InformAction Forums

Is there a way to make Noscript read ABE rule from a file rather than the preference? Some of my ABE rules are quite long (~100 KB) and I'm concerned about the impact on startup performance it has on Firefox.

It seems that Noscript gets confused about the domains when set to allowed from *@location but not from {content-type}@location.

Confirming that this is a Noscript problem; it also happens with other browsers like Seamonkey too.

It allows all embeddings on *other* sites, not just 127.0.0.1.

I have added the following to noscript.allowedmimeregexp:
*@http://127\.0\.0\.1

This is allowing all objects to be loaded, whether trusted or untrusted, despite these being blocked in Noscript Options>Embeddings. I also have "apply restrictions to whitelisted sites" turned on.

Running NS 2.6.9.2 ...

This occurs even in Firefox pre-australis and Seamonkey.

Is there a way to turn off ABE logging to the console?

Is blocking of requests based on its content possible with ABE? I know that I can do this:

Site ^https?://.*exe
Accept from .sourceforge.net .mozilla.org
Deny


But what I'm trying to do can be perhaps described like this:


# Block executables
Content /MZ.*PE/
Accept from .sourceforge.net ...

Gecko < 29 is fine, so yes, that works.

OT: I used to, but I don't any longer.

If I'm reading it correctly, it will be fixed in Firefox/Gecko 32? Seems like I'll have to wait till then.

It seems that ABE is not working with SM29. I'm using the following rule: http://pastebin.com/jjNQTYPD . No errors were indicated, but it seems that the ABE rule will simply not work. This rule has worked on Firefox 24-28.

I'm using Noscript 2.6.8.24rc5 and Noscript is set to globally allowed mode ...

Is this a cross-site request or not?
This isn't a cross site request.

May I see the other [NoScript XSS] messages in the console?
Yes, I have this in my console:
[NoScript XSS] Sanitized suspicious upload to [https://example.com/login.php?mode=login###DATA###(urlencoded_password)] from [http ...

NS's XSS filters is incorrectly triggerred when data with special characters is transmitted and the document initiating the POST request contains a query.

http://example.com/login.php -> username: admin, password: t[0.5]=log(e,R[0]/R)/k -> successful
http://example.com/login.php?id=(long_hex_string ...

How do I insert an ABE rule in NSA?

Someone has beaten you to the idea.
You see, I'm not running to the patent office with that fifty line Perl script; and the main logic is the contribution of a person from stackoverflow, so even if I were to try to do so my hopes are dashed.

I'll have to see from where exactly they get their list ...