Settings: noscript checkbox

[harryray22]

I was looking through the settings and I just noticed that in the default, trusted and untrusted section there is a checkbox for 'noscript'. What does that refer too? I'm a bit confused by it.

Thanks.

[barbaz]

See the sticky - viewtopic.php?t=26285

[harryray22]

Thanks, to be honest I didn't really totally understand it.
In general, is allowing this OK and is it better to allow it , or does allowing it present a security risk of any kind?

[barbaz]

It's generally better to allow it since it helps sites degrade gracefully when scripts are disabled. The security risk would involve a <meta> refresh inside a <noscript> element redirecting you somewhere bad, but Firefox can intercept those: about:config > set accessibility.blockautorefresh to true.

NoScript defaults to allowing this in Default and Trusted presets, and disallowing it in Untrusted preset.

[harryray22]

Thanks, the other thing I don't quite get is the "any site" option in the custom section. I usually set it in the drop down box to the site I'm on.

[therube]

"any site"

Good question.
Looks like it's going to be this, viewtopic.php?p=106306#p106306.

Knowing that, I'm going to use it, actually.
Like at dslreports.com, I'll keep dslreports.com itself at Default, but Always allow dsl.net, but only on dslreports.com.
Likewise, newegg.com, I'll keep newegg.com itself at Default, but Always allow neweggimages.com, but only on newegg.com.

That way, dsl.net & neweggimages.com will never have an effect - anywhere, except on the respective sites, & only if I allow the respective site. (In this case, most likely those two domains only appear only on the respective sites.)


(https://www.newegg.com/, today, in SeaMonkey is throwing up bogus,
"You don't have permission to access "http://www.newegg.com/black-acer..." on this server.",
messages.
Idiots.


useragent change got it working, but still. morons.)