0

We recently launched our website, and things are going great so far. But since last night we have seen that some end-users browsers are making calls to strange URLs. We don't know how or why the browser makes those calls. Our guess is that the user's browser was compromised and they might have unknowingly installed some browser extension that makes those calls.

Can we could make the browser to stop making such calls and only whitelist our domain and a few additional domains like GTM and other tracking apps? Of course, we need to handle this at the front-end level, but I'm not sure how to set a whitelist URLs list for fetch. Is there a way to do it?

New contributor
Bharat Soni is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
3
  • 1
    The description is too unclear for me. Do you mean that the browser is supposed to access specific URLs at your site but instead is accessing unexpected URLs, but still on your site (i.e. example.com/expected vs. example.com/unexpected)? Could you provide specific examples of such unexpected vs. expected access? What make you sure that it is the browser accessing these URLs (valid user session?) ... And instead of making speculations how it might be caused, please be more specific at describing the problem you see. Jun 24 at 4:44
  • You want to restrict the public's browsers from connecting to URLs? How would you have that control? Why would you want that control on the public?
    – schroeder
    Jun 24 at 7:21
  • @SteffenUllrich my bad if the description was unclear. We are using Sentry to check error logs and API requests on the user's browser. since last night we are seeing a strange behavior of XHR requests to "maralo.ru/ooo_js" and "zamant.ru/ooo_js" with a few query params. I looked on the internet and found that these are malicious websites, and sometimes they get installed as an extension to the user's browser. So I was wondering if there is a way to stop those calls. or some XHR/fetch function hook where I can write something to notify users. hope it's clear. Jun 24 at 8:01

0

Browse other questions tagged or ask your own question.