"
"|[a-z_][a-z0-9_.]+=[^ ;]+ ;|(document|window).[a-z]|if \("
")\2"
""
"("
"$TST(flag=*.cont_typ_b:[12].*)"
"$SET(1=// SCRIPT KILLED BY JS SNIFFER \(\2\))"
"|"
"($TST(uProt=\5&https:)$TST(keyword=*.i_ssl_h:[12].*)$SET(3=http://https..)|$SET(3=\5//))"
"($OHDR(Referer:( ) \4)|)"
"$SET(1="
"document.write('"
""
"');\r\n"
"//-->"
")"
")"
Replace = "\1\k"
Name = "Top Sniff: HTML Content: Other 5.03.07 [sd] (d.1)"
Active = TRUE
URL = "$TYPE(oth)$TST(uHost=*)(^$TST(keyword=*.a_code.*))"
Limit = 32
Match = "øøþ$STOP()[^<]+{0,3}<(^\?php|<)"
"($IHDR(Content-Type:( ) (;|(^?)))|$TST(hOrigUA=*msie(^*opera)*))"
"($TST(uProt=\3&https:)$TST(keyword=*.i_ssl_h:[12].*)$SET(1=http://https..)|$SET(1=\3//))"
"($OHDR(Referer:( ) \2)|)"
Replace = "\r\n\k"
Name = "<*>: Half-SSL 05.03.15 (cch! multi) [sd jjoe] (d.2)"
Active = TRUE
Multi = TRUE
URL = "$TYPE(htm)$TST(keyword=*.i_ssl_h:[12].*)"
Bounds = "<[abefilst]*>"
Limit = 2048
Match = "*https://"
"&\1https://\2"
"&(^$TST(\1=*http://*))"
"&(^\r\n"
")"
Replace = "\1"
Name = "
: Add Time - Fix Tag - Snip Excess 5.03.08 (multi) [jd sd] (d.1)"
Active = TRUE
Multi = TRUE
URL = "$TYPE(htm)"
Bounds = "|($SET(0=/title-typo))\4|(\s)\4(^(^<(meta|link|/head)))$SET(0=/title-unclosed)|(^(^($TST(title=1)$SET(title=)|$SET(title=1))"
"(\#<(/|)(div|span)[^>]+>)+\#"
"&$SET(a=\@)$TST(a=(((\&[^; ]+;|?)+{62})\3?$SET(2=\3...)*|\2)$TST(\4))"
"&"
"("
"$TST((\0)=*)$SET(eFixedT=$GET(eFixedT)\0 )"
"($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB Fixed_Tag\t\0 \t\u)|)"
"|)"
Replace = "\2 ~$DTM(H:m:s)$SET(a=)$STOP()"
Name = "JS Kill: Ad Scripts 5.03.16 [pr sd] (d.2)"
Active = TRUE
URL = "($TYPE(js)|$TYPE(vbs))$TST(hCLength=[#3:2400])(^$TST(keyword=*.(a_ads|a_js|a_adjs).*))"
Limit = 1024
Match = ".write(ln|)\("$TST(flag=*.chopped_b:1.*)(<(/|)|-)"
"([a-z\-!]+{0,10})\# "+{1,*} \+ "+{1,*}([a-z\-! ]+{0,20})\#"
"$SET(9=: \#+\# :)$TST((\#\#)=(img|ifr|div|nos|!--|-)*)"
"|<(iframe)\9$TST(flag=*.iframe_b:[12].*)"
"|\s$TST(flag=*.adstring:1.*)($LST(AdStrings))\8 [=(+]$SET(9=AdStr \8)"
"|\=$TST(flag=*.adurl:1.*)($TST(tAnc=\3)|) (\[|\(|)(\\"|"|)(^(^ [a-z0-9:_\-]+{0,20}/))$AV( $LST(AdKeys)*)"
"|\("$TST(flag=*.adurl:1.*)(^(^ (ht|f)tp))$AV( $LST(AdKeys)*)"
""
"&($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Ad_JS\t\9 \t\u)|)"
Replace = "\1}\r\n// PROX: SCRIPT KILLED BY JS AD FILTER (\9) -- Content-Length $GET(hCLength) bytes.\k"
Name = "]+>"
"("
""
"*<(iframe)\9"
"($TST(flag=*.iframe_b:[12].*)|[^>]++src=$AVQ((\\"|"|)[^/.]+//(^([^/]++.|)$TST(uDom))*))*"
"|"
"*.write(ln|)\("$TST(flag=*.chopped_b:1.*)(<(/|)|-)([a-z\-!]+{0,10})\#"
" "+{1,*} \+ "+{1,*}([a-z\-! ]+{0,20})\#"
"$SET(9=: \#+\# :)$TST((\#\#)=(img|ifr|div|nos|!--|-)*)*"
"|"
"$TST(flag=*.adstring:1.*)"
"("
"($LST(AdStrings))\8 [=(]$SET(9=AdStr.1 \8)*"
"|*.($LST(AdStrings))\8 [=(]$SET(9=AdStr.2 \8)*"
"|*\s($LST(AdStrings))\8 [=(+]$SET(9=AdStr.3 \8)*"
"|*"($LST(AdStrings))\8"$SET(9=AdStr.4 \8)*"
")"
"|"
"$TST(flag=*.adurl:1.*)"
"("
"*\= (\[|\(|)(\\"|"|)(^(^ [a-z0-9:_\-]+{0,20}/))$AV( $LST(AdKeys)*)*"
"|*"(^(^ (ht|f)tp))$AV( $LST(AdKeys)*)*"
")"
""
")\1"
"&$TST(script=1)(^$TST(comment=2))$SET(script=void)"
"&$SET(eAdJS=$GET(eAdJS)$GET(mHead): \9
)"
""
"&$SET(0=$TST(keyword=*.i_debug:[12].*)"
""
"• JS Ad: \9\r\n"
")"
""
"&($TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Ad_HTM\t\9 \t\u)|)"
Replace = "\0)$SET(stack=$GET(stack) script)$SET(script=)"
"|"
"$NEST()$TST((\2)=1)$SET(stack=$GET(stack) center)"
"|"
"$NEST()$TST((\2)=1)$SET(stack=$GET(stack) table)"
"|"
"$NEST(
)|0$SET(tTable=))"
""
"|$STOP()"
"$SET(2=\r\n)$SET(3=)"
"$SET(4=\r\n\r\n\r\n\r\n)"
"("
"($TST(tNoscript=1)$SET(tNoscript=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)noscript )|)"
"&($TST(tNoembed=1)$SET(tNoembed=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)noembed )|)"
"&($TST(tPre=*)$SET(tPre=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)pre )|)"
"&($TST(tXmp=1)$SET(tXmp=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)xmp )|)"
"&($TST(tTextarea=1)$SET(tTextarea=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)textarea )|)"
"&($TST(tSpan=1)$SET(tSpan=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)span )|)"
"&($TST(tCenter=1)$SET(tCenter=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)center )|)"
"&($TST(tAnc=1)$SET(tAnc=)$SET(#=\r\n)$SET(eOpenT=$GET(eOpenT)a )|)"
")"
"("
"$TST(mBody=first)$TST(mHtml=first)$SET(1=\@\4\2\3)"
"|$TST(mBody=first)$SET(1=\@\4\2)|$TST(mHtml=first)$SET(1=\@\4\3)"
"|$TST(preBlock=*)"
"$SET(1="
"\r\n$GET(preBlock)$SET(preBlock=stop)"
"$TST(volat=*.log:2.*)$ADDLST(Log-Main,[$DTM(d T)]\tEmergency Reinsert\t$GET(moved) \t\u)"
")"
")"
")"
")"
Replace = "\1"
Name = "Bottom Add: Various JS Code 5.03.09 (ccw!) [...] (d.r)"
Active = TRUE
URL = "$TYPE(htm)"
Limit = 16
Match = "(^(^))$STOP()"
"("
"$TST(volat=*.tools:[12].*)"
"$TST(keyword=(*.(i_debug:(1|2)\2|i_light:(1|2)\3|i_layout:(1|2)\4|i_script:(1|2)\5|i_spoof:(1|2)\6))+*)"
"$TST(volat=(*.(top:(*/)\7|up:(*/)\8|css:(???)\9))+*)"
"$SET(0="
"Note to self: Only Proxomitron always knows the real location -> "u"."
")"
"$SET(1= PrxMWrite('\2', '\3', '\4', '\5', '\6', '\7', '\8', '\9', '$ESC(\u)');)"
"|)"
Replace = "\t\r\n\r\n"
Name = "Bottom Add: Display Cookies 5.03.14 (!nn) [henk th sd] (d.1)"
Active = TRUE
URL = "$TYPE(htm)(^$TST(keyword=*.a_noprint.*))"
Limit = 16
Match = "(^(^))$STOP()(^$TST(hOrigUA=mozilla/4.[1-9](^*opera)*))"
"("
""
"("
"$OHDR(Cookie:( ) (\#;$SET(#=;
))+\#)$SET(0=1)"
"$SET(2=Cookie Header Out:
\@)"
"|)"
"&("
"$TST(eCookieS=$SET(stack=)(\1;$SET(stack=$GET(stack)\1;
))+(\1&$SET(stack=$GET(stack)\1)))"
"$SET(0=1)$SET(3=Last Original Set-Cookie Header In:
$GET(stack))"
"|)"
"&("
"$IHDR(Set-Cookie:$SET(dump=)( ) (\1;$SET(dump=$GET(dump)\1;
))+(\1&$SET(dump=$GET(dump)\1)))"
"$SET(0=1)$SET(4=First Set-Cookie Header In:
$GET(dump))"
"|)"
"&("
"$TST(eCookieK=*)"
"$SET(0=1)$SET(5=Cookies Killed:
$GET(eCookieK))"
"|)"
""
")"
"&$TST((\0)=1)$SET(dAll=$GET(dAll)"
"\t\r\n\t•"
" cookies\r\n\t\r\n"
")"
Replace = "\t\r\n\r\n"
"$SET(stack=)$SET(dump=)$SET(eCookieS=)$SET(eCookieK=)"
Name = "Bottom Add: Display Variables - Debug 5.03.02 (ccw! !nn) [sd] (d.1)"
Active = TRUE
URL = "$TYPE(htm)$TST(keyword=(^*.a_noprint.)*.i_debug:[12].*)"
Limit = 16
Match = "(^(^))$STOP()(^$TST(hOrigUA=mozilla/4.[1-9](^*opera)*))"
"$SET(1=)$SET(2=: \0
)"
""
"$SET(v=$TST(keyword=(.?*)\0)$GET(v)\1keyword\2)"
"$SET(v=$TST(flag=(.?*)\0)$GET(v)\1flag\2)"
"$SET(v=$TST(volat=(.?*)\0)$GET(v)\1volat\2)"
""
"$SET(v=$TST(mHead=\0)$GET(v)\1mHead\2)"
"$SET(v=$TST(mHtml=\0)$GET(v)\1mHtml\2)"
"$SET(v=$TST(mBody=\0)$GET(v)\1mBody\2)"
""
"$SET(v=$TST(uProt=\0)$GET(v)\1uProt\2)"
"$SET(v=$TST(uAuth=\0)$GET(v)\1uAuth\2)"
"$SET(v=$TST(uHost=\0)$GET(v)\1uHost\2)"
"$SET(v=$TST(uPort=\0)$GET(v)\1uPort\2)"
"$SET(v=$TST(uPath=\0)$GET(v)\1uPath\2)"
"$SET(v=$TST(uFile=\0)$GET(v)\1uFile\2)"
"$SET(v=$TST(uExt=\0)$GET(v)\1uExt\2)"
"$SET(v=$TST(uDom=\0)$GET(v)\1uDom\2)"
""
"$SET(v=$TST(displayD=\0)$GET(v)\1displayD\2)"
"$SET(v=$TST(displayI=\0)$GET(v)\1displayI\2)"
"$SET(v=$TST(displayM=\0)$GET(v)\1displayM\2)"
""
"$SET(v=$TST(hCLength=\0)$GET(v)\1hCLength\2)"
"$SET(v=$TST(hOrigUA=\0)$GET(v)\1hOrigUA\2)"
"$SET(v=$TST(hSniffCT=\0)$GET(v)\1hSniffCT\2)"
""
"$SET(v=$TST(hOrigRef=\0)$GET(v)\1hOrigRef\2)"
"$SET(v=$TST(hRdir=\0)$GET(v)\1hRdir\2)"
"$SET(v=$TST(hIP=\0)$GET(v)\1hIP\2)"
"$SET(v=$TST(hVia=\0)$GET(v)\1hVia\2)"
""
"$SET(v=$TST(dCode=\0)$GET(v)\1dCode\2)"
"$SET(v=$TST(dHits=\0)$GET(v)\1dHits\2)"
"$SET(v=$TST(eCookieK=\0)$GET(v)\1eCookieK\2)"
"$SET(v=$TST(eCookieS=\0)$GET(v)\1eCookieS\2)"
"$SET(v=$TST(eFixedT=\0)$GET(v)\1eFixedT\2)"
"$SET(v=$TST(eMultiT=\0)$GET(v)\1eMultiT\2)"
"$SET(v=$TST(eOpenT=\0)$GET(v)\1eOpenT\2)"
"$SET(v=$TST(ePostT=\0)$GET(v)\1ePostT\2)"
""
"$SET(v=$TST(sCookieP=\0)$GET(v)\1sCookieP\2)"
"$SET(v=$TST(sCookieF=\0)$GET(v)\1sCookieF\2)"
"$SET(v=$TST(sReferF=\0)$GET(v)\1sReferF\2)"
""
"$SET(v=$TST(sCookieA=\0)$GET(v)\1sCookieA\2)"
"$SET(v=$TST(sSpec=\0)$GET(v)\1sSpec\2)"
"$SET(v=$TST(sUserCSS=\0)$GET(v)\1sUserCSS\2)"
""
"$SET(v=$TST(pApplet=\0)$GET(v)\1pApplet\2)"
"$SET(v=$TST(pBGsound=\0)$GET(v)\1pBGsound\2)"
"$SET(v=$TST(pFlash=\0)$GET(v)\1pFlash\2)"
"$SET(v=$TST(pMarquee=\0)$GET(v)\1pMarquee\2)"
"$SET(v=$TST(pMovie=\0)$GET(v)\1pMovie\2)"
""
"$SET(v=$TST(comment=\0)$GET(v)\1comment\2)"
"$SET(v=$TST(script=\0)$GET(v)\1script\2)"
"$SET(v=$TST(tAnc=\0)$GET(v)\1tAnc\2)"
"$SET(v=$TST(tHead=\0)$GET(v)\1tHead\2)"
"$SET(v=$TST(tFrameset=\0)$GET(v)\1tFrameset\2)"
"$SET(v=$TST(tFont=\0)$GET(v)\1tFont\2)"
"$SET(v=$TST(tTable=\0)$GET(v)\1tTable\2)"
""
"$SET(v=$TST(tCenter=\0)$GET(v)\1tCenter\2)"
"$SET(v=$TST(tDiv=\0)$GET(v)\1tDiv\2)"
"$SET(v=$TST(tForm=\0)$GET(v)\1tForm\2)"
"$SET(v=$TST(tHtml=\0)$GET(v)\1tHtml\2)"
"$SET(v=$TST(tNoembed=\0)$GET(v)\1tNoembed\2)"
"$SET(v=$TST(tNoframes=\0)$GET(v)\1tNoframes\2)"
"$SET(v=$TST(tNoscript=\0)$GET(v)\1tNoscript\2)"
"$SET(v=$TST(tPre=\0)$GET(v)\1tPre\2)"
"$SET(v=$TST(tSpan=\0)$GET(v)\1tSpan\2)"
"$SET(v=$TST(tStyle=\0)$GET(v)\1tStyle\2)"
"$SET(v=$TST(tTextarea=\0)$GET(v)\1tTextarea\2)"
"$SET(v=$TST(tXmp=\0)$GET(v)\1tXmp\2)"
""
"$SET(v=$TST(stack=\0)$GET(v)\1stack\2)"
"$SET(v=$TST(dump=\0)$GET(v)\1dump\2)"
"$SET(v=$TST(miss=\0)$GET(v)\1miss\2)"
"$SET(v=$TST(a=\0)$GET(v)\1a\2)"
"$SET(v=$TST(b=\0)$GET(v)\1b\2)"
"$SET(v=$TST(i=\0)$GET(v)\1i\2)"
"$SET(v=$TST(n=\0)$GET(v)\1n\2)"
"$SET(v=$TST(s=\0)$GET(v)\1s\2)"
""
"$SET(v=$TST(bom=\0)$GET(v)\1bom\2)"
"$SET(v=$TST(fileType=\0)$GET(v)\1fileType\2)"
"$SET(v=$TST(jsVarsB=\0)$GET(v)\1jsVarsB\2)"
"$SET(v=$TST(jsVarsT=\0)$GET(v)\1jsVarsT\2)"
"$SET(v=$TST(metaType=\0)$GET(v)\1metaType\2)"
"$SET(v=$TST(onload=\0)$GET(v)\1onload\2)"
"$SET(v=$TST(preBlock=\0)$GET(v)\1preBlock\2)"
"$SET(v=$TST(title=\0)$GET(v)\1title\2)"
""
"$SET(v=$TST(protect=\0)$GET(v)\1protect\2)"
"$SET(v=$TST(sndSrc=\0)$GET(v)\1sndSrc\2)"
"$SET(v=$TST(spBounds=\0)$GET(v)\1spBounds\2)"
Replace = "$TST(v=\0)$SET(dAll=$GET(dAll)"
"\t\r\n\t• vars\r\n\t\r\n"
")"
"$SET(0="
"Not checked because evaluated and cleared later:"
"dAll eAdComm eAdCommII eAdJS eBottom eExploit v"
")"