mirror/antizapret-pac-generator-light
1
0
Fork 0
mirror of https://bitbucket.org/anticensority/antizapret-pac-generator-light.git synced 2024-11-22 05:06:04 +03:00
Code Issues Packages Projects Releases Wiki Activity

FOR-REVIEWERS.md created online with Bitbucket

Browse Source
This commit is contained in:
ilyaigpetrov 2021-10-30 16:57:21 +00:00
parent 9193694d14
commit 6b847c169d
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
FOR-REVIEWERS.md Normal file
View File

@ -0,0 +1,11 @@
# For Reviewers
## Justifications of serving hard to read PAC-scripts
0. It's not obfuscated but compressed to fit into the 1MB limit on PAC-script size in most browsers.
1. In this repository you may find the open source codes of our pac-script generator -- we may translate it to English upon your request.
2. I understand it's difficult to evaluate if PAC-script is malicious or not. However, take into account the worst case damage it can inflict:
- It may leak addresses user visits via dnsResolve.
- It may return a proxy which collects addresses user visits or even modifies responses (this is explicitly allowed when user agrees to `proxy` permission in our browser extension).
3. PAC-scripts (remote or not) are executed in a kind of sandbox: they have access only to a restricted API (see https://github.com/anticensority/about-pac-scripts/blob/master/pac-script-api-chrome-55.md for details).
So they are quite benign.