[Privoxy-users] Whitelist full URLs in HTTPS traffic with Privoxy

[Fabian Keil]

Thibault Bartolone via Privoxy-users <privoxy-users at lists.privoxy.org> wrote on 2025-01-15 at 11:46:01:

> I managed to configure Privoxy to intercept HTTPS traffic:- generated CA and certs in Privoxy- configured Firefox to use the proxy and installed the CA cert- FF reaches HTTPS sites transparently through Privoxy without any problem.
> Now what I want is block all HTTP/HTTPS traffic, and just allow ONE HTTPS URL (not one domain, one full URL):ALLOW https://acme.org/urlthingBLOCK everything else
> 
> Here's my configuration:
> /etc/privoxy/config# Commented out existing config to have the minimal thing:#actionsfile match-all.action#actionsfile default.action#actionsfile user.action#actionsfile regression-tests.action
> # this included file is recognized, because it has an impact on my testactionsfile myrules.action
> /etc/privoxy/myrules.action{ +https-inspection -block }acme.org/urlthing
> { +https-inspection +block }/Nothing works, all site are blocked, whatever I do. I tried infinite variations of the above (removing/adding block or https-inspection, changing + to - )
> I don't find any example of a working configuration online.

First block "everything", then make an exception:

{ +https-inspection +block{Forbidden request} }
/
{ +https-inspection -block }
acme.org/urlthing

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-users/attachments/20250116/9e9a7b8d/attachment.bin>