uBlock Origin Rule to block non-safenet-content on safenet

[lightyear]

@Onaka

We can change the API address to http://api.safenet .This will allow us to use this filter without problems.

In accordance with what has been said on the launcher security topic:

@Krishna_Kumar

The idea behind the api.safenet endpoint was to make it a standard endpoint for consuming APIs for the browser based clients to make it work across platforms. When we move to mobile (say android), the launcher can be a different implantation using IPC services (just for discussion sake). If we have a standard endpoint for invoking APIs, then it would make it easy to get the same client code to work cross platform.

@lightyear

Thanks for explaining. That makes a lot of sense and sounds like an excellent approach. I think the Launcher/Team should encourage/enforce the usage of that endpoint (rather than ‘localhost’) more.

I believe the usage of api.safnet is the better way to go, and disallowing localhost is a way to better enforce that. Agreeably, this breaks many current apps (including my very own Ghost in the Safe), but that means our apps are broken and should be fixed, rather than including that bad rule. I will see how I can make that happen for GitS soon, but I’ll not add that rule in the topic description as I recommend against it.