HKUL Search Assistant

Critical Bug of HKUL Search Assistant 3.0.5

On 30th Aug, the extension upgraded to its 3.0.5 version. However, there is a critical bug: in `background.js`, the variable `urlDomain` is assigned to be the domain name of the page with the leftmost part dropped, e.g., if the URL is “http://ccl.pku.edu.cn:8080/ccl_corpus/”, then `urlDomain` will be “pku.edu.cn”, which is contained in `preferredString`. Therefore, the plugin will try to proxy it via the EZProxy server, although doing so will cause the website to detect abnormal access and report an error.

To make matters worse, “google.com” is also included in `preferredString`, which means that our visits to Google-owned sites will also be captured by the plugin. This will cause the tab URL to be modified when we use these products, which may result in the page being “refreshed” incorrectly.

At present, a large number of users have been affected by this stupid issue. I hope you can fix it as soon as possible and sincerely apologize to all members of the university community.