[ ijbswa-Actionsfile feedback-3602841 ] False positive: /.*\&adtype=

Actionsfile feedback item #3602841, was opened at 2013-01-31 09:54
Message generated for change (Comment added) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=3602841&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: filter: page-incorrectly-block
Group: current actionsfile
Status: Closed
Resolution: Fixed
Priority: 5
Private: No
Submitted By: u302320 (u302320)
Assigned to: Fabian Keil (fabiankeil)
Summary: False positive: /.*\&adtype=

Initial Comment:
URL: http://kleinanzeigen.ebay.de/anzeigen/

The search form ("Finden") has a hidden input field "adType". Any attempts to use the search for customer ads on kleinanzeigen.ebay.de are blocked as the pattern "/.*\&adtype=" in the {+block-as-image} section of default.action will match and return a gif to the client.

Further experimens reveal similar problems with "Gesuche" (want ads). Clicking on "Gesuche" somewhere in the category tree (f.e. navigate to http://kleinanzeigen.ebay.de/anzeigen/s-autos/c216) cause the the browser to request something like http://kleinanzeigen.ebay.de/anzeigen/s-suchanfrage.html?keywords=&categoryId=216&locationStr=&locationId=&radius=0&sortingField=SORTING_DATE&adType=WANTED&posterType=&pageNum=1&action=find&maxPrice=&minPrice= 
Again, the parttern "/.*\&adtype=" in default.action will match the adType=WANTED parameter in the url and block the request.

----------------------------------------------------------------------

>Comment By: Fabian Keil (fabiankeil)
Date: 2013-02-11 11:01

Message:
Thanks for the additional information, Adam.

I changed the pattern to "rover.ebay./ar.*\&adtype=".

I'm not that concerned about some ads on Ebay potentially getting through,
especially when they can't be blocked without breaking too much other
stuff.

----------------------------------------------------------------------

Comment By: Adam Piggott (proactivesvcs)
Date: 2013-02-09 08:27

Message:
I've found some URLs which may be relevant to this bug. Some eBay rover
URLs that are solely for tracking / adverts and some YouTube URLs which
were being incorrectly blocked. There are also quite a few true positives
for adtype= that are not eBay-related, but most of which are blocked by
other rules.

I've noticed that the advert/tracking eBay rover URLs are always served
from http://rover.ebay.com/ar/ , whereas the legitimate URLs are
http://rover.ebay.com/rover/ or http://rover.ebay.co.uk/rover/ .

It might be worth making an exception just for the German anzeigen (or
"classifieds") part of eBay. With some testing I found that US classifieds
site is not blocked by the adtype rule. My sample size for true positives
on adtype isn't large, but I thought worth adding my findings to this
report.

----------------------------------------------------------------------

Comment By: Fabian Keil (fabiankeil)
Date: 2013-02-09 07:18

Message:
Thanks for the report.

I changed the offending pattern to "rover.ebay./.*\&adtype=".

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=3602841&group_id=11118

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb