Allow scripts by domain, only on that domain

[haku]

First off, I love noscript. One of the best plugins out there, and I recommend it to everybody. Very good. Thank you to the developer(s?) for putting together this awesome plugin.

I'd like to request a new feature for noscript however. Right now, noscript allows for allowing/forbidding scripts by the domain that script is linked to. For the most part this is good, however it would be nice to have a feature whereby scripts would be allowed for a particular domain, but only on the domain that you are currently looking at.

Specifically, I'm thinking of Facebook. In order to use Facebook, their scripts have to be allowed. This is fine by me. But what bothers me, is that I go to CNN, and it is giving me recommendations on stories my FB friends liked. It is able to do this because I have allowed facebook scripts. So it would be nice if I were able to allow FB scripts, but only on facebook.com (and other sites on which I may decide I want to let them know my data). As it stands right now, I have to allow FB scripts while I'm on FB, but then forbid them before I go to other sites.

Hopefully you can implement this feature sometime in the future. Thank you.

[Alan Baxter]

http://noscript.net/faq#qa8_10

[Lucas Malor]

Ok... so if I want to do what haku asked (and I want), can I do:

Code: Select all

Site ALL
Deny INCLUSION

and after this add, for example:

Code: Select all

Site .gstatic
Accept from ALL

?

[Giorgio Maone]

Ok... so if I want to do what haku asked (and I want), can I do:

Code: Select all

Site ALL
Deny INCLUSION

and after this add, for example:

Code: Select all

Site .gstatic
Accept from ALL

?

The opposite.
Whichever rule in a ruleset matches first, prevents rules below from being parsed.
Therefore if your intent is allowing .gstatic.com to be included everywhere, and any other inclusion to be denied, you should use

Code: Select all

Site .gstatic.com
Accept

Site *
Accept from SELF++
Deny INCLUSION

Notice that

• You don't need "from ALL", it's implied
• Site * matches any site
• Unless you want *any* inclusion to be banned (even from the same site) you need to insert "Accept from SELF++" (i.e. accept from the same domain or subdomains or parent domains) before the final Deny.

Hope it helps.