Forum Discussion

Jemmy1228's avatar
Jemmy1228
Copper Contributor
Apr 26, 2024

Why Edge 124.0.2478.51 is inserting referral code for Baidu?

Baidu is one of the most commonly used search engines in China.

However, Edge 124.0.2478.51 is automatically inserting referral code (?tn=68018901_16_pg) for Baidu through homepage and auto suggestion in the address bar. This behavior is probably in the grayscale testing phase, so not everyone on this version will witness this behavior. And only users with GeoID (HKEY_CURRENT_USER\Control Panel\International\Geo) set to China CN will be affected.

 

I'll illustrate two examples how Edge is inserting referral code automatically.

For example, when you start Edge directly, the homepage it first opens up will be "https://www.baidu.com/?tn=68018901_16_pg" even if you set it to be "https://www.baidu.com/" in the settings.

Another example is that if you typed "baidu.c" in the address bar, the auto suggestion would suggest "https://www.baidu.com/?tn=68018901_16_pg" even if this is not in your history or favorites.

 

So, I'm wondering why Edge is doing so? Is this the development team's intended behavior? Can I turn off this behavior directly?

This behavior is actually violating my rights to choose my own homepage and misleading us to visit Baidu with this referral code through auto suggestion.

 

I'm definitely sure this is NOT caused by other programs or configuration on my PC, rather it is caused by Edge itself, as the referral code and a kill switch to turn off this behavior has been found in the `msedge.dll` file.

 

 

Edge Version: 124.0.2478.51
Filename: msedge.dll
Path: C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.51
SHA1: 1902C3088DAC60B6FA23B5099B6F231C1874DCAB
SHA256: 3D2061D843F330AB260B5E5640038DB3AE4D87A254F621ADC150C356109EF77C

 

 

 

The referral code is found in the `msedge.dll` file offset 0xe186ea0

 

A switch called `msInsertBaiduCode` is found in the `msedge.dll` file offset 0xf151040

 

I really hope that you could explain why Edge is compiled with this behavior, and you could supply a method to turn off this behavior.

Hope to hear from you soon.

  • z7z1988's avatar
    z7z1988
    Copper Contributor
    我也是,很无语,竟然是微软给我弄小尾巴!!!
    • Wenbin008's avatar
      Wenbin008
      Copper Contributor
      edge: 设置-隐私、搜索和服务-地址栏和搜索-搜索建议和筛选器 关闭:使用我键入的XXXXXX
      • z7z1988's avatar
        z7z1988
        Copper Contributor

        Wenbin008 其实这并不是设置不设置的问题,带着也无所谓,但是,重点的是,很多博主都验证了这个“小尾巴”是写在DLL里的,我个人感觉这不是官方行为,我感觉整个系统都不安全了。

  • ediwang's avatar
    ediwang
    Brass Contributor

    Jemmy1228 

    惊不惊喜,意不意外?Edge不仅有百度的代码,甚至还有支付宝的能量树哦(钱包页面,可关闭),另外Edge还会在后台偷偷下载"微软电脑管家"。

Resources