Search found 10 matches
- Wed Dec 07, 2016 6:16 am
- Forum: NoScript Support
- Topic: Editing whitelist site prefixes: https vs http vs neither
- Replies: 4
- Views: 2294
Re: Editing whitelist site prefixes: https vs http vs neithe
Don't remember but I think the extra entries will be automatically generated as needed. Why not try it and see? Make sure it's a 2nd-level domain (like informaction.com, google.com, noscript.net) as the extra entries are not needed nor generated for "fuller" domains (forums.informaction.c...
- Wed Dec 07, 2016 6:15 am
- Forum: NoScript Support
- Topic: Editing whitelist site prefixes: https vs http vs neither
- Replies: 4
- Views: 2294
Re: Editing whitelist site prefixes: https vs http vs neithe
I'm merging lists from different machines. I can do some scripting to extract all the site names, generate all three forms, and build a rather large file for importing on the new machine. In the interests of NoScript performance, I don't want to have NoScript building lists any larger than they need...
- Tue Dec 06, 2016 12:37 am
- Forum: NoScript Support
- Topic: Editing whitelist site prefixes: https vs http vs neither
- Replies: 4
- Views: 2294
Editing whitelist site prefixes: https vs http vs neither
Exporting the whitelist (which carries the exception list at its end), I see several groups. The first group has no protocol at the start of each entry. Following groups have pseudo protocols "abline:" and "about:"; then come groups with protocols "file://", "http:...
- Fri Mar 04, 2016 6:41 pm
- Forum: NoScript Support
- Topic: Walmart.com unable to login? New issue!
- Replies: 18
- Views: 17951
Re: Walmart.com unable to login? New issue!
@barbaz Thank you. The workaround works great. Also, thanks for shedding light on the root issue. I contacted Walmart.com, hopefully they'll repair it before too many customers run into the same issue. I had the problem last night. 3 Mar 2016. I used to blame the complexity/subtlety of web pages, b...
- Fri Mar 04, 2016 7:27 am
- Forum: NoScript Support
- Topic: Blocking data:text/html nasties V. 2.9.0.3
- Replies: 16
- Views: 10664
Re: Blocking data:text/html nasties V. 2.9.0.3
Still, I didn't know the site was poison until after I visited. But you had whitelisted the site, right? By doing that, you've told NoScript that you trust the site. There are many ways for sites to abuse that trust, so you should only tell NoScript to trust sites that you actually have reason to t...
- Fri Mar 04, 2016 7:23 am
- Forum: NoScript Development
- Topic: Why scripts blocked when "Forbid Scripts Globally" enabled?
- Replies: 1
- Views: 1188
Why scripts blocked when "Forbid Scripts Globally" enabled?
I can't get some scripts on the page "https://www.walmart.com/account/login" enabled. I have Noscript installed and enabled, but global scripts allowed. See image below. Note also that walmart sites are enabled (should global scripts actually be disabled), but the script is a part of the p...
- Wed Mar 02, 2016 8:26 pm
- Forum: NoScript Support
- Topic: Blocking data:text/html nasties V. 2.9.0.3
- Replies: 16
- Views: 10664
Re: Blocking data:text/html nasties V. 2.9.0.3
I've spent more time researching, and I believe the community is in the midst of a plague of data URIs containing malware payloads. Support for data URIs took off in 2015, and they are growing more and more popular as delivery vectors. This means Noscript needs to start checking them. <script src=.....
- Wed Feb 17, 2016 1:36 pm
- Forum: NoScript Support
- Topic: Blocking data:text/html nasties V. 2.9.0.3
- Replies: 16
- Views: 10664
Re: Blocking data:text/html nasties V. 2.9.0.3
Tried a cut and paste and got this nice message box: https://drive.google.com/file/d/0B0tbUZRv8FYleUJLMkt5SlpSRGM/view?usp=sharing https://drive.google.com/file/d/0B0tbUZRv8FYleUJLMkt5SlpSRGM/view?usp=sharing which says NoScript caught a data: URI, and developers could set an option... This is what ...
- Tue Feb 16, 2016 5:44 pm
- Forum: NoScript Support
- Topic: Blocking data:text/html nasties V. 2.9.0.3
- Replies: 16
- Views: 10664
Re: Blocking data:text/html nasties V. 2.9.0.3
I really hate this... frown Got the sandbox setup and went to the tumbler page with the problem. Could not reproduce . :( Inspecting the source page showed only imported scripts from tumblr com and googleapis com. The embedded ones did some iframes, but again only referencing tumblr. 1. Perhaps tumb...
- Tue Feb 16, 2016 12:45 pm
- Forum: NoScript Support
- Topic: Blocking data:text/html nasties V. 2.9.0.3
- Replies: 16
- Views: 10664
Blocking data:text/html nasties V. 2.9.0.3
1. Noscript just updated to V. 2.9.0.4, so I assume V. 2.9.0.3 was active yesterday when I had this trouble. 2. Some malware is launching a window who's address bar starts "data:text/htlm;base64," followed by obfuscated code to launch the payload. Getting the address bar contents, as I was...