windscribe.com: nuisance

[MasterKia]

Prerequisites

• This is not a support issue or a question
• I performed a cursory search of the issue tracker to avoid opening a duplicate issue
• I am running the latest version of uBlock Origin

I tried to reproduce the issue when...

• uBO is the only extension
• uBO with default lists/settings
• using a new, unmodified browser profile

URL(s) where the issue occurs

https://windscribe.com/signup

Describe the issue

If I'm using Windscribe, I can't create another account (to give to someone else for example, because VPN site is blocked here so people without VPN can't access the site to create an account).

Screenshot(s)

You already have a Windscribe account. Creating multiple accounts is prohibited.
https://user-images.githubusercontent.com/17685483/174468730-dd0c7ca2-10a8-4777-a982-87be305feccc.png

uBlock Origin version

1.43.0

Browser name and version

Chrome

Settings

Notes

Client-side check
windscribe.com##+js(set, ha_int, 0) doesn't work.

signup_click = false;
$("#signupform").submit(function(e) {
            var buffer = (Date.now() / 1000) - (86400 * 2);
            var ha_int = parseInt(ha);
            if (ha_int >= buffer) {
                $('.content_message').text("You already have a Windscribe account. Creating multiple accounts is prohibited.").show();
                return false;
            }

[gwarser]

ha_int is local in this function. uBO overrides the top global variable. Aborting it will break the "submit" function. ha is from local storage. This is unlikely, but maybe set on window.localStorage.ha will work?

[MasterKia]

but maybe set on window.localStorage.ha will work?

##+js(set, window.localStorage.ha, 0)? tried, didn't work.

##+js(aopr, window.localStorage) does kinda work, but after clicking on "Create account":

Is the check now suddenly server-side? I don't think so.

[MasterKia]

What about deleting that part from site code?
Like how ##noscript:remove() can remove "noscript" tag, or using HTML filtering (but Firefox only unfortunately).

[stephenhawk8054]

You can only remove a whole script under a tag, cannot remove part of a script.

[MasterKia]

How they are able to detect the VPN being on without checking against an IP list is beyond me.

[mapx-]

They are checking it (the ip) on server side (probably a cloudflare feature - that's why that generic Access denied cloudflare page)