ABE entry: how to write?

Post a reply


In an effort to prevent automatic submissions, we require that you complete the following challenge.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[flash] is OFF
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: ABE entry: how to write?

Re: ABE entry: how to write?

by JLJ » Sun Jun 03, 2018 12:29 am

See while I understand the concept of sandboxing (heck, I use Sandboxie from time to time) I wasn't 100% certain how it worked in the context of NoScript's ABE functions. Suffice it say I'll come back to GµårÐïåñ's detailed explanation every few years, maybe I'll get it down the line. ;-) Thanks all.

Re: ABE entry: how to write?

by GµårÐïåñ » Sat Jun 02, 2018 2:20 am

barbaz wrote:EDIT oops, GµårÐïåñ beat me to it :)
No worried, your explanation was more thorough, I was simply trying to simplify a very complex principle, that's all. :ugeek: Well done 8-)

Re: ABE entry: how to write?

by barbaz » Sat Jun 02, 2018 1:34 am

Sandbox means something like "allow the request, but prevent active content from running in the context of the response". This means that Sandbox applied to a top-level document or subdocument would block all active content in that page, as if you had set NoScript's script permissions to block all sites on that page. But Sandbox applied to an image or a JS file wouldn't do anything. The latter case (JS file) is a slightly tricky one. Although the JS file is itself active content, active content in a webpage runs in the context of the webpage, not the individual JS files it calls. So blocking active content from running in the context of the JS file itself won't actually block anything, because there isn't anything to block there.

Does this explanation help?

EDIT oops, GµårÐïåñ beat me to it :)

Re: ABE entry: how to write?

by GµårÐïåñ » Sat Jun 02, 2018 1:24 am

JLJ wrote:Question: that final Sandbox is not something I recall from the examples I've seen -- is there a basic explanation of its function?
Over simplified way of thinking about it would be "limiting the scope" or "boxing it in".

Re: ABE entry: how to write?

by JLJ » Sat Jun 02, 2018 1:14 am

As always, a thousand thank-you's!

Question: that final Sandbox is not something I recall from the examples I've seen -- is there a basic explanation of its function?

Re: ABE entry: how to write?

by barbaz » Fri Jun 01, 2018 9:31 pm

Code: Select all

Site .jquery.com
Accept from .jquery.com .example.com
Deny INC(SCRIPT, OBJ, FONT, XHR, MEDIA)
Sandbox
Then whitelist jquery.com in NoScript Options > Whitelist.

ABE entry: how to write?

by JLJ » Fri Jun 01, 2018 8:36 pm

I'm conversant in NoScript generally but only as an end-user with zero coding experience and a brain that makes sure it won't get any more. ;-)
Was hoping somebody wouldn't mind writing a single user ABE entry for me because I'm afraid of the consequences of getting it wrong. All I want to do is:

automatically allow scripts from jquery.com only when I'm on example.com

and disallow it by default on all other sites. I've read ABE documentation and examples but sad to say it's a bit daunting. OK very daunting. Really very extremely daunting.

Thanks in advance to anyone willing to help!

Top