trusting called sites based upon calling site

[wizodd]

Sometimes, there are sites which I would label as trusted when called from one site, but untrusted when called from another.

Currently there is no way to do this, so I end up temporarily o.k.ing them on each site I trust, but I can't mark them as generally untrusted because then NS won't tell me (unless I specificaly look,) that they exist and aren't being called (unless another called site is unknown.)

This an issue for anyone else?

[Alan Baxter]

It's a sticky. Discussion: Site Specific Permissions Policy

[Giorgio Maone]

Actually this can be easily done already, by using ABE:

Code: Select all

Site some.child-site.com
Allow from trusted.parent-site1.com trusted.parent-site2.com trusted.parent-site3.com
Deny

[Alan Baxter]

If I recall correctly, you have to add some.child-site.com to the whitelist too.

Sorry, since I haven't customized ABE yet, I forgot this is an option. Can this be added to http://noscript.net/faq#faqsec8?

[Giorgio Maone]

If I recall correctly, you have to add some.child-site.com to the whitelist too.

That's correct, of course, since the whitelist act on script/embedding blocking, while ABE acts on HTTP traffic. Therefore if the site is not whitelisted, the script won't run anyway.

Sorry, since I haven't customized ABE yet, I forgot this is an option. Can this be added to http://noscript.net/faq#faqsec8?

Probably a good idea.

[Giorgio Maone]

http://noscript.net/faq#qa8_10