Search found 24 matches
- Mon Dec 30, 2013 5:30 pm
- Forum: NoScript Support
- Topic: [RESOLVED] Google hangout/chat XSS issue
- Replies: 5
- Views: 2788
Re: Google hangout/chat XSS issue
Cool. Thought I was the only one having this.
- Wed Oct 23, 2013 4:34 pm
- Forum: NoScript General
- Topic: ScriptNo; NoScript Clone?
- Replies: 46
- Views: 127069
Re: ScriptNo; NoScript Clone?
https://chrome.google.com/webstore/detail/http-switchboard/mghdpehejfekicfjcdbfofhcmnjhgaag?hl=en seems to block your noscripts test page as well as the flashblock test page. Does this mean Chrome is finally mature enough that you could make an actual NoScript extension for it? I ask as the lack of...
- Tue Jan 29, 2013 9:44 pm
- Forum: NoScript Development
- Topic: Facebook Share Bookmarklet not working on untrusted sites.
- Replies: 4
- Views: 2674
Re: Facebook Share Bookmarklet not working on untrusted site
Ok. In case anyone else happens to run into the same problem the below code will allow sharing on pages marked as untrusted. javascript:(function()%7Bm='http://www.facebook.com/sharer.php?src=bm&v=4&i=1301235609&u='+encodeURIComponent(window.location.href)+'&t='+encodeURIComponent(do...
- Tue Jan 29, 2013 3:18 pm
- Forum: NoScript Development
- Topic: Facebook Share Bookmarklet not working on untrusted sites.
- Replies: 4
- Views: 2674
Re: Facebook Share Bookmarklet not working on untrusted site
2 questions then.
1) I have Noscript set to allow bookmarklets on untrusted sites so shouldn't that mean I can run bookmarlets on untrusted sites?
2) Why is it only that 1 bookmarklet that does not run when the other ones I posted are working fine?
1) I have Noscript set to allow bookmarklets on untrusted sites so shouldn't that mean I can run bookmarlets on untrusted sites?
2) Why is it only that 1 bookmarklet that does not run when the other ones I posted are working fine?
- Tue Jan 29, 2013 12:06 am
- Forum: NoScript Development
- Topic: Facebook Share Bookmarklet not working on untrusted sites.
- Replies: 4
- Views: 2674
Facebook Share Bookmarklet not working on untrusted sites.
Using the bookmarklet from https://www.facebook.com/share_options.php on either a trusted or not set website works as it should. Setting the site as untrusted though stops the bookmarklet from running. This does not affect all bookmarklets though as the one from http://email.about.com/library/misc/b...
- Mon Nov 26, 2012 8:01 pm
- Forum: NoScript Support
- Topic: Completely disable temporarily or on certain sites
- Replies: 6
- Views: 3463
Re: Completely disable temporarily or on certain sites
Please add this to Noscript. I thought this was how it worked in the first place but found out I was wrong. http://forums.informaction.com/viewtopi ... 10&t=11078
- Mon Nov 26, 2012 7:02 pm
- Forum: NoScript Development
- Topic: Allow Scripts Globally not allowing scripts set as untrusted
- Replies: 6
- Views: 4032
Re: Allow Scripts Globally not allowing scripts set as untru
Ok.Thrawn wrote:Already discussed here - it's up to Giorgio, but probably not.qwerty017 wrote:Is there any chance of a button being added that can temporarily allow everything even blocked scripts like is available in Adblock Plus and Request Policy?
- Sun Nov 25, 2012 9:14 pm
- Forum: NoScript Development
- Topic: Allow Scripts Globally not allowing scripts set as untrusted
- Replies: 6
- Views: 4032
Re: Allow Scripts Globally not allowing scripts set as untru
You should only mark something as untrusted if you are sure that you will never want to allow it. If you aren't sure, then just leave it blocked by default. The best way to tell whether NoScript is blocking something is Please create a clean profile from scratch. Install only NoScript, leaving all ...
- Sun Nov 25, 2012 5:54 pm
- Forum: NoScript Development
- Topic: Allow Scripts Globally not allowing scripts set as untrusted
- Replies: 6
- Views: 4032
Re: Allow Scripts Globally not allowing scripts set as untru
Ok. I had always thought it was a way to temporarily allow all scripts. Is there a way to do that? Temporarily allow all scripts, even those set as untrusted? This would allow me to see if something is being blocked due to Noscript, Adblock Plus, or Request Policy because sometimes I may have mistak...
- Sat Nov 24, 2012 11:29 pm
- Forum: NoScript Development
- Topic: Allow Scripts Globally not allowing scripts set as untrusted
- Replies: 6
- Views: 4032
Allow Scripts Globally not allowing scripts set as untrusted
Firefox: Latest Nightly Noscript: Latest Development Example: Go to http://www.thedailybeast.com/articles/2 ... death.html Set livefyre.com as trusted so you can refresh and set livefyre.co as untrusted. Once it is set as untrusted click on Allow Scripts Globally. The Comments will never show up but...
- Fri Nov 16, 2012 4:47 pm
- Forum: NoScript General
- Topic: XSS on Techcrunch Page
- Replies: 7
- Views: 5252
Re: XSS on Techcrunch Page
Hum, you can add the following line to your NoScript Options|Advanced|XSS exceptions box then: ^http://wpcomwidgets\.com/?[^<"'\(]+$ I'll try to incorporate a safe exception in next release. Added the exception rule which worked for 3 of the messages but I am still seeing 2 left and the embed ...
- Fri Nov 16, 2012 12:30 am
- Forum: NoScript General
- Topic: XSS on Techcrunch Page
- Replies: 7
- Views: 5252
Re: XSS on Techcrunch Page
It stops the embedded PDF from showing and instead shows the text "No hotlinking please.".Giorgio Maone wrote:They're sending and rendering potentially dangerous HTML fragments around.
I'm not sure there's a suitable work-around.
Does this actually cause the page to malfunction?
- Thu Nov 15, 2012 10:34 pm
- Forum: NoScript Development
- Topic: Enhancement for XSS
- Replies: 4
- Views: 2514
Re: Enhancement for XSS
No problem. I completely forgot until today when I had the XSS stuff with Techcrunch.
- Thu Nov 15, 2012 6:43 pm
- Forum: NoScript General
- Topic: XSS on Techcrunch Page
- Replies: 7
- Views: 5252
Re: XSS on Techcrunch Page
That is one of the messages I am seeing. I am seeing a total of 5. 3 for [NoScript InjectionChecker] HTML injection: and 2 for [NoScript XSS] Sanitized suspicious request.therube wrote:Is this what you're seeing?
EDIT: That's strange. Even replying to your post with the code throws up the spam blocker. Weird.
- Thu Nov 15, 2012 5:37 pm
- Forum: NoScript Development
- Topic: Enhancement for XSS
- Replies: 4
- Views: 2514
Re: Enhancement for XSS
Just a follow-up. Do you have any ETA for when this will be implemented?