InformAction Forums

@DanskerDave: about:config > remove support.mozilla.org from extensions.webextensions.restrictedDomains

Now this is interesting: Someone is making the point that because affected versions of xz-utils are GPL-licensed, the malware author and the xz-utils project are both legally required to provide the full source code for the malware (which was distributed only in obfuscated binary form) - github.com/...

https://security.archlinux.org/CVE-2024-3094
https://arstechnica.com/security/2024/0 ... nnections/
https://gist.github.com/thesamesam/2239 ... 78baad9e27

Took a quick look into htmx and Phoenix LiveView, and their events support seems enough to perform clickjacking attacks that would not be possible on truly scriptless pages. In NoScript's security model, this should not be allowed on every website by default, it would be appropriate to have to set w...

I use NoScript because I want to protect myself from malicious websites, advertising and analytics and browser fingerprinting, etc. And the proposal you've outlined would harm NoScript's ability to help these purposes. The scripts would have to be downloaded to verify the hash, which right there op...

You're welcome.

It's generally better to allow it since it helps sites degrade gracefully when scripts are disabled. The security risk would involve a <meta> refresh inside a <noscript> element redirecting you somewhere bad, but Firefox can intercept those: about:config > set accessibility.blockautorefresh to true....

I don't know any built-in way, but should be achievable with userContent.css - @-moz-document url-prefix("moz-extension://YOUR-UUID-FOR-NOSCRIPT/") { * { font-size: 20px !important; } } replacing YOUR-UUID-FOR-NOSCRIPT with the UUID shown in the address bar when you go to NoScript Options....

See the sticky - viewtopic.php?t=26285

When this issue occurs, do you see a message in the Web Console (Ctrl-Shift-K) from NoScript about a sanitized paste? If so, could you please post it here?

That video doesn't play for me even with NoScript and uBlock Origin completely disabled in Tools > Add-ons and Themes. Using the Chromium page inspector it looks like that content may be served by Akamai, I see references to "akamaized.net" in there, but I don't know enough about modern pa...

This is not currently possible, though features to deal with this have been requested before - https://forums.informaction.com/viewtopic.php?t=24043 https://forums.informaction.com/viewtopic.php?t=26249 You could try "Disable restrictions for this tab" in NoScript, and if you happen to als...

morganism wrote: ↑Sat Feb 24, 2024 10:02 pm putting here cuz block thread is locked)

What "block thread" did you want to post this in? Could you please post the exact link to the thread?

allanonmage wrote: ↑Sat Feb 17, 2024 3:53 pm I was on the page https://www.planetminecraft.com/project ... -10001000/ and you can mouse over the user to get the error.

Username hovering on that page works for me without error on Firefox 122 with only planetminecraft.com set to Temp. TRUSTED.

My fear is that the reader sees the "L", "H", "R" and does not know that he could allow scripts or fonts in NoScript to get the proper symbols instead. Looking at your site, that concern is reasonable. Typically I don't even think to check for allowable fonts unless I ...