Added ability to regulate malicious redirects to Google Chrome



It was announced that Google Chrome will have the ability to block at the browser level that Google Chrome will be redirected to an unexpected link while browsing the website.

Chromium Blog: Expanding user protections on the web
https://blog.chromium.org/2017/11/expanding-user-protections-on-web.html

Chrome will start blocking annoying website redirects - The Verge
https://www.theverge.com/2017/11/8/16617794/chrome-redirect-blocking-announced-google

On November 8, 2017, Google announced that Google Chrome, which will be released three times in January 2018 and beyond, will sequentially introduce three new features as countermeasures against unauthorized redirection and navigation. According to the blog, one of the five feedback reports to Google will encounter undesirable content by redirecting etc., and Google sees this problem severely and takes a measure.

◆ 1. Redirect problem with iframe tag embedded by third party
A situation where one of the frequently asked feedback from users is unintentionally navigated to an unexpected page without permission. In many cases, the redirect is done by the [iframe] tag embedded in the content by a third party, and the author of the page of the browsing source is often not able to grasp the actual situation at all. In order to solve this, in "Chrome 64" scheduled for stable release in January 2018, Google notifies the toolbar with information without displaying the redirect caused by third party iframe tag It will be changed.

The screenshot below shows what happens when Chrome detects and blocks a redirection by iframe. You can see that "Redirect blocked." (Redirect blocked) is displayed at the bottom of the page.


◆ 2. Issue of transitioning to an unintended page by the original tab behind opening a new tab
When content that is in view while browsing the site is opened in a new tab, the original tabs that you have been browsing may have been skipped to a different page without permission. This has been devised as a means of circumventing the pop-up blocker function installed in Chrome, and Google is watching this problem.

In order to solve this problem, Google plans to implement this function in "Chrome 65" which is planned to be released in stable in March 2018, to display this information on the tool bar and to prevent unintended redirection. This means that the page you are browsing will be left as it is.

◆ 3. Problem of inducing unintended contents by camouflaging buttons
In some malicious pages, there are cases where guiding the access to another content by wearing a movie play button etc. can be seen. As a result, the user may have clicked thought with the intention of seeing the movie, but an unintended page is displayed, another popup is displayed as if he / she intended to press the "×" button, and advertisements and contents which one would not want to see It may be expanded. It is said that button operation and transparent overlay as described above are used for such operation and it is difficult to automatically detect it.

In order to solve this problem,Google Safe BrowsingIn January 2018 I will add a mechanism similar to Chrome's pop-up blocker in the same way that protects users from illegal content. This will block the contents of malicious pages.


In addition to this, on Google, site owners can check the safety of their sitetoolHas been released. By viewing the report provided here, the site owner can check whether malicious content is found in its own contents. If such content continues to be left unattended for 30 days, new windows and tabs opened in your site will be banned.

in Software, Posted by darkhorse_log