{"action":"created","issue":{"url":"https://api.github.com/repos/gorhill/uBlock/issues/624","labels_url":"https://api.github.com/repos/gorhill/uBlock/issues/624/labels{/name}","comments_url":"https://api.github.com/repos/gorhill/uBlock/issues/624/comments","events_url":"https://api.github.com/repos/gorhill/uBlock/issues/624/events","html_url":"https://github.com/gorhill/uBlock/issues/624","id":55755436,"number":624,"title":"Option to block WebRTC IP calls","user":{"login":"logos88","id":4170088,"avatar_url":"https://avatars.githubusercontent.com/u/4170088?v=3","gravatar_id":"","url":"https://api.github.com/users/logos88","html_url":"https://github.com/logos88","followers_url":"https://api.github.com/users/logos88/followers","following_url":"https://api.github.com/users/logos88/following{/other_user}","gists_url":"https://api.github.com/users/logos88/gists{/gist_id}","starred_url":"https://api.github.com/users/logos88/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/logos88/subscriptions","organizations_url":"https://api.github.com/users/logos88/orgs","repos_url":"https://api.github.com/users/logos88/repos","events_url":"https://api.github.com/users/logos88/events{/privacy}","received_events_url":"https://api.github.com/users/logos88/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/gorhill/uBlock/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-01-28T13:23:51Z","updated_at":"2015-01-28T18:37:08Z","closed_at":null,"body":"It would be any way to add an option to avoid to show our IP because of WebRTC? In this link is described the problem:\r\n\r\nhttp://www.ghacks.net/2015/01/27/sites-may-detect-the-local-ip-address-in-browsers-supporting-webrtc/\r\n\"So how does it work?\r\nWebRTC allows requests to be made to STUN servers (Session Traversal Utilities for NAT) which return local and public IP addresses for the system that is used by the user.\r\nThe results can be accessed using JavaScript which means that the only requirements for this to work are WebRTC support in the browser and JavaScript.\r\n\r\nProtection\r\nAd-blockers such as Adblock Plus or Ghostery don't block these requests as they are made outside of the \"normal XMLHttpRequest procedure\".\r\nThe only extensions that block these look ups are JavaScript blocking extensions such as NoScript for Firefox. It is naturally also possible to disable JavaScript to prevent this from happening but this renders many websites unusable as well\"."},"comment":{"url":"https://api.github.com/repos/gorhill/uBlock/issues/comments/71889556","html_url":"https://github.com/gorhill/uBlock/issues/624#issuecomment-71889556","issue_url":"https://api.github.com/repos/gorhill/uBlock/issues/624","id":71889556,"user":{"login":"chrisaljoudi","id":2351359,"avatar_url":"https://avatars.githubusercontent.com/u/2351359?v=3","gravatar_id":"","url":"https://api.github.com/users/chrisaljoudi","html_url":"https://github.com/chrisaljoudi","followers_url":"https://api.github.com/users/chrisaljoudi/followers","following_url":"https://api.github.com/users/chrisaljoudi/following{/other_user}","gists_url":"https://api.github.com/users/chrisaljoudi/gists{/gist_id}","starred_url":"https://api.github.com/users/chrisaljoudi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chrisaljoudi/subscriptions","organizations_url":"https://api.github.com/users/chrisaljoudi/orgs","repos_url":"https://api.github.com/users/chrisaljoudi/repos","events_url":"https://api.github.com/users/chrisaljoudi/events{/privacy}","received_events_url":"https://api.github.com/users/chrisaljoudi/received_events","type":"User","site_admin":false},"created_at":"2015-01-28T18:37:08Z","updated_at":"2015-01-28T18:37:08Z","body":"> uBlock does prevent it by the blocking inline-scripting\r\n\r\nThe behavior the article describes doesn't require inline scripting. Even if µBlock blocks inline scripting (I don't know why you mention this), it wouldn't prevent the IP address from being \"revealed\". Demonstrably, it doesn't.\r\n\r\nNoScript might be able to do it by blocking out the script completely. What are you suggesting µBlock does/should do?"}}