{"id":7741,"date":"2026-06-27T11:24:23","date_gmt":"2026-06-27T09:24:23","guid":{"rendered":"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/"},"modified":"2026-06-27T11:24:23","modified_gmt":"2026-06-27T09:24:23","slug":"priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo","status":"publish","type":"post","link":"https:\/\/viva.racunalniske-novice.com\/es\/una-popular-extension-de-chrome-para-bloquear-anuncios-oculta-codigo-peligroso\/","title":{"rendered":"Una popular extensi\u00f3n de Chrome para bloquear anuncios oculta c\u00f3digo peligroso."},"content":{"rendered":"<p class=\"wp-block-paragraph\">Investigadores de seguridad de Island analizaron recientemente la popular herramienta &quot;Adblock for YouTube&quot;. Si bien este complemento cumple su funci\u00f3n de manera confiable, eliminando los anuncios de la plataforma y de sitios externos, su arquitectura oculta un grave riesgo de seguridad. El c\u00f3digo permite la ejecuci\u00f3n remota de scripts en cualquier sitio web que visites.<br><br>Los expertos se\u00f1alan que, en la pr\u00e1ctica, esto implica la posibilidad de leer el contenido de la p\u00e1gina, robar datos e incluso gestionar cuentas personales y empresariales en nombre del usuario. Por el momento, no hay indicios de que esta vulnerabilidad se haya explotado para realizar ataques. Sin embargo, la mera existencia de esta funci\u00f3n, junto con los enlaces a otros programas eliminados, es motivo de gran preocupaci\u00f3n. La Chrome Web Store elimin\u00f3 recientemente complementos relacionados, como \u00abAdblock for Chrome\u00bb, \u00abAdblock for You\u00bb y \u00abAdBlock Suite\u00bb, debido a la presencia de c\u00f3digo malicioso.<br><br>La extensi\u00f3n ha estado disponible en la tienda web oficial desde 2014, pero la propiedad cambi\u00f3 cuatro a\u00f1os despu\u00e9s. Entre 2018 y junio de 2024, inclu\u00eda el SDK de Unistream para la inserci\u00f3n de anuncios, y desde febrero de 2025, incorpora mecanismos para la ejecuci\u00f3n de scripts externos. La herramienta utiliza la biblioteca de c\u00f3digo abierto AdGuard con peque\u00f1as funciones denominadas &quot;scriptlets&quot;. El problema radica en que el servidor determina cu\u00e1les se ejecutar\u00e1n. La funci\u00f3n &quot;trusted-create-element&quot; puede crear un elemento HTML en una p\u00e1gina, y si el servidor le env\u00eda c\u00f3digo malicioso, este se ejecuta sin problemas en segundo plano. Los investigadores advierten que esta capacidad se encuentra actualmente inactiva, pero puede activarse con un simple cambio en el servidor del desarrollador, sin la revisi\u00f3n de Google ni una actualizaci\u00f3n del complemento.<br><br>Otro inconveniente es que la extensi\u00f3n funciona en todos los sitios web, ya que la comprobaci\u00f3n de seguridad de la URL es superficial. El c\u00f3digo solo verifica si la cadena &quot;youtube.com&quot; aparece en alguna parte de la direcci\u00f3n, lo que significa que puede enga\u00f1arse f\u00e1cilmente con direcciones como bank.example.com\/search?q=youtube.com o facebook.com\/page?ref=youtube.com.<br><br>Tras la publicaci\u00f3n del informe, Mathias Rochus, fundador de AdBlock Ltd., respondi\u00f3. Asegur\u00f3 que las funciones nunca se han utilizado indebidamente ni se utilizar\u00e1n de forma indebida, y anunci\u00f3 una actualizaci\u00f3n urgente. Esta corregir\u00e1 la validaci\u00f3n de URL, que ahora requerir\u00e1 una coincidencia exacta con el host de YouTube, y deshabilitar\u00e1 la inyecci\u00f3n de scripts del lado del servidor. La correcci\u00f3n debe ser aprobada por Google antes de su lanzamiento.<\/p>","protected":false},"excerpt":{"rendered":"<p>Varnostni raziskovalci podjetja Island so nedavno pod drobnogled vzeli izjemno priljubljeno orodje &#8220;Adblock for YouTube&#8221;. Kljub temu, da dodatek zanesljivo opravlja svoje delo in odstranjuje oglase s platforme ter zunanjih strani, njegova arhitektura skriva resno varnostno tveganje. Koda namre\u010d omogo\u010da oddaljen prenos in izvajanje poljubnih skript na kateri koli spletni strani, ki jo obi\u0161\u010dete. Strokovnjaki [&hellip;]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[70],"tags":[440,478,482],"class_list":["post-7741","post","type-post","status-publish","format-standard","hentry","category-spletni-brskalniki","tag-chrome-brskalnik","tag-informacijska-varnost","tag-kibernetska-varnost"],"acf":{"subtitle":"","heading":"","summary":"Raziskava raz\u0161iritve \"Adblock for YouTube\" z 10 milijoni prenosov je razkrila spe\u010do funkcijo za oddaljen zagon zlonamerne kode na vseh spletnih straneh. Razvijalci podjetja AdBlock Ltd so po opozorilu \u017ee napovedali izdajo varnostnega popravka.","thumbnail_small":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2021\/03\/130321_ChromeRAM-560x315.jpg","thumbnail_large":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2021\/03\/130321_ChromeRAM.jpg","thumbnail_caption":"Novi Google Chrome je precej prijaznej\u0161i do sistemskega pomnilnika!","gallery":"","video_gallery":null,"author":"","links":null,"sources":[{"title":"thehackernews","url":"https:\/\/thehackernews.com\/2026\/06\/chrome-ad-blocker-with-10m-installs.html?m=1"}],"skip_language":[]},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo - Ra\u010dunalni\u0161ke novice<\/title>\n<meta name=\"description\" content=\"Raziskava raz\u0161iritve &quot;Adblock for YouTube&quot; z 10 milijoni prenosov je razkrila spe\u010do funkcijo za oddaljen zagon zlonamerne kode na vseh spletnih straneh. Razvijalci podjetja AdBlock Ltd so po opozorilu\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/posts\/7741\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo - Ra\u010dunalni\u0161ke novice\" \/>\n<meta property=\"og:description\" content=\"Varnostni raziskovalci podjetja Island so nedavno pod drobnogled vzeli izjemno priljubljeno orodje &#8220;Adblock for YouTube&#8221;. Kljub temu, da dodatek zanesljivo opravlja svoje delo in odstranjuje oglase s platforme ter zunanjih strani, njegova arhitektura skriva resno varnostno tveganje. Koda namre\u010d omogo\u010da oddaljen prenos in izvajanje poljubnih skript na kateri koli spletni strani, ki jo obi\u0161\u010dete. Strokovnjaki [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/viva.racunalniske-novice.com\/es\/una-popular-extension-de-chrome-para-bloquear-anuncios-oculta-codigo-peligroso\/\" \/>\n<meta property=\"og:site_name\" content=\"Ra\u010dunalni\u0161ke novice\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-27T09:24:23+00:00\" \/>\n<meta name=\"author\" content=\"sinusiks\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"sinusiks\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/\",\"url\":\"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/\",\"name\":\"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo - Ra\u010dunalni\u0161ke novice\",\"isPartOf\":{\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#website\"},\"datePublished\":\"2026-06-27T09:24:23+00:00\",\"dateModified\":\"2026-06-27T09:24:23+00:00\",\"author\":{\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4\"},\"breadcrumb\":{\"@id\":\"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/viva.racunalniske-novice.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#website\",\"url\":\"https:\/\/viva.racunalniske-novice.com\/en\/\",\"name\":\"Ra\u010dunalni\u0161ke novice\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/viva.racunalniske-novice.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4\",\"name\":\"sinusiks\",\"sameAs\":[\"https:\/\/ml.racunalniske-novice.com\"],\"url\":\"https:\/\/viva.racunalniske-novice.com\/es\/author\/sinusiks\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo - Ra\u010dunalni\u0161ke novice","description":"Raziskava raz\u0161iritve \"Adblock for YouTube\" z 10 milijoni prenosov je razkrila spe\u010do funkcijo za oddaljen zagon zlonamerne kode na vseh spletnih straneh. Razvijalci podjetja AdBlock Ltd so po opozorilu","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/posts\/7741","og_locale":"es_ES","og_type":"article","og_title":"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo - Ra\u010dunalni\u0161ke novice","og_description":"Varnostni raziskovalci podjetja Island so nedavno pod drobnogled vzeli izjemno priljubljeno orodje &#8220;Adblock for YouTube&#8221;. Kljub temu, da dodatek zanesljivo opravlja svoje delo in odstranjuje oglase s platforme ter zunanjih strani, njegova arhitektura skriva resno varnostno tveganje. Koda namre\u010d omogo\u010da oddaljen prenos in izvajanje poljubnih skript na kateri koli spletni strani, ki jo obi\u0161\u010dete. Strokovnjaki [&hellip;]","og_url":"https:\/\/viva.racunalniske-novice.com\/es\/una-popular-extension-de-chrome-para-bloquear-anuncios-oculta-codigo-peligroso\/","og_site_name":"Ra\u010dunalni\u0161ke novice","article_published_time":"2026-06-27T09:24:23+00:00","author":"sinusiks","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"sinusiks","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/","url":"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/","name":"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo - Ra\u010dunalni\u0161ke novice","isPartOf":{"@id":"https:\/\/viva.racunalniske-novice.com\/en\/#website"},"datePublished":"2026-06-27T09:24:23+00:00","dateModified":"2026-06-27T09:24:23+00:00","author":{"@id":"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4"},"breadcrumb":{"@id":"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/viva.racunalniske-novice.com\/priljubljeni-chrome-dodatek-za-blokiranje-oglasov-skriva-nevarno-kodo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/viva.racunalniske-novice.com\/en\/"},{"@type":"ListItem","position":2,"name":"Priljubljeni Chrome dodatek za blokiranje oglasov skriva nevarno kodo"}]},{"@type":"WebSite","@id":"https:\/\/viva.racunalniske-novice.com\/en\/#website","url":"https:\/\/viva.racunalniske-novice.com\/en\/","name":"Ra\u010dunalni\u0161ke novice","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/viva.racunalniske-novice.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4","name":"sinusiks","sameAs":["https:\/\/ml.racunalniske-novice.com"],"url":"https:\/\/viva.racunalniske-novice.com\/es\/author\/sinusiks\/"}]}},"_links":{"self":[{"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/posts\/7741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/comments?post=7741"}],"version-history":[{"count":0,"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/posts\/7741\/revisions"}],"wp:attachment":[{"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/media?parent=7741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/categories?post=7741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/es\/wp-json\/wp\/v2\/tags?post=7741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}