Search found 102 matches

by musonius
Wed Sep 04, 2019 5:12 pm
Forum: NoScript Support
Topic: Blocked XSS issue- please help
Replies: 5
Views: 134

Re: Blocked XSS issue- please help

Skeezix wrote:
Wed Sep 04, 2019 3:25 pm
The link "viewtopic.php?f=10&t=25260" only has 2 messages, neither of them seem to answer the question. Or is something missing??
This link was a confirmation of the solutions given above and a reminder to the developer that being able to edit the XSS rules is important.
by musonius
Wed Sep 04, 2019 5:47 am
Forum: Web Tech
Topic: WebExtensions changes coming?
Replies: 14
Views: 1616

Re: WebExtensions changes coming?

This would be the time to clearly differentiate oneself from Google and a chance to win back many users who have switched to Chrome and want to continue with efficient content blocking. This "immediate" causes too much confusion in that regard.
by musonius
Mon Sep 02, 2019 8:13 pm
Forum: NoScript Support
Topic: Blocked XSS issue- please help
Replies: 5
Views: 134

Re: Blocked XSS issue- please help

I don't know any other way than exporting your settings, removing your XSS rule manually, and import the edited file.
by musonius
Fri Aug 23, 2019 5:42 am
Forum: NoScript Support
Topic: How to enable restrictSubdocScripting in NoScript 10?
Replies: 5
Views: 491

Re: How to enable restrictSubdocScripting in NoScript 10?

To me this sounds like a looser policy. I would rather a subdocuments' permissions be granted or restricted separately. If I allow script/frame/images/fonts/etc on a primary page that doesn't necessarily mean I want to allow them on a subdocument. Right? No. It's not about inheriting permissions to...
by musonius
Tue Jun 25, 2019 5:43 am
Forum: NoScript Development
Topic: Clicking placeholder should create temporary permission
Replies: 4
Views: 427

Re: Clicking placeholder should create temporary permission

Why is that "alternatively"? I'd prefer to simply change the permanent permission to a temporary one. I just wanted to say, that, if it is reasonable that users want a permanent permission nevertheless, it may be a good solution to ask the user similar to the XSS dialog, which lets the user choose ...
by musonius
Tue Jun 25, 2019 5:39 am
Forum: NoScript Support
Topic: Trust root site by default per tab?
Replies: 1
Views: 164

Re: Trust root site by default per tab?

If you visit foo.org and trust it temporarily, it is set to temporarily trusted until you either close the browser or reset your temporary permissions. Therefore, if you visit bar.org afterwards, foo.bar will still be trusted, unless you reset its temporary permission before.
by musonius
Mon Jun 24, 2019 8:38 pm
Forum: NoScript Development
Topic: Clicking placeholder should create temporary permission
Replies: 4
Views: 427

Re: Clicking placeholder should create temporary permission

I think the default should be the safer choice for the user, which in my opinion is to temporary allow it. Alternatively, the user may want to choose analogously to the XSS dialog.
by musonius
Tue Jun 18, 2019 3:09 pm
Forum: NoScript Support
Topic: [RESOLVED] Animation in NoScript Placeholder
Replies: 6
Views: 390

Re: Animation in NoScript Placeholder

EB24 wrote:
Tue Jun 18, 2019 3:00 pm
Does anyone have any advice on how to ensure I don't get an animated placeholder (or animated anything) again?
There is a solution: Freeze That Snake! (from the developer's blog)
by musonius
Sat Jun 15, 2019 10:19 pm
Forum: NoScript Support
Topic: Question concerning the TRUSTED and UNTRUSTED presets and their application to HTTP and HTTPS requests
Replies: 1
Views: 225

Question concerning the TRUSTED and UNTRUSTED presets and their application to HTTP and HTTPS requests

If I trust trusteddomain.com for HTTP, it will also be trusted for HTTPS, which is exactly what I expect. There is the padlock to switch between trusting a domain for HTTPS only (green padlock) or for both protocols (red padlock). But if I set untrusteddomain.com to UNTRUSTED for HTTPS, the domain u...
by musonius
Fri Jun 14, 2019 1:06 pm
Forum: NoScript Support
Topic: [Answered] What happened with NoScript json options xssBlockUnscannedPOST and xssScanRequestBody
Replies: 3
Views: 263

Re: Asking about NoScript json options xssBlockUnscannedPOST and xssScanRequestBody

pal1000 wrote:
Fri Jun 14, 2019 10:54 am
Could it be those options were related to the workaround for https://bugzil.la/1532530 that was nuked in 10.6.2 stable? If so do they still have some effect if left alone?
After looking at the commit which removed the workaround, I am quite sure that these options don't have any effect anymore.
by musonius
Mon Jun 03, 2019 9:31 am
Forum: NoScript Development
Topic: Disable restrictions "for this tab" and "globally" work differently on "this tab"
Replies: 8
Views: 925

Re: Disable restrictions "for this tab" and "globally" work differently on "this tab"

racoon wrote:
Sat Jun 01, 2019 4:57 pm
Maybe someone can at least confirm the problem? ...
I can reproduce your problem with Firefox 67 and NoScript v10.6.3rc7.
by musonius
Fri May 31, 2019 11:00 am
Forum: NoScript Development
Topic: unable to import settings on Firefox for Android
Replies: 9
Views: 2537

Re: unable to import settings on Firefox for Android

cuzzo wrote:
Fri May 31, 2019 9:44 am
Updated TLDs ?
Top-level Domain.
by musonius
Sun May 26, 2019 2:21 pm
Forum: NoScript Development
Topic: Do not refresh page if state pass from `Temp. Trusted` to `Trusted`
Replies: 8
Views: 668

Re: Do not refresh page if state pass from `Temp. Trusted` to `Trusted`

Giorgio Maone wrote:
Sun May 26, 2019 1:55 pm
Please check latest development build
I have tested all transitions and the page is only refreshed if the restrictions are different for the top-level or a third-party site. It works fine so far! Thanks a lot!
by musonius
Sun May 26, 2019 12:08 pm
Forum: NoScript Development
Topic: Do not refresh page if state pass from `Temp. Trusted` to `Trusted`
Replies: 8
Views: 668

Re: Do not refresh page if state pass from `Temp. Trusted` to `Trusted`

Please check latest development build : v 10.6.3rc1 ============================================================= x Skip page autoreloads on transitions between temporary and permanent presets of the same kind x Updated TLDs Temp. TRUSTED to TRUSTED (and vice versa) works and this is greatly apprec...
by musonius
Mon May 20, 2019 8:12 am
Forum: NoScript Support
Topic: Where are NoScript options?
Replies: 14
Views: 550

Re: Where are NoScript options?

Lucas Malor wrote:
Sun May 19, 2019 3:44 pm
But there will be the time someone will write NoScript for Chromium...
The time has already come. The guy who wrote NoScript for Chromium is Giorgio Maone and the Chrome version can be found here.

The Chrome version misses XSS protection, though.