InformAction Forums

You're not the only one, after 2.1.1.1 stable I got rc1 recently as well(also when rc3 was already released) and now it just updated to rc4.

Ok, that's nice and blocks the example correctly, though it doesn't block all HTTP content in such a way that Firefox adds the blue icon to the URL bar to show a correct secure connection.

With NoScript's current HTTPS features it is possible to enforce HTTPS on sites, 'fix' HTTPS cookies and disable all active content unless it is from HTTPS. However, it is not possible to block all HTTP content on HTTPS pages to protect from attacks like this: https://ie.microsoft.com/testdrive/brow...

With some sites the HTTPS enforcing doesn't work because the HTTPS url is different and it doesn't automatically redirect. For example on a dutch security site(security.nl) changing the url from http://security.nl to https://security.nl gives a connection error because the HTTPS url is https://secur...

Now in NoScript options->Advanced->Untrusted there is an option to forbid web bugs, I'd like another option to also forbid web bugs on trusted sites.