InformAction Forums

That's mostly a non-issue. Piggybacking on another extension doesn't grant any special powers to malware; it just makes it more stealthy. A malicious extension will still be fully capable of doing its damage if you install it, regardless of WebExtensions or the lack of them.

[quote="barbaz"]Oh, this - https://forums.informaction.com/viewtopic.php?f=19&t=21795[/quote]

Yes.

Oh, this - https://forums.informaction.com/viewtopic.php?f=19&t=21795

[quote="barbaz"]Sorry, I'm not making sense of that.[/quote]
Sorry if I'm confused and/or confusing. It's been some time since my reading on malware and extensions. My simplified belief, I thought malware could piggy back on legitimate extensions thus the movement to WebExtensions? I thought WebExtensions would help in mitigating this threat. But in the meantime, if you had already installed extensions before this threat was present, the extensions were ok. Thus my reluctance to install extensions at this time.

[quote="planet222"]I know I'm sounding paranoid now, but if I reinstall an older version, isn't this, in part anyway, what was driving WebExtensions?[/quote]
Sorry, I'm not making sense of that.

I know I'm sounding paranoid now, but if I reinstall an older version, isn't this, in part anyway, what was driving WebExtensions? I haven't installed any new extensions in years. I've used the extensions internal updaters only.

Actually one last thing. If you reset that surrogate back to default, and downgrade NoScript to 2.9.5.3, does it work again?

Old NoScript @
[url]https://addons.mozilla.org/addon/noscript/versions[/url]
*or*
[url]https://noscript.net/feed?c=100&t=a[/url]

I deleted the value and tried to log in and got the error again.

Correct. Right-click the entry > Modify, delete everything and then click OK.

When you say blank out, do you mean leave the value empty of code?

[quote="planet222"]Has V5 forked towards WebExtensions? I've read some about it awhile ago.[/quote]
Not really. It's true that V5 has an embedded WebExtension. But V5 currently does not require WebExtensions at all.

For more info see https://forums.informaction.com/viewtopic.php?f=8&t=22524

[quote="planet222"]Sorry. Noop.[/quote]
That's OK, there is still one more thing we can try. If you [b]blank out[/b] about:config > noscript.surrogate.ga.replacement, does the page work without Allowing google-analytics?

[quote="planet222"]barbaz, on the account that I've not upgraded to V5, is there any harm in not upgrading?[/quote]
That partially depends on your usage of NoScript. See the [url=https://noscript.net/changelog]changelog[/url] for list of the features and bugfixes you're missing out on.

barbaz, on the account that I've not upgraded to V5, is there any harm in not upgrading?

Has V5 forked towards WebExtensions? I've read some about it awhile ago.

Sorry. Noop.

How much JavaScript knowledge do you have?

I ask in case you know enough JS for us to guide you in the process of trying to fix the surrogate.