Loading Profile...
Twitter,
Facebook, or email.
I'm teaching a JavaScript class, demonstrating adblocker and Ghostery.
On an HTML page, I have a call to a COMScore script: . It's followed by a call to the COMSCORE object - that's supposed to fail in a browser with Ghostery, and work in my Chrome w/ Ghostery.
The script is reported to be blocked by Ghostery: I see it in the purple message box, and there's a debugger red line reporting GET http://b.scorecardresearch.com/beacon.js cannot be reached. BUT, in the JavaScript console, I can still evaluate the COMSCORE object exposed in the script, and call its functions.
So somehow it is not blocked, even though it's reported as such.
Would appreciate an explanation. Also, do you have some JS code samples that Ghostery blocks? May come in handy.
Thanks!
Guy
I’m
curious
COMSCORE script slips through
-
Hi Traveling Tech Guy,
Could you send us a link to this page, or the page itself (you can send the page to alexei at ghostery dot com)?
I would guess the COMSCORE object was initialized somewhere else in your setup, but I need to see the page to say for sure.
Using traffic monitors/proxies like http://mitmproxy.org is a great way to verify whether something was blocked or not.
To get some samples, you could visit the apps page for that tracker (for example, https://www.ghostery.com/apps/scoreca... ), and then visit the featured sites for that tracker.Comment -
-
-
-
@Alexei - files sent in a zip file. And thanks for the links!
@Eric - what's a Ghostery surrogate? And how do I turn it off?
Cheers,
Guy -
-
What Eric said.
-
-
Surrogate scripts are dummy scripts inserted by Ghostery in an attempt to shim just enough of the blocked tracker's JS interface to let sites that depend on that interface to continue working. You can get a bit more background information in this thread: https://getsatisfaction.com/ghostery/...
Here is the current COMSCORE surrogate, for example:var COMSCORE={beacon:function(){},purge:function(){},__noSuchMethod__:function(){}}
-
-
Thanks @Alexei. If that's the case (and I do appreciate the solution, although in my humble opinion, web developers need to take care of resource loading in code), is there any beacon that Ghostery blocks, that does not have a surrogate? Something I could use in my demo? (And btw, my demo will now have another slide entitled "Ghostery Surrogates" :)).
-
-
I would say most of them do not have surrogates ... I suggest just browsing around and picking trackers out from what Ghostery detects.
-
CHAMP
CHAMP
CHAMP
