InformAction Forums

Thanks. I (obviously) never used Custom, other than noting that a recent upgrade changed the behavior of the "Temporarily set top-level sites to TRUSTED" option such that top level sites are now marked as Custom unless already Trusted. I found the discussion where that change was being deb...

For completeness, should also note that if what you want is a contextual permission where *.cloudfront.net is trusted only when browsing specific site , you can make the contextual permission in the NoScript popup and then edit it in NoScript Options > Advanced, check "Debug" and change &...

Trusting *.cloudfront.net is about as fine-grained as trusting *.com.... That said, you can still do it by manually typing cloudfront.net in NoScript Options > Per-site Permissions Noted, and thanks for the suggestion. I didn't realize that I could edit the Trusted list without export/import (I fai...

I noticed scripts from cloudfront that support required functionality on more and more sites. The problem is that they typically (always?) reference subdomain.cloudfront.net where subdomain is a 14 digit code that changes for every script. I don't see a way to 'Trust' all subdomains in the user pane...

NS v12.0.02 was pushed to my system since my original post. Looks like everything's working again... thanks!

Since yesterday, I haven't be able to access many websites in Chrome. I discovered that disabling NS resolves the issue, so I came to this forum and saw several threads relating to Mv3 migration (this was news to me as I don't follow such things any longer). For different reasons, I'm still running ...

If you really want to see the comments, you could try changing your ABE rule like this... Of course! Thanks for the tip! I said I couldn't get the comments working at all, not even in a clean profile without NoScript. Sorry if it wasn't clear. When you posed the question how long the site takes, I ...

The "View Comments" button doesn't seem to work for me even in a completely clean profile without NoScript or any other extensions. Yeah, that was the first thing I noticed, and presumably has nothing to do with the comment script error since it still does that when the comments work, as ...

Sorry, I should have pointed out that I'm able to reproduce the comment script issue for any site that has comments, not just ones that are down. For example, you can test google.com. Here's a copy of my console. These are Security Warnings (red exclamation mark): Content Security Policy: Ignoring “...

When http://isitdownrightnow.com reports a site is down and there are comments posted, the script that loads the comment string doesn't work with NoScript. I tried removing all script blocks that are active on this site and still no cigar. However, if I disable NoScript, the comments load. What more...

Generally, whenever I visit a site that generates objects in the default list, I block each object that I can verify it doesn't impact the site. I obviously have no clue if a blocked object might later break another site. I don't really understand your perspective here. I see NS as a tool for preve...

That behavior is by design. You aren't supposed to move domains from untrusted to temp allow anyway. The untrusted list is for domains that you know you don't trust, not even temporary. Huh. Then what's the purpose of "Temporarily allow (site)" for entries in the Untrusted list? Is this j...

When I "temporary allow" a site that's listed as Untrusted, I expect that site to revert to Untrusted status after I close the page, or at least after I close and reopen FF. But that's not what's happening. I have to click "Forbid" again. As it turns out, Temporary Allow permanen...

Is it OK to add # comments to the XSS exception list? I've seen it done before but IIRC, it's environment dependent.

Sorry, my bad. I added to USER instead of SYSTEM... not sure if that's what you edited, but I've been known to not read something carefully

Working now! Thanks.