Search found 49 matches

by johnscript
Fri Feb 10, 2017 10:31 am
Forum: ABE
Topic: ABE specification : MEDIA and FONT ?
Replies: 2
Views: 38820

ABE specification : MEDIA and FONT ?

Split from here : in the ABE rules specification in pdf format there is no mention of MEDIA and FONT as valid types for INCLUSION rules, but I've seen them on the forum somewhere. Is that document outdated, and if so where can I find the currently valid types of requests? For instance, somewhere on ...
by johnscript
Fri Feb 10, 2017 10:20 am
Forum: ABE
Topic: What does "Sandbox" actually do?
Replies: 9
Views: 8339

Re: What does "Sandbox" actually do?

Thanks for your explanation: I really missed that the 2nd "Anon from chrome: moz-nullprincipal:" line in fact determined that all requests to youtube were going to be anonimized as opposed to sandboxed. Truth to tell, this recent ABE behaviour (where you have to add chrome: and moz-nullpri...
by johnscript
Sun Feb 05, 2017 7:59 pm
Forum: NoScript General
Topic: [RESOLVED] NoScript 5 compatibility
Replies: 11
Views: 6093

Re: [RESOLVED] NoScript 5 compatibility

(...) And honestly, I personally think that you should hope for him to stay aboard at Mozilla, because he has more-than-average power to actually make WebExtensions better. Right, that's really a good thing that he is in such position - if anything, knowing already that he has a lot on his hands no...
by johnscript
Sun Feb 05, 2017 7:48 pm
Forum: ABE
Topic: Question about noscript.ABE.cspHeaderDelim
Replies: 3
Views: 3635

Re: Question about noscript.ABE.cspHeaderDelim

Just out of curiosity, what is it there for?
by johnscript
Sun Feb 05, 2017 7:47 pm
Forum: ABE
Topic: What does "Sandbox" actually do?
Replies: 9
Views: 8339

Re: What does "Sandbox" actually do?

Tipically, starting from a bookmark either accessed from the bookmarks sidebar or the url bar directly, and then using the search box on youtube itself : after more investigation, I'd definitely say that these rules (which should IMO sandbox youtube.com and googlevideo.com ) Site .googlevideo.com ^h...
by johnscript
Thu Feb 02, 2017 9:52 pm
Forum: ABE
Topic: What does "Sandbox" actually do?
Replies: 9
Views: 8339

Re: What does "Sandbox" actually do?

I'm accessing youtube normally with Firefox, no plugins or other players are involved: however, between the sandboxing issue in 2.9.5.2 and recent changes in youtube, I may have to look further into this to be sure. My first impression was that something like Site .googlevideo.com ^https?://.*ytimg\...
by johnscript
Sat Jan 28, 2017 4:04 pm
Forum: ABE
Topic: What does "Sandbox" actually do?
Replies: 9
Views: 8339

Re: What does "Sandbox" actually do?

I may have indeed more questions, and I apologize in advance if I'm misunderstanding how the ABE machinery really works (it's really complicated IMO, but worth learning)... As Giorgio clearly states in the thread you've linked , Sandbox INC isn't worth using because sandboxing rules are not actually...
by johnscript
Sat Jan 28, 2017 3:48 pm
Forum: NoScript Development
Topic: ABE issue (sandbox) with NoScript 2.9.5.3rc6
Replies: 3
Views: 685

Re: ABE issue (sandbox) with NoScript 2.9.5.3rc6

Just to be clear, what we are saying here is that sandbox in NoScript 2.9.5.2 didn't really do anything? And consequently every Sandbox rule in 2.9.5.2 was actually equivalent to Accept? If so, I would gather that the behaviour described above with 2.9.5.3 is the intended one, as Sandbox from chrome...
by johnscript
Sat Jan 28, 2017 3:41 pm
Forum: NoScript Support
Topic: ABE Table Breaking in Firefox
Replies: 1
Views: 368

Re: ABE Table Breaking in Firefox

I've seen that too : when the message is longer than usual (as it happens on Youtube, with its insanely long addresses) it overflows in a way that the tab bar goes "out of the screen" and the only way for me to regain control is to close the offending tab with CTRL+W , because the "x&...
by johnscript
Thu Jan 26, 2017 11:16 am
Forum: ABE
Topic: What does "Sandbox" actually do?
Replies: 9
Views: 8339

What does "Sandbox" actually do?

The ABE manual says: Sandbox – sends the requests as it is, but disables JavaScript and other active content (e.g. plugin embeddings) in the landing page would this mean that Javascript will be actually disabled on every website for which I've applied a sandbox rule, even when allowing that website ...
by johnscript
Thu Jan 26, 2017 10:37 am
Forum: NoScript Development
Topic: ABE issue (sandbox) with NoScript 2.9.5.3rc6
Replies: 3
Views: 685

ABE issue (sandbox) with NoScript 2.9.5.3rc6

Following the advice given in this thread ABE seems to be broken since the latest release [2.9.5.1] I've first added the line Accept from chrome: moz-nullprincipal: right after the Site .mysite.com line, then tried to change it to Sandbox from chrome: moz-nullprincipal: - and it worked in 2.9.5.2 wi...
by johnscript
Tue Dec 27, 2016 3:15 pm
Forum: NoScript Development
Topic: ABE seems to be broken since the latest release [2.9.5.1]
Replies: 25
Views: 5864

Re: ABE seems to be broken since the latest release [2.9.5.1

Sorry for the late reply: yes, as far as I can see adding moz-nullprincipal: to the first Accept line does solve the issue. So our "test case" looks like that at the moment: Site .informaction.com Accept from chrome: moz-nullprincipal: Anon INC (CSS,IMAGE) from SELF moz-nullprincipal: Deny...
by johnscript
Mon Dec 19, 2016 6:50 pm
Forum: NoScript Development
Topic: ABE seems to be broken since the latest release [2.9.5.1]
Replies: 25
Views: 5864

Re: ABE seems to be broken since the latest release [2.9.5.1

Actually, no : with the aforementioned rules in place, if I add (on a separate line) Site ^.* Deny or Site ALL Deny at the end of the ABE rules, everything seems to work as expected, until I try to recall some threads from this board from the URL bar - if for instance I bookmark this very thread, it...
by johnscript
Wed Dec 14, 2016 8:44 pm
Forum: NoScript Development
Topic: ABE seems to be broken since the latest release [2.9.5.1]
Replies: 25
Views: 5864

Re: ABE seems to be broken since the latest release [2.9.5.1

First off, the SELF keywords are case-sensitive and in all caps. Also it's best practice to use Site ALL to match all sites. You can use a regex if you want, but you need to include the starting anchor for ABE to recognise it as such. So .* should be written as ^.* My bad about the Self instead of ...
by johnscript
Tue Dec 13, 2016 11:45 am
Forum: NoScript Development
Topic: ABE seems to be broken since the latest release [2.9.5.1]
Replies: 25
Views: 5864

Re: ABE seems to be broken since the latest release [2.9.5.1

Accept from chrome: eventually reduce security? No it doesn't: you should get that origin only if you initiate the load from the navigation bar or some add-on. OK, thanks. There may be yet another side effect of this: if I set up a dedicated profile just for online banking, and after putting in pla...