Search found 10 matches

by JMThomas
Wed Dec 07, 2016 6:16 am
Forum: NoScript Support
Topic: Editing whitelist site prefixes: https vs http vs neither
Replies: 4
Views: 2294

Re: Editing whitelist site prefixes: https vs http vs neithe

Don't remember but I think the extra entries will be automatically generated as needed. Why not try it and see? Make sure it's a 2nd-level domain (like informaction.com, google.com, noscript.net) as the extra entries are not needed nor generated for "fuller" domains (forums.informaction.c...
by JMThomas
Wed Dec 07, 2016 6:15 am
Forum: NoScript Support
Topic: Editing whitelist site prefixes: https vs http vs neither
Replies: 4
Views: 2294

Re: Editing whitelist site prefixes: https vs http vs neithe

I'm merging lists from different machines. I can do some scripting to extract all the site names, generate all three forms, and build a rather large file for importing on the new machine. In the interests of NoScript performance, I don't want to have NoScript building lists any larger than they need...
by JMThomas
Tue Dec 06, 2016 12:37 am
Forum: NoScript Support
Topic: Editing whitelist site prefixes: https vs http vs neither
Replies: 4
Views: 2294

Editing whitelist site prefixes: https vs http vs neither

Exporting the whitelist (which carries the exception list at its end), I see several groups. The first group has no protocol at the start of each entry. Following groups have pseudo protocols "abline:" and "about:"; then come groups with protocols "file://", "http:...
by JMThomas
Fri Mar 04, 2016 6:41 pm
Forum: NoScript Support
Topic: Walmart.com unable to login? New issue!
Replies: 18
Views: 17951

Re: Walmart.com unable to login? New issue!

@barbaz Thank you. The workaround works great. Also, thanks for shedding light on the root issue. I contacted Walmart.com, hopefully they'll repair it before too many customers run into the same issue. I had the problem last night. 3 Mar 2016. I used to blame the complexity/subtlety of web pages, b...
by JMThomas
Fri Mar 04, 2016 7:27 am
Forum: NoScript Support
Topic: Blocking data:text/html nasties V. 2.9.0.3
Replies: 16
Views: 10664

Re: Blocking data:text/html nasties V. 2.9.0.3

Still, I didn't know the site was poison until after I visited. But you had whitelisted the site, right? By doing that, you've told NoScript that you trust the site. There are many ways for sites to abuse that trust, so you should only tell NoScript to trust sites that you actually have reason to t...
by JMThomas
Fri Mar 04, 2016 7:23 am
Forum: NoScript Development
Topic: Why scripts blocked when "Forbid Scripts Globally" enabled?
Replies: 1
Views: 1188

Why scripts blocked when "Forbid Scripts Globally" enabled?

I can't get some scripts on the page "https://www.walmart.com/account/login" enabled. I have Noscript installed and enabled, but global scripts allowed. See image below. Note also that walmart sites are enabled (should global scripts actually be disabled), but the script is a part of the p...
by JMThomas
Wed Mar 02, 2016 8:26 pm
Forum: NoScript Support
Topic: Blocking data:text/html nasties V. 2.9.0.3
Replies: 16
Views: 10664

Re: Blocking data:text/html nasties V. 2.9.0.3

I've spent more time researching, and I believe the community is in the midst of a plague of data URIs containing malware payloads. Support for data URIs took off in 2015, and they are growing more and more popular as delivery vectors. This means Noscript needs to start checking them. <script src=.....
by JMThomas
Wed Feb 17, 2016 1:36 pm
Forum: NoScript Support
Topic: Blocking data:text/html nasties V. 2.9.0.3
Replies: 16
Views: 10664

Re: Blocking data:text/html nasties V. 2.9.0.3

Tried a cut and paste and got this nice message box: https://drive.google.com/file/d/0B0tbUZRv8FYleUJLMkt5SlpSRGM/view?usp=sharing https://drive.google.com/file/d/0B0tbUZRv8FYleUJLMkt5SlpSRGM/view?usp=sharing which says NoScript caught a data: URI, and developers could set an option... This is what ...
by JMThomas
Tue Feb 16, 2016 5:44 pm
Forum: NoScript Support
Topic: Blocking data:text/html nasties V. 2.9.0.3
Replies: 16
Views: 10664

Re: Blocking data:text/html nasties V. 2.9.0.3

I really hate this... frown Got the sandbox setup and went to the tumbler page with the problem. Could not reproduce . :( Inspecting the source page showed only imported scripts from tumblr com and googleapis com. The embedded ones did some iframes, but again only referencing tumblr. 1. Perhaps tumb...
by JMThomas
Tue Feb 16, 2016 12:45 pm
Forum: NoScript Support
Topic: Blocking data:text/html nasties V. 2.9.0.3
Replies: 16
Views: 10664

Blocking data:text/html nasties V. 2.9.0.3

1. Noscript just updated to V. 2.9.0.4, so I assume V. 2.9.0.3 was active yesterday when I had this trouble. 2. Some malware is launching a window who's address bar starts "data:text/htlm;base64," followed by obfuscated code to launch the payload. Getting the address bar contents, as I was...