Re: Whitelist full URLs in HTTPS traffic with Privoxy

--===============3634725330541405685==
Content-Type: multipart/signed; boundary="Sig_/I7yO__94vi=MKmuHU_._Ja1";
 protocol="application/pgp-signature"; micalg=pgp-sha256

--Sig_/I7yO__94vi=MKmuHU_._Ja1
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

Thibault Bartolone via Privoxy-users <[email protected]> wrot=
e on 2025-01-15 at 11:46:01:

> I managed to configure Privoxy to intercept HTTPS traffic:- generated CA =
and certs in Privoxy- configured Firefox to use the proxy and installed the=
 CA cert- FF reaches HTTPS sites transparently through Privoxy without any =
problem.
> Now what I want is block all HTTP/HTTPS traffic, and just allow ONE HTTPS=
 URL (not one domain, one full URL):ALLOW https://acme.org/urlthingBLOCK ev=
erything else
>=20
> Here's my configuration:
> /etc/privoxy/config# Commented out existing config to have the minimal th=
ing:#actionsfile match-all.action#actionsfile default.action#actionsfile us=
er.action#actionsfile regression-tests.action
> # this included file is recognized, because it has an impact on my testac=
tionsfile myrules.action
> /etc/privoxy/myrules.action{ +https-inspection -block }acme.org/urlthing
> { +https-inspection +block }/Nothing works, all site are blocked, whateve=
r I do. I tried infinite variations of the above (removing/adding block or =
https-inspection, changing + to - )
> I don't find any example of a working configuration online.

First block "everything", then make an exception:

{ +https-inspection +block{Forbidden request} }
/
{ +https-inspection -block }
acme.org/urlthing

Fabian

--Sig_/I7yO__94vi=MKmuHU_._Ja1
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEETzbBfzgWkTZUoehQaRgikYuiNxwFAmeJB3EACgkQaRgikYui
Nxzoag//a2BTiaSQcIlimYCKWWZmdMenOczcj2cA5rP3AM7IUZxpvANrNTfUyabR
qoJNR0P2wNOT1uDAc6ZfqJhQPA7L8/L806Eq+zcyjjw2lGlToI1H+eTpHpnsdBCb
tDUIjh1ujS+I5eoSo5M2tXiqyS//LY5KnI7JcqQ5DBFLo12kKW+6zbux8mrqmwON
rx7Qx89I5eTq35QRiIq3Q9GV8Ul4v9zno96Xfw1Htm0mYXtfu4PH/XSEJXvLcOTQ
iOIRsBZrpt9x9BE9fBUgTH9Ox4Z5ZjdctZPt/bLs94i2EKdd6RDvjP+9icPF8v29
Ashcv45pV3I2Li5ofRi4FNji27pB05pIIHyC3cceMUlwSwhdJO0p8Su+8kAA6jAL
yWXlh7Cbfqw0z72knSlNUdrglQEkHu4BDhn/zVY04Uc6p5MGxfZUQ7YC7ABE6U2H
krQ5YGHcLy0c/FpVjd6+er7EMJ49zNsG7Lms6z5o+fUQKJuxKynX8jOXuYLIP63K
8WVeU6bnhublsmFTNAH6VEW9lqUamHiAJ6MAWALHs2WPxQ5pFGaSFlJYpScbQn4T
YsK94heZfgEoeeXtQQ421g81Uvn+TlT0BzZvpkr5c3mtuoYi5VJxkAw/AccTfO8e
fpFwUceZ9fM+ec+X9Ny4fx7QX7XIg69jwqxV/v2U0yr5venTTZg=
=S5sV
-----END PGP SIGNATURE-----

--Sig_/I7yO__94vi=MKmuHU_._Ja1--

--===============3634725330541405685==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Privoxy-users mailing list
[email protected]
https://lists.privoxy.org/mailman/listinfo/privoxy-users

--===============3634725330541405685==--