ungoogled-software/ungoogled-chromium

DNS-lookup(and https connect) of single-word searches done in omnibar is happening

Open

#814 opened on Aug 26, 2019

View on GitHub
 (9 comments) (0 reactions) (0 assignees)Python (771 forks)batch import
enhancementhelp wanted

Repository metrics

Stars
 (18,674 stars)
PR merge metrics
 (Avg merge 1d 11h) (9 merged PRs in 30d)

Description

Describe the bug single-word searches from omnibox are being DNS looked up

To Reproduce Steps to reproduce the behavior:

  1. make sure to move out your current/old profile(while the browser is closed, obviously), so that on next browser startup a new one will be created
  2. place the following policies file in /etc/chromium/policies/managed/policies.json (and make sure no other files are in /etc/chromium/policies/managed/ dir, or they can overwrite policies, I think) (I'm on ArchLinux) (note: this step should be optional if you can disable all relevant options from Settings manually) (each policy is explained here, or seen in chrome://policy and the url that looks like https://ch40m1um.qjz9zk/administrators/policy-list-3#AbusiveExperienceInterventionEnforce would in reality need to be https://www.chromium.org/administrators/policy-list-3#AbusiveExperienceInterventionEnforce)
{
  "SSLVersionMin": "tls1.2",
  "NativeMessagingUserLevelHosts": false,
  "NativeMessagingBlacklist": [ "*" ],


  "DefaultCookiesSetting": 4,
  "DefaultImagesSetting": 1,
  "DefaultJavaScriptSetting": 1,
  "DefaultPluginsSetting": 2,
  "DefaultPopupsSetting": 2,
  "DefaultNotificationsSetting": 2,
  "DefaultGeolocationSetting": 2,
  "DefaultWebBluetoothGuardSetting": 2,
  "DefaultWebUsbGuardSetting": 2,
  "CookiesSessionOnlyForUrls": [
    "[*.]protonmail.com",
    "[*.]protonmail.ch"
  ],

  "DefaultSearchProviderEnabled": true,
  "DefaultSearchProviderName": "ddg",
  "DefaultSearchProviderSearchURL": "https://duckduckgo.com/?q={searchTerms}",
  "DefaultSearchProviderKeyword": "ddg",

  "ExtensionInstallBlacklist": [
    "mhjfbmdgcfjbbpaeojofohoefgiehjai"
  ],
  "ExtensionInstallForcelist": [
    "dcdgednjjolocbomjlgdpipdcbojhili;/home/user/build/2nonpkgs/browser.stuff/chromium.stuff/uBO-Extra/",
    "kfdplnkefedajkeljlimidjpnnfjiipd;/home/user/build/2nonpkgs/browser.stuff/both/uMatrix/uMatrix/dist/build/uMatrix.chromium/",
    "jmpgadnbdoeolhpodiboiphhlmbghkfo;/home/user/build/2nonpkgs/browser.stuff/chromium.stuff/hsts-hacky",
    "ncpljnfcopgfchnkbfcfdhngnfnmojgb;/home/user/build/2nonpkgs/browser.stuff/chromium.stuff/sloth",
    "ffmdfgaeibjbkmimnkdmmbcmcmoifmop;/home/user/build/2nonpkgs/browser.stuff/both/uBlock/uBlock/dist/build/uBlock0.chromium",
    "jfjgpeegpokkphcelgamjeeichpoonbc;/home/user/build/2nonpkgs/browser.stuff/chromium.stuff/videospeed"
  ],
  "ExtensionAllowInsecureUpdates": false,

  "EnableMediaRouter": false,
  "ShowCastIconInToolbar": false,
  "AuthSchemes": "basic",
  "DisableAuthNegotiateCnameLookup": true,
  "EnableAuthNegotiatePort": false,
  "AllowCrossOriginAuthPrompt": false,
  "NtlmV2Enabled": false,
  "AlternativeBrowserPath": "/home/user/bin/fox",
  "BrowserSwitcherEnabled": true,
  "BrowserSwitcherKeepLastChromeTab": true,
  "BrowserSwitcherUrlList": [
    "!mail.protonmail.com",
    "protonvpn.com"
  ],
  "BrowserSwitcherUrlGreylist": [
    "protonmail.com",
    "mail.protonmail.com"
  ],
  "PasswordManagerEnabled": false,
  "PrintingEnabled": false,
  "CloudPrintProxyEnabled": false,
  "CloudPrintSubmitEnabled": false,
  "DisablePrintPreview": true,
  "PrintPreviewUseSystemDefaultPrinter": false,
  "RemoteAccessHostClientDomainList": [ "so-basically-no-one.blah" ],
  "RemoteAccessHostFirewallTraversal": false,
  "RemoteAccessHostDomainList": [ "so-basically-no-one.blah" ],
  "RemoteAccessHostTalkGadgetPrefix": "RemoteAccessHostTalkGadgetPrefix.hostdisabled",
  "RemoteAccessHostRequireCurtain": true,
  "RemoteAccessHostAllowClientPairing": false,
  "RemoteAccessHostAllowGnubbyAuth": false,
  "RemoteAccessHostAllowRelayedConnection": false,
  "RemoteAccessHostUdpPortRange": "12400-12401",
  "RemoteAccessHostMatchUsername": true,
  "RemoteAccessHostTokenValidationCertificateIssuer": "invalid cert auth so no one can connect",
  "RemoteAccessHostAllowFileTransfer": false,
  "SafeBrowsingEnabled": false,
  "SafeBrowsingExtendedReportingEnabled": false,
  "PasswordProtectionWarningTrigger": 0,

  "ShowHomeButton": true,
  "HomepageLocation": "about:blank",
  "HomepageIsNewTabPage": false,
  "NewTabPageLocation": "about:blank",
  "RestoreOnStartup": 1,
  "AbusiveExperienceInterventionEnforce": true,
  "AdsSettingForIntrusiveAdsSites": 2,
  "AllowDeletingBrowserHistory": true,
  "AllowDinosaurEasterEgg": false,
  "AllowFileSelectionDialogs": true,
  "AllowOutdatedPlugins": false,
  "AllowPopupsDuringPageUnload": false,
  "AlternateErrorPagesEnabled": false,
  "AlwaysOpenPdfExternally": true,
  "AudioCaptureAllowed": false,
  "AudioCaptureAllowedUrls": [],
  "AutofillAddressEnabled": false,
  "AutofillCreditCardEnabled": false,
  "AutoplayAllowed": true,
  "AutoplayWhitelist": [
    "[*.]youtube.com",
    "[*.]googlevideo.com"
  ],
  "BackgroundModeEnabled": false,
  "BlockThirdPartyCookies": false,
  "BookmarkBarEnabled": true,
  "BrowserAddPersonEnabled": true,
  "BrowserGuestModeEnabled": false,
  "BrowserGuestModeEnforced": false,
  "BrowserNetworkTimeQueriesEnabled": false,
  "BrowserSignin": 0,
  "BuiltInDnsClientEnabled": false,
  "CloudManagementEnrollmentMandatory": false,
  "CloudPolicyOverridesPlatformPolicy": false,
  "CommandLineFlagSecurityWarningsEnabled": true,
  "ComponentUpdatesEnabled": false,
  "DefaultBrowserSettingEnabled": false,
  "DefaultDownloadDirectory": "/home/user/Downloads/",
  "DownloadDirectory": "/home/user/Downloads/",
  "DeveloperToolsAvailability": 1,
  "Disable3DAPIs": true,
  "DisableSafeBrowsingProceedAnyway": true,
  "DisableScreenshots": true,
  "DiskCacheDir": "/tmp/chromiumcache/",
  "DownloadRestrictions": 0,
  "EditBookmarksEnabled": true,
  "EnableOnlineRevocationChecks": false,
  "EnterpriseHardwarePlatformAPIEnabled": false,
  "ForceEphemeralProfiles": false,
  "ForceGoogleSafeSearch": false,
  "ForceYouTubeRestrict": 0,
  "FullscreenAllowed": true,
  "HardwareAccelerationModeEnabled": false,
  "HideWebStoreIcon": true,
  "ImportAutofillFormData": false,
  "ImportBookmarks": false,
  "ImportHistory": false,
  "ImportHomepage": false,
  "ImportSavedPasswords": false,
  "ImportSearchEngine": false,
  "IncognitoModeAvailability": 0,
  "IsolateOrigins": "https://protonmail.com/,https://protonmail.ch,https://github.com/",
  "MaxConnectionsPerProxy": 32,
  "MediaRouterCastAllowAllIPs": false,
  "MetricsReportingEnabled": false,
  "NetworkPredictionOptions": 2,
  "PromotionalTabsEnabled": false,
  "PromptForDownloadLocation": false,
  "ProxyMode": "direct",
  "ProxySettings": {
    "ProxyMode": "direct"
  },
  "QuicAllowed": false,
  "RelaunchNotification": 2,
  "RequireOnlineRevocationChecksForLocalAnchors": false,
  "RunAllFlashInAllowMode": false,
  "SSLErrorOverrideAllowed": true,
  "SafeSitesFilterBehavior": 0,
  "SavingBrowserHistoryDisabled": false,
  "SearchSuggestEnabled": false,
  "ShowAppsShortcutInBookmarkBar": false,
  "SignedHTTPExchangeEnabled": false,
  "SitePerProcess": true,
  "SpellCheckServiceEnabled": false,
  "SpellcheckEnabled": true,
  "SpellcheckLanguage": [ "en-US" ],
  "SuppressUnsupportedOSWarning": false,
  "SyncDisabled": true,
  "TaskManagerEndProcessEnabled": true,
  "TranslateEnabled": false,
  "UrlKeyedAnonymizedDataCollectionEnabled": false,
  "UserFeedbackAllowed": false,
  "VideoCaptureAllowed": false,
  "WPADQuickCheckEnabled": false,
  "WebDriverOverridesIncompatiblePolicies": false,
  "WebRtcEventLogCollectionAllowed": false,

  "WebRtcUdpPortRange": "10000-10001"
}
  1. start browser
  2. focus omnibar (Alt+d or Ctrl+L)
  3. type more than one word to search for, then press Enter
  4. no DNS lookups using the entered words; so far so good.
  5. do step 4
  6. type only one word (ie. no spaces), then press Enter
  7. observe how it tried to DNS lookup that word using gethostbyname2_r (that's REENTRANT_NAME (as per glibc64:../sysdeps/posix/getaddrinfo.c:2201/getaddrinfo)

Expected behavior no DNS lookups, because all the settings for predicting stuff and preloading and what not are off (due to policies).

Screenshots If applicable, add screenshots to help explain your problem.

Environment (please complete the following information):

  • OS/Platform and version: up to date ArchLinux 64bits, kernel 5.3.0-rc4-gd45331b00ddb
  • ungoogled-chromium version: local/ungoogled-chromium 76.0.3809.100-1

Additional context I'm actually not using any DNS servers (ie. /etc/resolv.conf doesn't have a nameserver 1.1.1.1 entry for example), so every host is already present in /etc/hosts instead. I'm catching the DNS lookups by having patched glibc, however for anyone using DNS servers, I think tcpdump or wireshark should help to notice this! also chrome://net-export/

I also have a bunch of extensions like uBlock Origin and uMatrix(with all blocked by default, whitelisting only what's needed), and some sites manage to sneak other DNS lookups when loaded, bypassing at least uBlock and I'm guessing if the DNS lookups wouldn't fail they would also actually load that content! But this should be a different issue.

Contributor guide