InformAction Forums

Your screenshot appears to show only two presets — Denied and Allowed: http://pijulius.com/share/noscript-popup.png Currently, NoScript allows the DEFAULT and UNTRUSTED presets to have different levels of trust (via the checkboxes associated with each preset). That is not possible with your proposed...

I toggled the domain to UNTRUSTED, reloaded the page, then set it back to TRUSTED, and reloaded again — it looks correct now:



NoScript also seems to default to the green lock on TRUSTED domains accessed via HTTPS, which is nice. Thanks, barbaz.

When I visit pages at https://stackoverflow.com/ , I see this in the NoScript popup: https://i.imgur.com/mRzN3ef.png I (perhaps incorrectly) expected the ...stackoverflow.com to be black. It changes to black when I lock the Match HTTPS content only , which makes sense. Does a red domain name marked ...

Is it just me, or has anyone else noticed that facebook is CONSTANTLY on the popup, from just about every site. Even sites I thought had no ties to facebook at all. It seems facebook really likes it's cross-site requests. I don't see the XSS popups on Facebook. It may be due to having uBlock Origin...

djl47 wrote:To see every site, open an empty tab, then click the NoScript button on that tab.

It isn't necessary to open a new tab. On any page, just click the Options icons (3rd from the left) on the NoScript popup.

Just type "cloudfront.net" into the box and click the plus sign. DO NOT TYPE "...cloudfront.net". ... I have personally tested this. - subdomains will be trusted. Are you giving a workaround to a bug or describing how it should work? If the latter, it seems backwards to me. I assume the "..." prefi...

If you single click on TRUSTED then the clock is greyed out (=meaning permanent) ? When the clock is grey/translucent, it means the trust is permanent. When the clock is solid (and slightly larger, BTW), it means the trust is temporary. However, I do not see what you claim to see. When I click once...

FranL wrote:I've seen the same thing using NoScript 10.1.5.5 and FF 57.0.1 on Windows 10.

I'm happy to report that this problem is gone in NoScript 10.1.5.7 with FF 57.0.2 on Windows 10. Thanks, Giorgio!

The above is a helpful description of how to add a trusted entry for ...cloudfront.net. However NoScript 10 probably won't interpret this new rule to mean that *.cloudfront.net should be trusted (this is the problem with trusting specified domains described in the other thread). Wait — doesn't the ...

I'm aware of no functionality to let the user choose the preferred order of temporary/permanent. It was permanent on the first click for a while, but then Giorgio changed it to be the other way around. I prefer making "temporary" result from just one click, because I do it way more often than perman...

I've seen the same thing using NoScript 10.1.5.5 and FF 57.0.1 on Windows 10. It happens when visiting an internal corporate Atlassian JIRA page, so unfortunately there is no public URL I can provide. Memory usage skyrockets to over 2 or 3 GB of virtual memory and FF slows to a crawl until I close t...

I don't think so. I tried most of those sites with it turned off and it was the same thing. I also sometimes get the partially blocked symbol, but if I go to click the list only shows the scripts I've allowed. Try enabling every checkbox in the DEFAULT preset (temporarilly, of course) and reloading...

Fran wrote:I'm not sure if that can be done with NoScript. You can do it with uBlock Origin or Adblock Plus ...

This won't give you a popup warning, though. This will just silently block the requests from non-FB domains.

If I trust a domain in NoScript but the entire domain is blocked with a uBlock Origin rule of the form:
which one wins? Will scripts from that domain execute or not?

Bencyc, you can also click on the domain name in the NoScript popup. This will open NoScript's Security and Privacy Info page with links to analysis sites for that domain, where you can find out if the domain is the source of malware, performs tracking, etc. You can also enter the domain name into t...