ABE - Application Boundaries Enforcer

ABE for NoScript Users

The NoScript extension for the Mozilla Firefox browser contains the first, and currently only, ABE implementation. Users can add, remove and edit ABE rulesets by using the NoScript Options|Advanced|ABE panel.

Whenever a certain rule is matched, a message is logged in the browser's Error Console in the form:

  MATCHING_PATTERN: ACTION on {MATCHING_SITE << ORIGIN1[, ORIGIN2, ...], ORIGINAL_ORIGIN - REQUEST_TYPE}

where

MATCHING_PATTERN is the Site pattern which has been found matching
ACTION is the ABE action issued (Deny, Anonymize...)
MATCHING_SITE is the actual URI of the matching request
ORIGIN1, ORIGIN2 and so on is the chain of origin URI (more than one if redirections occurred), while ORIGINAL_ORIGIN is always the URI of the origin which triggered the load
REQUEST_TYPE represents the type of the request (document, subdocument, image and so on) as defined in Mozilla's XPCOM nsIContentPolicy interface

If ACTION is Deny and the blocked request is targeted to a top-level window, an user-facing notification is also issued, with an Options button which lands directly in the ABE configuration panel.