InformAction Forums

barbaz wrote: ↑Sat Sep 02, 2023 5:01 pm

Giorgio Maone wrote: ↑Fri Sep 01, 2023 4:44 pm v 11.4.27rc2

(The commits and tag for NoScript 11.4.27rc2 are not on Github.)

Fixed, thanks.

Could you please try latest development build ? Thanks! v 11.4.27rc2 ============================================================ x [XSS] Better specificity of potential fragmented injection through framework syntax detection (thanks Rom623, barbaz et al) x [nscl] RegExp.combo(): RegExp creation by ...

I'm very very sorry for the noise. (not my best action so far) No need to worry: this thread has actually been useful for me because, even though OTF funding is very public and transparent, I was not aware of the "recap" page featuring that quite impressive (especially if reported out of ...

Thanks @barbaz for helping connect the dots :D. Yes, NoScript receive d a total $725,000 gross from OTF since 2014 up to 2021 as grants for 4 different focused development efforts. They've been taxed in Italy (where I live and operate) at a ~60% rate, which means $290,000 after taxes in 7 years: an ...

Sebsatian wrote: ↑Mon Aug 28, 2023 5:55 pm I say you recieve 730,000$ from US gov or its fake news?

Fake news, but if you manage to make it real I'll be grateful:)
Side note, if it's not a joke, your source?

If you open from another tab, TabGuard strips all cookies and that's likely what causes the loop.
Either manually reloading or navigating a link in the same site overrides TabGuard, and that's likely what "cured" your case.

Fixed, I hope.

NoScript is built-in in Mullvad Browser (like in Tor Browser), so yes it is implicitly supported (no need for a badge though, IMHO).

barbaz wrote: ↑Thu Jul 20, 2023 5:48 pm

Thank you

The new default setting only checks cross-tab POST requests. This is a more targeted approach that should provide adequate protection without generating too many warnings. Just to clarify, all cross-tab cross-site requests (including GET) are checked and possibly "anonymized" if needed. T...

I suppose you can use Time Machine to restore the previous state of your profile, [Export] the NoScript settings and then go back to current and [Import]?

On such page (if the link is still valid) is https://attcx.sjc1.qualtrics.com/jfe/form/SV_3WUYNSRjrHWzTVA?Q_DL=39xSVYXraE1ys8I_3WUYNSRjrHWzTVA_CGC_7byD3oYQwuWkO5p&Q_CHL=email It's a survey page for AT&T. This page works for me, I just had to set qualtrics.com to temp. TRUSTED. Howev...

barbaz wrote: ↑Sun Jul 02, 2023 4:32 pm 11.4.25rc1 is not offered as available update, and trying to get it manually from noscript.net returns 404?

Sorry, there was a glitch in the file syncrhonization process. Fixed now, thank you.

Should be fixed in latest development build, thanks.

v 11.4.25rc1
============================================================
x Fixed UI inconsistencies when finer-grained contextual
policies are created/imported by other means (thanks barbaz
for reporting)

It's the latest, quieter iteration of TabGuard (Cross-site identity leak protection).

Does this not mean that by having selected "Load normally" a.com from b.com, that a.com is already then able to attack b.com using that same tab pair? That's correct theoretically, but at this stage a.com has no way (yet) to choose which content is opened in b.com, something which is inte...