InformAction Forums

I am in agreement with therube here, with NS you pretty much have a default blacklist until you trust someone.
So if you want to go ass backwards, yes its possible you can always try YesScript.

Phew, glad that was resolved. I was confused as hell for a minute there.

I'd be interested in that response too. I run alot of localhost testing for websites, intranets and so no and I have yet to run into this. I am wondering if you can elaborate more on the distinction that Giorgio made? That way I can try and see if I can replicate this.

chojrak11 wrote:You're brilliant, thank you very much

That he is.

yoman wrote:Was there a recent change that altered the default settings? I swear that I didn't use to get every tab reloading until a couple updates ago.

Not that I am aware of, nothing changed for me and I have been using for a long time and have gone through A LOT of updates with the same profile.

Ok, trust no one to produce a whitelist list. Fine. How about a related question: are there any blacklist lists? You are funny. No blacklists for NS, no. Again you can make your own if you wish. If you export the current whitelist, you can see the structure of the file and there is a section for [U...

I do not use any. If I need to test something in IE or Chrome, I use a clean Vista VM. For Safari, a Mac OS X VM. With Firefox I ride naked, NoScript aside. Interesting, that's my setup too. I have a VM in each of these configurations for testing/support and so on (XP, 2k, 98, Ubuntu, Fedora, FreeB...

NoScript (in-browser protection, web app isolation) and sandboxes (browser isolation from the OS) are orthogonal. I wrote a short post about this some time ago. Thank you, I agree that the first is independent of the second. I was asking more along the lines of process isolation or virtualized (usi...

Dont get me wrong Im not saying its a NS problem, I think NS is great.The problem was probably me playing with my ZA settings at some point. :lol: The comment was not directed at you, no worries. I also got the report you sent on your double post, I had already taken the duplicate post out but than...

Now it works -- and the only thing that changed was the new NS version, but, as the gods would have it, I didn't try one last time before posting. On checking the browser history, indeed, before the NS version just installed, it would give me only 1x1 pixel GIF. On another machine in the house, sam...

I don't believe this to be a NS issue as I was able to use Yahoo in both enhanced and classic modes with no problem. I think it might be a configuration issue, since I have NS installed with other addons which often make life even more complicated and it doesn't happen. Does resetting NS as suggeste...

It will work if the attacker's site is not allowed. In other words, I'm regarding XSLT just as it was scripting, since XSL has been demonstrated Turing-complete. Understood. For those wishing to (try?) to crash their browser, another testcase can be found at URL: in this bug, Bug 460090 - Firefox c...

therube wrote:But will only work if file:// is not allowed?
(Or maybe, will only work locally if file:// is not allowed?)

Cool then, I never have file:// allowed and only give it temporary permission when I am testing something I am working on myself. Thanks.

Giorgio Maone wrote:XSLT protection is already in latest development build, and Firefox 3.0.8 should also be on its way, since the update date has been anticipated to today.

Then more appropriately, thank you +1

Alan Baxter wrote:...but I use the JSView extension when I want to examine the content of the scripts loaded from other sites.

Question Alan, what do you think of this extension compared to FireBug?