Page 1 of 1

Settings: noscript checkbox

Posted: Tue Mar 19, 2024 11:58 pm
by harryray22
I was looking through the settings and I just noticed that in the default, trusted and untrusted section there is a checkbox for 'noscript'. What does that refer too? I'm a bit confused by it.

Thanks.

Re: Settings: noscript checkbox

Posted: Wed Mar 20, 2024 12:39 am
by barbaz
See the sticky - viewtopic.php?t=26285

Re: Settings: noscript checkbox

Posted: Wed Mar 20, 2024 12:57 pm
by harryray22
Thanks, to be honest I didn't really totally understand it.
In general, is allowing this OK and is it better to allow it , or does allowing it present a security risk of any kind?

Re: Settings: noscript checkbox

Posted: Wed Mar 20, 2024 3:03 pm
by barbaz
It's generally better to allow it since it helps sites degrade gracefully when scripts are disabled. The security risk would involve a <meta> refresh inside a <noscript> element redirecting you somewhere bad, but Firefox can intercept those: about:config > set accessibility.blockautorefresh to true.

NoScript defaults to allowing this in Default and Trusted presets, and disallowing it in Untrusted preset.

Re: Settings: noscript checkbox

Posted: Thu May 23, 2024 7:20 pm
by harryray22
Thanks, the other thing I don't quite get is the "any site" option in the custom section. I usually set it in the drop down box to the site I'm on.

Re: Settings: noscript checkbox

Posted: Tue May 28, 2024 3:50 pm
by therube
"any site"
Good question.
Looks like it's going to be this, viewtopic.php?p=106306#p106306.

Knowing that, I'm going to use it, actually.
Like at dslreports.com, I'll keep dslreports.com itself at Default, but Always allow dsl.net, but only on dslreports.com.
Likewise, newegg.com, I'll keep newegg.com itself at Default, but Always allow neweggimages.com, but only on newegg.com.

That way, dsl.net & neweggimages.com will never have an effect - anywhere, except on the respective sites, & only if I allow the respective site. (In this case, most likely those two domains only appear only on the respective sites.)


(https://www.newegg.com/, today, in SeaMonkey is throwing up bogus,
"You don't have permission to access "http://www.newegg.com/black-acer..." on this server.",
messages.
Idiots.


useragent change got it working, but still. morons.)