ClearUrls VS recaptcha

ClearURLs locally re-writes common "bounce" redirect links, avoiding a double round-trip when clicking on Google search links (among many others). I supplement this with Redirector for some light automation (old.reddit.com etc), but that's probably overkill.

According it Addon page in AMO, ClearURL seem actually on Gitlab https://gitlab.com/KevinRoebert/ClearUrls

You can use Request Control to remove specific or all parameters from URLs from certain domains and do all kinds of redirections with them. If you find it too complicated, use the ClearURLs support page to ask them to clean up Reddit links for you.

Here's the source code. What attack surface is it adding?

CleadURLs might be useful? It's supposed to do this:

Check out this page and this extension to clean URL automatically, they get way shorter oftentimes.

To add to your list: ClearURLs, LocalCDN

Most likely quite low. I let my addons handle that.

https://gitlab.com/KevinRoebert/ClearUrls

I know Google has a ReCAPTCHA service, and I think it’s free up to scales I would probably never use up. Still, I’d prefer something than can be self hosted so is totally free. And where you don't have to register your domain with a 3rd party, you can just use it on any domain.

The traditional way of using "I am not a robot" Recpatcha seems to be with a

## Step 1: Obtaining reCAPTCHA Keys Go to the Google reCAPTCHA website (https://www.google.com/recaptcha) and sign in with your Google account. Click the + sign and fill in the details as follows:

* https://www.google.com/recaptcha/ * allow * https://www.gstatic.com/recaptcha/ * allow * https://www.google.com/js/ * allow * captcha.com * allow * recaptcha.net * allow

https://www.google.com/recaptcha/ * allow

Depends on what you mean by "proxying". Everything you do (serving a Single-Page Application or requesting HN by backend, processing it's HTML and sending the content to your own frontend) will take traffic away from news.ycombinator.com and to another domain - which comes with it's own set of dreadful scenarios.

There used to be (and still are) things like https://mreidsma.github.io/bookmarklets/jquerify.html which allow to inject JS on click (and thus would make it possible to transform that site), but I gave it a shot and HN is set up to disallow this:

  Refused to load the script 'https://code.jquery.com/jquery.min.js' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com/". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.