NoScript Whitelist Question

[ddigas]

Hello all,

While trying to synchronize some NoScript whitelists I had on different PCs/laptops I noticed the following:

Each site added to the whitelist seems to add 3 entries to the whitelist file (this can be seen if you export the whitelist and open it with a text editor). So if for example I add the domain dimitris.com the following lines will be added to the whitelist:

dimitris.com
http://dimitris.com
https://dimitris.com

The above also seems to apply to domains that are marked as untrusted.

However I noticed that this does not apply to IPs or sites that include 2nd level domains of any type (eg. subdomain1.domain1.com or subdomain2.domain2.net). In all cases where we have IPs/sites that fall under this category only 1 entry is created. If for example I add the domain test.dimitris.com the only entry created will be the following:

test.dimitris.com

As a result my question is:

Does anyone know if this is standard functionality and if so does whitelist functionality apply normally to sites of this category?

For example if I add test.dimitris.com is this enough to have whitelist functionality as expected or will it be necessary to add http://test dimitris.com and https://test.dimitris.com to ensure that whitelisting will work in all cases?

I have noticed that when adding such sites manually these appear in the NoScript whitelist window as separate entries while this does not apply to sites that do not use 2nd level domains.

If somebody can shed some light on the matter it would be much appreciated.

Best Regards,

Dimitris,

[Thrawn]

Which checkboxes have you enabled under Options-Appearance? NoScript can whitelist/blacklist base domains, exact domains, or full addresses (protocol + exact domain + port). I haven't examined exactly what gets added to the whitelist in each case, but anything falling within the whitelisted entry will be allowed, eg allowing the base domain 'google.com' will allow 'www.google.com', 'mail.google.com', 'https://encrypted.google.com', etc.

[ddigas]

I believe I am using the default settings - all checkboxes are checked except the one for Full Domains & Full Addresses.