Skip to content

V46.14 — BugFix: exempt Coupang add-to-cart API path #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
fkhb90 merged 1 commit into from
May 31, 2026
Merged

V46.14 — BugFix: exempt Coupang add-to-cart API path #24

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,11 @@
# URL Ultimate Filter - Changelog

## V46.14 - 2026-05-31
- [BugFix] Coupang add-to-cart 誤封修正：
- cmapi.tw.coupang.com → PATH_EXEMPTIONS 新增 /add-to-cart
- 交易路徑被關鍵字掃描誤判時，優先走路徑豁免放行
- 以最小豁免面積保留下單流程，不影響既有廣告封鎖規則

## V46.13 - 2026-05-30
- [BugFix] PATH_EXEMPTIONS 錨定修正：
- isPathExemptedForDomain 改為僅比對 pathname（去除 query/hash）
Expand Down
24 changes: 13 additions & 11 deletions SSOT_Compiler.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,16 +3,16 @@
"""
URL Ultimate Filter - SSOT Compiler & Matrix Test Suite
-------------------------
當前版本：V46.13 (2026-05-30)
當前版本：V46.14 (2026-05-31)
最新架構更新：
- [BugFix] PATH_EXEMPTIONS 錨定修正：豁免判斷改為僅比對 pathname 且使用 startsWith，避免 query 夾帶字串繞過 L1 規則。
- [BugFix] Coupang add-to-cart 誤封修正：cmapi.tw.coupang.com 新增 PATH_EXEMPTIONS `/add-to-cart`，避免訂單流程 API 命中關鍵字掃描。

近期更新摘要 (完整歷史軌跡請參閱 CHANGELOG.md)：
- V46.13 (2026-05-30): BugFix — PATH_EXEMPTIONS 改為比對 pathname.startsWith，修正 query 夾帶豁免字串可繞過的風險。
- V46.14 (2026-05-31): BugFix — cmapi.tw.coupang.com 新增 PATH_EXEMPTIONS /add-to-cart，修正商品加購 API 誤封。
- V46.13 (2026-05-30): BugFix — PATH_EXEMPTIONS 改為僅比對 pathname（不含 query/hash），修正 query 夾帶豁免字串可繞過的風險。
- V46.12 (2026-05-30): BugFix — mobile-api.g2a.com 新增 PATH_EXEMPTIONS /api/v1/transactions/，修正 L1 `/api/v1/t` 前綴造成的交易 API 誤封。
- V46.11 (2026-05-30): Privacy — edith.xiaohongshu.com 使用 DROP_RE 錨定 /api/sns/v\\d+/note/metrics_report，覆蓋未來版本號升級。
- V46.10 (2026-05-30): Privacy — BLOCK_DOMAINS_WILDCARDS 新增 adhacker.online，封鎖 au.adhacker.online 等所有子域追蹤請求。
- V46.09 (2026-05-28): BugFix — x.com HomeTimeline GraphQL API 誤封修正，PATH_EXEMPTIONS 新增 /i/api/graphql/ 豁免，SOFT_WHITELIST 補上 x.com。
"""

import hashlib
Expand All @@ -36,14 +36,14 @@
except Exception:
pass

VERSION = "46.13"
RELEASE_DATE = "2026-05-30"
VERSION = "46.14"
RELEASE_DATE = "2026-05-31"

CURRENT_RELEASE_NOTES = """
- [BugFix] PATH_EXEMPTIONS 錨定修正：
- isPathExemptedForDomain 改為僅比對 pathname（去除 query/hash）
- 保留 includes 比對語意，避免既有中段路徑豁免回歸
- 保留既有 domain/path 設定，不擴大放行面積
- [BugFix] Coupang add-to-cart 誤封修正：
- cmapi.tw.coupang.com → PATH_EXEMPTIONS 新增 /add-to-cart
- 交易路徑被關鍵字掃描誤判時，優先走路徑豁免放行
- 以最小豁免面積保留下單流程，不影響既有廣告封鎖規則
"""


Expand Down Expand Up @@ -678,7 +678,7 @@
"storm.mg": ["/_nuxt/track"],
"shopee.tw": ["/api/v4/search/search_items", "/api/v4/pdp/get"],
"uber.com": ["/go/_events"],
"cmapi.tw.coupang.com": ["/vendor-items/", "/option-list"],
"cmapi.tw.coupang.com": ["/vendor-items/", "/option-list", "/add-to-cart"],
"coupangcdn.com": ["/image/ccm/banner/", "/image/cmg/oms/banner/"],
"www.google.com": ["/url", "/search", "/s2/favicons"],
"play.googleapis.com": ["/log/batch"],
Expand Down Expand Up @@ -2914,6 +2914,8 @@ def generate_full_coverage_cases() -> List[TestCase]:
cases.append(TestCase("Privacy: Adapty SDK Net-Config Block", "https://fallback.adapty.io/api/v1/sdk/company/public_live_2pe9Z1ae/app/net-config.json", RES_BLOCK_403, "V45.81 Adapty 訂閱變現分析 SDK 初始化配置封鎖；adapty.io wildcard；Paywall A/B 測試/購買漏斗追蹤/設備識別，與 adjust.com/appsflyer.com 同類"))
# --- V45.80 阿里雲 SAF 裝置安全稽核封鎖 ---
cases.append(TestCase("Privacy: Aliyun SAF Device Shanghai Block", "https://cn-shanghai.device.saf.aliyuncs.com/", RES_BLOCK_403, "V45.80 阿里雲 SAF 裝置安全稽核框架封鎖；saf.aliyuncs.com wildcard 覆蓋所有地區節點"))
# --- V46.14 Coupang add-to-cart PATH_EXEMPTIONS ---
cases.append(TestCase("BugFix: Coupang AddToCart API Pass", "https://cmapi.tw.coupang.com/modular/v1/endpoints/2356/sdp/v2/widget/products/263103262441478/add-to-cart?sdp-st=H4sIAAAAAAAA_12RXU_CMBSG_0uvuUBBF3YHAmpi2HTgLs1hPYzG0ta2Y0HCf7f7YJ1crel5-r7Pyc7kme1sqkEpJvIEOWY2Bg0HQ8LzZUBmaC3qT-AFRsoyKWKWfaOukYbYCGZjzTJcyzzn2D0mhSgpCXfADTqseb2GbR-Rlh8ZCe-DYDIajoPJePQQBI9VbSFoHzS1GNLm3iTsF0k4dODiiMJOs9qsdSIIloTkY_EWTefEMUupS9B0rYHiq8eumUvLan_v-gJVyxa0FyhlOx64d90xL013zowPSGU5FXQl3TdpW3ytUY4kq2j1lUZp5bcuZS3wJA-KMxAZengvSxdSjxurGeiuci85rSpYLjbqduyC58jZEfXp9s_Qf_eefy9AWGZPnvwh4V0vKKb0ulq7WGLBFqa3HFX0Zr1a3kcqprIq9fIH60FytXsCAAA&metaData=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", RES_ALLOW, "V46.14 cmapi.tw.coupang.com /add-to-cart 放行；避免下單流程 API 被關鍵字掃描誤封"))
# --- V46.13 PATH_EXEMPTIONS anchor hardening ---
cases.append(TestCase("BugFix: G2A Query Injection Should Still Block", "https://mobile-api.g2a.com/api/v1/track?next=/api/v1/transactions/6a09142d-1e85-4fa6-9f35-2fa7f7425f65", RES_BLOCK_403, "V46.13 PATH_EXEMPTIONS 僅比對 pathname（不含 query），query 夾帶豁免字串不可繞過 L1"))
# --- V46.12 G2A transactions API PATH_EXEMPTIONS ---
Expand Down
10 changes: 5 additions & 5 deletions URL-Ultimate-Filter-Surge.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
/**
* @file URL-Ultimate-Filter-Surge.js
* @version 46.13
* @date 2026-05-30
* @version 46.14
* @date 2026-05-31
* @rules 1527 total (311 domains, 430 critical paths, 403 path keywords, 109 param rules)
* @build SSOT Compiler — Dual-Target Compilation
*/

const CONFIG = { DEBUG_MODE: false, AC_SCAN_MAX_LENGTH: 600 };
const SCRIPT_VERSION = '46.13';
const SCRIPT_BUILD = 'V46.13 (2026-05-30) | 1527 rules | 3148 tests';
const SCRIPT_VERSION = '46.14';
const SCRIPT_BUILD = 'V46.14 (2026-05-31) | 1527 rules | 3150 tests';
const EMPTY_SET = new Set();

const OAUTH_SAFE_HARBOR = {
Expand Down Expand Up @@ -1010,7 +1010,7 @@ const RULES = {
'/go/_events'
])],
['cmapi.tw.coupang.com', new Set([
'/vendor-items/', '/option-list'
'/vendor-items/', '/option-list', '/add-to-cart'
])],
['coupangcdn.com', new Set([
'/image/ccm/banner/', '/image/cmg/oms/banner/'
Expand Down
18 changes: 9 additions & 9 deletions URL-Ultimate-Filter-Tampermonkey.user.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
// ==UserScript==
// @name URL Ultimate Filter V46.13
// @name URL Ultimate Filter V46.14
// @namespace http://tampermonkey.net/
// @version 46.13
// @date 2026-05-30
// @description SSOT 前端防護盾牌 V46.13 (2026-05-30) | 1527 rules — 極簡盾牌 UI，獨立計數器，點擊外部自動收合。
// @version 46.14
// @date 2026-05-31
// @description SSOT 前端防護盾牌 V46.14 (2026-05-31) | 1527 rules — 極簡盾牌 UI，獨立計數器，點擊外部自動收合。
// @rules 1527 total (311 domains · 430 critical · 109 param)
// @author Jerry
// @match *://*/*
Expand All @@ -15,15 +15,15 @@
'use strict';
/**
* @file URL-Ultimate-Filter-Tampermonkey.js
* @version 46.13
* @date 2026-05-30
* @version 46.14
* @date 2026-05-31
* @rules 1527 total (311 domains, 430 critical paths, 403 path keywords, 109 param rules)
* @build SSOT Compiler — Dual-Target Compilation
*/

const CONFIG = { DEBUG_MODE: false, AC_SCAN_MAX_LENGTH: 600 };
const SCRIPT_VERSION = '46.13';
const SCRIPT_BUILD = 'V46.13 (2026-05-30) | 1527 rules | 3148 tests';
const SCRIPT_VERSION = '46.14';
const SCRIPT_BUILD = 'V46.14 (2026-05-31) | 1527 rules | 3150 tests';
const EMPTY_SET = new Set();

const OAUTH_SAFE_HARBOR = {
Expand Down Expand Up @@ -1025,7 +1025,7 @@ const RULES = {
'/go/_events'
])],
['cmapi.tw.coupang.com', new Set([
'/vendor-items/', '/option-list'
'/vendor-items/', '/option-list', '/add-to-cart'
])],
['coupangcdn.com', new Set([
'/image/ccm/banner/', '/image/cmg/oms/banner/'
Expand Down
Loading