InformAction Forums

> I'm not sure * is a valid sources value. https://forums.informaction.com/viewtopic.php?p=12319#p12319 @^https?:// already tried before. @^(?!chrome)[0-9A-Za-z-]+:// works too, thank you. It seems to me that the case "replacement". Probably I badly explained. Surrogate works : if on the b...

> ...sources value(s)? Added. > What is the iframe's URL? For example: https://maps.yandex.com/ . Need to allow: https://maps.yandex.com, https://api-maps.yandex.ru, https://yastatic.net. There are several buttons: Layers, Routes and so forth. None is pressed. Error console: Error: TypeError: this._...

On the basis of the sample code and FireGloves made a surrogate: replacement Object.defineProperty(window, "screen", {enumerable:true, get:function(){return {width: 1280, height: 800, availWidth: 1280, availHeight: 800, colorDepth: 24, pixelDepth: 24, top: 0, left: 0, availTop:0, availLeft...

Thanks.

@barbaz 1. noscript.forbidData is related to ХMLНttpRеquеst. ( https://noscript.net/faq#qa3_14 ) 2. ХMLНttpRequеst is related to data: url ( https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/HTML_in_XMLHttpRequest#Method_2 https://dvcs.w3.org/hg/xhr/raw-file/tip/Overview.html#data:-url...

noscript.forbidData — is meaning "Data URI" (data: URL)? https://en.wikipedia.org/wiki/Data_URI_scheme https://ru.wikipedia.org/wiki/Data:_URL http://sirdarckcat.blogspot.ru/2008/06/hacking-noscript.html noscript.xss.trustData — bypass anti-XSS filter for "Data URI", if noscript....

Certainly helped, thanks.

Unfortunately, did not find the explanation to some items: noscript.ABE.allowRulesetRedir noscript.audioApiInterception noscript.badInstall noscript.forbidExtProtSubdocs noscript.hideOnUnloadRegExp noscript.injectionCheckHTML noscript.nselNoMeta noscript.oldStylePartial noscript.secureCookies.recycl...

There are initialization for toolbarbutton (CB), abolishing the temporary permissions when changing or closing active tab.
The switch is only separately: CB_Disable_Initialization or Disable/Enable Button.

Thanks.

@barbaz
Deny SUB is not already covered by the Deny on the end?

RobertDrew wrote:Deny SUB

Why not Deny POST SUB?

Accept POST SUB from SELF
Accept GET #but not POST SUB
Deny #including POST SUB

Incorrectly?

Thanks. Apparently I misunderstood "... should allow current top document 's site". Middle-click = command "Temporarily allow all this page" (as it was before). The patch referenced by the news item did not change the action that the middle mouse would perform on the NoScript ico...

Good day. No, if set to 'true', which is the default, behavior is as it has always been . I have exactly what works. But, in the " Main good news " written: noscript.middlemouse_temp_allow_ main _site about:config preference to control whether middle-clicking the toolbar button should allo...