Merge pull request #910 from sandboxie-plus/isaak654-patch-templates

Split anti-phishing rules per browser
This commit is contained in:
DavidXanatos 2021-06-15 17:11:59 +02:00 committed by GitHub
commit 1d47b7c366
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 85 additions and 44 deletions

View File

@ -103,7 +103,7 @@ ForceProcess=iexplore.exe
Tmpl.Title=#4326,Internet Explorer
Tmpl.Class=WebBrowser
OpenFilePath=iexplore.exe,%Favorites%
OpenFilePath=firefox.exe,%Favorites%
#OpenFilePath=firefox.exe,%Favorites%
[Template_IExplore_Favorites_RecoverFolder]
Tmpl.Title=#4327
@ -160,51 +160,41 @@ OpenKeyPath=iexplore.exe,HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\
#
[Template_Firefox_Force]
Tmpl.Title=#4323,Firefox
Tmpl.Title=#4323,Mozilla Firefox
Tmpl.Class=WebBrowser
ForceProcess=firefox.exe
[Template_Firefox_Bookmarks_DirectAccess]
Tmpl.Title=#4336,Firefox
Tmpl.Title=#4336,Mozilla Firefox
Tmpl.Class=WebBrowser
OpenFilePath=firefox.exe,%Tmpl.Firefox%\bookmark*
OpenFilePath=firefox.exe,%Tmpl.Firefox%\places*
OpenFilePath=firefox.exe,%Tmpl.Firefox%\favicons.sqlite
[Template_Firefox_Cookies_DirectAccess]
Tmpl.Title=#4328,Firefox
Tmpl.Title=#4328,Mozilla Firefox
Tmpl.Class=WebBrowser
OpenFilePath=firefox.exe,%Tmpl.Firefox%\cookies*
[Template_Firefox_Passwords_DirectAccess]
Tmpl.Title=#4331,Firefox
Tmpl.Title=#4331,Mozilla Firefox
Tmpl.Class=WebBrowser
OpenFilePath=firefox.exe,%Tmpl.Firefox%\logins.json
OpenFilePath=firefox.exe,%Tmpl.Firefox%\key*.db
[Template_Firefox_Phishing_DirectAccess]
Tmpl.Title=#4337,Firefox/Waterfox/Pale Moon/SeaMonkey
Tmpl.Class=WebBrowser
ProcessGroup=<FirefoxPrograms>,firefox.exe,waterfox.exe,palemoon.exe,seamonkey.exe
OpenFilePath=<FirefoxPrograms>,%ProgramFiles%\*\browser\blocklist*
OpenFilePath=<FirefoxPrograms>,%Tmpl.PaleMoon%\blocklist*
OpenFilePath=<FirefoxPrograms>,%Tmpl.WaterFox%\blocklist*
OpenFilePath=<FirefoxPrograms>,%Tmpl.SeaMonkey%\blocklist*
OpenFilePath=<FirefoxPrograms>,%Tmpl.Firefox%\cert*.db
OpenFilePath=<FirefoxPrograms>,%Tmpl.PaleMoon%\cert*.db
OpenFilePath=<FirefoxPrograms>,%Tmpl.WaterFox%\cert*.db
OpenFilePath=<FirefoxPrograms>,%Tmpl.SeaMonkey%\cert*.db
OpenFilePath=<FirefoxPrograms>,%Local AppData%\Mozilla\Firefox\Profiles\*\safebrowsing*
OpenFilePath=<FirefoxPrograms>,%Local AppData%\Waterfox\Profiles\*\safebrowsing*
OpenFilePath=<FirefoxPrograms>,%Local AppData%\Mozilla\SeaMonkey\Profiles\*\safebrowsing*
[Template_Firefox_Session_DirectAccess]
Tmpl.Title=#4340,Firefox
Tmpl.Title=#4340,Mozilla Firefox
Tmpl.Class=WebBrowser
OpenFilePath=firefox.exe,%Tmpl.Firefox%\sessionstore.js*
[Template_Firefox_Phishing_DirectAccess]
Tmpl.Title=#4337,Mozilla Firefox
Tmpl.Class=WebBrowser
OpenFilePath=firefox.exe,%Tmpl.Firefox%\cert9.db
OpenFilePath=firefox.exe,%Local AppData%\Mozilla\Firefox\Profiles\*\safebrowsing*
[Template_Firefox_Profile_DirectAccess]
Tmpl.Title=#4338,Firefox
Tmpl.Title=#4338,Mozilla Firefox
Tmpl.Class=WebBrowser
OpenFilePath=firefox.exe,%Tmpl.Firefox%\*
@ -243,6 +233,13 @@ Tmpl.Title=#4340,Waterfox
Tmpl.Class=WebBrowser
OpenFilePath=waterfox.exe,%Tmpl.Waterfox%\sessionstore.js*
[Template_Waterfox_Phishing_DirectAccess]
Tmpl.Title=#4337,Waterfox
Tmpl.Class=WebBrowser
OpenFilePath=waterfox.exe,%Tmpl.WaterFox%\blocklist.xml
OpenFilePath=waterfox.exe,%Tmpl.WaterFox%\cert9.db
OpenFilePath=waterfox.exe,%Local AppData%\Waterfox\Profiles\*\safebrowsing*
[Template_Waterfox_Profile_DirectAccess]
Tmpl.Title=#4338,Waterfox
Tmpl.Class=WebBrowser
@ -283,6 +280,12 @@ Tmpl.Title=#4340,Pale Moon
Tmpl.Class=WebBrowser
OpenFilePath=palemoon.exe,%Tmpl.PaleMoon%\sessionstore.js
[Template_PaleMoon_Phishing_DirectAccess]
Tmpl.Title=#4337,Pale Moon
Tmpl.Class=WebBrowser
OpenFilePath=palemoon.exe,%Tmpl.PaleMoon%\blocklist.xml
OpenFilePath=palemoon.exe,%Tmpl.PaleMoon%\cert9.db
[Template_PaleMoon_Profile_DirectAccess]
Tmpl.Title=#4338,Pale Moon
Tmpl.Class=WebBrowser
@ -323,6 +326,13 @@ Tmpl.Title=#4340,SeaMonkey
Tmpl.Class=WebBrowser
OpenFilePath=seamonkey.exe,%Tmpl.SeaMonkey%\sessionstore.js
[Template_SeaMonkey_Phishing_DirectAccess]
Tmpl.Title=#4337,SeaMonkey
Tmpl.Class=WebBrowser
OpenFilePath=seamonkey.exe,%Tmpl.SeaMonkey%\blocklist.xml
OpenFilePath=seamonkey.exe,%Tmpl.SeaMonkey%\cert9.db
OpenFilePath=seamonkey.exe,%Local AppData%\Mozilla\SeaMonkey\Profiles\*\safebrowsing*
[Template_SeaMonkey_Profile_DirectAccess]
Tmpl.Title=#4338,SeaMonkey
Tmpl.Class=WebBrowser
@ -390,28 +400,10 @@ OpenFilePath=chrome.exe,%Tmpl.Chrome%\Sync Data\*
OpenFilePath=chrome.exe,%Tmpl.Chrome%\Sync Extension Settings\*
[Template_Chrome_Phishing_DirectAccess]
Tmpl.Title=#4337,Chromium browsers
Tmpl.Title=#4337,Google Chrome
Tmpl.Class=WebBrowser
ProcessGroup=<ChromePrograms>,chrome.exe,msedge.exe,dragon.exe,iron.exe,vivaldi.exe,brave.exe,Maxthon.exe,opera.exe,browser.exe
OpenFilePath=<ChromePrograms>,%Local AppData%\Google\Chrome\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Google\Chrome\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\Microsoft\Edge\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Microsoft\Edge\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\Microsoft\Edge\User Data\SmartScreen
OpenFilePath=<ChromePrograms>,%Local AppData%\Microsoft\Edge\User Data\Ad Blocking
OpenFilePath=<ChromePrograms>,%Local AppData%\Comodo\Dragon\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Comodo\Dragon\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\Chromium\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Chromium\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\Vivaldi\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Vivaldi\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\BraveSoftware\Brave-Browser\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\BraveSoftware\Brave-Browser\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\Maxthon\Application\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Maxthon\Application\User Data\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Tmpl.Opera%\CertificateRevocation
OpenFilePath=<ChromePrograms>,%Local AppData%\Yandex\YandexBrowser\User Data\Safe Browsing*
OpenFilePath=<ChromePrograms>,%Local AppData%\Yandex\YandexBrowser\User Data\CertificateRevocation
OpenFilePath=chrome.exe,%Local AppData%\Google\Chrome\User Data\Safe Browsing*
OpenFilePath=chrome.exe,%Local AppData%\Google\Chrome\User Data\CertificateRevocation
[Template_Chrome_Profile_DirectAccess]
Tmpl.Title=#4338,Google Chrome
@ -464,6 +456,14 @@ Tmpl.Class=WebBrowser
OpenFilePath=msedge.exe,%Tmpl.Edge%\Sync Data\*
OpenFilePath=msedge.exe,%Tmpl.Edge%\Sync Extension Settings\*
[Template_Edge_Phishing_DirectAccess]
Tmpl.Title=#4337,Microsoft Edge
Tmpl.Class=WebBrowser
OpenFilePath=msedge.exe,%Local AppData%\Microsoft\Edge\User Data\Safe Browsing*
OpenFilePath=msedge.exe,%Local AppData%\Microsoft\Edge\User Data\CertificateRevocation
OpenFilePath=msedge.exe,%Local AppData%\Microsoft\Edge\User Data\SmartScreen
OpenFilePath=msedge.exe,%Local AppData%\Microsoft\Edge\User Data\Ad Blocking
[Template_Edge_Profile_DirectAccess]
Tmpl.Title=#4338,Microsoft Edge
Tmpl.Class=WebBrowser
@ -509,6 +509,12 @@ Tmpl.Title=#4339,Comodo Dragon
Tmpl.Class=WebBrowser
OpenFilePath=dragon.exe,%Tmpl.Dragon%\Preferences*
[Template_Dragon_Phishing_DirectAccess]
Tmpl.Title=#4337,Comodo Dragon
Tmpl.Class=WebBrowser
OpenFilePath=dragon.exe,%Local AppData%\Comodo\Dragon\User Data\Safe Browsing*
OpenFilePath=dragon.exe,%Local AppData%\Comodo\Dragon\User Data\CertificateRevocation
[Template_Dragon_Profile_DirectAccess]
Tmpl.Title=#4338,Comodo Dragon
Tmpl.Class=WebBrowser
@ -563,6 +569,12 @@ Tmpl.Title=#4324,SRWare Iron
Tmpl.Class=WebBrowser
OpenFilePath=iron.exe,%Tmpl.Iron%\Sync Data\*
[Template_Iron_Phishing_DirectAccess]
Tmpl.Title=#4337,SRWare Iron
Tmpl.Class=WebBrowser
OpenFilePath=iron.exe,%Local AppData%\Chromium\User Data\Safe Browsing*
OpenFilePath=iron.exe,%Local AppData%\Chromium\User Data\CertificateRevocation
[Template_Iron_Profile_DirectAccess]
Tmpl.Title=#4338,SRWare Iron
Tmpl.Class=WebBrowser
@ -672,6 +684,12 @@ Tmpl.Class=WebBrowser
OpenFilePath=vivaldi.exe,%Tmpl.Vivaldi%\Sync Data\*
OpenFilePath=vivaldi.exe,%Tmpl.Vivaldi%\Sync Extension Settings\*
[Template_Vivaldi_Phishing_DirectAccess]
Tmpl.Title=#4337,Vivaldi
Tmpl.Class=WebBrowser
OpenFilePath=vivaldi.exe,%Local AppData%\Vivaldi\User Data\Safe Browsing*
OpenFilePath=vivaldi.exe,%Local AppData%\Vivaldi\User Data\CertificateRevocation
[Template_Vivaldi_Profile_DirectAccess]
Tmpl.Title=#4338,Vivaldi
Tmpl.Class=WebBrowser
@ -726,6 +744,12 @@ Tmpl.Title=#4324,Brave Browser
Tmpl.Class=WebBrowser
OpenFilePath=brave.exe,%Tmpl.Brave%\Sync Data\*
[Template_Brave_Phishing_DirectAccess]
Tmpl.Title=#4337,Brave Browser
Tmpl.Class=WebBrowser
OpenFilePath=brave.exe,%Local AppData%\BraveSoftware\Brave-Browser\User Data\Safe Browsing*
OpenFilePath=brave.exe,%Local AppData%\BraveSoftware\Brave-Browser\User Data\CertificateRevocation
[Template_Brave_Profile_DirectAccess]
Tmpl.Title=#4338,Brave Browser
Tmpl.Class=WebBrowser
@ -775,6 +799,12 @@ Tmpl.Title=#4339,Maxthon 6
Tmpl.Class=WebBrowser
OpenFilePath=Maxthon.exe,%Tmpl.Maxthon_6%\Preferences*
[Template_Maxthon6_Phishing_DirectAccess]
Tmpl.Title=#4337,Maxthon 6
Tmpl.Class=WebBrowser
OpenFilePath=Maxthon.exe,%Local AppData%\Maxthon\Application\User Data\Safe Browsing*
OpenFilePath=Maxthon.exe,%Local AppData%\Maxthon\Application\User Data\CertificateRevocation
[Template_Maxthon6_Profile_DirectAccess]
Tmpl.Title=#4338,Maxthon 6
Tmpl.Class=WebBrowser
@ -829,6 +859,11 @@ Tmpl.Title=#4324,Opera
Tmpl.Class=WebBrowser
OpenFilePath=opera.exe,%Tmpl.Opera%\Sync Data\*
[Template_Opera_Phishing_DirectAccess]
Tmpl.Title=#4337,Opera
Tmpl.Class=WebBrowser
OpenFilePath=opera.exe,%Tmpl.Opera%\CertificateRevocation
[Template_Opera_Profile_DirectAccess]
Tmpl.Title=#4338,Opera
Tmpl.Class=WebBrowser
@ -885,6 +920,12 @@ Tmpl.Title=#4324,Yandex Browser
Tmpl.Class=WebBrowser
OpenFilePath=browser.exe,%Tmpl.Yandex%\Sync Data\*
[Template_Yandex_Phishing_DirectAccess]
Tmpl.Title=#4337,Yandex Browser
Tmpl.Class=WebBrowser
OpenFilePath=browser.exe,%Local AppData%\Yandex\YandexBrowser\User Data\Safe Browsing*
OpenFilePath=browser.exe,%Local AppData%\Yandex\YandexBrowser\User Data\CertificateRevocation
[Template_Yandex_Profile_DirectAccess]
Tmpl.Title=#4338,Yandex Browser
Tmpl.Class=WebBrowser