Skip to content

LAN lists no longer support forced updates #4149

Description

@krystian3w

Prerequisites

  • I verified that this is not a filter list issue. Report any issues with filter lists or broken website functionality in the uAssets issue tracker.
  • This is NOT a YouTube, Facebook or Twitch report. These sites MUST be reported by clicking their respective links.
  • This is not a support issue or a question. For support, questions, or help, visit /r/uBlockOrigin.
  • I performed a cursory search of the issue tracker to avoid opening a duplicate issue.
  • The issue is not present after disabling uBO in the browser.
  • I checked the documentation to understand that the issue I am reporting is not normal behavior.

I tried to reproduce the issue when...

  • uBO is the only extension.
  • uBO uses default lists and settings.
  • using a new, unmodified browser profile.

Description

In Firefox I have a certain list on HTTPS over localhost and I noticed that the update for it no longer works with the LAN intruder block list.

I've checked several times to see if I've deleted any important stock dynamic or trust rules for moz-extension-scheme and they don't seem to be related to this.

from Logger Image

A specific URL where the issue occurs.

moz-extension://uuid.moz-extension-scheme

Steps to Reproduce

  1. Create a local list with 1 filter,
  2. Start a local HTTP(S) server to see this list in Firefox,
  3. Accept self-signed HTTPS certificate in Firefox,
    • It seems to me that the HTTPS server mock-up built into Firefox 153 DevTools is not suitable for STR;
  4. Add it to the filter list panel,
  5. Activate LAN Intruder Block List,
  6. Click the clock icon to force an update.

Expected behavior

It is expected that this workaround will not be required:

*$strict3p,ipaddress=lan,from=~0.0.0.0|~127.0.0.1|~[::1]|~[::]|~local|~localhost,badfilter
*$strict3p,ipaddress=lan,from=~0.0.0.0|~127.0.0.1|~[::1]|~[::]|~local|~localhost|~moz-extension-scheme

Troubleshooting information

uBlock Origin: 1.75.1b5
Firefox: 151
filterset (summary):
 network: 256112
 cosmetic: 44310
 scriptlet: 35229
 html: 3857
listset (total-discarded, last-updated):
 removed:
  POL-0: null
  POL-3: null
 added:
  https://localhost/local.txt?_trusted=true: 519-0, never
  ublock-experimental: 21-0, 16m
  block-lan: 91-0, 16m
 default:
  user-filters: 0-0, never
  ublock-filters: 54699-76, 16m
  ublock-badware: 10360-17, 16m
  ublock-privacy: 4158-2, 16m
  ublock-unbreak: 2898-1, 16m
  ublock-quick-fixes: 602-13, 14m Δ
  easylist: 87200-148, 14m Δ
  adguard-spyware-url: 2692-125, 16m
  easyprivacy: 56779-51, 16m
  urlhaus-1: 117560-11, 16m
  plowe-0: 3552-1050, 16m
filterset (user): [empty]
userSettings:
 advancedUserEnabled: true
 cnameUncloakEnabled: false
 userFiltersTrusted: true
hiddenSettings:
 autoCommentFilterTemplate: {{url}}
 filterAuthorMode: true
 popupPanelLockedSections: 32
 trustedListPrefixes: ublock- user- https://localhost/local.txt?_trusted=true https://ublockorigin.github.io/uBOL-home/tests/
supportStats:
 allReadyAfter: 12384 ms
 maxAssetCacheWait: 94 ms
 cacheBackend: indexedDB

Similar in Firefox 153.

Activity

  1. gorhill commented on Oct 8, 2026

    @gorhill
    Member

    Need feedback about whether it's fixed in latest dev build.

  2. krystian3w commented on Oct 8, 2026

    @krystian3w
    Author

    From my perspective, it doesn't seem to be enough for https://localhost/path/file.txt.

    The good news is that I can use a local IP address like 10.x.x.x / 172.x.x.x / 192.x.x.x instead of “localhost/” with https://simplewebserver.org/docs/https.html (but not yet with Rebex).

    In the logger, the same block reason:

    https://github.com/user-attachments/assets/bd6dd7ae-bc39-4626-879c-0bf992b161a8

    I'd be surprised if two Windows installations and as many as three Firefox profiles were damaged. In theory, I could remove the extension, restart the browser twice, install the latest dev build, enable the LAN intruder blocklist, and check if that fixes the update mechanism for localhost in both applications that offer a server—or at least the IP address in Rebex.

    It's more likely that a simple server from https://www.rebex.net/tiny-web-server/ / https://simplewebserver.org/docs/https.html are tricking the network at localhost (and IP for Rebex), causing the newer version to detect this as a LAN breach.

    I still need to rule out the possibility that the VPN network card connected to the ZeroTier network might have started being detected as a LAN from the outside. I'm just not sure if I can reconfigure ZeroTier on my own to work in a mode other than just turning it on when needed (e.g., at night and on weekends, but not middle of the day).

  3. added a commit that references this issue on Oct 8, 2026
  4. changed the title [-]New public suffix logic doesn't work with browser-scheme?[/-] [+]LAN lists no longer support forced updates[/+] on Oct 8, 2026
  5. krystian3w commented on Oct 8, 2026

    @krystian3w
    Author

    It's working now with the fix to the tab.js file.

  6. added
    bugSomething isn't working
    fixedissue has been addressed
    and removed
    feedback neededneed more feedback from the issue submitter
    on Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingfixedissue has been addressed

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions