Adblock for YouTube™
ID: pginoclcfbhkoomedcodiclncajkkcba
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- new + better AdblockView Profile
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Privacy aware, secure Adblock for YouTube™. Blocks any ads on YouTube.com.
🌟 Say Goodbye to Annoying Ads and Preroll Videos on Youtube with Adblock for Youtube❣️ 🌟 Blocks ads from Youtube™ and counts the life-time you saved by not seeing Ads on Youtube™ 🌟 Unlock an uninterrupted and personalized Youtube experience by installing Adblock for Youtube now! 💪 „Adblock for Youtube“ is the perfect solution for an interruption-free and more comfortable Youtube experience. This browser extension blocks all ads and preroll videos on the website Youtube.com, allowing you to watch videos without any interruptions. With this extension, you’ll be able to enjoy your videos without being bothered by unwanted ads and preroll videos, making your time on Youtube more enjoyable. The extension is easy to install and use. Once installed, it runs in the background, automatically blocking all ads and preroll videos on Youtube. You can also customize the extension’s rules to suit your preferences, for example, by blocking preroll videos longer than 15 seconds or ads that contain certain keywords. In addition to blocking ads and preroll videos, the extension can also improve your overall experience on Youtube by speeding up page load times and reducing data usage. Installing the extension is simple. You can get it from the web store for your specific browser (e.g the Chrome Web Store for Google Chrome) by searching for „Adblock for Youtube“ and adding it to your browser. Once installed, the extension will show an icon on your browser’s toolbar, which you can use to turn the extension on or off, as well as to access the settings menu where you can modify the rules and preferences. With „Adblock for Youtube“ you don’t have to worry about unwanted interruptions while watching videos. This extension will make your time on Youtube much more comfortable and enjoyable. Give it a try today and see the difference it makes. Your Key to an Uninterrupted and Improved Online Experience!
Requests <all_urls> host permission even though every code path (content script, DNR rules, webNavigation filter) is scoped to youtube.com. Over-broad host access combined with scripting + tabs permissions gives the extension latent ability to read/modify any site via future updates without triggering a new permission prompt. Not malicious here but a privilege-escalation surface the user would not expect from a YouTube-only adblocker.
{ "permissions": [ "declarativeNetRequest", "declarativeNetRequestWithHostAccess", "declarativeNetRequestFeedback", "storage", "scripting", "webNavigation", "tabs" ], "host_permissions": [ "<all_urls>" ], "declarative_net_request": { "rule_resources": [ { "id": "youtube", "enabled": true, "path": "rules/youtube.json" } ] }, "content_scripts": [ { "js": [ "content.js" ], "all_frames": true, "run_at": "document_start", "matches": [ "*://*.youtube.com/*" ] } ]}Builds JavaScript source as a string (from template-substituted scriptlet bodies) and injects it into the page via a script tag whose content comes from decodeURIComponent. This is an eval-equivalent pattern — any future change that lets attacker-controlled data reach patchScriptlet's args would permit arbitrary page-context code execution. In this version the args are hard-coded uBlock-style ad-blocking rules (set-constant / json-prune / no-floc targeting playerResponse.adPlacements), so it is benign, but the mechanism itself is the class of pattern that raises ML flags.
function injectScriptlet(scriptlet) { const script = document.createElement("script"); script.appendChild( document.createTextNode(decodeURIComponent(`(${scriptlet})();`)) ); (document.head || document.documentElement) ?.appendChild(script);}function runScriptlets(rules) { for (const [name, args] of rules) { const scriptlet = scriptlets[name]; injectScriptlet(patchScriptlet(scriptlet, args)); }}Content script injects scriptlets.js into the YouTube page's main world via a <script src=...> tag (web_accessible_resources). This bypass of the isolated world is a common ad-blocker pattern (needed to override playerResponse) but grants the injected code full access to YouTube's JS context, including page-level globals and potentially auth state.
function injectScriptlets() { return new Promise((resolve, reject) => { const script = document.createElement("script"); script.src = chrome.runtime.getURL("scriptlets.js"); script.onload = function() { this.remove(); resolve(); }; script.onerror = reject; (document.head || document.documentElement) .appendChild(script); });}By severity
Versions scanned
Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.0.1 | 3 |
Files with findings
3 distinct paths — top paths by unique finding count:
- content.js1
- manifest.json1
- scriptlets.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.