InformAction Forums

Answer to my own question: I guess there's no way currently to allow for some inline javascript while preventing the execution of external scripts from the same domain. It's either allow all this page or not. In order to do so you'd need to turn on javascript globally for this page, catch the http r...

Hello, I'm trying to understand how noScript blocks inline JavaScript within a page. Am I right to say that it uses configurable security policies (CAPS) to turn off Javascript globally, and then enables Javascript on a per page/domain basis? It then uses content policies (with nsIContentPolicy) to ...