List of scripts for which NS runs surrogate[UPD 23 Feb 2013]

Ask for help about NoScript, no registration needed to post

List of scripts for which NS runs surrogate[UPD 23 Feb 2013]

Postby Tom T. » Thu Mar 01, 2012 8:50 am

As explained in the article Surrogate Script, NoScript will by default run a "surrogate script" for various data-mining, advertising, and other scripts that leak privacy. These "fake scripts" make pages happy when they would otherwise refuse to function unless you allowed the scripts, yet they have been "neutered" so as not to leak privacy-sensitive data.

The script sources that will be replaced are located in about:config, and easily found by typing surr in the Filter Bar (called "Search Bar" in more recent Firefox).
However, some users are not comfortable in about:config, given the nasty warning that one must click past, and the exact script names as you see them in your browser may not be the same as they are identified in about:config.

Therefore, here is a plain-English listing of the affected sources. If any part of the script name contains the below, you may leave it blocked and know that the surrogate will run. Alphabetized for your convenience, which is not the same order in which they appear in about:config per the above paragraph.

No user action is required. Simply leave the associated script in the default-deny zone, or mark it as Untrusted when you encounter it. Then there should be no need ever to allow them.
NOTE: If you allow or temp-allow them, the *real* script runs.

Based on Firefox 18.0.2, NoScript 2.6.5.8rc3. Will be updated as time permits.


adagionet.com (inclusion only) ...added 9 May 2012 in NS 2.4.1rc2
addons.mozilla.org/
adf.ly
adriver (.ru)
adscale (.de)
adsense / pagead2.googlesyndication.com
adtiger
.bidvert
.binlay
connect.facebook.net/en-_US/all/.js
digg.com/newsbar
dimtus/imageteam
disquis.com/*/build/themes/
edge.quantserve.com or quantserve.com (Quantcast Corporation)
facebook.com --- for cookies only; substitutes a cookie with expiration in 1970.
google-analytics.com
Google Plus1, or apis.google.com/js/plusone.js
https www. google search (variants for links and for Thumbs)
imagebam.com
imagebunk
imagehaven.net
imagevenue.com
imdb.com/video/
liutilities.com ... updated 30 April 2012
mirago
mirando
pickbucks
picksee
revsci.net
skimlinks.com ... added 30 April 2012, in NS 2.4rc6
platform.twitter.com (3rd-party; doesn't replace all Twitter scripting, including home site)
uniblue.com ... updated 30 April 2012
yieldmanager,com


Please find a way to show your appreciation to Giorgio Maone for developing these custom-built tools to enable us to make our pages work, while keeping a bit more of what little privacy we still have left.

- Tom T.

last update 23 Feb 2013
Mozilla/5.0 (Windows NT 5.1; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Tom T.
Field Marshal
 
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: Listing of script sources for whioh surrogates are provi

Postby DJ-Leith » Thu Mar 01, 2012 9:08 pm

Tom T.

Listing of script sources for whioh surrogates are provided


I think there is a 'wee typo' in the Subject.

IMHO, it is very useful to document this.
I appreciate all the time you, the other Mods and especially Giorgio spend on developing NoScript and helping us to use it.

Thank you!

DJ-Leith
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27
DJ-Leith
Senior Member
 
Posts: 81
Joined: Thu Aug 04, 2011 4:23 pm

Re: Listing of script sources for which surrogates are provi

Postby Tom T. » Fri Mar 02, 2012 1:07 am

@ DJ-Leith:

Looks like Spell-Check failed again. :o

Thanks for the catch. I see that it's already been fixed.

And thank you for the kind words. :)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.27) Gecko/20120216 Firefox/3.6.27
Tom T.
Field Marshal
 
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: List of scripts for which NS runs surrogate [UPD 30 Apr

Postby bmazak » Tue May 08, 2012 1:18 am

I also appreciate all the time you, the other Mods and especially Giorgio spend on developing NoScript and helping us to use it.
After trying to get rid of some pop ups on e-bay, particular, the one that keeps say thanks here's you free cards which I hate because it is a lie, nothing is free so it is false advertising, I noticed I now can not search on e-bay. Is the a surrogate script that can be make for e-bay? It's OK though because I can use Amazon mean while.
Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0
bmazak
 
Posts: 7
Joined: Thu Feb 11, 2010 7:33 pm

Re: List of scripts for which NS runs surrogate [UPD 30 Apr

Postby bmazak » Tue May 08, 2012 1:24 am

One of the major problems I have seen is something in the blacklist is often required to run things on the page such as an input field or search fields. It is hard to know which of these sites on a page that has been blocked is the one for the input field or search. Any help there?
Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0
bmazak
 
Posts: 7
Joined: Thu Feb 11, 2010 7:33 pm

Re: List of scripts for which NS runs surrogate [UPD 30 Apr

Postby Tom T. » Tue May 08, 2012 4:03 am

bmazak wrote:One of the major problems I have seen is something in the blacklist is often required to run things on the page such as an input field or search fields. It is hard to know which of these sites on a page that has been blocked is the one for the input field or search. Any help there?

Sometimes it *is* trial-and-error, temporarily allowing one script at a time until it works. If you have specific sites in mind, please post them.

There may be clues in the script names. Please see NoScript Quick Start Guide, and find the section with the bold notation, "Updated 25 Jan 2012:", for information on recognizing a site's secondary servers and their scripts.

The JSView add-on will give you the full names (full file paths) of the scripts that are running on a page. Even if you cannot read Javascript itself, these full names may give more information about the purpose of each individual script. You can access this by clicking on the JSView icon, or by right-clicking on the page, click "View Page Info", and the JSView tab will be visible. Click it to see the list.

As for eBay, if you can post the exact steps needed to reproduce what you described, then perhaps we can indeed find a way to work around it, or create a surrogate if needed. Do you have to have an account there to produce this issue?

You may also find the RequestPolicy add-on useful in blocking pop-ups, third-party offers, etc. that originate outside the site. But will Firefox's built-in pop-up blocker not work on the eBay pop-ups themselves? (Firefox Tools > Options > Content > check "Block Popup Windows".)


Side note: I think I'll remove the addendum to the OP about intending to lock this topic, as it seems as good a place as any to discuss surrogate-related issues.
If there are objections from users, other Mods, or, of course, Giorgio, such posts can always be split off into new topics. But the threads on disappearing icons and Why must I "Temporarily allow all this page" REPEATEDLY? seem very useful for centralizing those discussions, and for users to search them before posting. Any objections?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/12.0
Tom T.
Field Marshal
 
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: List of scripts for which NS runs surrogate [UPD 30 Apr

Postby Tom T. » Tue May 08, 2012 11:42 pm

Sorry, I should also have pointed you to the sticky post, SOME SITES YOU MIGHT NOT WANT TO ALLOW.

There are more than 100 sites listed there, whose principal purpose of scripting is for advertising, data-mining, or both.
So you can usually eliminate them from your trial-and-error process, which saves a lot of time.
Or you can mark them Untrusted when they appear, which means you won't see them in the main menu again. This shortens the menu greatly.

You can still find them in the sub-menu, NS Menu > Untrusted, in case you wish to temporarily allow them, to help support your favorite sites with the advertising revenue, but that's up to you. If a site's ads are intrusive, distracting, privacy-invasive, or offensive, I'm not going to allow them. Let the site find better ad agencies.

If any of these script sources (sites) are truly needed to make a site function, there is probably already a Surrogate Script for it, as per the sticky post at the top of this topic.

I hope this helps make the process easier. Feel free to ask any further questions.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/12.0
Tom T.
Field Marshal
 
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: List of scripts for which NS runs surrogate [UPD 9 May 2

Postby milithruldur » Wed Nov 28, 2012 7:15 am

Would NS consider expanding its surrogates support with those found in Ghostery? Ghostery also provides surrogate scripts for web elements it blocks. The surrogate scripts can be found inside <profile_directory>/ghostery/surrogates.db.
Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/17.0 Firefox/17.0 Debian/sid
milithruldur
 

Re: List of scripts for which NS runs surrogate [UPD 9 May 2

Postby Thrawn » Wed Nov 28, 2012 10:32 am

milithruldur wrote:Would NS consider expanding its surrogates support with those found in Ghostery? Ghostery also provides surrogate scripts for web elements it blocks. The surrogate scripts can be found inside <profile_directory>/ghostery/surrogates.db.

The question is whether pages break without the surrogates.

If you can point to examples of pages that can't work without allowing data-miners etc, then I'm sure Giorgio would be happy to talk about including surrogates for them.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Linux i686; rv:15.2) Gecko/20121127 PaleMoon/15.2.1
User avatar
Thrawn
Senior Member
 
Posts: 1718
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia

Re: List of scripts for which NS runs surrogate[UPD 23 Feb 2

Postby Fry-kun » Tue Apr 02, 2013 10:17 pm

Here's one for richrelevance.com (breaks some functionality on walmart.com (namely, store availability JS popup)):

Code: Select all
RR={}; rr_flush_onload=r3_placement=r3=r3_item=r3_common=function(){if(typeof Proxy==='undefined'){var f=arguments.callee;return f.__noSuchMethod__=f.Event=f;}var p=Proxy.createFunction({get:function(proxy, name){return name in Object.prototype?Object.prototype[name]:p;}},function(){return p;});return p;}();
Mozilla/5.0 (X11; Linux i686; rv:19.0) Gecko/20100101 Firefox/19.0
Fry-kun
 
Posts: 1
Joined: Thu Mar 07, 2013 10:37 pm

Re: List of scripts for which NS runs surrogate[UPD 23 Feb 2

Postby Tani1389 » Sat May 11, 2013 11:29 am

I didn't get how to Blacklist those scripts by NoScript. I would like to Blacklist those, for all the websites.
I also would like to overall blacklist Google Analytics, so that the NoScript bar won't pop up when only this script is blocked. Can someone help me?
Mozilla/5.0 (Windows NT 6.2; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0
Tani1389
 

Re: List of scripts for which NS runs surrogate[UPD 23 Feb 2

Postby Thrawn » Sun May 12, 2013 10:14 pm

What you want is the 'Untrusted' submenu.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0
User avatar
Thrawn
Senior Member
 
Posts: 1718
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia

Re: List of scripts for which NS runs surrogate[UPD 23 Feb 2

Postby Tani1389 » Mon May 13, 2013 3:13 pm

How is it possible to type in or mark scripts so that they appear in the untrusted menu/list?
Mozilla/5.0 (Windows NT 6.2; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0
Tani1389
 

Re: List of scripts for which NS runs surrogate[UPD 23 Feb 2

Postby Thrawn » Tue May 14, 2013 2:25 am

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0
User avatar
Thrawn
Senior Member
 
Posts: 1718
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia

Re: List of scripts for which NS runs surrogate[UPD 23 Feb 2

Postby uriadder » Tue Jul 09, 2013 6:04 am

Tom T. wrote:... NoScript will by default run a "surrogate script"...

So they are run no matter whether or not scripting is allowed on that particular domains?
Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/20100101 Firefox/17.0
uriadder
 

Next

Return to NoScript Support

Who is online

Users browsing this forum: Bing [Bot] and 8 guests